diff --git a/src/URLhaus.csv b/src/URLhaus.csv
index 91e19062..5f469541 100644
--- a/src/URLhaus.csv
+++ b/src/URLhaus.csv
@@ -1,16 +1,241 @@
+"358378","2020-05-05 12:04:30","http://218.21.171.236:59491/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/358378/","Gandylyan1"
+"358377","2020-05-05 12:04:29","http://115.53.52.233:38681/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/358377/","Gandylyan1"
+"358376","2020-05-05 12:04:26","http://113.103.57.153:45441/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/358376/","Gandylyan1"
+"358375","2020-05-05 12:04:21","http://116.114.95.204:48242/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/358375/","Gandylyan1"
+"358374","2020-05-05 12:04:14","http://111.43.223.112:45000/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/358374/","Gandylyan1"
+"358373","2020-05-05 12:04:11","http://42.225.203.189:34378/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/358373/","Gandylyan1"
+"358372","2020-05-05 12:04:06","http://115.49.146.138:37543/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/358372/","Gandylyan1"
+"358371","2020-05-05 12:00:19","http://web.lavishsupplystore.com/Order/Order0012.exe","online","malware_download","None","https://urlhaus.abuse.ch/url/358371/","ps66uk"
+"358370","2020-05-05 11:59:40","http://web.lavishsupplystore.com/new/L7GY95S5M4DfL20.exe","online","malware_download","None","https://urlhaus.abuse.ch/url/358370/","ps66uk"
+"358369","2020-05-05 11:58:36","http://133.167.105.83/jackmysparc","offline","malware_download","None","https://urlhaus.abuse.ch/url/358369/","anonymous"
+"358368","2020-05-05 11:58:34","http://133.167.105.83/jackmypowerpc","offline","malware_download","None","https://urlhaus.abuse.ch/url/358368/","anonymous"
+"358367","2020-05-05 11:58:32","http://133.167.105.83/jackmyi686","online","malware_download","None","https://urlhaus.abuse.ch/url/358367/","anonymous"
+"358366","2020-05-05 11:58:27","http://133.167.105.83/jackmyi586","online","malware_download","None","https://urlhaus.abuse.ch/url/358366/","anonymous"
+"358365","2020-05-05 11:58:24","http://133.167.105.83/jackmyarmv6","online","malware_download","None","https://urlhaus.abuse.ch/url/358365/","anonymous"
+"358364","2020-05-05 11:58:21","http://133.167.105.83/jackmyx86","online","malware_download","None","https://urlhaus.abuse.ch/url/358364/","anonymous"
+"358363","2020-05-05 11:58:16","http://133.167.105.83/jackmysh4","online","malware_download","None","https://urlhaus.abuse.ch/url/358363/","anonymous"
+"358362","2020-05-05 11:58:13","http://133.167.105.83/jackmymips","online","malware_download","None","https://urlhaus.abuse.ch/url/358362/","anonymous"
+"358361","2020-05-05 11:58:10","http://133.167.105.83/jackmymipsel","online","malware_download","None","https://urlhaus.abuse.ch/url/358361/","anonymous"
+"358360","2020-05-05 11:58:04","http://133.167.105.83/gtop.sh","online","malware_download","None","https://urlhaus.abuse.ch/url/358360/","anonymous"
+"358359","2020-05-05 11:54:04","http://185.244.39.251/GBA7KYzWIwqwxds.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/358359/","abuse_ch"
+"358358","2020-05-05 11:52:10","http://183.109.5.228:42574/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/358358/","geenensp"
+"358357","2020-05-05 11:52:05","http://elevennevele.com//D/order(MAY).exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/358357/","fr0s7_"
+"358356","2020-05-05 11:38:26","http://vjhascv.ru/ds.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/358356/","abuse_ch"
+"358355","2020-05-05 11:38:16","http://vjhascv.ru/az1.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/358355/","abuse_ch"
+"358354","2020-05-05 11:24:05","https://pastebin.com/raw/mqzVZBBm","online","malware_download","None","https://urlhaus.abuse.ch/url/358354/","JayTHL"
+"358353","2020-05-05 11:20:04","http://185.244.39.251/xDPDG2YT4cH4hA6.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/358353/","abuse_ch"
+"358352","2020-05-05 10:59:33","https://nalahotel.com/Events/zeppelin01.exe","offline","malware_download","Ransomware","https://urlhaus.abuse.ch/url/358352/","anonymous"
+"358351","2020-05-05 10:43:24","http://adamtcarruthers.com/sb/img/atil.exe","online","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/358351/","ps66uk"
+"358350","2020-05-05 10:43:17","http://adamtcarruthers.com/sb/img/buk.exe","online","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/358350/","ps66uk"
+"358349","2020-05-05 10:43:14","http://adamtcarruthers.com/sb/img/chibu.exe","online","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/358349/","ps66uk"
+"358348","2020-05-05 10:43:08","http://adamtcarruthers.com/sb/img/elb.exe","online","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/358348/","ps66uk"
+"358347","2020-05-05 10:43:03","http://adamtcarruthers.com/sb/img/fr.exe","online","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/358347/","ps66uk"
+"358346","2020-05-05 10:41:17","http://adamtcarruthers.com/sb/img/mj.exe","online","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/358346/","ps66uk"
+"358345","2020-05-05 09:58:03","http://45.95.169.249/armv6l","online","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/358345/","Gandylyan1"
+"358344","2020-05-05 09:57:05","http://45.95.169.249/mipsel","online","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/358344/","Gandylyan1"
+"358343","2020-05-05 09:57:03","http://45.95.169.249/mips","online","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/358343/","Gandylyan1"
+"358342","2020-05-05 09:46:04","http://194.5.79.166/bins/Gummy.arm","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/358342/","zbetcheckin"
+"358341","2020-05-05 09:45:33","http://194.5.79.166/bins/Gummy.m68k","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/358341/","zbetcheckin"
+"358340","2020-05-05 09:43:07","http://bearsselection.xyz/ApiServices-Files13377/Down/93685_VersionFlashPlayer.apk","offline","malware_download","None","https://urlhaus.abuse.ch/url/358340/","JAMESWT_MHT"
+"358339","2020-05-05 09:43:04","http://bearsselection.xyz/ApiServices-Files13377/Down/75810_VersionFlashPlayer.apk","offline","malware_download","None","https://urlhaus.abuse.ch/url/358339/","JAMESWT_MHT"
+"358338","2020-05-05 09:42:29","http://bearsselection.xyz/ApiServices-Files13377/Down/72169_VersionFlashPlayer.apk","offline","malware_download","None","https://urlhaus.abuse.ch/url/358338/","JAMESWT_MHT"
+"358337","2020-05-05 09:42:23","http://bearsselection.xyz/ApiServices-Files13377/Down/71308_VersionFlashPlayer.apk","offline","malware_download","None","https://urlhaus.abuse.ch/url/358337/","JAMESWT_MHT"
+"358336","2020-05-05 09:42:20","http://bearsselection.xyz/ApiServices-Files13377/Down/69408_VersionFlashPlayer.apk","offline","malware_download","None","https://urlhaus.abuse.ch/url/358336/","JAMESWT_MHT"
+"358335","2020-05-05 09:42:14","http://bearsselection.xyz/ApiServices-Files13377/Down/53940_VersionFlashPlayer.apk","offline","malware_download","None","https://urlhaus.abuse.ch/url/358335/","JAMESWT_MHT"
+"358334","2020-05-05 09:42:09","http://bearsselection.xyz/ApiServices-Files13377/Down/14978_VersionFlashPlayer.apk","offline","malware_download","None","https://urlhaus.abuse.ch/url/358334/","JAMESWT_MHT"
+"358333","2020-05-05 09:42:05","http://bearsselection.xyz/ApiServices-Files13377/Down/13056_VersionFlashPlayer.apk","offline","malware_download","None","https://urlhaus.abuse.ch/url/358333/","JAMESWT_MHT"
+"358332","2020-05-05 09:41:39","http://5.252.179.60/a/armv7l","offline","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/358332/","Gandylyan1"
+"358331","2020-05-05 09:41:37","http://5.252.179.60/a/aarch64","offline","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/358331/","Gandylyan1"
+"358330","2020-05-05 09:41:34","http://5.252.179.60/a/mipsel","offline","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/358330/","Gandylyan1"
+"358329","2020-05-05 09:41:33","http://194.5.79.166/bins/Gummy.mpsl","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/358329/","zbetcheckin"
+"358328","2020-05-05 09:38:05","http://sylvaclouds.eu/agonx/agonx.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/358328/","zbetcheckin"
+"358327","2020-05-05 09:34:38","http://194.5.79.166/bins/Gummy.arm5","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/358327/","zbetcheckin"
+"358326","2020-05-05 09:34:06","http://sylvaclouds.eu/bobyfilez/bobyfilez.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/358326/","zbetcheckin"
+"358325","2020-05-05 09:29:02","http://194.5.79.166/bins/Gummy.arm6","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/358325/","zbetcheckin"
+"358324","2020-05-05 09:25:45","http://194.5.79.166/bins/Gummy.spc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/358324/","zbetcheckin"
+"358323","2020-05-05 09:25:43","http://194.5.79.166/bins/Gummy.sh4","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/358323/","zbetcheckin"
+"358322","2020-05-05 09:25:40","http://194.5.79.166/bins/Gummy.arm7","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/358322/","zbetcheckin"
+"358321","2020-05-05 09:25:38","http://sylvaclouds.eu/rawfilex/rawfilex.exe","online","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/358321/","zbetcheckin"
+"358320","2020-05-05 09:25:03","http://194.5.79.166/bins/Gummy.ppc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/358320/","zbetcheckin"
+"358319","2020-05-05 09:21:35","http://sylvaclouds.eu/dchamp/dchamp.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/358319/","zbetcheckin"
+"358318","2020-05-05 09:06:01","http://42.227.201.91:50880/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/358318/","Gandylyan1"
+"358317","2020-05-05 09:05:57","http://172.39.72.32:47441/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/358317/","Gandylyan1"
+"358316","2020-05-05 09:05:26","http://42.227.166.214:52835/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/358316/","Gandylyan1"
+"358315","2020-05-05 09:05:21","http://125.26.40.94:35213/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/358315/","Gandylyan1"
+"358314","2020-05-05 09:05:17","http://172.36.57.100:55045/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/358314/","Gandylyan1"
+"358313","2020-05-05 09:04:45","http://113.133.230.134:41865/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/358313/","Gandylyan1"
+"358312","2020-05-05 09:04:41","http://112.17.78.163:44098/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/358312/","Gandylyan1"
+"358311","2020-05-05 09:04:34","http://114.228.25.50:43353/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/358311/","Gandylyan1"
+"358310","2020-05-05 09:04:26","http://42.239.96.146:37766/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/358310/","Gandylyan1"
+"358309","2020-05-05 09:04:23","http://123.12.44.253:60048/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/358309/","Gandylyan1"
+"358308","2020-05-05 09:04:18","http://123.4.223.123:59464/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/358308/","Gandylyan1"
+"358307","2020-05-05 09:04:12","http://111.43.223.149:59627/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/358307/","Gandylyan1"
+"358306","2020-05-05 09:04:09","http://115.216.208.162:53945/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/358306/","Gandylyan1"
+"358305","2020-05-05 09:03:55","http://110.156.65.88:56294/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/358305/","Gandylyan1"
+"358304","2020-05-05 09:03:48","http://77.43.206.170:43288/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/358304/","Gandylyan1"
+"358303","2020-05-05 09:03:16","http://111.42.102.131:50771/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/358303/","Gandylyan1"
+"358302","2020-05-05 09:03:13","http://111.42.102.72:38097/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/358302/","Gandylyan1"
+"358301","2020-05-05 09:03:10","http://162.212.115.16:52257/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/358301/","Gandylyan1"
+"358300","2020-05-05 09:03:07","http://42.231.170.22:52032/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/358300/","Gandylyan1"
+"358299","2020-05-05 09:02:34","http://greenleaveperu.com/plugins/user/port.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/358299/","abuse_ch"
+"358298","2020-05-05 08:54:05","http://37.49.226.228/arm7","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/358298/","zbetcheckin"
+"358297","2020-05-05 08:54:03","http://37.49.226.228/powerpc","online","malware_download","elf","https://urlhaus.abuse.ch/url/358297/","zbetcheckin"
+"358296","2020-05-05 08:50:13","http://37.49.226.228/x86","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/358296/","zbetcheckin"
+"358295","2020-05-05 08:50:11","http://37.49.226.228/arm4","online","malware_download","elf","https://urlhaus.abuse.ch/url/358295/","zbetcheckin"
+"358294","2020-05-05 08:50:09","http://37.49.226.228/m68k","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/358294/","zbetcheckin"
+"358293","2020-05-05 08:50:07","http://37.49.226.228/mipsel","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/358293/","zbetcheckin"
+"358292","2020-05-05 08:50:05","http://37.49.226.228/sparc","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/358292/","zbetcheckin"
+"358291","2020-05-05 08:50:03","http://37.49.226.228/arm6","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/358291/","zbetcheckin"
+"358290","2020-05-05 08:46:11","http://37.49.226.228/sh4","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/358290/","zbetcheckin"
+"358289","2020-05-05 08:46:08","http://37.49.226.228/i586","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/358289/","zbetcheckin"
+"358288","2020-05-05 08:46:06","http://37.49.226.228/arm5","online","malware_download","elf","https://urlhaus.abuse.ch/url/358288/","zbetcheckin"
+"358287","2020-05-05 08:46:03","http://37.49.226.228/i686","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/358287/","zbetcheckin"
+"358286","2020-05-05 08:23:27","http://saglikramazan20bgb.net/20gb_hediye_internet.apk","online","malware_download","apk ","https://urlhaus.abuse.ch/url/358286/","mertcangokgoz"
+"358285","2020-05-05 08:23:24","https://saglikbakanligi-destekportal.org/saglik_bakanligi_destek.apk","online","malware_download","apk ","https://urlhaus.abuse.ch/url/358285/","mertcangokgoz"
+"358284","2020-05-05 08:23:18","http://campana20gb.com/gratisnet.apk","online","malware_download","apk ","https://urlhaus.abuse.ch/url/358284/","mertcangokgoz"
+"358283","2020-05-05 08:14:04","https://pastebin.com/raw/DnRWHnp4","offline","malware_download","None","https://urlhaus.abuse.ch/url/358283/","JayTHL"
+"358282","2020-05-05 07:53:05","http://standardalloysindia.com/eaptfccoaimq/ServiceContractAgreement_034164207_05012020.zip","offline","malware_download","None","https://urlhaus.abuse.ch/url/358282/","JAMESWT_MHT"
+"358281","2020-05-05 07:26:04","https://pastebin.com/raw/HicPnquY","offline","malware_download","None","https://urlhaus.abuse.ch/url/358281/","JayTHL"
+"358280","2020-05-05 07:05:14","http://112.165.97.124:46336/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/358280/","geenensp"
+"358279","2020-05-05 07:05:10","http://59.19.231.31:39312/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/358279/","geenensp"
+"358278","2020-05-05 07:05:03","http://www.oxcssa.org.uk/wp-content/plugins/apikey/cyevr/ServiceContractAgreement_13642787_05012020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/358278/","spamhaus"
+"358277","2020-05-05 07:04:59","http://45.95.169.249/x86","online","malware_download","64-bit,elf,x86-64","https://urlhaus.abuse.ch/url/358277/","geenensp"
+"358276","2020-05-05 07:04:57","http://daithanhphung.com/wp-content/uploads/bwwwvc/ServiceContractAgreement_060390_05012020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/358276/","spamhaus"
+"358275","2020-05-05 07:04:46","https://getfashionmania.com/wp-content/uploads/2020/05/xipim/ServiceContractAgreement_45710641_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/358275/","spamhaus"
+"358274","2020-05-05 07:04:41","http://37.49.226.228/mips","online","malware_download","32-bit,elf,mips","https://urlhaus.abuse.ch/url/358274/","geenensp"
+"358273","2020-05-05 07:04:39","http://37.49.226.228/axisbins.sh","online","malware_download","script","https://urlhaus.abuse.ch/url/358273/","geenensp"
+"358272","2020-05-05 07:04:37","http://www.monmariage.info/wp-content/uploads/2020/05/ylwfuwedi/ServiceContractAgreement_67757333_05012020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/358272/","spamhaus"
+"358271","2020-05-05 07:04:35","https://nexity.me/wp-content/uploads/2020/05/lujfkbtyj/ServiceContractAgreement_335556474_05012020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/358271/","spamhaus"
+"358270","2020-05-05 07:03:38","http://5.252.179.60/b/aarch64","offline","malware_download","elf","https://urlhaus.abuse.ch/url/358270/","hypoweb"
+"358269","2020-05-05 07:03:36","http://5.252.179.60/b/armv7l","offline","malware_download","elf","https://urlhaus.abuse.ch/url/358269/","hypoweb"
+"358268","2020-05-05 07:03:34","https://prabhuandsons.com/wp-content/uploads/2020/05/ttmyf/6192421/ServiceContractAgreement_6192421_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/358268/","spamhaus"
+"358267","2020-05-05 07:03:04","https://healthboro.site/wp-content/plugins/apikey/kznckswyxr/ServiceContractAgreement_2381980_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/358267/","spamhaus"
+"358266","2020-05-05 07:03:02","http://194.5.79.166/bins/Gummy.mips","offline","malware_download","32-bit,elf,mips","https://urlhaus.abuse.ch/url/358266/","geenensp"
+"358265","2020-05-05 07:02:58","http://194.5.79.166/bins/Gummy.x86","offline","malware_download","32-bit,elf,x86-32","https://urlhaus.abuse.ch/url/358265/","geenensp"
+"358264","2020-05-05 07:02:55","https://lesa.at.true.by/bpnoyndvsg/8573726/ServiceContractAgreement_8573726_05012020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/358264/","spamhaus"
+"358263","2020-05-05 07:02:22","http://imenizeh.ir/wp-content/uploads/2020/05/zolxcprn/ServiceContractAgreement_3323963_05012020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/358263/","spamhaus"
+"358262","2020-05-05 07:01:46","http://imenizeh.ir/wp-content/uploads/2020/05/zolxcprn/ServiceContractAgreement_01426_05012020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/358262/","spamhaus"
+"358261","2020-05-05 07:01:06","http://114.34.226.203:1194/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/358261/","geenensp"
+"358260","2020-05-05 06:49:04","https://pastebin.com/raw/SaGMT3DP","offline","malware_download","None","https://urlhaus.abuse.ch/url/358260/","JayTHL"
+"358259","2020-05-05 06:48:22","https://toulousa.com/wp-content/uploads/2020/05/kviajlyujzpw/ServiceContractAgreement_63782121_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/358259/","spamhaus"
+"358258","2020-05-05 06:48:20","http://anuragsharma.co.in/tjvkpdmcnkxf/ServiceContractAgreement_256572330_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/358258/","spamhaus"
+"358257","2020-05-05 06:48:11","http://daithanhphung.com/wp-content/uploads/bwwwvc/ServiceContractAgreement_426775_05012020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/358257/","spamhaus"
+"358256","2020-05-05 06:47:40","https://lesa.at.true.by/bpnoyndvsg/748195/ServiceContractAgreement_748195_05012020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/358256/","spamhaus"
+"358255","2020-05-05 06:47:37","https://briztechnologies.com/wp-content/uploads/2020/05/xowob/921933/ServiceContractAgreement_921933_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/358255/","spamhaus"
+"358254","2020-05-05 06:47:31","https://getfashionmania.com/wp-content/uploads/2020/05/xipim/ServiceContractAgreement_81831403_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/358254/","spamhaus"
+"358253","2020-05-05 06:47:26","https://redingtonpost.com/wp/wp-content/uploads/2020/05/oaogrdaznzm/2556575/ServiceContractAgreement_2556575_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/358253/","spamhaus"
+"358252","2020-05-05 06:47:21","http://1.34.17.215:49872/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/358252/","geenensp"
+"358251","2020-05-05 06:47:14","http://imenizeh.ir/wp-content/uploads/2020/05/zolxcprn/ServiceContractAgreement_5235829_05012020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/358251/","spamhaus"
+"358250","2020-05-05 06:46:57","http://www.monmariage.info/wp-content/uploads/2020/05/xixjwyvze/12317297/ServiceContractAgreement_12317297_05012020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/358250/","spamhaus"
+"358249","2020-05-05 06:46:51","https://nexity.me/wp-content/uploads/2020/05/lujfkbtyj/45113/ServiceContractAgreement_45113_05012020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/358249/","spamhaus"
+"358248","2020-05-05 06:46:14","http://daithanhphung.com/wp-content/uploads/bwwwvc/ServiceContractAgreement_556531_05012020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/358248/","spamhaus"
+"358247","2020-05-05 06:46:07","http://119.136.88.217:7555/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/358247/","geenensp"
+"358246","2020-05-05 06:45:31","http://sylvaclouds.eu/levelz/levelz.exe","offline","malware_download","Loki,lokibot","https://urlhaus.abuse.ch/url/358246/","j00dan"
+"358245","2020-05-05 06:45:24","http://www.monmariage.info/wp-content/uploads/2020/05/ylwfuwedi/ServiceContractAgreement_28489_05012020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/358245/","spamhaus"
+"358244","2020-05-05 06:45:13","http://www.exposvision.com/wp-content/uploads/2020/05/fosazwibfvo/3428136/ServiceContractAgreement_3428136_05012020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/358244/","spamhaus"
+"358243","2020-05-05 06:45:04","http://86.7.86.4:40828/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/358243/","geenensp"
+"358242","2020-05-05 06:05:02","http://115.58.134.107:40593/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/358242/","Gandylyan1"
+"358241","2020-05-05 06:04:58","http://114.235.222.245:44472/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/358241/","Gandylyan1"
+"358240","2020-05-05 06:04:31","http://221.15.11.116:52472/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/358240/","Gandylyan1"
+"358239","2020-05-05 06:04:21","http://125.71.148.155:47589/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/358239/","Gandylyan1"
+"358238","2020-05-05 06:04:16","http://27.41.187.108:51291/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/358238/","Gandylyan1"
+"358237","2020-05-05 06:04:12","http://112.17.152.195:54492/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/358237/","Gandylyan1"
+"358236","2020-05-05 06:03:29","http://211.137.225.130:52461/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/358236/","Gandylyan1"
+"358235","2020-05-05 06:03:24","http://113.240.219.238:42559/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/358235/","Gandylyan1"
+"358234","2020-05-05 06:03:15","http://41.86.19.200:52398/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/358234/","Gandylyan1"
+"358233","2020-05-05 06:03:12","http://123.10.223.91:48367/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/358233/","Gandylyan1"
+"358232","2020-05-05 06:03:06","http://115.55.140.206:35134/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/358232/","Gandylyan1"
+"358231","2020-05-05 05:46:09","http://193.142.146.30/d/xd.arm6","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/358231/","zbetcheckin"
+"358230","2020-05-05 05:45:37","http://193.142.146.30/d/xd.sh4","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/358230/","zbetcheckin"
+"358229","2020-05-05 05:45:06","http://121.121.121.76:30645/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/358229/","zbetcheckin"
+"358228","2020-05-05 05:42:36","http://193.142.146.30/d/xd.spc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/358228/","zbetcheckin"
+"358227","2020-05-05 05:42:04","http://193.142.146.30/d/xd.ppc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/358227/","zbetcheckin"
+"358226","2020-05-05 05:41:32","http://193.142.146.30/d/xd.x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/358226/","zbetcheckin"
+"358225","2020-05-05 04:28:11","http://156.96.48.220/Pain.ppc","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/358225/","zbetcheckin"
+"358224","2020-05-05 04:28:08","http://156.96.48.220/Pain.m68k","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/358224/","zbetcheckin"
+"358223","2020-05-05 04:28:06","http://45.32.234.129/bins/Hilix.ppc","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/358223/","zbetcheckin"
+"358222","2020-05-05 04:28:04","http://167.71.107.14/a-r.m-4.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/358222/","zbetcheckin"
+"358221","2020-05-05 04:24:19","http://156.96.48.220/Pain.arm4","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/358221/","zbetcheckin"
+"358220","2020-05-05 04:24:16","http://167.71.107.14/x-3.2-.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/358220/","zbetcheckin"
+"358219","2020-05-05 04:24:14","http://156.96.48.220/Pain.arm5","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/358219/","zbetcheckin"
+"358218","2020-05-05 04:24:10","http://156.96.48.220/Pain.i586","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/358218/","zbetcheckin"
+"358217","2020-05-05 04:24:08","http://45.32.234.129/bins/Hilix.arm6","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/358217/","zbetcheckin"
+"358216","2020-05-05 04:24:06","http://167.71.107.14/m-i.p-s.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/358216/","zbetcheckin"
+"358215","2020-05-05 04:24:03","http://156.96.48.220/Pain.mpsl","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/358215/","zbetcheckin"
+"358214","2020-05-05 04:20:19","http://45.32.234.129/bins/Hilix.arm","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/358214/","zbetcheckin"
+"358213","2020-05-05 04:20:18","http://167.71.107.14/p-p.c-.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/358213/","zbetcheckin"
+"358212","2020-05-05 04:20:14","http://167.71.107.14/s-h.4-.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/358212/","zbetcheckin"
+"358211","2020-05-05 04:20:12","http://45.32.234.129/bins/Hilix.x86","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/358211/","zbetcheckin"
+"358210","2020-05-05 04:20:10","http://45.32.234.129/bins/Hilix.arm5","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/358210/","zbetcheckin"
+"358209","2020-05-05 04:20:07","http://156.96.48.220/Pain.i686","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/358209/","zbetcheckin"
+"358208","2020-05-05 04:20:04","http://167.71.107.14/a-r.m-6.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/358208/","zbetcheckin"
+"358207","2020-05-05 04:19:04","http://156.96.48.220/Pain.sparc","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/358207/","zbetcheckin"
+"358206","2020-05-05 04:16:07","http://167.71.107.14/a-r.m-7.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/358206/","zbetcheckin"
+"358205","2020-05-05 04:16:04","http://156.96.48.220/Pain.x86","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/358205/","zbetcheckin"
+"358204","2020-05-05 04:15:09","http://156.96.48.220/Pain.arm6","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/358204/","zbetcheckin"
+"358203","2020-05-05 04:15:06","http://45.32.234.129/bins/Hilix.mpsl","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/358203/","zbetcheckin"
+"358202","2020-05-05 04:15:04","http://167.71.107.14/m-6.8-k.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/358202/","zbetcheckin"
+"358201","2020-05-05 04:11:14","http://167.71.107.14/i-5.8-6.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/358201/","zbetcheckin"
+"358200","2020-05-05 04:11:12","http://45.32.234.129/bins/Hilix.mips","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/358200/","zbetcheckin"
+"358199","2020-05-05 04:11:10","http://45.32.234.129/bins/Hilix.spc","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/358199/","zbetcheckin"
+"358198","2020-05-05 04:11:08","http://45.32.234.129/bins/Hilix.m68k","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/358198/","zbetcheckin"
+"358197","2020-05-05 04:11:05","http://167.71.107.14/x-8.6-.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/358197/","zbetcheckin"
+"358196","2020-05-05 04:11:03","http://45.32.234.129/bins/Hilix.arm7","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/358196/","zbetcheckin"
+"358195","2020-05-05 04:07:09","http://167.71.107.14/a-r.m-5.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/358195/","zbetcheckin"
+"358194","2020-05-05 04:07:06","http://156.96.48.220/Pain.sh4","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/358194/","zbetcheckin"
+"358193","2020-05-05 04:07:03","http://45.32.234.129/bins/Hilix.sh4","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/358193/","zbetcheckin"
+"358192","2020-05-05 04:06:08","http://167.71.107.14/m-p.s-l.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/358192/","zbetcheckin"
+"358191","2020-05-05 04:06:05","http://156.96.48.220/Pain.mips","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/358191/","zbetcheckin"
+"358190","2020-05-05 03:51:05","http://167.71.107.14/SnOoPy.sh","offline","malware_download","shellscript","https://urlhaus.abuse.ch/url/358190/","zbetcheckin"
+"358189","2020-05-05 03:44:03","http://156.96.48.220/bins.sh","online","malware_download","shellscript","https://urlhaus.abuse.ch/url/358189/","zbetcheckin"
+"358188","2020-05-05 03:40:04","http://159.65.171.28/Jeno.sh","offline","malware_download","shellscript","https://urlhaus.abuse.ch/url/358188/","zbetcheckin"
+"358187","2020-05-05 03:29:05","http://45.32.234.129/Hilix.sh","online","malware_download","shellscript","https://urlhaus.abuse.ch/url/358187/","zbetcheckin"
+"358186","2020-05-05 03:29:03","http://188.166.3.147/bins.sh","offline","malware_download","shellscript","https://urlhaus.abuse.ch/url/358186/","zbetcheckin"
+"358185","2020-05-05 03:26:12","https://pastebin.com/raw/VguPZ6pp","offline","malware_download","None","https://urlhaus.abuse.ch/url/358185/","JayTHL"
+"358184","2020-05-05 03:26:09","https://pastebin.com/raw/NJD2NnVm","offline","malware_download","None","https://urlhaus.abuse.ch/url/358184/","JayTHL"
+"358183","2020-05-05 03:26:05","https://pastebin.com/raw/2cfxmdLE","offline","malware_download","None","https://urlhaus.abuse.ch/url/358183/","JayTHL"
+"358182","2020-05-05 03:11:02","http://75.127.0.11/bins.sh","online","malware_download","shellscript","https://urlhaus.abuse.ch/url/358182/","zbetcheckin"
+"358181","2020-05-05 03:06:21","http://42.239.137.2:55153/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/358181/","Gandylyan1"
+"358180","2020-05-05 03:06:17","http://222.139.222.59:53257/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/358180/","Gandylyan1"
+"358179","2020-05-05 03:06:13","http://211.137.225.18:51271/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/358179/","Gandylyan1"
+"358178","2020-05-05 03:06:10","http://222.138.150.1:55484/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/358178/","Gandylyan1"
+"358177","2020-05-05 03:06:06","http://176.113.161.89:42166/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/358177/","Gandylyan1"
+"358176","2020-05-05 03:06:04","http://221.13.236.180:42123/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/358176/","Gandylyan1"
+"358175","2020-05-05 03:06:01","http://42.227.145.119:39183/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/358175/","Gandylyan1"
+"358174","2020-05-05 03:05:57","http://222.138.150.125:53713/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/358174/","Gandylyan1"
+"358173","2020-05-05 03:05:53","http://115.63.186.148:56206/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/358173/","Gandylyan1"
+"358172","2020-05-05 03:05:50","http://111.42.66.162:46358/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/358172/","Gandylyan1"
+"358171","2020-05-05 03:05:47","http://125.40.234.73:41063/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/358171/","Gandylyan1"
+"358170","2020-05-05 03:05:43","http://222.242.182.187:53058/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/358170/","Gandylyan1"
+"358169","2020-05-05 03:05:11","http://42.227.202.11:60348/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/358169/","Gandylyan1"
+"358168","2020-05-05 03:05:07","http://211.137.225.146:59017/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/358168/","Gandylyan1"
+"358167","2020-05-05 03:04:48","http://49.70.34.196:57185/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/358167/","Gandylyan1"
+"358166","2020-05-05 03:04:42","http://42.227.147.234:45985/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/358166/","Gandylyan1"
+"358165","2020-05-05 03:04:39","http://172.45.24.42:45038/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/358165/","Gandylyan1"
+"358164","2020-05-05 03:04:07","http://1.246.222.234:4162/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/358164/","Gandylyan1"
+"358163","2020-05-05 02:48:05","https://askmufti.org/wp-content/PP/PayPal-Restore.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/358163/","zbetcheckin"
+"358162","2020-05-05 01:27:33","https://pastebin.com/raw/FKMpjvpM","offline","malware_download","None","https://urlhaus.abuse.ch/url/358162/","JayTHL"
+"358161","2020-05-05 01:16:06","https://staging2.lifebiotic.com/novacms/grassandrocks.php","online","malware_download","exe,Gozi,ursnif","https://urlhaus.abuse.ch/url/358161/","p5yb34m"
+"358159","2020-05-05 00:40:31","https://pastebin.com/raw/qCLRR5Bj","offline","malware_download","None","https://urlhaus.abuse.ch/url/358159/","JayTHL"
+"358158","2020-05-05 00:40:28","https://pastebin.com/raw/PDr6aV1b","offline","malware_download","None","https://urlhaus.abuse.ch/url/358158/","JayTHL"
+"358157","2020-05-05 00:40:21","https://pastebin.com/raw/nZFESHA7","offline","malware_download","None","https://urlhaus.abuse.ch/url/358157/","JayTHL"
+"358156","2020-05-05 00:40:07","https://pastebin.com/raw/eEaNyid2","offline","malware_download","None","https://urlhaus.abuse.ch/url/358156/","JayTHL"
+"358155","2020-05-05 00:28:38","https://pastebin.com/raw/YixGJwLe","offline","malware_download","None","https://urlhaus.abuse.ch/url/358155/","JayTHL"
+"358154","2020-05-05 00:28:06","https://pastebin.com/raw/MgumbPGq","offline","malware_download","None","https://urlhaus.abuse.ch/url/358154/","JayTHL"
+"358153","2020-05-05 00:27:33","https://pastebin.com/raw/avv6UQri","offline","malware_download","None","https://urlhaus.abuse.ch/url/358153/","JayTHL"
 "358152","2020-05-05 00:04:11","http://125.42.233.154:54951/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/358152/","Gandylyan1"
-"358151","2020-05-05 00:04:07","http://111.42.103.6:40560/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/358151/","Gandylyan1"
+"358151","2020-05-05 00:04:07","http://111.42.103.6:40560/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/358151/","Gandylyan1"
 "358150","2020-05-05 00:04:03","http://111.42.103.77:55685/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/358150/","Gandylyan1"
 "358149","2020-05-05 00:04:00","http://123.113.102.36:45098/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/358149/","Gandylyan1"
-"358148","2020-05-05 00:03:55","http://121.236.142.86:33962/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/358148/","Gandylyan1"
+"358148","2020-05-05 00:03:55","http://121.236.142.86:33962/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/358148/","Gandylyan1"
 "358147","2020-05-05 00:03:50","http://183.130.63.13:38951/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/358147/","Gandylyan1"
-"358146","2020-05-05 00:03:43","http://199.83.203.115:42386/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/358146/","Gandylyan1"
+"358146","2020-05-05 00:03:43","http://199.83.203.115:42386/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/358146/","Gandylyan1"
 "358145","2020-05-05 00:03:38","http://182.124.173.124:33765/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/358145/","Gandylyan1"
 "358144","2020-05-05 00:03:32","http://27.41.227.6:52727/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/358144/","Gandylyan1"
 "358143","2020-05-05 00:03:28","http://124.67.89.74:43636/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/358143/","Gandylyan1"
 "358142","2020-05-05 00:03:25","http://36.33.139.64:35873/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/358142/","Gandylyan1"
 "358141","2020-05-05 00:03:19","http://219.156.30.126:34417/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/358141/","Gandylyan1"
-"358140","2020-05-05 00:03:14","http://114.239.1.105:39682/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/358140/","Gandylyan1"
+"358140","2020-05-05 00:03:14","http://114.239.1.105:39682/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/358140/","Gandylyan1"
 "358139","2020-05-05 00:03:09","http://36.107.211.17:35152/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/358139/","Gandylyan1"
 "358138","2020-05-05 00:03:04","http://27.41.177.145:54136/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/358138/","Gandylyan1"
 "358137","2020-05-04 23:44:14","http://webservice99.com/IuFiles/Installs/ReactTuningOptimizerSoftware/ReactTuningOptimizerInstaller.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/358137/","zbetcheckin"
@@ -26,524 +251,524 @@
 "358127","2020-05-04 23:42:57","https://pastebin.com/raw/AFt8cPyj","offline","malware_download","None","https://urlhaus.abuse.ch/url/358127/","JayTHL"
 "358126","2020-05-04 23:42:55","https://pastebin.com/raw/4MVKubZ4","offline","malware_download","None","https://urlhaus.abuse.ch/url/358126/","JayTHL"
 "358125","2020-05-04 23:42:53","https://pastebin.com/raw/0QANX3HN","offline","malware_download","None","https://urlhaus.abuse.ch/url/358125/","JayTHL"
-"358124","2020-05-04 23:42:49","https://getfashionmania.com/wp-content/uploads/2020/05/xipim/ServiceContractAgreement_342437_05012020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/358124/","spamhaus"
-"358123","2020-05-04 23:42:42","https://toulousa.com/omg/EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358123/","abuse_ch"
-"358122","2020-05-04 23:42:40","https://toulousa.com/omg/9EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358122/","abuse_ch"
-"358121","2020-05-04 23:42:38","https://toulousa.com/omg/99EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358121/","abuse_ch"
-"358120","2020-05-04 23:42:36","https://toulousa.com/omg/98EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358120/","abuse_ch"
-"358119","2020-05-04 23:42:33","https://toulousa.com/omg/97EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358119/","abuse_ch"
-"358118","2020-05-04 23:42:30","https://toulousa.com/omg/96EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358118/","abuse_ch"
-"358117","2020-05-04 23:42:28","https://toulousa.com/omg/95EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358117/","abuse_ch"
-"358116","2020-05-04 23:42:24","https://toulousa.com/omg/94EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358116/","abuse_ch"
-"358115","2020-05-04 23:42:12","https://toulousa.com/omg/93EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358115/","abuse_ch"
-"358114","2020-05-04 23:42:09","https://toulousa.com/omg/92EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358114/","abuse_ch"
-"358113","2020-05-04 23:42:04","https://toulousa.com/omg/91EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358113/","abuse_ch"
-"358112","2020-05-04 23:42:02","https://toulousa.com/omg/90EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358112/","abuse_ch"
-"358111","2020-05-04 23:41:58","https://toulousa.com/omg/8EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358111/","abuse_ch"
-"358110","2020-05-04 23:41:53","https://toulousa.com/omg/89EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358110/","abuse_ch"
-"358109","2020-05-04 23:41:50","https://toulousa.com/omg/88EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358109/","abuse_ch"
-"358108","2020-05-04 23:41:37","https://toulousa.com/omg/87EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358108/","abuse_ch"
-"358107","2020-05-04 23:41:33","https://toulousa.com/omg/86EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358107/","abuse_ch"
-"358106","2020-05-04 23:41:22","https://toulousa.com/omg/85EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358106/","abuse_ch"
-"358105","2020-05-04 23:41:08","https://toulousa.com/omg/84EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358105/","abuse_ch"
-"358104","2020-05-04 23:40:50","https://toulousa.com/omg/83EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358104/","abuse_ch"
-"358103","2020-05-04 23:40:34","https://toulousa.com/omg/82EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358103/","abuse_ch"
-"358102","2020-05-04 23:40:32","https://toulousa.com/omg/81EYJSFYHMS.exe","online","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358102/","abuse_ch"
-"358101","2020-05-04 23:40:15","https://toulousa.com/omg/80EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358101/","abuse_ch"
-"358100","2020-05-04 23:40:02","https://toulousa.com/omg/7EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358100/","abuse_ch"
-"358099","2020-05-04 23:39:59","https://toulousa.com/omg/79EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358099/","abuse_ch"
-"358098","2020-05-04 23:39:56","https://toulousa.com/omg/78EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358098/","abuse_ch"
-"358097","2020-05-04 23:39:53","https://toulousa.com/omg/77EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358097/","abuse_ch"
-"358096","2020-05-04 23:39:44","https://toulousa.com/omg/76EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358096/","abuse_ch"
-"358095","2020-05-04 23:39:42","https://toulousa.com/omg/75EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358095/","abuse_ch"
-"358094","2020-05-04 23:39:40","https://toulousa.com/omg/74EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358094/","abuse_ch"
-"358093","2020-05-04 23:39:37","https://toulousa.com/omg/73EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358093/","abuse_ch"
-"358092","2020-05-04 23:39:34","https://toulousa.com/omg/72EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358092/","abuse_ch"
+"358124","2020-05-04 23:42:49","https://getfashionmania.com/wp-content/uploads/2020/05/xipim/ServiceContractAgreement_342437_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/358124/","spamhaus"
+"358123","2020-05-04 23:42:42","https://toulousa.com/omg/EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358123/","abuse_ch"
+"358122","2020-05-04 23:42:40","https://toulousa.com/omg/9EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358122/","abuse_ch"
+"358121","2020-05-04 23:42:38","https://toulousa.com/omg/99EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358121/","abuse_ch"
+"358120","2020-05-04 23:42:36","https://toulousa.com/omg/98EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358120/","abuse_ch"
+"358119","2020-05-04 23:42:33","https://toulousa.com/omg/97EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358119/","abuse_ch"
+"358118","2020-05-04 23:42:30","https://toulousa.com/omg/96EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358118/","abuse_ch"
+"358117","2020-05-04 23:42:28","https://toulousa.com/omg/95EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358117/","abuse_ch"
+"358116","2020-05-04 23:42:24","https://toulousa.com/omg/94EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358116/","abuse_ch"
+"358115","2020-05-04 23:42:12","https://toulousa.com/omg/93EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358115/","abuse_ch"
+"358114","2020-05-04 23:42:09","https://toulousa.com/omg/92EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358114/","abuse_ch"
+"358113","2020-05-04 23:42:04","https://toulousa.com/omg/91EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358113/","abuse_ch"
+"358112","2020-05-04 23:42:02","https://toulousa.com/omg/90EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358112/","abuse_ch"
+"358111","2020-05-04 23:41:58","https://toulousa.com/omg/8EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358111/","abuse_ch"
+"358110","2020-05-04 23:41:53","https://toulousa.com/omg/89EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358110/","abuse_ch"
+"358109","2020-05-04 23:41:50","https://toulousa.com/omg/88EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358109/","abuse_ch"
+"358108","2020-05-04 23:41:37","https://toulousa.com/omg/87EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358108/","abuse_ch"
+"358107","2020-05-04 23:41:33","https://toulousa.com/omg/86EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358107/","abuse_ch"
+"358106","2020-05-04 23:41:22","https://toulousa.com/omg/85EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358106/","abuse_ch"
+"358105","2020-05-04 23:41:08","https://toulousa.com/omg/84EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358105/","abuse_ch"
+"358104","2020-05-04 23:40:50","https://toulousa.com/omg/83EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358104/","abuse_ch"
+"358103","2020-05-04 23:40:34","https://toulousa.com/omg/82EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358103/","abuse_ch"
+"358102","2020-05-04 23:40:32","https://toulousa.com/omg/81EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358102/","abuse_ch"
+"358101","2020-05-04 23:40:15","https://toulousa.com/omg/80EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358101/","abuse_ch"
+"358100","2020-05-04 23:40:02","https://toulousa.com/omg/7EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358100/","abuse_ch"
+"358099","2020-05-04 23:39:59","https://toulousa.com/omg/79EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358099/","abuse_ch"
+"358098","2020-05-04 23:39:56","https://toulousa.com/omg/78EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358098/","abuse_ch"
+"358097","2020-05-04 23:39:53","https://toulousa.com/omg/77EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358097/","abuse_ch"
+"358096","2020-05-04 23:39:44","https://toulousa.com/omg/76EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358096/","abuse_ch"
+"358095","2020-05-04 23:39:42","https://toulousa.com/omg/75EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358095/","abuse_ch"
+"358094","2020-05-04 23:39:40","https://toulousa.com/omg/74EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358094/","abuse_ch"
+"358093","2020-05-04 23:39:37","https://toulousa.com/omg/73EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358093/","abuse_ch"
+"358092","2020-05-04 23:39:34","https://toulousa.com/omg/72EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358092/","abuse_ch"
 "358091","2020-05-04 23:39:29","https://ihpmed.ae/pp.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/358091/","abuse_ch"
-"358090","2020-05-04 23:39:26","https://toulousa.com/omg/71EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358090/","abuse_ch"
-"358089","2020-05-04 23:39:23","https://toulousa.com/omg/70EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358089/","abuse_ch"
-"358088","2020-05-04 23:39:17","https://toulousa.com/omg/6EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358088/","abuse_ch"
-"358087","2020-05-04 23:39:15","https://toulousa.com/omg/69EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358087/","abuse_ch"
-"358086","2020-05-04 23:39:12","https://toulousa.com/omg/68EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358086/","abuse_ch"
-"358085","2020-05-04 23:39:09","https://toulousa.com/omg/67EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358085/","abuse_ch"
-"358084","2020-05-04 23:39:07","https://toulousa.com/omg/66EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358084/","abuse_ch"
-"358083","2020-05-04 23:38:55","https://toulousa.com/omg/65EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358083/","abuse_ch"
-"358082","2020-05-04 23:38:52","https://toulousa.com/omg/64EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358082/","abuse_ch"
-"358081","2020-05-04 23:38:50","https://toulousa.com/omg/63EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358081/","abuse_ch"
-"358080","2020-05-04 23:38:48","https://toulousa.com/omg/62EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358080/","abuse_ch"
-"358079","2020-05-04 23:38:41","https://toulousa.com/omg/61EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358079/","abuse_ch"
-"358078","2020-05-04 23:38:38","https://toulousa.com/omg/60EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358078/","abuse_ch"
-"358077","2020-05-04 23:38:36","https://toulousa.com/omg/5EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358077/","abuse_ch"
-"358076","2020-05-04 23:38:30","https://toulousa.com/omg/59EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358076/","abuse_ch"
-"358075","2020-05-04 23:38:27","https://toulousa.com/omg/58EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358075/","abuse_ch"
-"358074","2020-05-04 23:38:25","https://toulousa.com/omg/57EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358074/","abuse_ch"
-"358073","2020-05-04 23:38:23","https://toulousa.com/omg/56EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358073/","abuse_ch"
-"358072","2020-05-04 23:38:21","https://toulousa.com/omg/55EYJSFYHMS.exe","online","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358072/","abuse_ch"
-"358071","2020-05-04 23:38:19","https://toulousa.com/omg/54EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358071/","abuse_ch"
-"358070","2020-05-04 23:38:15","https://toulousa.com/omg/53EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358070/","abuse_ch"
-"358069","2020-05-04 23:38:13","https://toulousa.com/omg/52EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358069/","abuse_ch"
-"358068","2020-05-04 23:38:11","https://toulousa.com/omg/51EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358068/","abuse_ch"
-"358067","2020-05-04 23:38:06","https://toulousa.com/omg/50EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358067/","abuse_ch"
-"358066","2020-05-04 23:37:59","https://toulousa.com/omg/500EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358066/","abuse_ch"
-"358065","2020-05-04 23:37:57","https://toulousa.com/omg/4EYJSFYHMS.exe","online","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358065/","abuse_ch"
-"358064","2020-05-04 23:37:52","https://toulousa.com/omg/49EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358064/","abuse_ch"
-"358063","2020-05-04 23:37:49","https://toulousa.com/omg/499EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358063/","abuse_ch"
-"358062","2020-05-04 23:37:46","https://toulousa.com/omg/498EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358062/","abuse_ch"
-"358061","2020-05-04 23:37:39","https://toulousa.com/omg/497EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358061/","abuse_ch"
-"358060","2020-05-04 23:37:34","https://toulousa.com/omg/496EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358060/","abuse_ch"
-"358059","2020-05-04 23:37:32","https://toulousa.com/omg/495EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358059/","abuse_ch"
-"358058","2020-05-04 23:37:28","https://toulousa.com/omg/494EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358058/","abuse_ch"
-"358057","2020-05-04 23:37:24","https://toulousa.com/omg/493EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358057/","abuse_ch"
-"358056","2020-05-04 23:37:21","https://toulousa.com/omg/492EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358056/","abuse_ch"
-"358055","2020-05-04 23:37:13","https://toulousa.com/omg/491EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358055/","abuse_ch"
-"358054","2020-05-04 23:37:10","https://toulousa.com/omg/490EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358054/","abuse_ch"
-"358053","2020-05-04 23:37:04","https://toulousa.com/omg/48EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358053/","abuse_ch"
-"358052","2020-05-04 23:37:00","https://toulousa.com/omg/489EYJSFYHMS.zip","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358052/","abuse_ch"
-"358051","2020-05-04 23:31:07","https://toulousa.com/omg/489EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358051/","abuse_ch"
-"358050","2020-05-04 23:30:33","https://toulousa.com/omg/488EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358050/","abuse_ch"
-"358049","2020-05-04 23:29:59","https://toulousa.com/omg/487EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358049/","abuse_ch"
-"358048","2020-05-04 23:29:26","https://toulousa.com/omg/486EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358048/","abuse_ch"
-"358047","2020-05-04 23:28:53","https://toulousa.com/omg/485EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358047/","abuse_ch"
-"358046","2020-05-04 23:28:20","https://toulousa.com/omg/484EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358046/","abuse_ch"
+"358090","2020-05-04 23:39:26","https://toulousa.com/omg/71EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358090/","abuse_ch"
+"358089","2020-05-04 23:39:23","https://toulousa.com/omg/70EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358089/","abuse_ch"
+"358088","2020-05-04 23:39:17","https://toulousa.com/omg/6EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358088/","abuse_ch"
+"358087","2020-05-04 23:39:15","https://toulousa.com/omg/69EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358087/","abuse_ch"
+"358086","2020-05-04 23:39:12","https://toulousa.com/omg/68EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358086/","abuse_ch"
+"358085","2020-05-04 23:39:09","https://toulousa.com/omg/67EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358085/","abuse_ch"
+"358084","2020-05-04 23:39:07","https://toulousa.com/omg/66EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358084/","abuse_ch"
+"358083","2020-05-04 23:38:55","https://toulousa.com/omg/65EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358083/","abuse_ch"
+"358082","2020-05-04 23:38:52","https://toulousa.com/omg/64EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358082/","abuse_ch"
+"358081","2020-05-04 23:38:50","https://toulousa.com/omg/63EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358081/","abuse_ch"
+"358080","2020-05-04 23:38:48","https://toulousa.com/omg/62EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358080/","abuse_ch"
+"358079","2020-05-04 23:38:41","https://toulousa.com/omg/61EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358079/","abuse_ch"
+"358078","2020-05-04 23:38:38","https://toulousa.com/omg/60EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358078/","abuse_ch"
+"358077","2020-05-04 23:38:36","https://toulousa.com/omg/5EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358077/","abuse_ch"
+"358076","2020-05-04 23:38:30","https://toulousa.com/omg/59EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358076/","abuse_ch"
+"358075","2020-05-04 23:38:27","https://toulousa.com/omg/58EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358075/","abuse_ch"
+"358074","2020-05-04 23:38:25","https://toulousa.com/omg/57EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358074/","abuse_ch"
+"358073","2020-05-04 23:38:23","https://toulousa.com/omg/56EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358073/","abuse_ch"
+"358072","2020-05-04 23:38:21","https://toulousa.com/omg/55EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358072/","abuse_ch"
+"358071","2020-05-04 23:38:19","https://toulousa.com/omg/54EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358071/","abuse_ch"
+"358070","2020-05-04 23:38:15","https://toulousa.com/omg/53EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358070/","abuse_ch"
+"358069","2020-05-04 23:38:13","https://toulousa.com/omg/52EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358069/","abuse_ch"
+"358068","2020-05-04 23:38:11","https://toulousa.com/omg/51EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358068/","abuse_ch"
+"358067","2020-05-04 23:38:06","https://toulousa.com/omg/50EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358067/","abuse_ch"
+"358066","2020-05-04 23:37:59","https://toulousa.com/omg/500EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358066/","abuse_ch"
+"358065","2020-05-04 23:37:57","https://toulousa.com/omg/4EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358065/","abuse_ch"
+"358064","2020-05-04 23:37:52","https://toulousa.com/omg/49EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358064/","abuse_ch"
+"358063","2020-05-04 23:37:49","https://toulousa.com/omg/499EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358063/","abuse_ch"
+"358062","2020-05-04 23:37:46","https://toulousa.com/omg/498EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358062/","abuse_ch"
+"358061","2020-05-04 23:37:39","https://toulousa.com/omg/497EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358061/","abuse_ch"
+"358060","2020-05-04 23:37:34","https://toulousa.com/omg/496EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358060/","abuse_ch"
+"358059","2020-05-04 23:37:32","https://toulousa.com/omg/495EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358059/","abuse_ch"
+"358058","2020-05-04 23:37:28","https://toulousa.com/omg/494EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358058/","abuse_ch"
+"358057","2020-05-04 23:37:24","https://toulousa.com/omg/493EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358057/","abuse_ch"
+"358056","2020-05-04 23:37:21","https://toulousa.com/omg/492EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358056/","abuse_ch"
+"358055","2020-05-04 23:37:13","https://toulousa.com/omg/491EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358055/","abuse_ch"
+"358054","2020-05-04 23:37:10","https://toulousa.com/omg/490EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358054/","abuse_ch"
+"358053","2020-05-04 23:37:04","https://toulousa.com/omg/48EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358053/","abuse_ch"
+"358052","2020-05-04 23:37:00","https://toulousa.com/omg/489EYJSFYHMS.zip","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358052/","abuse_ch"
+"358051","2020-05-04 23:31:07","https://toulousa.com/omg/489EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358051/","abuse_ch"
+"358050","2020-05-04 23:30:33","https://toulousa.com/omg/488EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358050/","abuse_ch"
+"358049","2020-05-04 23:29:59","https://toulousa.com/omg/487EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358049/","abuse_ch"
+"358048","2020-05-04 23:29:26","https://toulousa.com/omg/486EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358048/","abuse_ch"
+"358047","2020-05-04 23:28:53","https://toulousa.com/omg/485EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358047/","abuse_ch"
+"358046","2020-05-04 23:28:20","https://toulousa.com/omg/484EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358046/","abuse_ch"
 "358045","2020-05-04 23:27:46","http://89.32.41.87/utnl/e-remit.vbs","offline","malware_download","vbs","https://urlhaus.abuse.ch/url/358045/","abuse_ch"
-"358044","2020-05-04 23:27:45","https://toulousa.com/omg/483EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358044/","abuse_ch"
-"358043","2020-05-04 23:27:13","https://toulousa.com/omg/482EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358043/","abuse_ch"
-"358042","2020-05-04 23:26:38","https://toulousa.com/omg/481EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358042/","abuse_ch"
-"358041","2020-05-04 23:26:05","https://toulousa.com/omg/480EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358041/","abuse_ch"
-"358040","2020-05-04 23:25:32","https://toulousa.com/omg/47EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358040/","abuse_ch"
-"358039","2020-05-04 23:24:59","https://toulousa.com/omg/479EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358039/","abuse_ch"
-"358038","2020-05-04 23:24:26","https://toulousa.com/omg/478EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358038/","abuse_ch"
-"358037","2020-05-04 23:23:52","https://toulousa.com/omg/477EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358037/","abuse_ch"
-"358036","2020-05-04 23:23:19","https://toulousa.com/omg/476EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358036/","abuse_ch"
-"358035","2020-05-04 23:23:10","https://toulousa.com/omg/475EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358035/","abuse_ch"
-"358034","2020-05-04 23:23:02","https://toulousa.com/omg/474EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358034/","abuse_ch"
-"358033","2020-05-04 23:22:57","https://toulousa.com/omg/473EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358033/","abuse_ch"
-"358032","2020-05-04 23:22:54","https://toulousa.com/omg/472EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358032/","abuse_ch"
-"358031","2020-05-04 23:22:51","https://toulousa.com/omg/471EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358031/","abuse_ch"
-"358030","2020-05-04 23:22:47","https://toulousa.com/omg/470EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358030/","abuse_ch"
-"358029","2020-05-04 23:22:44","https://toulousa.com/omg/46EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358029/","abuse_ch"
-"358028","2020-05-04 23:22:35","https://toulousa.com/omg/469EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358028/","abuse_ch"
-"358027","2020-05-04 23:22:32","https://toulousa.com/omg/468EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358027/","abuse_ch"
-"358026","2020-05-04 23:22:27","https://toulousa.com/omg/467EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358026/","abuse_ch"
-"358025","2020-05-04 23:22:24","https://toulousa.com/omg/466EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358025/","abuse_ch"
-"358024","2020-05-04 23:22:20","https://toulousa.com/omg/465EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358024/","abuse_ch"
-"358023","2020-05-04 23:22:15","https://toulousa.com/omg/464EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358023/","abuse_ch"
-"358022","2020-05-04 23:22:01","https://toulousa.com/omg/463EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358022/","abuse_ch"
-"358021","2020-05-04 23:21:56","https://toulousa.com/omg/462EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358021/","abuse_ch"
-"358020","2020-05-04 23:21:51","https://toulousa.com/omg/461EYJSFYHMS.exe","online","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358020/","abuse_ch"
-"358019","2020-05-04 23:21:44","https://toulousa.com/omg/460EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358019/","abuse_ch"
-"358018","2020-05-04 23:21:39","https://toulousa.com/omg/45EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358018/","abuse_ch"
-"358017","2020-05-04 23:21:37","http://89.32.41.87/utnl/Attack.jpg","online","malware_download","Encoded","https://urlhaus.abuse.ch/url/358017/","abuse_ch"
-"358016","2020-05-04 23:21:32","https://toulousa.com/omg/459EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358016/","abuse_ch"
-"358015","2020-05-04 23:21:28","https://toulousa.com/omg/458EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358015/","abuse_ch"
-"358014","2020-05-04 23:21:23","https://toulousa.com/omg/457EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358014/","abuse_ch"
-"358013","2020-05-04 23:21:20","https://toulousa.com/omg/456EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358013/","abuse_ch"
-"358012","2020-05-04 23:21:17","https://toulousa.com/omg/455EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358012/","abuse_ch"
-"358011","2020-05-04 23:21:06","https://toulousa.com/omg/454EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358011/","abuse_ch"
-"358010","2020-05-04 23:20:09","https://toulousa.com/omg/453EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358010/","abuse_ch"
-"358009","2020-05-04 23:20:06","https://toulousa.com/omg/452EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358009/","abuse_ch"
-"358008","2020-05-04 23:20:03","https://toulousa.com/omg/451EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358008/","abuse_ch"
-"358007","2020-05-04 23:19:57","https://toulousa.com/omg/450EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358007/","abuse_ch"
-"358006","2020-05-04 23:19:53","https://toulousa.com/omg/44EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358006/","abuse_ch"
-"358005","2020-05-04 23:19:46","https://toulousa.com/omg/449EYJSFYHMS.exe","online","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358005/","abuse_ch"
-"358004","2020-05-04 23:19:44","https://toulousa.com/omg/448EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358004/","abuse_ch"
-"358003","2020-05-04 23:19:40","https://toulousa.com/omg/447EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358003/","abuse_ch"
-"358002","2020-05-04 23:19:35","https://toulousa.com/omg/446EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358002/","abuse_ch"
-"358001","2020-05-04 23:19:29","https://toulousa.com/omg/445EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/358001/","abuse_ch"
-"358000","2020-05-04 23:19:22","https://toulousa.com/omg/444EYJSFYHMS.exe","online","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358000/","abuse_ch"
-"357999","2020-05-04 23:19:18","https://toulousa.com/omg/443EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357999/","abuse_ch"
-"357998","2020-05-04 23:19:12","https://toulousa.com/omg/442EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357998/","abuse_ch"
-"357997","2020-05-04 23:19:00","https://toulousa.com/omg/441EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357997/","abuse_ch"
-"357996","2020-05-04 23:18:54","https://toulousa.com/omg/440EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357996/","abuse_ch"
-"357995","2020-05-04 23:18:46","https://toulousa.com/omg/43EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357995/","abuse_ch"
-"357994","2020-05-04 23:18:41","https://toulousa.com/omg/439EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357994/","abuse_ch"
-"357993","2020-05-04 23:18:28","https://toulousa.com/omg/438EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357993/","abuse_ch"
-"357992","2020-05-04 23:18:15","https://toulousa.com/omg/437EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357992/","abuse_ch"
-"357991","2020-05-04 23:18:13","https://toulousa.com/omg/436EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357991/","abuse_ch"
-"357990","2020-05-04 23:18:07","https://toulousa.com/omg/435EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357990/","abuse_ch"
-"357989","2020-05-04 23:18:03","https://toulousa.com/omg/434EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357989/","abuse_ch"
-"357988","2020-05-04 23:17:59","https://toulousa.com/omg/433EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357988/","abuse_ch"
-"357987","2020-05-04 23:17:51","https://toulousa.com/omg/432EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357987/","abuse_ch"
-"357986","2020-05-04 23:17:43","https://toulousa.com/omg/431EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357986/","abuse_ch"
-"357985","2020-05-04 23:17:39","https://toulousa.com/omg/430EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357985/","abuse_ch"
-"357984","2020-05-04 23:17:34","https://toulousa.com/omg/42EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357984/","abuse_ch"
-"357983","2020-05-04 23:17:31","https://toulousa.com/omg/429EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357983/","abuse_ch"
-"357982","2020-05-04 23:17:26","https://toulousa.com/omg/428EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357982/","abuse_ch"
-"357981","2020-05-04 23:17:13","https://toulousa.com/omg/427EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357981/","abuse_ch"
-"357980","2020-05-04 23:17:04","https://toulousa.com/omg/426EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357980/","abuse_ch"
-"357979","2020-05-04 23:16:51","https://toulousa.com/omg/425EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357979/","abuse_ch"
-"357978","2020-05-04 23:16:44","https://toulousa.com/omg/424EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357978/","abuse_ch"
-"357977","2020-05-04 23:16:32","https://toulousa.com/omg/423EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357977/","abuse_ch"
-"357976","2020-05-04 23:16:27","https://toulousa.com/omg/422EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357976/","abuse_ch"
-"357975","2020-05-04 23:16:24","https://toulousa.com/omg/421EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357975/","abuse_ch"
-"357974","2020-05-04 23:16:21","https://toulousa.com/omg/420EYJSFYHMS.exe","online","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357974/","abuse_ch"
-"357973","2020-05-04 23:16:18","https://toulousa.com/omg/41EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357973/","abuse_ch"
-"357972","2020-05-04 23:16:15","https://toulousa.com/omg/419EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357972/","abuse_ch"
-"357971","2020-05-04 23:16:10","https://toulousa.com/omg/418EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357971/","abuse_ch"
-"357970","2020-05-04 23:16:07","https://toulousa.com/omg/417EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357970/","abuse_ch"
-"357969","2020-05-04 23:16:04","https://toulousa.com/omg/416EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357969/","abuse_ch"
-"357968","2020-05-04 23:15:59","https://toulousa.com/omg/415EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357968/","abuse_ch"
-"357967","2020-05-04 23:15:56","https://toulousa.com/omg/414EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357967/","abuse_ch"
-"357966","2020-05-04 23:15:53","https://toulousa.com/omg/413EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357966/","abuse_ch"
-"357965","2020-05-04 23:15:44","https://toulousa.com/omg/412EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357965/","abuse_ch"
-"357964","2020-05-04 23:15:34","https://toulousa.com/omg/411EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357964/","abuse_ch"
-"357963","2020-05-04 23:15:21","https://toulousa.com/omg/410EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357963/","abuse_ch"
-"357962","2020-05-04 23:15:18","https://toulousa.com/omg/40EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357962/","abuse_ch"
-"357961","2020-05-04 23:15:14","https://toulousa.com/omg/409EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357961/","abuse_ch"
-"357960","2020-05-04 23:15:11","https://toulousa.com/omg/408EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357960/","abuse_ch"
-"357959","2020-05-04 23:15:08","https://toulousa.com/omg/407EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357959/","abuse_ch"
-"357958","2020-05-04 23:15:06","https://toulousa.com/omg/406EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357958/","abuse_ch"
-"357957","2020-05-04 23:15:03","https://toulousa.com/omg/405EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357957/","abuse_ch"
-"357956","2020-05-04 23:14:46","https://toulousa.com/omg/404EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357956/","abuse_ch"
-"357955","2020-05-04 23:14:43","https://toulousa.com/omg/403EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357955/","abuse_ch"
-"357954","2020-05-04 23:14:39","https://toulousa.com/omg/402EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357954/","abuse_ch"
-"357953","2020-05-04 23:14:34","https://toulousa.com/omg/401EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357953/","abuse_ch"
-"357952","2020-05-04 23:14:27","https://toulousa.com/omg/400EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357952/","abuse_ch"
-"357951","2020-05-04 23:14:22","https://toulousa.com/omg/3EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357951/","abuse_ch"
-"357950","2020-05-04 23:14:18","https://toulousa.com/omg/39EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357950/","abuse_ch"
-"357949","2020-05-04 23:14:14","https://toulousa.com/omg/399EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357949/","abuse_ch"
-"357948","2020-05-04 23:14:09","https://toulousa.com/omg/398EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357948/","abuse_ch"
-"357947","2020-05-04 23:14:06","https://toulousa.com/omg/397EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357947/","abuse_ch"
-"357946","2020-05-04 23:13:57","https://toulousa.com/omg/396EYJSFYHMS.exe","online","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357946/","abuse_ch"
-"357945","2020-05-04 23:13:52","https://toulousa.com/omg/395EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357945/","abuse_ch"
-"357944","2020-05-04 23:13:49","https://toulousa.com/omg/394EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357944/","abuse_ch"
-"357943","2020-05-04 23:13:46","https://toulousa.com/omg/393EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357943/","abuse_ch"
-"357942","2020-05-04 23:13:41","https://toulousa.com/omg/392EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357942/","abuse_ch"
-"357941","2020-05-04 23:13:38","https://toulousa.com/omg/391EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357941/","abuse_ch"
-"357940","2020-05-04 23:13:35","https://toulousa.com/omg/390EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357940/","abuse_ch"
-"357939","2020-05-04 23:13:27","https://toulousa.com/omg/38EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357939/","abuse_ch"
-"357938","2020-05-04 23:13:24","https://toulousa.com/omg/389EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357938/","abuse_ch"
-"357937","2020-05-04 23:13:21","https://toulousa.com/omg/388EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357937/","abuse_ch"
-"357936","2020-05-04 23:13:16","https://toulousa.com/omg/387EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357936/","abuse_ch"
-"357935","2020-05-04 23:12:56","https://toulousa.com/omg/386EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357935/","abuse_ch"
-"357934","2020-05-04 23:12:53","https://toulousa.com/omg/385EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357934/","abuse_ch"
-"357933","2020-05-04 23:12:48","https://toulousa.com/omg/384EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357933/","abuse_ch"
-"357932","2020-05-04 23:12:36","https://toulousa.com/omg/383EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357932/","abuse_ch"
-"357931","2020-05-04 23:12:30","https://toulousa.com/omg/382EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357931/","abuse_ch"
-"357930","2020-05-04 23:12:19","https://toulousa.com/omg/381EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357930/","abuse_ch"
-"357929","2020-05-04 23:12:11","https://toulousa.com/omg/380EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357929/","abuse_ch"
-"357928","2020-05-04 23:12:03","https://toulousa.com/omg/37EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357928/","abuse_ch"
-"357927","2020-05-04 23:12:01","https://toulousa.com/omg/379EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357927/","abuse_ch"
-"357926","2020-05-04 23:11:58","https://toulousa.com/omg/378EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357926/","abuse_ch"
-"357925","2020-05-04 23:11:55","https://toulousa.com/omg/377EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357925/","abuse_ch"
-"357924","2020-05-04 23:11:50","https://toulousa.com/omg/376EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357924/","abuse_ch"
-"357923","2020-05-04 23:11:47","https://toulousa.com/omg/375EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357923/","abuse_ch"
-"357922","2020-05-04 23:11:44","https://toulousa.com/omg/374EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357922/","abuse_ch"
-"357921","2020-05-04 23:11:42","https://toulousa.com/omg/373EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357921/","abuse_ch"
-"357920","2020-05-04 23:11:37","https://toulousa.com/omg/372EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357920/","abuse_ch"
-"357919","2020-05-04 23:11:32","https://toulousa.com/omg/371EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357919/","abuse_ch"
-"357918","2020-05-04 23:11:17","https://toulousa.com/omg/370EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357918/","abuse_ch"
-"357917","2020-05-04 23:11:12","https://toulousa.com/omg/36EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357917/","abuse_ch"
-"357916","2020-05-04 23:11:05","https://toulousa.com/omg/369EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357916/","abuse_ch"
-"357915","2020-05-04 23:11:02","https://toulousa.com/omg/368EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357915/","abuse_ch"
-"357914","2020-05-04 23:10:57","https://toulousa.com/omg/367EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357914/","abuse_ch"
-"357913","2020-05-04 23:10:48","https://toulousa.com/omg/366EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357913/","abuse_ch"
-"357912","2020-05-04 23:10:41","https://toulousa.com/omg/365EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357912/","abuse_ch"
-"357911","2020-05-04 23:10:35","https://toulousa.com/omg/364EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357911/","abuse_ch"
-"357910","2020-05-04 23:10:24","https://toulousa.com/omg/363EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357910/","abuse_ch"
-"357909","2020-05-04 23:10:05","https://toulousa.com/omg/362EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357909/","abuse_ch"
-"357908","2020-05-04 23:09:59","https://toulousa.com/omg/361EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357908/","abuse_ch"
-"357907","2020-05-04 23:09:52","https://toulousa.com/omg/360EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357907/","abuse_ch"
-"357906","2020-05-04 23:09:43","https://toulousa.com/omg/35EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357906/","abuse_ch"
-"357905","2020-05-04 23:09:40","https://toulousa.com/omg/359EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357905/","abuse_ch"
-"357904","2020-05-04 23:09:34","https://toulousa.com/omg/358EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357904/","abuse_ch"
+"358044","2020-05-04 23:27:45","https://toulousa.com/omg/483EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358044/","abuse_ch"
+"358043","2020-05-04 23:27:13","https://toulousa.com/omg/482EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358043/","abuse_ch"
+"358042","2020-05-04 23:26:38","https://toulousa.com/omg/481EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358042/","abuse_ch"
+"358041","2020-05-04 23:26:05","https://toulousa.com/omg/480EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358041/","abuse_ch"
+"358040","2020-05-04 23:25:32","https://toulousa.com/omg/47EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358040/","abuse_ch"
+"358039","2020-05-04 23:24:59","https://toulousa.com/omg/479EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358039/","abuse_ch"
+"358038","2020-05-04 23:24:26","https://toulousa.com/omg/478EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358038/","abuse_ch"
+"358037","2020-05-04 23:23:52","https://toulousa.com/omg/477EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358037/","abuse_ch"
+"358036","2020-05-04 23:23:19","https://toulousa.com/omg/476EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358036/","abuse_ch"
+"358035","2020-05-04 23:23:10","https://toulousa.com/omg/475EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358035/","abuse_ch"
+"358034","2020-05-04 23:23:02","https://toulousa.com/omg/474EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358034/","abuse_ch"
+"358033","2020-05-04 23:22:57","https://toulousa.com/omg/473EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358033/","abuse_ch"
+"358032","2020-05-04 23:22:54","https://toulousa.com/omg/472EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358032/","abuse_ch"
+"358031","2020-05-04 23:22:51","https://toulousa.com/omg/471EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358031/","abuse_ch"
+"358030","2020-05-04 23:22:47","https://toulousa.com/omg/470EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358030/","abuse_ch"
+"358029","2020-05-04 23:22:44","https://toulousa.com/omg/46EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358029/","abuse_ch"
+"358028","2020-05-04 23:22:35","https://toulousa.com/omg/469EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358028/","abuse_ch"
+"358027","2020-05-04 23:22:32","https://toulousa.com/omg/468EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358027/","abuse_ch"
+"358026","2020-05-04 23:22:27","https://toulousa.com/omg/467EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358026/","abuse_ch"
+"358025","2020-05-04 23:22:24","https://toulousa.com/omg/466EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358025/","abuse_ch"
+"358024","2020-05-04 23:22:20","https://toulousa.com/omg/465EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358024/","abuse_ch"
+"358023","2020-05-04 23:22:15","https://toulousa.com/omg/464EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358023/","abuse_ch"
+"358022","2020-05-04 23:22:01","https://toulousa.com/omg/463EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358022/","abuse_ch"
+"358021","2020-05-04 23:21:56","https://toulousa.com/omg/462EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358021/","abuse_ch"
+"358020","2020-05-04 23:21:51","https://toulousa.com/omg/461EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358020/","abuse_ch"
+"358019","2020-05-04 23:21:44","https://toulousa.com/omg/460EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358019/","abuse_ch"
+"358018","2020-05-04 23:21:39","https://toulousa.com/omg/45EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358018/","abuse_ch"
+"358017","2020-05-04 23:21:37","http://89.32.41.87/utnl/Attack.jpg","offline","malware_download","Encoded","https://urlhaus.abuse.ch/url/358017/","abuse_ch"
+"358016","2020-05-04 23:21:32","https://toulousa.com/omg/459EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358016/","abuse_ch"
+"358015","2020-05-04 23:21:28","https://toulousa.com/omg/458EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358015/","abuse_ch"
+"358014","2020-05-04 23:21:23","https://toulousa.com/omg/457EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358014/","abuse_ch"
+"358013","2020-05-04 23:21:20","https://toulousa.com/omg/456EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358013/","abuse_ch"
+"358012","2020-05-04 23:21:17","https://toulousa.com/omg/455EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358012/","abuse_ch"
+"358011","2020-05-04 23:21:06","https://toulousa.com/omg/454EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358011/","abuse_ch"
+"358010","2020-05-04 23:20:09","https://toulousa.com/omg/453EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358010/","abuse_ch"
+"358009","2020-05-04 23:20:06","https://toulousa.com/omg/452EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358009/","abuse_ch"
+"358008","2020-05-04 23:20:03","https://toulousa.com/omg/451EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358008/","abuse_ch"
+"358007","2020-05-04 23:19:57","https://toulousa.com/omg/450EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358007/","abuse_ch"
+"358006","2020-05-04 23:19:53","https://toulousa.com/omg/44EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358006/","abuse_ch"
+"358005","2020-05-04 23:19:46","https://toulousa.com/omg/449EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358005/","abuse_ch"
+"358004","2020-05-04 23:19:44","https://toulousa.com/omg/448EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358004/","abuse_ch"
+"358003","2020-05-04 23:19:40","https://toulousa.com/omg/447EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358003/","abuse_ch"
+"358002","2020-05-04 23:19:35","https://toulousa.com/omg/446EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358002/","abuse_ch"
+"358001","2020-05-04 23:19:29","https://toulousa.com/omg/445EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358001/","abuse_ch"
+"358000","2020-05-04 23:19:22","https://toulousa.com/omg/444EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/358000/","abuse_ch"
+"357999","2020-05-04 23:19:18","https://toulousa.com/omg/443EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357999/","abuse_ch"
+"357998","2020-05-04 23:19:12","https://toulousa.com/omg/442EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357998/","abuse_ch"
+"357997","2020-05-04 23:19:00","https://toulousa.com/omg/441EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357997/","abuse_ch"
+"357996","2020-05-04 23:18:54","https://toulousa.com/omg/440EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357996/","abuse_ch"
+"357995","2020-05-04 23:18:46","https://toulousa.com/omg/43EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357995/","abuse_ch"
+"357994","2020-05-04 23:18:41","https://toulousa.com/omg/439EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357994/","abuse_ch"
+"357993","2020-05-04 23:18:28","https://toulousa.com/omg/438EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357993/","abuse_ch"
+"357992","2020-05-04 23:18:15","https://toulousa.com/omg/437EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357992/","abuse_ch"
+"357991","2020-05-04 23:18:13","https://toulousa.com/omg/436EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357991/","abuse_ch"
+"357990","2020-05-04 23:18:07","https://toulousa.com/omg/435EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357990/","abuse_ch"
+"357989","2020-05-04 23:18:03","https://toulousa.com/omg/434EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357989/","abuse_ch"
+"357988","2020-05-04 23:17:59","https://toulousa.com/omg/433EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357988/","abuse_ch"
+"357987","2020-05-04 23:17:51","https://toulousa.com/omg/432EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357987/","abuse_ch"
+"357986","2020-05-04 23:17:43","https://toulousa.com/omg/431EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357986/","abuse_ch"
+"357985","2020-05-04 23:17:39","https://toulousa.com/omg/430EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357985/","abuse_ch"
+"357984","2020-05-04 23:17:34","https://toulousa.com/omg/42EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357984/","abuse_ch"
+"357983","2020-05-04 23:17:31","https://toulousa.com/omg/429EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357983/","abuse_ch"
+"357982","2020-05-04 23:17:26","https://toulousa.com/omg/428EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357982/","abuse_ch"
+"357981","2020-05-04 23:17:13","https://toulousa.com/omg/427EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357981/","abuse_ch"
+"357980","2020-05-04 23:17:04","https://toulousa.com/omg/426EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357980/","abuse_ch"
+"357979","2020-05-04 23:16:51","https://toulousa.com/omg/425EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357979/","abuse_ch"
+"357978","2020-05-04 23:16:44","https://toulousa.com/omg/424EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357978/","abuse_ch"
+"357977","2020-05-04 23:16:32","https://toulousa.com/omg/423EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357977/","abuse_ch"
+"357976","2020-05-04 23:16:27","https://toulousa.com/omg/422EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357976/","abuse_ch"
+"357975","2020-05-04 23:16:24","https://toulousa.com/omg/421EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357975/","abuse_ch"
+"357974","2020-05-04 23:16:21","https://toulousa.com/omg/420EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357974/","abuse_ch"
+"357973","2020-05-04 23:16:18","https://toulousa.com/omg/41EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357973/","abuse_ch"
+"357972","2020-05-04 23:16:15","https://toulousa.com/omg/419EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357972/","abuse_ch"
+"357971","2020-05-04 23:16:10","https://toulousa.com/omg/418EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357971/","abuse_ch"
+"357970","2020-05-04 23:16:07","https://toulousa.com/omg/417EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357970/","abuse_ch"
+"357969","2020-05-04 23:16:04","https://toulousa.com/omg/416EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357969/","abuse_ch"
+"357968","2020-05-04 23:15:59","https://toulousa.com/omg/415EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357968/","abuse_ch"
+"357967","2020-05-04 23:15:56","https://toulousa.com/omg/414EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357967/","abuse_ch"
+"357966","2020-05-04 23:15:53","https://toulousa.com/omg/413EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357966/","abuse_ch"
+"357965","2020-05-04 23:15:44","https://toulousa.com/omg/412EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357965/","abuse_ch"
+"357964","2020-05-04 23:15:34","https://toulousa.com/omg/411EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357964/","abuse_ch"
+"357963","2020-05-04 23:15:21","https://toulousa.com/omg/410EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357963/","abuse_ch"
+"357962","2020-05-04 23:15:18","https://toulousa.com/omg/40EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357962/","abuse_ch"
+"357961","2020-05-04 23:15:14","https://toulousa.com/omg/409EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357961/","abuse_ch"
+"357960","2020-05-04 23:15:11","https://toulousa.com/omg/408EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357960/","abuse_ch"
+"357959","2020-05-04 23:15:08","https://toulousa.com/omg/407EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357959/","abuse_ch"
+"357958","2020-05-04 23:15:06","https://toulousa.com/omg/406EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357958/","abuse_ch"
+"357957","2020-05-04 23:15:03","https://toulousa.com/omg/405EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357957/","abuse_ch"
+"357956","2020-05-04 23:14:46","https://toulousa.com/omg/404EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357956/","abuse_ch"
+"357955","2020-05-04 23:14:43","https://toulousa.com/omg/403EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357955/","abuse_ch"
+"357954","2020-05-04 23:14:39","https://toulousa.com/omg/402EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357954/","abuse_ch"
+"357953","2020-05-04 23:14:34","https://toulousa.com/omg/401EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357953/","abuse_ch"
+"357952","2020-05-04 23:14:27","https://toulousa.com/omg/400EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357952/","abuse_ch"
+"357951","2020-05-04 23:14:22","https://toulousa.com/omg/3EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357951/","abuse_ch"
+"357950","2020-05-04 23:14:18","https://toulousa.com/omg/39EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357950/","abuse_ch"
+"357949","2020-05-04 23:14:14","https://toulousa.com/omg/399EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357949/","abuse_ch"
+"357948","2020-05-04 23:14:09","https://toulousa.com/omg/398EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357948/","abuse_ch"
+"357947","2020-05-04 23:14:06","https://toulousa.com/omg/397EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357947/","abuse_ch"
+"357946","2020-05-04 23:13:57","https://toulousa.com/omg/396EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357946/","abuse_ch"
+"357945","2020-05-04 23:13:52","https://toulousa.com/omg/395EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357945/","abuse_ch"
+"357944","2020-05-04 23:13:49","https://toulousa.com/omg/394EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357944/","abuse_ch"
+"357943","2020-05-04 23:13:46","https://toulousa.com/omg/393EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357943/","abuse_ch"
+"357942","2020-05-04 23:13:41","https://toulousa.com/omg/392EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357942/","abuse_ch"
+"357941","2020-05-04 23:13:38","https://toulousa.com/omg/391EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357941/","abuse_ch"
+"357940","2020-05-04 23:13:35","https://toulousa.com/omg/390EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357940/","abuse_ch"
+"357939","2020-05-04 23:13:27","https://toulousa.com/omg/38EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357939/","abuse_ch"
+"357938","2020-05-04 23:13:24","https://toulousa.com/omg/389EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357938/","abuse_ch"
+"357937","2020-05-04 23:13:21","https://toulousa.com/omg/388EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357937/","abuse_ch"
+"357936","2020-05-04 23:13:16","https://toulousa.com/omg/387EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357936/","abuse_ch"
+"357935","2020-05-04 23:12:56","https://toulousa.com/omg/386EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357935/","abuse_ch"
+"357934","2020-05-04 23:12:53","https://toulousa.com/omg/385EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357934/","abuse_ch"
+"357933","2020-05-04 23:12:48","https://toulousa.com/omg/384EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357933/","abuse_ch"
+"357932","2020-05-04 23:12:36","https://toulousa.com/omg/383EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357932/","abuse_ch"
+"357931","2020-05-04 23:12:30","https://toulousa.com/omg/382EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357931/","abuse_ch"
+"357930","2020-05-04 23:12:19","https://toulousa.com/omg/381EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357930/","abuse_ch"
+"357929","2020-05-04 23:12:11","https://toulousa.com/omg/380EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357929/","abuse_ch"
+"357928","2020-05-04 23:12:03","https://toulousa.com/omg/37EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357928/","abuse_ch"
+"357927","2020-05-04 23:12:01","https://toulousa.com/omg/379EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357927/","abuse_ch"
+"357926","2020-05-04 23:11:58","https://toulousa.com/omg/378EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357926/","abuse_ch"
+"357925","2020-05-04 23:11:55","https://toulousa.com/omg/377EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357925/","abuse_ch"
+"357924","2020-05-04 23:11:50","https://toulousa.com/omg/376EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357924/","abuse_ch"
+"357923","2020-05-04 23:11:47","https://toulousa.com/omg/375EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357923/","abuse_ch"
+"357922","2020-05-04 23:11:44","https://toulousa.com/omg/374EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357922/","abuse_ch"
+"357921","2020-05-04 23:11:42","https://toulousa.com/omg/373EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357921/","abuse_ch"
+"357920","2020-05-04 23:11:37","https://toulousa.com/omg/372EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357920/","abuse_ch"
+"357919","2020-05-04 23:11:32","https://toulousa.com/omg/371EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357919/","abuse_ch"
+"357918","2020-05-04 23:11:17","https://toulousa.com/omg/370EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357918/","abuse_ch"
+"357917","2020-05-04 23:11:12","https://toulousa.com/omg/36EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357917/","abuse_ch"
+"357916","2020-05-04 23:11:05","https://toulousa.com/omg/369EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357916/","abuse_ch"
+"357915","2020-05-04 23:11:02","https://toulousa.com/omg/368EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357915/","abuse_ch"
+"357914","2020-05-04 23:10:57","https://toulousa.com/omg/367EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357914/","abuse_ch"
+"357913","2020-05-04 23:10:48","https://toulousa.com/omg/366EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357913/","abuse_ch"
+"357912","2020-05-04 23:10:41","https://toulousa.com/omg/365EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357912/","abuse_ch"
+"357911","2020-05-04 23:10:35","https://toulousa.com/omg/364EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357911/","abuse_ch"
+"357910","2020-05-04 23:10:24","https://toulousa.com/omg/363EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357910/","abuse_ch"
+"357909","2020-05-04 23:10:05","https://toulousa.com/omg/362EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357909/","abuse_ch"
+"357908","2020-05-04 23:09:59","https://toulousa.com/omg/361EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357908/","abuse_ch"
+"357907","2020-05-04 23:09:52","https://toulousa.com/omg/360EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357907/","abuse_ch"
+"357906","2020-05-04 23:09:43","https://toulousa.com/omg/35EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357906/","abuse_ch"
+"357905","2020-05-04 23:09:40","https://toulousa.com/omg/359EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357905/","abuse_ch"
+"357904","2020-05-04 23:09:34","https://toulousa.com/omg/358EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357904/","abuse_ch"
 "357903","2020-05-04 23:09:32","https://pastebin.com/raw/ZyVR1fJd","offline","malware_download","None","https://urlhaus.abuse.ch/url/357903/","JayTHL"
-"357902","2020-05-04 23:09:31","https://toulousa.com/omg/357EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357902/","abuse_ch"
-"357901","2020-05-04 23:09:23","http://tuskanlehdms.ug/br.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/357901/","abuse_ch"
-"357900","2020-05-04 23:09:20","http://tuskanlehdms.ug/nw.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/357900/","abuse_ch"
-"357899","2020-05-04 23:09:17","http://tuskanlehdms.ug/ds.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/357899/","abuse_ch"
-"357898","2020-05-04 23:09:04","http://tuskanlehdms.ug/az1.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/357898/","abuse_ch"
-"357897","2020-05-04 23:08:54","https://toulousa.com/omg/356EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357897/","abuse_ch"
-"357896","2020-05-04 23:08:51","https://toulousa.com/omg/355EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357896/","abuse_ch"
+"357902","2020-05-04 23:09:31","https://toulousa.com/omg/357EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357902/","abuse_ch"
+"357901","2020-05-04 23:09:23","http://tuskanlehdms.ug/br.exe","offline","malware_download","AsyncRAT,exe","https://urlhaus.abuse.ch/url/357901/","abuse_ch"
+"357900","2020-05-04 23:09:20","http://tuskanlehdms.ug/nw.exe","offline","malware_download","exe,NetWire","https://urlhaus.abuse.ch/url/357900/","abuse_ch"
+"357899","2020-05-04 23:09:17","http://tuskanlehdms.ug/ds.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/357899/","abuse_ch"
+"357898","2020-05-04 23:09:04","http://tuskanlehdms.ug/az1.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/357898/","abuse_ch"
+"357897","2020-05-04 23:08:54","https://toulousa.com/omg/356EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357897/","abuse_ch"
+"357896","2020-05-04 23:08:51","https://toulousa.com/omg/355EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357896/","abuse_ch"
 "357895","2020-05-04 23:08:43","https://pastebin.com/raw/xqivscWJ","offline","malware_download","None","https://urlhaus.abuse.ch/url/357895/","JayTHL"
-"357894","2020-05-04 23:08:42","https://toulousa.com/omg/354EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357894/","abuse_ch"
-"357893","2020-05-04 23:08:38","https://toulousa.com/omg/353EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357893/","abuse_ch"
-"357892","2020-05-04 23:08:35","https://toulousa.com/omg/352EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357892/","abuse_ch"
-"357891","2020-05-04 23:08:31","https://toulousa.com/omg/351EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357891/","abuse_ch"
+"357894","2020-05-04 23:08:42","https://toulousa.com/omg/354EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357894/","abuse_ch"
+"357893","2020-05-04 23:08:38","https://toulousa.com/omg/353EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357893/","abuse_ch"
+"357892","2020-05-04 23:08:35","https://toulousa.com/omg/352EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357892/","abuse_ch"
+"357891","2020-05-04 23:08:31","https://toulousa.com/omg/351EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357891/","abuse_ch"
 "357890","2020-05-04 23:08:15","https://pastebin.com/raw/UDwvV5rY","offline","malware_download","None","https://urlhaus.abuse.ch/url/357890/","JayTHL"
-"357889","2020-05-04 23:08:14","https://toulousa.com/omg/350EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357889/","abuse_ch"
-"357888","2020-05-04 23:08:08","https://toulousa.com/omg/34EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357888/","abuse_ch"
+"357889","2020-05-04 23:08:14","https://toulousa.com/omg/350EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357889/","abuse_ch"
+"357888","2020-05-04 23:08:08","https://toulousa.com/omg/34EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357888/","abuse_ch"
 "357887","2020-05-04 23:08:01","https://pastebin.com/raw/T7Jt3SCU","offline","malware_download","None","https://urlhaus.abuse.ch/url/357887/","JayTHL"
-"357886","2020-05-04 23:08:00","https://toulousa.com/omg/349EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357886/","abuse_ch"
-"357885","2020-05-04 23:07:56","https://toulousa.com/omg/348EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357885/","abuse_ch"
+"357886","2020-05-04 23:08:00","https://toulousa.com/omg/349EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357886/","abuse_ch"
+"357885","2020-05-04 23:07:56","https://toulousa.com/omg/348EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357885/","abuse_ch"
 "357884","2020-05-04 23:07:53","https://pastebin.com/raw/LRZsbB6Y","offline","malware_download","None","https://urlhaus.abuse.ch/url/357884/","JayTHL"
-"357883","2020-05-04 23:07:48","https://toulousa.com/omg/347EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357883/","abuse_ch"
-"357882","2020-05-04 23:07:36","https://toulousa.com/omg/346EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357882/","abuse_ch"
-"357881","2020-05-04 23:07:34","https://toulousa.com/omg/345EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357881/","abuse_ch"
-"357880","2020-05-04 23:07:32","https://toulousa.com/omg/344EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357880/","abuse_ch"
+"357883","2020-05-04 23:07:48","https://toulousa.com/omg/347EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357883/","abuse_ch"
+"357882","2020-05-04 23:07:36","https://toulousa.com/omg/346EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357882/","abuse_ch"
+"357881","2020-05-04 23:07:34","https://toulousa.com/omg/345EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357881/","abuse_ch"
+"357880","2020-05-04 23:07:32","https://toulousa.com/omg/344EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357880/","abuse_ch"
 "357879","2020-05-04 23:07:28","https://pastebin.com/raw/daLkfvie","offline","malware_download","None","https://urlhaus.abuse.ch/url/357879/","JayTHL"
 "357878","2020-05-04 23:07:27","https://pastebin.com/raw/AuAURFj2","offline","malware_download","None","https://urlhaus.abuse.ch/url/357878/","JayTHL"
-"357877","2020-05-04 23:07:26","https://toulousa.com/omg/343EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357877/","abuse_ch"
-"357876","2020-05-04 23:07:22","https://toulousa.com/omg/342EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357876/","abuse_ch"
-"357875","2020-05-04 23:07:19","https://toulousa.com/omg/341EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357875/","abuse_ch"
-"357874","2020-05-04 23:07:17","https://toulousa.com/omg/340EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357874/","abuse_ch"
+"357877","2020-05-04 23:07:26","https://toulousa.com/omg/343EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357877/","abuse_ch"
+"357876","2020-05-04 23:07:22","https://toulousa.com/omg/342EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357876/","abuse_ch"
+"357875","2020-05-04 23:07:19","https://toulousa.com/omg/341EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357875/","abuse_ch"
+"357874","2020-05-04 23:07:17","https://toulousa.com/omg/340EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357874/","abuse_ch"
 "357873","2020-05-04 23:07:14","https://pastebin.com/raw/ADvtNGFA","offline","malware_download","None","https://urlhaus.abuse.ch/url/357873/","JayTHL"
-"357872","2020-05-04 23:07:13","https://toulousa.com/omg/33EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357872/","abuse_ch"
-"357871","2020-05-04 23:07:10","https://toulousa.com/omg/339EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357871/","abuse_ch"
+"357872","2020-05-04 23:07:13","https://toulousa.com/omg/33EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357872/","abuse_ch"
+"357871","2020-05-04 23:07:10","https://toulousa.com/omg/339EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357871/","abuse_ch"
 "357870","2020-05-04 23:07:07","https://pastebin.com/raw/4jKjeztC","offline","malware_download","None","https://urlhaus.abuse.ch/url/357870/","JayTHL"
-"357869","2020-05-04 23:07:06","https://toulousa.com/omg/338EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357869/","abuse_ch"
-"357868","2020-05-04 23:07:02","https://toulousa.com/omg/337EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357868/","abuse_ch"
-"357867","2020-05-04 23:07:00","https://toulousa.com/omg/336EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357867/","abuse_ch"
-"357866","2020-05-04 23:06:56","https://toulousa.com/omg/335EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357866/","abuse_ch"
-"357865","2020-05-04 23:06:51","https://toulousa.com/omg/334EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357865/","abuse_ch"
-"357864","2020-05-04 23:06:49","https://toulousa.com/omg/333EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357864/","abuse_ch"
-"357863","2020-05-04 23:06:40","https://toulousa.com/omg/332EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357863/","abuse_ch"
-"357862","2020-05-04 23:06:33","https://toulousa.com/omg/331EYJSFYHMS.exe","online","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357862/","abuse_ch"
-"357861","2020-05-04 23:06:30","https://toulousa.com/omg/330EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357861/","abuse_ch"
-"357860","2020-05-04 23:06:24","https://toulousa.com/omg/32EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357860/","abuse_ch"
-"357859","2020-05-04 23:06:21","https://toulousa.com/omg/329EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357859/","abuse_ch"
-"357858","2020-05-04 23:06:19","https://toulousa.com/omg/328EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357858/","abuse_ch"
-"357857","2020-05-04 23:06:15","https://toulousa.com/omg/327EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357857/","abuse_ch"
-"357856","2020-05-04 23:06:12","https://toulousa.com/omg/326EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357856/","abuse_ch"
-"357855","2020-05-04 23:06:09","https://toulousa.com/omg/325EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357855/","abuse_ch"
-"357854","2020-05-04 23:06:06","https://toulousa.com/omg/324EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357854/","abuse_ch"
-"357853","2020-05-04 23:06:01","https://toulousa.com/omg/323EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357853/","abuse_ch"
-"357852","2020-05-04 23:05:57","https://toulousa.com/omg/322EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357852/","abuse_ch"
-"357851","2020-05-04 23:05:43","https://toulousa.com/omg/321EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357851/","abuse_ch"
-"357850","2020-05-04 23:05:39","https://toulousa.com/omg/320EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357850/","abuse_ch"
-"357849","2020-05-04 23:05:26","https://toulousa.com/omg/31EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357849/","abuse_ch"
-"357848","2020-05-04 23:05:15","https://toulousa.com/omg/319EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357848/","abuse_ch"
-"357847","2020-05-04 23:05:09","https://toulousa.com/omg/318EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357847/","abuse_ch"
-"357846","2020-05-04 23:05:00","https://toulousa.com/omg/317EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357846/","abuse_ch"
-"357845","2020-05-04 23:04:54","https://toulousa.com/omg/316EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357845/","abuse_ch"
-"357844","2020-05-04 23:04:41","https://toulousa.com/omg/315EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357844/","abuse_ch"
-"357843","2020-05-04 23:04:34","https://toulousa.com/omg/314EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357843/","abuse_ch"
-"357842","2020-05-04 23:04:25","https://toulousa.com/omg/313EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357842/","abuse_ch"
-"357841","2020-05-04 23:04:22","https://toulousa.com/omg/312EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357841/","abuse_ch"
-"357840","2020-05-04 23:04:17","https://toulousa.com/omg/311EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357840/","abuse_ch"
-"357839","2020-05-04 23:04:12","https://toulousa.com/omg/310EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357839/","abuse_ch"
-"357838","2020-05-04 23:04:07","https://toulousa.com/omg/30EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357838/","abuse_ch"
-"357837","2020-05-04 23:04:01","https://toulousa.com/omg/309EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357837/","abuse_ch"
-"357836","2020-05-04 23:03:47","https://toulousa.com/omg/308EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357836/","abuse_ch"
-"357835","2020-05-04 23:03:44","https://toulousa.com/omg/307EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357835/","abuse_ch"
-"357834","2020-05-04 23:03:39","https://toulousa.com/omg/306EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357834/","abuse_ch"
-"357833","2020-05-04 23:03:37","https://toulousa.com/omg/305EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357833/","abuse_ch"
-"357832","2020-05-04 23:03:25","https://toulousa.com/omg/304EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357832/","abuse_ch"
-"357831","2020-05-04 23:03:23","https://toulousa.com/omg/303EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357831/","abuse_ch"
-"357830","2020-05-04 23:03:17","https://toulousa.com/omg/302EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357830/","abuse_ch"
-"357829","2020-05-04 23:02:39","https://toulousa.com/omg/301EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357829/","abuse_ch"
-"357828","2020-05-04 23:02:04","https://toulousa.com/omg/300EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357828/","abuse_ch"
-"357827","2020-05-04 23:01:31","https://toulousa.com/omg/2EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357827/","abuse_ch"
-"357826","2020-05-04 23:00:58","https://toulousa.com/omg/29EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357826/","abuse_ch"
-"357825","2020-05-04 23:00:25","https://toulousa.com/omg/299EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357825/","abuse_ch"
-"357824","2020-05-04 23:00:17","https://toulousa.com/omg/298EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357824/","abuse_ch"
-"357823","2020-05-04 23:00:12","https://toulousa.com/omg/297EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357823/","abuse_ch"
-"357822","2020-05-04 23:00:07","https://toulousa.com/omg/296EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357822/","abuse_ch"
-"357821","2020-05-04 23:00:04","https://toulousa.com/omg/295EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357821/","abuse_ch"
-"357820","2020-05-04 23:00:01","https://toulousa.com/omg/294EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357820/","abuse_ch"
-"357819","2020-05-04 22:59:58","https://toulousa.com/omg/293EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357819/","abuse_ch"
-"357818","2020-05-04 22:59:55","https://toulousa.com/omg/292EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357818/","abuse_ch"
-"357817","2020-05-04 22:59:53","https://toulousa.com/omg/291EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357817/","abuse_ch"
-"357816","2020-05-04 22:59:51","https://toulousa.com/omg/290EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357816/","abuse_ch"
-"357815","2020-05-04 22:59:49","https://toulousa.com/omg/28EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357815/","abuse_ch"
-"357814","2020-05-04 22:59:45","https://toulousa.com/omg/289EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357814/","abuse_ch"
-"357813","2020-05-04 22:59:43","https://toulousa.com/omg/288EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357813/","abuse_ch"
-"357812","2020-05-04 22:59:40","https://toulousa.com/omg/287EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357812/","abuse_ch"
-"357811","2020-05-04 22:59:38","https://toulousa.com/omg/286EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357811/","abuse_ch"
-"357810","2020-05-04 22:59:35","https://toulousa.com/omg/285EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357810/","abuse_ch"
-"357809","2020-05-04 22:59:33","https://toulousa.com/omg/284EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357809/","abuse_ch"
-"357808","2020-05-04 22:59:31","https://toulousa.com/omg/283EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357808/","abuse_ch"
-"357807","2020-05-04 22:59:28","https://toulousa.com/omg/282EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357807/","abuse_ch"
-"357806","2020-05-04 22:59:26","https://toulousa.com/omg/281EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357806/","abuse_ch"
-"357805","2020-05-04 22:59:24","https://toulousa.com/omg/280EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357805/","abuse_ch"
-"357804","2020-05-04 22:59:20","https://toulousa.com/omg/27EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357804/","abuse_ch"
-"357803","2020-05-04 22:59:18","https://toulousa.com/omg/279EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357803/","abuse_ch"
-"357802","2020-05-04 22:59:16","https://toulousa.com/omg/278EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357802/","abuse_ch"
-"357801","2020-05-04 22:59:13","https://toulousa.com/omg/277EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357801/","abuse_ch"
-"357800","2020-05-04 22:59:10","https://toulousa.com/omg/276EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357800/","abuse_ch"
-"357799","2020-05-04 22:59:07","https://toulousa.com/omg/275EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357799/","abuse_ch"
-"357798","2020-05-04 22:59:05","https://toulousa.com/omg/274EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357798/","abuse_ch"
-"357797","2020-05-04 22:59:02","https://toulousa.com/omg/273EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357797/","abuse_ch"
-"357796","2020-05-04 22:59:00","https://toulousa.com/omg/272EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357796/","abuse_ch"
-"357795","2020-05-04 22:58:57","https://toulousa.com/omg/271EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357795/","abuse_ch"
-"357794","2020-05-04 22:58:52","https://toulousa.com/omg/270EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357794/","abuse_ch"
-"357793","2020-05-04 22:58:50","https://toulousa.com/omg/26EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357793/","abuse_ch"
-"357792","2020-05-04 22:58:45","https://toulousa.com/omg/269EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357792/","abuse_ch"
-"357791","2020-05-04 22:58:43","https://toulousa.com/omg/268EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357791/","abuse_ch"
-"357790","2020-05-04 22:58:40","https://toulousa.com/omg/267EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357790/","abuse_ch"
-"357789","2020-05-04 22:58:38","https://toulousa.com/omg/266EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357789/","abuse_ch"
-"357788","2020-05-04 22:58:34","https://toulousa.com/omg/265EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357788/","abuse_ch"
-"357787","2020-05-04 22:58:32","https://toulousa.com/omg/264EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357787/","abuse_ch"
-"357786","2020-05-04 22:58:30","https://toulousa.com/omg/263EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357786/","abuse_ch"
-"357785","2020-05-04 22:58:27","https://toulousa.com/omg/262EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357785/","abuse_ch"
-"357784","2020-05-04 22:58:25","https://toulousa.com/omg/261EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357784/","abuse_ch"
-"357783","2020-05-04 22:58:23","https://toulousa.com/omg/260EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357783/","abuse_ch"
-"357782","2020-05-04 22:58:20","https://toulousa.com/omg/25EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357782/","abuse_ch"
-"357781","2020-05-04 22:58:16","http://tuskanlehdms.ug/az2.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/357781/","abuse_ch"
-"357780","2020-05-04 22:58:11","https://toulousa.com/omg/259EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357780/","abuse_ch"
-"357779","2020-05-04 22:58:08","https://toulousa.com/omg/258EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357779/","abuse_ch"
-"357778","2020-05-04 22:58:02","https://toulousa.com/omg/257EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357778/","abuse_ch"
-"357777","2020-05-04 22:57:59","https://toulousa.com/omg/256EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357777/","abuse_ch"
-"357776","2020-05-04 22:57:57","https://toulousa.com/omg/255EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357776/","abuse_ch"
-"357775","2020-05-04 22:57:55","https://toulousa.com/omg/254EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357775/","abuse_ch"
-"357774","2020-05-04 22:57:53","https://toulousa.com/omg/253EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357774/","abuse_ch"
-"357773","2020-05-04 22:57:50","https://toulousa.com/omg/252EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357773/","abuse_ch"
-"357772","2020-05-04 22:57:48","https://toulousa.com/omg/251EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357772/","abuse_ch"
-"357771","2020-05-04 22:57:46","https://toulousa.com/omg/250EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357771/","abuse_ch"
-"357770","2020-05-04 22:57:42","https://toulousa.com/omg/24EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357770/","abuse_ch"
-"357769","2020-05-04 22:57:40","https://toulousa.com/omg/249EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357769/","abuse_ch"
-"357768","2020-05-04 22:57:38","https://toulousa.com/omg/247EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357768/","abuse_ch"
-"357767","2020-05-04 22:57:35","https://toulousa.com/omg/246EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357767/","abuse_ch"
-"357766","2020-05-04 22:57:32","https://toulousa.com/omg/245EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357766/","abuse_ch"
-"357765","2020-05-04 22:57:29","https://toulousa.com/omg/244EYJSFYHMS.exe","online","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357765/","abuse_ch"
-"357764","2020-05-04 22:57:26","https://toulousa.com/omg/243EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357764/","abuse_ch"
-"357763","2020-05-04 22:57:24","https://toulousa.com/omg/242EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357763/","abuse_ch"
-"357762","2020-05-04 22:57:21","https://toulousa.com/omg/241EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357762/","abuse_ch"
-"357761","2020-05-04 22:57:19","https://toulousa.com/omg/240EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357761/","abuse_ch"
-"357760","2020-05-04 22:57:16","https://toulousa.com/omg/23EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357760/","abuse_ch"
-"357759","2020-05-04 22:57:12","https://toulousa.com/omg/239EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357759/","abuse_ch"
-"357758","2020-05-04 22:57:09","https://toulousa.com/omg/238EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357758/","abuse_ch"
-"357757","2020-05-04 22:57:06","https://toulousa.com/omg/237EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357757/","abuse_ch"
-"357756","2020-05-04 22:57:03","https://toulousa.com/omg/236EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357756/","abuse_ch"
-"357755","2020-05-04 22:57:00","https://toulousa.com/omg/235EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357755/","abuse_ch"
-"357754","2020-05-04 22:56:56","https://toulousa.com/omg/234EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357754/","abuse_ch"
-"357753","2020-05-04 22:56:54","https://toulousa.com/omg/233EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357753/","abuse_ch"
-"357752","2020-05-04 22:56:50","https://toulousa.com/omg/232EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357752/","abuse_ch"
-"357751","2020-05-04 22:56:48","https://toulousa.com/omg/231EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357751/","abuse_ch"
-"357750","2020-05-04 22:56:45","https://toulousa.com/omg/230EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357750/","abuse_ch"
-"357749","2020-05-04 22:56:41","https://toulousa.com/omg/22EYJSFYHMS.exe","online","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357749/","abuse_ch"
-"357748","2020-05-04 22:56:38","https://toulousa.com/omg/229EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357748/","abuse_ch"
-"357747","2020-05-04 22:56:36","https://toulousa.com/omg/228EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357747/","abuse_ch"
-"357746","2020-05-04 22:56:33","https://toulousa.com/omg/227EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357746/","abuse_ch"
-"357745","2020-05-04 22:56:31","https://toulousa.com/omg/226EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357745/","abuse_ch"
-"357744","2020-05-04 22:56:28","https://toulousa.com/omg/225EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357744/","abuse_ch"
-"357743","2020-05-04 22:56:25","https://toulousa.com/omg/224EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357743/","abuse_ch"
-"357742","2020-05-04 22:56:23","https://toulousa.com/omg/223EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357742/","abuse_ch"
-"357741","2020-05-04 22:56:19","https://toulousa.com/omg/222EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357741/","abuse_ch"
-"357740","2020-05-04 22:56:15","https://toulousa.com/omg/221EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357740/","abuse_ch"
-"357739","2020-05-04 22:56:11","https://toulousa.com/omg/220EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357739/","abuse_ch"
-"357738","2020-05-04 22:56:07","https://toulousa.com/omg/21EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357738/","abuse_ch"
-"357737","2020-05-04 22:56:02","https://toulousa.com/omg/219EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357737/","abuse_ch"
-"357736","2020-05-04 22:55:59","https://toulousa.com/omg/218EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357736/","abuse_ch"
-"357735","2020-05-04 22:55:56","https://toulousa.com/omg/217EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357735/","abuse_ch"
-"357734","2020-05-04 22:55:53","https://toulousa.com/omg/216EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357734/","abuse_ch"
-"357733","2020-05-04 22:55:51","https://toulousa.com/omg/214EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357733/","abuse_ch"
-"357732","2020-05-04 22:55:47","https://toulousa.com/omg/213EYJSFYHMS.exe","online","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357732/","abuse_ch"
-"357731","2020-05-04 22:55:44","https://toulousa.com/omg/212EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357731/","abuse_ch"
-"357730","2020-05-04 22:55:42","https://toulousa.com/omg/211EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357730/","abuse_ch"
-"357729","2020-05-04 22:55:37","https://toulousa.com/omg/210EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357729/","abuse_ch"
-"357728","2020-05-04 22:55:34","https://toulousa.com/omg/20EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357728/","abuse_ch"
-"357727","2020-05-04 22:55:06","https://toulousa.com/omg/209EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357727/","abuse_ch"
-"357726","2020-05-04 22:55:03","https://toulousa.com/omg/208EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357726/","abuse_ch"
-"357725","2020-05-04 22:54:57","https://toulousa.com/omg/207EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357725/","abuse_ch"
-"357724","2020-05-04 22:54:55","https://toulousa.com/omg/206EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357724/","abuse_ch"
-"357723","2020-05-04 22:54:52","https://toulousa.com/omg/205EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357723/","abuse_ch"
-"357722","2020-05-04 22:54:47","https://toulousa.com/omg/204EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357722/","abuse_ch"
-"357721","2020-05-04 22:54:44","https://toulousa.com/omg/203EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357721/","abuse_ch"
-"357720","2020-05-04 22:54:41","https://toulousa.com/omg/202EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357720/","abuse_ch"
-"357719","2020-05-04 22:54:38","https://toulousa.com/omg/201EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357719/","abuse_ch"
-"357718","2020-05-04 22:54:33","https://toulousa.com/omg/200EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357718/","abuse_ch"
-"357717","2020-05-04 22:54:30","https://toulousa.com/omg/1EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357717/","abuse_ch"
-"357716","2020-05-04 22:54:25","https://toulousa.com/omg/19EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357716/","abuse_ch"
-"357715","2020-05-04 22:54:21","https://toulousa.com/omg/199EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357715/","abuse_ch"
-"357714","2020-05-04 22:54:18","https://toulousa.com/omg/198EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357714/","abuse_ch"
-"357713","2020-05-04 22:54:15","https://toulousa.com/omg/197EYJSFYHMS.exe","online","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357713/","abuse_ch"
-"357712","2020-05-04 22:54:10","https://toulousa.com/omg/196EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357712/","abuse_ch"
-"357711","2020-05-04 22:54:06","https://toulousa.com/omg/195EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357711/","abuse_ch"
-"357710","2020-05-04 22:53:58","https://toulousa.com/omg/194EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357710/","abuse_ch"
-"357709","2020-05-04 22:53:55","https://toulousa.com/omg/193EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357709/","abuse_ch"
-"357708","2020-05-04 22:53:51","https://toulousa.com/omg/192EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357708/","abuse_ch"
-"357707","2020-05-04 22:53:48","https://toulousa.com/omg/191EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357707/","abuse_ch"
-"357706","2020-05-04 22:53:43","https://toulousa.com/omg/190EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357706/","abuse_ch"
-"357705","2020-05-04 22:53:39","https://toulousa.com/omg/18EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357705/","abuse_ch"
-"357704","2020-05-04 22:53:34","https://toulousa.com/omg/189EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357704/","abuse_ch"
-"357703","2020-05-04 22:53:31","https://toulousa.com/omg/188EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357703/","abuse_ch"
-"357702","2020-05-04 22:53:26","https://toulousa.com/omg/187EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357702/","abuse_ch"
-"357701","2020-05-04 22:53:23","https://toulousa.com/omg/186EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357701/","abuse_ch"
-"357700","2020-05-04 22:53:18","https://toulousa.com/omg/185EYJSFYHMS.exe","online","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357700/","abuse_ch"
-"357699","2020-05-04 22:53:14","https://toulousa.com/omg/184EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357699/","abuse_ch"
-"357698","2020-05-04 22:53:11","https://toulousa.com/omg/183EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357698/","abuse_ch"
-"357697","2020-05-04 22:53:06","https://toulousa.com/omg/182EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357697/","abuse_ch"
-"357696","2020-05-04 22:53:02","https://toulousa.com/omg/181EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357696/","abuse_ch"
-"357695","2020-05-04 22:52:59","https://toulousa.com/omg/180EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357695/","abuse_ch"
-"357694","2020-05-04 22:52:54","https://toulousa.com/omg/17EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357694/","abuse_ch"
-"357693","2020-05-04 22:52:49","https://toulousa.com/omg/179EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357693/","abuse_ch"
-"357692","2020-05-04 22:52:46","https://toulousa.com/omg/178EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357692/","abuse_ch"
-"357691","2020-05-04 22:52:39","https://toulousa.com/omg/177EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357691/","abuse_ch"
-"357690","2020-05-04 22:52:36","https://toulousa.com/omg/176EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357690/","abuse_ch"
-"357689","2020-05-04 22:52:31","https://toulousa.com/omg/175EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357689/","abuse_ch"
-"357688","2020-05-04 22:52:28","https://toulousa.com/omg/174EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357688/","abuse_ch"
-"357687","2020-05-04 22:52:24","https://toulousa.com/omg/173EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357687/","abuse_ch"
-"357686","2020-05-04 22:52:20","https://toulousa.com/omg/172EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357686/","abuse_ch"
-"357685","2020-05-04 22:52:16","https://toulousa.com/omg/171EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357685/","abuse_ch"
-"357684","2020-05-04 22:52:12","https://toulousa.com/omg/170EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357684/","abuse_ch"
-"357683","2020-05-04 22:52:08","https://toulousa.com/omg/16EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357683/","abuse_ch"
-"357682","2020-05-04 22:52:04","https://toulousa.com/omg/169EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357682/","abuse_ch"
-"357681","2020-05-04 22:52:00","https://toulousa.com/omg/168EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357681/","abuse_ch"
-"357680","2020-05-04 22:51:47","https://toulousa.com/omg/167EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357680/","abuse_ch"
-"357679","2020-05-04 22:51:42","https://toulousa.com/omg/166EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357679/","abuse_ch"
-"357678","2020-05-04 22:51:35","https://toulousa.com/omg/165EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357678/","abuse_ch"
-"357677","2020-05-04 22:51:29","https://toulousa.com/omg/164EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357677/","abuse_ch"
-"357676","2020-05-04 22:51:23","https://toulousa.com/omg/163EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357676/","abuse_ch"
-"357675","2020-05-04 22:51:16","https://toulousa.com/omg/162EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357675/","abuse_ch"
-"357674","2020-05-04 22:51:08","https://toulousa.com/omg/161EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357674/","abuse_ch"
-"357673","2020-05-04 22:51:02","https://toulousa.com/omg/160EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357673/","abuse_ch"
-"357672","2020-05-04 22:50:57","https://toulousa.com/omg/15EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357672/","abuse_ch"
-"357671","2020-05-04 22:50:51","https://toulousa.com/omg/159EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357671/","abuse_ch"
-"357670","2020-05-04 22:50:38","https://toulousa.com/omg/158EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357670/","abuse_ch"
-"357669","2020-05-04 22:50:32","https://toulousa.com/omg/157EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357669/","abuse_ch"
-"357668","2020-05-04 22:50:14","https://toulousa.com/omg/156EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357668/","abuse_ch"
-"357667","2020-05-04 22:50:05","https://toulousa.com/omg/155EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357667/","abuse_ch"
-"357666","2020-05-04 22:49:56","https://toulousa.com/omg/154EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357666/","abuse_ch"
-"357665","2020-05-04 22:49:52","https://toulousa.com/omg/153EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357665/","abuse_ch"
-"357664","2020-05-04 22:49:49","https://toulousa.com/omg/152EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357664/","abuse_ch"
-"357663","2020-05-04 22:49:43","https://toulousa.com/omg/151EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357663/","abuse_ch"
-"357662","2020-05-04 22:49:35","https://toulousa.com/omg/150EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357662/","abuse_ch"
-"357661","2020-05-04 22:49:28","https://toulousa.com/omg/14EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357661/","abuse_ch"
-"357660","2020-05-04 22:49:21","https://toulousa.com/omg/149EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357660/","abuse_ch"
-"357659","2020-05-04 22:49:11","https://toulousa.com/omg/148EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357659/","abuse_ch"
-"357658","2020-05-04 22:49:02","https://toulousa.com/omg/147EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357658/","abuse_ch"
-"357657","2020-05-04 22:48:58","https://toulousa.com/omg/146EYJSFYHMS.exe","online","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357657/","abuse_ch"
-"357656","2020-05-04 22:48:51","https://toulousa.com/omg/145EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357656/","abuse_ch"
-"357655","2020-05-04 22:48:48","https://toulousa.com/omg/144EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357655/","abuse_ch"
-"357654","2020-05-04 22:48:35","https://toulousa.com/omg/143EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357654/","abuse_ch"
-"357653","2020-05-04 22:48:32","https://toulousa.com/omg/142EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357653/","abuse_ch"
-"357652","2020-05-04 22:48:29","https://toulousa.com/omg/141EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357652/","abuse_ch"
-"357651","2020-05-04 22:48:25","https://toulousa.com/omg/140EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357651/","abuse_ch"
-"357650","2020-05-04 22:48:22","https://toulousa.com/omg/13EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357650/","abuse_ch"
-"357649","2020-05-04 22:48:17","https://toulousa.com/omg/139EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357649/","abuse_ch"
-"357648","2020-05-04 22:48:12","https://toulousa.com/omg/138EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357648/","abuse_ch"
-"357647","2020-05-04 22:48:07","https://toulousa.com/omg/137EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357647/","abuse_ch"
-"357646","2020-05-04 22:48:00","https://toulousa.com/omg/136EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357646/","abuse_ch"
-"357645","2020-05-04 22:47:52","https://toulousa.com/omg/135EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357645/","abuse_ch"
-"357644","2020-05-04 22:47:49","https://toulousa.com/omg/134EYJSFYHMS.exe","online","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357644/","abuse_ch"
-"357643","2020-05-04 22:47:46","https://toulousa.com/omg/133EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357643/","abuse_ch"
-"357642","2020-05-04 22:47:43","https://toulousa.com/omg/132EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357642/","abuse_ch"
-"357641","2020-05-04 22:47:39","https://toulousa.com/omg/131EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357641/","abuse_ch"
-"357640","2020-05-04 22:47:37","https://toulousa.com/omg/130EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357640/","abuse_ch"
-"357639","2020-05-04 22:47:32","https://toulousa.com/omg/12EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357639/","abuse_ch"
-"357638","2020-05-04 22:47:25","https://toulousa.com/omg/129EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357638/","abuse_ch"
-"357637","2020-05-04 22:47:22","https://toulousa.com/omg/128EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357637/","abuse_ch"
-"357636","2020-05-04 22:47:18","https://toulousa.com/omg/127EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357636/","abuse_ch"
-"357635","2020-05-04 22:47:13","https://toulousa.com/omg/126EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357635/","abuse_ch"
-"357634","2020-05-04 22:47:09","https://toulousa.com/omg/125EYJSFYHMS.exe","online","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357634/","abuse_ch"
-"357633","2020-05-04 22:47:00","https://toulousa.com/omg/124EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357633/","abuse_ch"
-"357632","2020-05-04 22:46:56","https://toulousa.com/omg/123EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357632/","abuse_ch"
-"357631","2020-05-04 22:46:53","https://toulousa.com/omg/122EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357631/","abuse_ch"
-"357630","2020-05-04 22:46:49","https://toulousa.com/omg/121EYJSFYHMS.exe","online","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357630/","abuse_ch"
-"357629","2020-05-04 22:46:41","https://toulousa.com/omg/120EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357629/","abuse_ch"
-"357628","2020-05-04 22:46:38","https://toulousa.com/omg/11EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357628/","abuse_ch"
-"357627","2020-05-04 22:46:34","https://toulousa.com/omg/119EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357627/","abuse_ch"
-"357626","2020-05-04 22:46:27","https://toulousa.com/omg/118EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357626/","abuse_ch"
-"357625","2020-05-04 22:46:24","https://toulousa.com/omg/117EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357625/","abuse_ch"
-"357624","2020-05-04 22:45:58","https://toulousa.com/omg/116EYJSFYHMS.exe","online","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357624/","abuse_ch"
-"357623","2020-05-04 22:45:47","https://toulousa.com/omg/115EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357623/","abuse_ch"
-"357622","2020-05-04 22:45:44","https://toulousa.com/omg/114EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357622/","abuse_ch"
-"357621","2020-05-04 22:45:39","https://toulousa.com/omg/113EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357621/","abuse_ch"
-"357620","2020-05-04 22:45:33","https://toulousa.com/omg/112EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357620/","abuse_ch"
-"357619","2020-05-04 22:45:29","https://toulousa.com/omg/111EYJSFYHMS.exe","online","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357619/","abuse_ch"
-"357618","2020-05-04 22:45:23","https://toulousa.com/omg/110EYJSFYHMS.exe","online","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357618/","abuse_ch"
-"357617","2020-05-04 22:45:14","https://toulousa.com/omg/10EYJSFYHMS.exe","online","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357617/","abuse_ch"
-"357616","2020-05-04 22:45:10","https://toulousa.com/omg/109EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357616/","abuse_ch"
-"357615","2020-05-04 22:45:07","https://toulousa.com/omg/108EYJSFYHMS.exe","online","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357615/","abuse_ch"
-"357614","2020-05-04 22:44:54","https://toulousa.com/omg/107EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357614/","abuse_ch"
-"357613","2020-05-04 22:44:50","https://toulousa.com/omg/106EYJSFYHMS.exe","online","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357613/","abuse_ch"
-"357612","2020-05-04 22:44:45","https://toulousa.com/omg/105EYJSFYHMS.exe","online","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357612/","abuse_ch"
-"357611","2020-05-04 22:44:41","https://toulousa.com/omg/104EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357611/","abuse_ch"
-"357610","2020-05-04 22:44:31","https://toulousa.com/omg/103EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357610/","abuse_ch"
-"357609","2020-05-04 22:44:27","https://toulousa.com/omg/102EYJSFYHMS.exe","online","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357609/","abuse_ch"
-"357608","2020-05-04 22:44:19","https://toulousa.com/omg/101EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357608/","abuse_ch"
-"357607","2020-05-04 22:44:14","https://toulousa.com/omg/100EYJSFYHMS.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357607/","abuse_ch"
+"357869","2020-05-04 23:07:06","https://toulousa.com/omg/338EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357869/","abuse_ch"
+"357868","2020-05-04 23:07:02","https://toulousa.com/omg/337EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357868/","abuse_ch"
+"357867","2020-05-04 23:07:00","https://toulousa.com/omg/336EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357867/","abuse_ch"
+"357866","2020-05-04 23:06:56","https://toulousa.com/omg/335EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357866/","abuse_ch"
+"357865","2020-05-04 23:06:51","https://toulousa.com/omg/334EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357865/","abuse_ch"
+"357864","2020-05-04 23:06:49","https://toulousa.com/omg/333EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357864/","abuse_ch"
+"357863","2020-05-04 23:06:40","https://toulousa.com/omg/332EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357863/","abuse_ch"
+"357862","2020-05-04 23:06:33","https://toulousa.com/omg/331EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357862/","abuse_ch"
+"357861","2020-05-04 23:06:30","https://toulousa.com/omg/330EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357861/","abuse_ch"
+"357860","2020-05-04 23:06:24","https://toulousa.com/omg/32EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357860/","abuse_ch"
+"357859","2020-05-04 23:06:21","https://toulousa.com/omg/329EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357859/","abuse_ch"
+"357858","2020-05-04 23:06:19","https://toulousa.com/omg/328EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357858/","abuse_ch"
+"357857","2020-05-04 23:06:15","https://toulousa.com/omg/327EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357857/","abuse_ch"
+"357856","2020-05-04 23:06:12","https://toulousa.com/omg/326EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357856/","abuse_ch"
+"357855","2020-05-04 23:06:09","https://toulousa.com/omg/325EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357855/","abuse_ch"
+"357854","2020-05-04 23:06:06","https://toulousa.com/omg/324EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357854/","abuse_ch"
+"357853","2020-05-04 23:06:01","https://toulousa.com/omg/323EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357853/","abuse_ch"
+"357852","2020-05-04 23:05:57","https://toulousa.com/omg/322EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357852/","abuse_ch"
+"357851","2020-05-04 23:05:43","https://toulousa.com/omg/321EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357851/","abuse_ch"
+"357850","2020-05-04 23:05:39","https://toulousa.com/omg/320EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357850/","abuse_ch"
+"357849","2020-05-04 23:05:26","https://toulousa.com/omg/31EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357849/","abuse_ch"
+"357848","2020-05-04 23:05:15","https://toulousa.com/omg/319EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357848/","abuse_ch"
+"357847","2020-05-04 23:05:09","https://toulousa.com/omg/318EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357847/","abuse_ch"
+"357846","2020-05-04 23:05:00","https://toulousa.com/omg/317EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357846/","abuse_ch"
+"357845","2020-05-04 23:04:54","https://toulousa.com/omg/316EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357845/","abuse_ch"
+"357844","2020-05-04 23:04:41","https://toulousa.com/omg/315EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357844/","abuse_ch"
+"357843","2020-05-04 23:04:34","https://toulousa.com/omg/314EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357843/","abuse_ch"
+"357842","2020-05-04 23:04:25","https://toulousa.com/omg/313EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357842/","abuse_ch"
+"357841","2020-05-04 23:04:22","https://toulousa.com/omg/312EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357841/","abuse_ch"
+"357840","2020-05-04 23:04:17","https://toulousa.com/omg/311EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357840/","abuse_ch"
+"357839","2020-05-04 23:04:12","https://toulousa.com/omg/310EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357839/","abuse_ch"
+"357838","2020-05-04 23:04:07","https://toulousa.com/omg/30EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357838/","abuse_ch"
+"357837","2020-05-04 23:04:01","https://toulousa.com/omg/309EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357837/","abuse_ch"
+"357836","2020-05-04 23:03:47","https://toulousa.com/omg/308EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357836/","abuse_ch"
+"357835","2020-05-04 23:03:44","https://toulousa.com/omg/307EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357835/","abuse_ch"
+"357834","2020-05-04 23:03:39","https://toulousa.com/omg/306EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357834/","abuse_ch"
+"357833","2020-05-04 23:03:37","https://toulousa.com/omg/305EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357833/","abuse_ch"
+"357832","2020-05-04 23:03:25","https://toulousa.com/omg/304EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357832/","abuse_ch"
+"357831","2020-05-04 23:03:23","https://toulousa.com/omg/303EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357831/","abuse_ch"
+"357830","2020-05-04 23:03:17","https://toulousa.com/omg/302EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357830/","abuse_ch"
+"357829","2020-05-04 23:02:39","https://toulousa.com/omg/301EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357829/","abuse_ch"
+"357828","2020-05-04 23:02:04","https://toulousa.com/omg/300EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357828/","abuse_ch"
+"357827","2020-05-04 23:01:31","https://toulousa.com/omg/2EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357827/","abuse_ch"
+"357826","2020-05-04 23:00:58","https://toulousa.com/omg/29EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357826/","abuse_ch"
+"357825","2020-05-04 23:00:25","https://toulousa.com/omg/299EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357825/","abuse_ch"
+"357824","2020-05-04 23:00:17","https://toulousa.com/omg/298EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357824/","abuse_ch"
+"357823","2020-05-04 23:00:12","https://toulousa.com/omg/297EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357823/","abuse_ch"
+"357822","2020-05-04 23:00:07","https://toulousa.com/omg/296EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357822/","abuse_ch"
+"357821","2020-05-04 23:00:04","https://toulousa.com/omg/295EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357821/","abuse_ch"
+"357820","2020-05-04 23:00:01","https://toulousa.com/omg/294EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357820/","abuse_ch"
+"357819","2020-05-04 22:59:58","https://toulousa.com/omg/293EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357819/","abuse_ch"
+"357818","2020-05-04 22:59:55","https://toulousa.com/omg/292EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357818/","abuse_ch"
+"357817","2020-05-04 22:59:53","https://toulousa.com/omg/291EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357817/","abuse_ch"
+"357816","2020-05-04 22:59:51","https://toulousa.com/omg/290EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357816/","abuse_ch"
+"357815","2020-05-04 22:59:49","https://toulousa.com/omg/28EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357815/","abuse_ch"
+"357814","2020-05-04 22:59:45","https://toulousa.com/omg/289EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357814/","abuse_ch"
+"357813","2020-05-04 22:59:43","https://toulousa.com/omg/288EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357813/","abuse_ch"
+"357812","2020-05-04 22:59:40","https://toulousa.com/omg/287EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357812/","abuse_ch"
+"357811","2020-05-04 22:59:38","https://toulousa.com/omg/286EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357811/","abuse_ch"
+"357810","2020-05-04 22:59:35","https://toulousa.com/omg/285EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357810/","abuse_ch"
+"357809","2020-05-04 22:59:33","https://toulousa.com/omg/284EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357809/","abuse_ch"
+"357808","2020-05-04 22:59:31","https://toulousa.com/omg/283EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357808/","abuse_ch"
+"357807","2020-05-04 22:59:28","https://toulousa.com/omg/282EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357807/","abuse_ch"
+"357806","2020-05-04 22:59:26","https://toulousa.com/omg/281EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357806/","abuse_ch"
+"357805","2020-05-04 22:59:24","https://toulousa.com/omg/280EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357805/","abuse_ch"
+"357804","2020-05-04 22:59:20","https://toulousa.com/omg/27EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357804/","abuse_ch"
+"357803","2020-05-04 22:59:18","https://toulousa.com/omg/279EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357803/","abuse_ch"
+"357802","2020-05-04 22:59:16","https://toulousa.com/omg/278EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357802/","abuse_ch"
+"357801","2020-05-04 22:59:13","https://toulousa.com/omg/277EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357801/","abuse_ch"
+"357800","2020-05-04 22:59:10","https://toulousa.com/omg/276EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357800/","abuse_ch"
+"357799","2020-05-04 22:59:07","https://toulousa.com/omg/275EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357799/","abuse_ch"
+"357798","2020-05-04 22:59:05","https://toulousa.com/omg/274EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357798/","abuse_ch"
+"357797","2020-05-04 22:59:02","https://toulousa.com/omg/273EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357797/","abuse_ch"
+"357796","2020-05-04 22:59:00","https://toulousa.com/omg/272EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357796/","abuse_ch"
+"357795","2020-05-04 22:58:57","https://toulousa.com/omg/271EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357795/","abuse_ch"
+"357794","2020-05-04 22:58:52","https://toulousa.com/omg/270EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357794/","abuse_ch"
+"357793","2020-05-04 22:58:50","https://toulousa.com/omg/26EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357793/","abuse_ch"
+"357792","2020-05-04 22:58:45","https://toulousa.com/omg/269EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357792/","abuse_ch"
+"357791","2020-05-04 22:58:43","https://toulousa.com/omg/268EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357791/","abuse_ch"
+"357790","2020-05-04 22:58:40","https://toulousa.com/omg/267EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357790/","abuse_ch"
+"357789","2020-05-04 22:58:38","https://toulousa.com/omg/266EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357789/","abuse_ch"
+"357788","2020-05-04 22:58:34","https://toulousa.com/omg/265EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357788/","abuse_ch"
+"357787","2020-05-04 22:58:32","https://toulousa.com/omg/264EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357787/","abuse_ch"
+"357786","2020-05-04 22:58:30","https://toulousa.com/omg/263EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357786/","abuse_ch"
+"357785","2020-05-04 22:58:27","https://toulousa.com/omg/262EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357785/","abuse_ch"
+"357784","2020-05-04 22:58:25","https://toulousa.com/omg/261EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357784/","abuse_ch"
+"357783","2020-05-04 22:58:23","https://toulousa.com/omg/260EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357783/","abuse_ch"
+"357782","2020-05-04 22:58:20","https://toulousa.com/omg/25EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357782/","abuse_ch"
+"357781","2020-05-04 22:58:16","http://tuskanlehdms.ug/az2.exe","offline","malware_download","AZORult,exe","https://urlhaus.abuse.ch/url/357781/","abuse_ch"
+"357780","2020-05-04 22:58:11","https://toulousa.com/omg/259EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357780/","abuse_ch"
+"357779","2020-05-04 22:58:08","https://toulousa.com/omg/258EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357779/","abuse_ch"
+"357778","2020-05-04 22:58:02","https://toulousa.com/omg/257EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357778/","abuse_ch"
+"357777","2020-05-04 22:57:59","https://toulousa.com/omg/256EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357777/","abuse_ch"
+"357776","2020-05-04 22:57:57","https://toulousa.com/omg/255EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357776/","abuse_ch"
+"357775","2020-05-04 22:57:55","https://toulousa.com/omg/254EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357775/","abuse_ch"
+"357774","2020-05-04 22:57:53","https://toulousa.com/omg/253EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357774/","abuse_ch"
+"357773","2020-05-04 22:57:50","https://toulousa.com/omg/252EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357773/","abuse_ch"
+"357772","2020-05-04 22:57:48","https://toulousa.com/omg/251EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357772/","abuse_ch"
+"357771","2020-05-04 22:57:46","https://toulousa.com/omg/250EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357771/","abuse_ch"
+"357770","2020-05-04 22:57:42","https://toulousa.com/omg/24EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357770/","abuse_ch"
+"357769","2020-05-04 22:57:40","https://toulousa.com/omg/249EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357769/","abuse_ch"
+"357768","2020-05-04 22:57:38","https://toulousa.com/omg/247EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357768/","abuse_ch"
+"357767","2020-05-04 22:57:35","https://toulousa.com/omg/246EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357767/","abuse_ch"
+"357766","2020-05-04 22:57:32","https://toulousa.com/omg/245EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357766/","abuse_ch"
+"357765","2020-05-04 22:57:29","https://toulousa.com/omg/244EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357765/","abuse_ch"
+"357764","2020-05-04 22:57:26","https://toulousa.com/omg/243EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357764/","abuse_ch"
+"357763","2020-05-04 22:57:24","https://toulousa.com/omg/242EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357763/","abuse_ch"
+"357762","2020-05-04 22:57:21","https://toulousa.com/omg/241EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357762/","abuse_ch"
+"357761","2020-05-04 22:57:19","https://toulousa.com/omg/240EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357761/","abuse_ch"
+"357760","2020-05-04 22:57:16","https://toulousa.com/omg/23EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357760/","abuse_ch"
+"357759","2020-05-04 22:57:12","https://toulousa.com/omg/239EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357759/","abuse_ch"
+"357758","2020-05-04 22:57:09","https://toulousa.com/omg/238EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357758/","abuse_ch"
+"357757","2020-05-04 22:57:06","https://toulousa.com/omg/237EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357757/","abuse_ch"
+"357756","2020-05-04 22:57:03","https://toulousa.com/omg/236EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357756/","abuse_ch"
+"357755","2020-05-04 22:57:00","https://toulousa.com/omg/235EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357755/","abuse_ch"
+"357754","2020-05-04 22:56:56","https://toulousa.com/omg/234EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357754/","abuse_ch"
+"357753","2020-05-04 22:56:54","https://toulousa.com/omg/233EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357753/","abuse_ch"
+"357752","2020-05-04 22:56:50","https://toulousa.com/omg/232EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357752/","abuse_ch"
+"357751","2020-05-04 22:56:48","https://toulousa.com/omg/231EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357751/","abuse_ch"
+"357750","2020-05-04 22:56:45","https://toulousa.com/omg/230EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357750/","abuse_ch"
+"357749","2020-05-04 22:56:41","https://toulousa.com/omg/22EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357749/","abuse_ch"
+"357748","2020-05-04 22:56:38","https://toulousa.com/omg/229EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357748/","abuse_ch"
+"357747","2020-05-04 22:56:36","https://toulousa.com/omg/228EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357747/","abuse_ch"
+"357746","2020-05-04 22:56:33","https://toulousa.com/omg/227EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357746/","abuse_ch"
+"357745","2020-05-04 22:56:31","https://toulousa.com/omg/226EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357745/","abuse_ch"
+"357744","2020-05-04 22:56:28","https://toulousa.com/omg/225EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357744/","abuse_ch"
+"357743","2020-05-04 22:56:25","https://toulousa.com/omg/224EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357743/","abuse_ch"
+"357742","2020-05-04 22:56:23","https://toulousa.com/omg/223EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357742/","abuse_ch"
+"357741","2020-05-04 22:56:19","https://toulousa.com/omg/222EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357741/","abuse_ch"
+"357740","2020-05-04 22:56:15","https://toulousa.com/omg/221EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357740/","abuse_ch"
+"357739","2020-05-04 22:56:11","https://toulousa.com/omg/220EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357739/","abuse_ch"
+"357738","2020-05-04 22:56:07","https://toulousa.com/omg/21EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357738/","abuse_ch"
+"357737","2020-05-04 22:56:02","https://toulousa.com/omg/219EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357737/","abuse_ch"
+"357736","2020-05-04 22:55:59","https://toulousa.com/omg/218EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357736/","abuse_ch"
+"357735","2020-05-04 22:55:56","https://toulousa.com/omg/217EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357735/","abuse_ch"
+"357734","2020-05-04 22:55:53","https://toulousa.com/omg/216EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357734/","abuse_ch"
+"357733","2020-05-04 22:55:51","https://toulousa.com/omg/214EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357733/","abuse_ch"
+"357732","2020-05-04 22:55:47","https://toulousa.com/omg/213EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357732/","abuse_ch"
+"357731","2020-05-04 22:55:44","https://toulousa.com/omg/212EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357731/","abuse_ch"
+"357730","2020-05-04 22:55:42","https://toulousa.com/omg/211EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357730/","abuse_ch"
+"357729","2020-05-04 22:55:37","https://toulousa.com/omg/210EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357729/","abuse_ch"
+"357728","2020-05-04 22:55:34","https://toulousa.com/omg/20EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357728/","abuse_ch"
+"357727","2020-05-04 22:55:06","https://toulousa.com/omg/209EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357727/","abuse_ch"
+"357726","2020-05-04 22:55:03","https://toulousa.com/omg/208EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357726/","abuse_ch"
+"357725","2020-05-04 22:54:57","https://toulousa.com/omg/207EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357725/","abuse_ch"
+"357724","2020-05-04 22:54:55","https://toulousa.com/omg/206EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357724/","abuse_ch"
+"357723","2020-05-04 22:54:52","https://toulousa.com/omg/205EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357723/","abuse_ch"
+"357722","2020-05-04 22:54:47","https://toulousa.com/omg/204EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357722/","abuse_ch"
+"357721","2020-05-04 22:54:44","https://toulousa.com/omg/203EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357721/","abuse_ch"
+"357720","2020-05-04 22:54:41","https://toulousa.com/omg/202EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357720/","abuse_ch"
+"357719","2020-05-04 22:54:38","https://toulousa.com/omg/201EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357719/","abuse_ch"
+"357718","2020-05-04 22:54:33","https://toulousa.com/omg/200EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357718/","abuse_ch"
+"357717","2020-05-04 22:54:30","https://toulousa.com/omg/1EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357717/","abuse_ch"
+"357716","2020-05-04 22:54:25","https://toulousa.com/omg/19EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357716/","abuse_ch"
+"357715","2020-05-04 22:54:21","https://toulousa.com/omg/199EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357715/","abuse_ch"
+"357714","2020-05-04 22:54:18","https://toulousa.com/omg/198EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357714/","abuse_ch"
+"357713","2020-05-04 22:54:15","https://toulousa.com/omg/197EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357713/","abuse_ch"
+"357712","2020-05-04 22:54:10","https://toulousa.com/omg/196EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357712/","abuse_ch"
+"357711","2020-05-04 22:54:06","https://toulousa.com/omg/195EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357711/","abuse_ch"
+"357710","2020-05-04 22:53:58","https://toulousa.com/omg/194EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357710/","abuse_ch"
+"357709","2020-05-04 22:53:55","https://toulousa.com/omg/193EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357709/","abuse_ch"
+"357708","2020-05-04 22:53:51","https://toulousa.com/omg/192EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357708/","abuse_ch"
+"357707","2020-05-04 22:53:48","https://toulousa.com/omg/191EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357707/","abuse_ch"
+"357706","2020-05-04 22:53:43","https://toulousa.com/omg/190EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357706/","abuse_ch"
+"357705","2020-05-04 22:53:39","https://toulousa.com/omg/18EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357705/","abuse_ch"
+"357704","2020-05-04 22:53:34","https://toulousa.com/omg/189EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357704/","abuse_ch"
+"357703","2020-05-04 22:53:31","https://toulousa.com/omg/188EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357703/","abuse_ch"
+"357702","2020-05-04 22:53:26","https://toulousa.com/omg/187EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357702/","abuse_ch"
+"357701","2020-05-04 22:53:23","https://toulousa.com/omg/186EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357701/","abuse_ch"
+"357700","2020-05-04 22:53:18","https://toulousa.com/omg/185EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357700/","abuse_ch"
+"357699","2020-05-04 22:53:14","https://toulousa.com/omg/184EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357699/","abuse_ch"
+"357698","2020-05-04 22:53:11","https://toulousa.com/omg/183EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357698/","abuse_ch"
+"357697","2020-05-04 22:53:06","https://toulousa.com/omg/182EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357697/","abuse_ch"
+"357696","2020-05-04 22:53:02","https://toulousa.com/omg/181EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357696/","abuse_ch"
+"357695","2020-05-04 22:52:59","https://toulousa.com/omg/180EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357695/","abuse_ch"
+"357694","2020-05-04 22:52:54","https://toulousa.com/omg/17EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357694/","abuse_ch"
+"357693","2020-05-04 22:52:49","https://toulousa.com/omg/179EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357693/","abuse_ch"
+"357692","2020-05-04 22:52:46","https://toulousa.com/omg/178EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357692/","abuse_ch"
+"357691","2020-05-04 22:52:39","https://toulousa.com/omg/177EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357691/","abuse_ch"
+"357690","2020-05-04 22:52:36","https://toulousa.com/omg/176EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357690/","abuse_ch"
+"357689","2020-05-04 22:52:31","https://toulousa.com/omg/175EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357689/","abuse_ch"
+"357688","2020-05-04 22:52:28","https://toulousa.com/omg/174EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357688/","abuse_ch"
+"357687","2020-05-04 22:52:24","https://toulousa.com/omg/173EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357687/","abuse_ch"
+"357686","2020-05-04 22:52:20","https://toulousa.com/omg/172EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357686/","abuse_ch"
+"357685","2020-05-04 22:52:16","https://toulousa.com/omg/171EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357685/","abuse_ch"
+"357684","2020-05-04 22:52:12","https://toulousa.com/omg/170EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357684/","abuse_ch"
+"357683","2020-05-04 22:52:08","https://toulousa.com/omg/16EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357683/","abuse_ch"
+"357682","2020-05-04 22:52:04","https://toulousa.com/omg/169EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357682/","abuse_ch"
+"357681","2020-05-04 22:52:00","https://toulousa.com/omg/168EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357681/","abuse_ch"
+"357680","2020-05-04 22:51:47","https://toulousa.com/omg/167EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357680/","abuse_ch"
+"357679","2020-05-04 22:51:42","https://toulousa.com/omg/166EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357679/","abuse_ch"
+"357678","2020-05-04 22:51:35","https://toulousa.com/omg/165EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357678/","abuse_ch"
+"357677","2020-05-04 22:51:29","https://toulousa.com/omg/164EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357677/","abuse_ch"
+"357676","2020-05-04 22:51:23","https://toulousa.com/omg/163EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357676/","abuse_ch"
+"357675","2020-05-04 22:51:16","https://toulousa.com/omg/162EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357675/","abuse_ch"
+"357674","2020-05-04 22:51:08","https://toulousa.com/omg/161EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357674/","abuse_ch"
+"357673","2020-05-04 22:51:02","https://toulousa.com/omg/160EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357673/","abuse_ch"
+"357672","2020-05-04 22:50:57","https://toulousa.com/omg/15EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357672/","abuse_ch"
+"357671","2020-05-04 22:50:51","https://toulousa.com/omg/159EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357671/","abuse_ch"
+"357670","2020-05-04 22:50:38","https://toulousa.com/omg/158EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357670/","abuse_ch"
+"357669","2020-05-04 22:50:32","https://toulousa.com/omg/157EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357669/","abuse_ch"
+"357668","2020-05-04 22:50:14","https://toulousa.com/omg/156EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357668/","abuse_ch"
+"357667","2020-05-04 22:50:05","https://toulousa.com/omg/155EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357667/","abuse_ch"
+"357666","2020-05-04 22:49:56","https://toulousa.com/omg/154EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357666/","abuse_ch"
+"357665","2020-05-04 22:49:52","https://toulousa.com/omg/153EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357665/","abuse_ch"
+"357664","2020-05-04 22:49:49","https://toulousa.com/omg/152EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357664/","abuse_ch"
+"357663","2020-05-04 22:49:43","https://toulousa.com/omg/151EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357663/","abuse_ch"
+"357662","2020-05-04 22:49:35","https://toulousa.com/omg/150EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357662/","abuse_ch"
+"357661","2020-05-04 22:49:28","https://toulousa.com/omg/14EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357661/","abuse_ch"
+"357660","2020-05-04 22:49:21","https://toulousa.com/omg/149EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357660/","abuse_ch"
+"357659","2020-05-04 22:49:11","https://toulousa.com/omg/148EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357659/","abuse_ch"
+"357658","2020-05-04 22:49:02","https://toulousa.com/omg/147EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357658/","abuse_ch"
+"357657","2020-05-04 22:48:58","https://toulousa.com/omg/146EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357657/","abuse_ch"
+"357656","2020-05-04 22:48:51","https://toulousa.com/omg/145EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357656/","abuse_ch"
+"357655","2020-05-04 22:48:48","https://toulousa.com/omg/144EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357655/","abuse_ch"
+"357654","2020-05-04 22:48:35","https://toulousa.com/omg/143EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357654/","abuse_ch"
+"357653","2020-05-04 22:48:32","https://toulousa.com/omg/142EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357653/","abuse_ch"
+"357652","2020-05-04 22:48:29","https://toulousa.com/omg/141EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357652/","abuse_ch"
+"357651","2020-05-04 22:48:25","https://toulousa.com/omg/140EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357651/","abuse_ch"
+"357650","2020-05-04 22:48:22","https://toulousa.com/omg/13EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357650/","abuse_ch"
+"357649","2020-05-04 22:48:17","https://toulousa.com/omg/139EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357649/","abuse_ch"
+"357648","2020-05-04 22:48:12","https://toulousa.com/omg/138EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357648/","abuse_ch"
+"357647","2020-05-04 22:48:07","https://toulousa.com/omg/137EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357647/","abuse_ch"
+"357646","2020-05-04 22:48:00","https://toulousa.com/omg/136EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357646/","abuse_ch"
+"357645","2020-05-04 22:47:52","https://toulousa.com/omg/135EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357645/","abuse_ch"
+"357644","2020-05-04 22:47:49","https://toulousa.com/omg/134EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357644/","abuse_ch"
+"357643","2020-05-04 22:47:46","https://toulousa.com/omg/133EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357643/","abuse_ch"
+"357642","2020-05-04 22:47:43","https://toulousa.com/omg/132EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357642/","abuse_ch"
+"357641","2020-05-04 22:47:39","https://toulousa.com/omg/131EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357641/","abuse_ch"
+"357640","2020-05-04 22:47:37","https://toulousa.com/omg/130EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357640/","abuse_ch"
+"357639","2020-05-04 22:47:32","https://toulousa.com/omg/12EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357639/","abuse_ch"
+"357638","2020-05-04 22:47:25","https://toulousa.com/omg/129EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357638/","abuse_ch"
+"357637","2020-05-04 22:47:22","https://toulousa.com/omg/128EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357637/","abuse_ch"
+"357636","2020-05-04 22:47:18","https://toulousa.com/omg/127EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357636/","abuse_ch"
+"357635","2020-05-04 22:47:13","https://toulousa.com/omg/126EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357635/","abuse_ch"
+"357634","2020-05-04 22:47:09","https://toulousa.com/omg/125EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357634/","abuse_ch"
+"357633","2020-05-04 22:47:00","https://toulousa.com/omg/124EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357633/","abuse_ch"
+"357632","2020-05-04 22:46:56","https://toulousa.com/omg/123EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357632/","abuse_ch"
+"357631","2020-05-04 22:46:53","https://toulousa.com/omg/122EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357631/","abuse_ch"
+"357630","2020-05-04 22:46:49","https://toulousa.com/omg/121EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357630/","abuse_ch"
+"357629","2020-05-04 22:46:41","https://toulousa.com/omg/120EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357629/","abuse_ch"
+"357628","2020-05-04 22:46:38","https://toulousa.com/omg/11EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357628/","abuse_ch"
+"357627","2020-05-04 22:46:34","https://toulousa.com/omg/119EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357627/","abuse_ch"
+"357626","2020-05-04 22:46:27","https://toulousa.com/omg/118EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357626/","abuse_ch"
+"357625","2020-05-04 22:46:24","https://toulousa.com/omg/117EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357625/","abuse_ch"
+"357624","2020-05-04 22:45:58","https://toulousa.com/omg/116EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357624/","abuse_ch"
+"357623","2020-05-04 22:45:47","https://toulousa.com/omg/115EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357623/","abuse_ch"
+"357622","2020-05-04 22:45:44","https://toulousa.com/omg/114EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357622/","abuse_ch"
+"357621","2020-05-04 22:45:39","https://toulousa.com/omg/113EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357621/","abuse_ch"
+"357620","2020-05-04 22:45:33","https://toulousa.com/omg/112EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357620/","abuse_ch"
+"357619","2020-05-04 22:45:29","https://toulousa.com/omg/111EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357619/","abuse_ch"
+"357618","2020-05-04 22:45:23","https://toulousa.com/omg/110EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357618/","abuse_ch"
+"357617","2020-05-04 22:45:14","https://toulousa.com/omg/10EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357617/","abuse_ch"
+"357616","2020-05-04 22:45:10","https://toulousa.com/omg/109EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357616/","abuse_ch"
+"357615","2020-05-04 22:45:07","https://toulousa.com/omg/108EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357615/","abuse_ch"
+"357614","2020-05-04 22:44:54","https://toulousa.com/omg/107EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357614/","abuse_ch"
+"357613","2020-05-04 22:44:50","https://toulousa.com/omg/106EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357613/","abuse_ch"
+"357612","2020-05-04 22:44:45","https://toulousa.com/omg/105EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357612/","abuse_ch"
+"357611","2020-05-04 22:44:41","https://toulousa.com/omg/104EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357611/","abuse_ch"
+"357610","2020-05-04 22:44:31","https://toulousa.com/omg/103EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357610/","abuse_ch"
+"357609","2020-05-04 22:44:27","https://toulousa.com/omg/102EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357609/","abuse_ch"
+"357608","2020-05-04 22:44:19","https://toulousa.com/omg/101EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357608/","abuse_ch"
+"357607","2020-05-04 22:44:14","https://toulousa.com/omg/100EYJSFYHMS.exe","offline","malware_download","exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/357607/","abuse_ch"
 "357606","2020-05-04 22:44:10","https://pastebin.com/raw/wpENUHt2","offline","malware_download","None","https://urlhaus.abuse.ch/url/357606/","JayTHL"
 "357605","2020-05-04 22:44:08","https://pastebin.com/raw/KFkPq0L7","offline","malware_download","None","https://urlhaus.abuse.ch/url/357605/","JayTHL"
 "357604","2020-05-04 22:44:05","https://pastebin.com/raw/e0ChHPzi","offline","malware_download","None","https://urlhaus.abuse.ch/url/357604/","JayTHL"
@@ -553,22 +778,22 @@
 "357600","2020-05-04 22:43:47","https://pastebin.com/raw/2awwS2uK","offline","malware_download","None","https://urlhaus.abuse.ch/url/357600/","JayTHL"
 "357599","2020-05-04 22:43:42","https://pastebin.com/raw/1Y1MgC5b","offline","malware_download","None","https://urlhaus.abuse.ch/url/357599/","JayTHL"
 "357598","2020-05-04 22:43:39","http://archivelviv.gov.ua/wp-content/uploads/2020/05/xjkchfsegik/14892/ServiceContractAgreement_14892_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357598/","spamhaus"
-"357597","2020-05-04 22:43:35","http://185.172.110.208/bins/UnHAnaAW.mips","offline","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/357597/","Gandylyan1"
-"357596","2020-05-04 22:43:05","http://spdtextile.com/sclas/814Cl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357596/","abuse_ch"
-"357595","2020-05-04 22:43:01","http://spdtextile.com/sclas/797Cl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357595/","abuse_ch"
+"357597","2020-05-04 22:43:35","http://185.172.110.208/bins/UnHAnaAW.mips","online","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/357597/","Gandylyan1"
+"357596","2020-05-04 22:43:05","http://spdtextile.com/sclas/814Cl1.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357596/","abuse_ch"
+"357595","2020-05-04 22:43:01","http://spdtextile.com/sclas/797Cl1.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357595/","abuse_ch"
 "357594","2020-05-04 22:42:57","http://spdtextile.com/sclas/788Cl1.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357594/","abuse_ch"
-"357593","2020-05-04 22:42:54","http://spdtextile.com/sclas/784Cl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357593/","abuse_ch"
+"357593","2020-05-04 22:42:54","http://spdtextile.com/sclas/784Cl1.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357593/","abuse_ch"
 "357592","2020-05-04 22:42:51","http://spdtextile.com/sclas/774Cl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357592/","abuse_ch"
-"357591","2020-05-04 22:42:47","http://spdtextile.com/sclas/56Bl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357591/","abuse_ch"
+"357591","2020-05-04 22:42:47","http://spdtextile.com/sclas/56Bl2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357591/","abuse_ch"
 "357590","2020-05-04 22:42:41","http://spdtextile.com/sclas/54l1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357590/","abuse_ch"
 "357589","2020-05-04 22:42:39","http://spdtextile.com/sclas/50Bl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357589/","abuse_ch"
 "357588","2020-05-04 22:42:36","http://spdtextile.com/sclas/38l1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357588/","abuse_ch"
 "357587","2020-05-04 22:42:34","http://spdtextile.com/sclas/36Bl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357587/","abuse_ch"
-"357586","2020-05-04 22:42:30","http://spdtextile.com/sclas/35Bl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357586/","abuse_ch"
-"357585","2020-05-04 22:42:27","http://185.172.110.208/bins/UnHAnaAW.mpsl","offline","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/357585/","Gandylyan1"
+"357586","2020-05-04 22:42:30","http://spdtextile.com/sclas/35Bl2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357586/","abuse_ch"
+"357585","2020-05-04 22:42:27","http://185.172.110.208/bins/UnHAnaAW.mpsl","online","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/357585/","Gandylyan1"
 "357584","2020-05-04 22:41:56","http://spdtextile.com/sclas/28Bl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357584/","abuse_ch"
 "357583","2020-05-04 22:41:55","http://spdtextile.com/sclas/27l1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357583/","abuse_ch"
-"357582","2020-05-04 22:41:51","http://spdtextile.com/sclas/25Bl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357582/","abuse_ch"
+"357582","2020-05-04 22:41:51","http://spdtextile.com/sclas/25Bl2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357582/","abuse_ch"
 "357581","2020-05-04 22:41:49","http://spdtextile.com/sclas/16l1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357581/","abuse_ch"
 "357580","2020-05-04 22:41:48","http://spdtextile.com/sclas/16Bl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357580/","abuse_ch"
 "357579","2020-05-04 22:41:46","http://spdtextile.com/sclas/145Bl2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357579/","abuse_ch"
@@ -581,7 +806,7 @@
 "357572","2020-05-04 22:41:20","http://spdtextile.com/sclas/112Bl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357572/","abuse_ch"
 "357571","2020-05-04 22:41:15","http://spdtextile.com/sclas/10Bl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357571/","abuse_ch"
 "357570","2020-05-04 22:41:13","http://spdtextile.com/sclas/100l1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357570/","abuse_ch"
-"357569","2020-05-04 22:41:11","http://spdtextile.com/sclas/rockstar.php","online","malware_download","exe","https://urlhaus.abuse.ch/url/357569/","abuse_ch"
+"357569","2020-05-04 22:41:11","http://spdtextile.com/sclas/rockstar.php","offline","malware_download","exe,IcedID","https://urlhaus.abuse.ch/url/357569/","abuse_ch"
 "357568","2020-05-04 22:41:07","http://200.116.110.36:11577/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/357568/","geenensp"
 "357567","2020-05-04 22:41:03","http://anuragsharma.co.in/tjvkpdmcnkxf/852935/ServiceContractAgreement_852935_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357567/","spamhaus"
 "357566","2020-05-04 22:41:00","https://pastebin.com/raw/UNrESCQv","offline","malware_download","None","https://urlhaus.abuse.ch/url/357566/","JayTHL"
@@ -593,51 +818,51 @@
 "357560","2020-05-04 22:40:39","http://theclinicabarros.com/ab.jpg","offline","malware_download","powershell","https://urlhaus.abuse.ch/url/357560/","abuse_ch"
 "357559","2020-05-04 22:40:36","https://pastebin.com/raw/csKfTK3E","offline","malware_download","None","https://urlhaus.abuse.ch/url/357559/","JayTHL"
 "357558","2020-05-04 22:40:12","https://tomorrowearth.net/wp-content/uploads/2020/05/inenzr/ServiceContractAgreement_06514_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357558/","spamhaus"
-"357557","2020-05-04 22:39:43","https://spdtextile.com/sport/9Bl1.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357557/","abuse_ch"
-"357556","2020-05-04 22:39:40","https://spdtextile.com/sport/99Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357556/","abuse_ch"
+"357557","2020-05-04 22:39:43","https://spdtextile.com/sport/9Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357557/","abuse_ch"
+"357556","2020-05-04 22:39:40","https://spdtextile.com/sport/99Bl1.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357556/","abuse_ch"
 "357555","2020-05-04 22:39:38","https://spdtextile.com/sport/98Bl1.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357555/","abuse_ch"
-"357554","2020-05-04 22:39:34","https://spdtextile.com/sport/97Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357554/","abuse_ch"
-"357553","2020-05-04 22:39:29","https://spdtextile.com/sport/96Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357553/","abuse_ch"
-"357552","2020-05-04 22:39:20","https://spdtextile.com/sport/94Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357552/","abuse_ch"
-"357551","2020-05-04 22:39:15","https://spdtextile.com/sport/93Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357551/","abuse_ch"
-"357550","2020-05-04 22:38:58","https://spdtextile.com/sport/92Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357550/","abuse_ch"
-"357549","2020-05-04 22:38:53","https://spdtextile.com/sport/91Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357549/","abuse_ch"
+"357554","2020-05-04 22:39:34","https://spdtextile.com/sport/97Bl1.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357554/","abuse_ch"
+"357553","2020-05-04 22:39:29","https://spdtextile.com/sport/96Bl1.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357553/","abuse_ch"
+"357552","2020-05-04 22:39:20","https://spdtextile.com/sport/94Bl1.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357552/","abuse_ch"
+"357551","2020-05-04 22:39:15","https://spdtextile.com/sport/93Bl1.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357551/","abuse_ch"
+"357550","2020-05-04 22:38:58","https://spdtextile.com/sport/92Bl1.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357550/","abuse_ch"
+"357549","2020-05-04 22:38:53","https://spdtextile.com/sport/91Bl1.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357549/","abuse_ch"
 "357548","2020-05-04 22:38:47","https://spdtextile.com/sport/8Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357548/","abuse_ch"
-"357547","2020-05-04 22:38:37","https://spdtextile.com/sport/89Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357547/","abuse_ch"
+"357547","2020-05-04 22:38:37","https://spdtextile.com/sport/89Bl1.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357547/","abuse_ch"
 "357546","2020-05-04 22:38:32","https://spdtextile.com/sport/87Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357546/","abuse_ch"
 "357545","2020-05-04 22:38:29","https://spdtextile.com/sport/85Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357545/","abuse_ch"
 "357544","2020-05-04 22:38:25","https://spdtextile.com/sport/84Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357544/","abuse_ch"
 "357543","2020-05-04 22:38:23","https://spdtextile.com/sport/83Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357543/","abuse_ch"
-"357542","2020-05-04 22:38:18","https://spdtextile.com/sport/82Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357542/","abuse_ch"
-"357541","2020-05-04 22:38:14","https://spdtextile.com/sport/81l2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357541/","abuse_ch"
+"357542","2020-05-04 22:38:18","https://spdtextile.com/sport/82Bl1.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357542/","abuse_ch"
+"357541","2020-05-04 22:38:14","https://spdtextile.com/sport/81l2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357541/","abuse_ch"
 "357540","2020-05-04 22:38:13","https://spdtextile.com/sport/81Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357540/","abuse_ch"
-"357539","2020-05-04 22:38:10","https://spdtextile.com/sport/7Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357539/","abuse_ch"
+"357539","2020-05-04 22:38:10","https://spdtextile.com/sport/7Bl1.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357539/","abuse_ch"
 "357538","2020-05-04 22:38:07","https://spdtextile.com/sport/78Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357538/","abuse_ch"
 "357537","2020-05-04 22:38:03","https://spdtextile.com/sport/77Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357537/","abuse_ch"
 "357536","2020-05-04 22:38:02","https://spdtextile.com/sport/76l2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357536/","abuse_ch"
 "357535","2020-05-04 22:37:59","https://spdtextile.com/sport/76Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357535/","abuse_ch"
 "357534","2020-05-04 22:37:57","https://spdtextile.com/sport/75l2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357534/","abuse_ch"
-"357533","2020-05-04 22:37:53","https://spdtextile.com/sport/74Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357533/","abuse_ch"
+"357533","2020-05-04 22:37:53","https://spdtextile.com/sport/74Bl1.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357533/","abuse_ch"
 "357532","2020-05-04 22:37:50","https://spdtextile.com/sport/73Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357532/","abuse_ch"
 "357531","2020-05-04 22:37:45","https://spdtextile.com/sport/72Bl1.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357531/","abuse_ch"
 "357530","2020-05-04 22:37:43","https://spdtextile.com/sport/71Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357530/","abuse_ch"
 "357529","2020-05-04 22:37:39","https://spdtextile.com/sport/70l2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357529/","abuse_ch"
 "357528","2020-05-04 22:37:32","https://spdtextile.com/sport/70Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357528/","abuse_ch"
 "357527","2020-05-04 22:37:15","https://spdtextile.com/sport/6Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357527/","abuse_ch"
-"357526","2020-05-04 22:37:11","https://prabhuandsons.com/wp-content/uploads/2020/05/ttmyf/ServiceContractAgreement_3343195_05012020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357526/","spamhaus"
+"357526","2020-05-04 22:37:11","https://prabhuandsons.com/wp-content/uploads/2020/05/ttmyf/ServiceContractAgreement_3343195_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357526/","spamhaus"
 "357525","2020-05-04 22:37:08","https://spdtextile.com/sport/68l2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357525/","abuse_ch"
 "357524","2020-05-04 22:36:54","https://spdtextile.com/sport/67Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357524/","abuse_ch"
-"357523","2020-05-04 22:36:37","https://spdtextile.com/sport/66Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357523/","abuse_ch"
+"357523","2020-05-04 22:36:37","https://spdtextile.com/sport/66Bl1.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357523/","abuse_ch"
 "357522","2020-05-04 22:36:30","https://spdtextile.com/sport/65Bl1.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357522/","abuse_ch"
-"357521","2020-05-04 22:36:24","https://spdtextile.com/sport/64l2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357521/","abuse_ch"
+"357521","2020-05-04 22:36:24","https://spdtextile.com/sport/64l2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357521/","abuse_ch"
 "357520","2020-05-04 22:36:22","https://spdtextile.com/sport/64Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357520/","abuse_ch"
 "357519","2020-05-04 22:36:12","https://spdtextile.com/sport/63l2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357519/","abuse_ch"
 "357518","2020-05-04 22:36:09","https://spdtextile.com/sport/63Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357518/","abuse_ch"
 "357517","2020-05-04 22:35:45","https://spdtextile.com/sport/62l2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357517/","abuse_ch"
 "357516","2020-05-04 22:35:42","https://spdtextile.com/sport/61l2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357516/","abuse_ch"
-"357515","2020-05-04 22:35:37","https://spdtextile.com/sport/61Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357515/","abuse_ch"
+"357515","2020-05-04 22:35:37","https://spdtextile.com/sport/61Bl1.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357515/","abuse_ch"
 "357514","2020-05-04 22:35:24","https://spdtextile.com/sport/5Bl1.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357514/","abuse_ch"
-"357513","2020-05-04 22:35:15","https://spdtextile.com/sport/59Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357513/","abuse_ch"
+"357513","2020-05-04 22:35:15","https://spdtextile.com/sport/59Bl1.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357513/","abuse_ch"
 "357512","2020-05-04 22:35:05","https://spdtextile.com/sport/58Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357512/","abuse_ch"
 "357511","2020-05-04 22:35:02","https://spdtextile.com/sport/57l2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357511/","abuse_ch"
 "357510","2020-05-04 22:35:00","https://spdtextile.com/sport/57Bl1.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357510/","abuse_ch"
@@ -650,59 +875,59 @@
 "357503","2020-05-04 22:34:26","https://spdtextile.com/sport/51Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357503/","abuse_ch"
 "357502","2020-05-04 22:34:23","https://spdtextile.com/sport/49Bl1.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357502/","abuse_ch"
 "357501","2020-05-04 22:34:20","https://spdtextile.com/sport/499Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357501/","abuse_ch"
-"357500","2020-05-04 22:34:19","https://spdtextile.com/sport/498Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357500/","abuse_ch"
+"357500","2020-05-04 22:34:19","https://spdtextile.com/sport/498Cl2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357500/","abuse_ch"
 "357499","2020-05-04 22:34:14","https://spdtextile.com/sport/48l2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357499/","abuse_ch"
 "357498","2020-05-04 22:34:12","https://spdtextile.com/sport/488Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357498/","abuse_ch"
 "357497","2020-05-04 22:34:10","https://spdtextile.com/sport/47Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357497/","abuse_ch"
-"357496","2020-05-04 22:34:05","https://spdtextile.com/sport/46l2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357496/","abuse_ch"
+"357496","2020-05-04 22:34:05","https://spdtextile.com/sport/46l2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357496/","abuse_ch"
 "357495","2020-05-04 22:34:02","https://spdtextile.com/sport/45Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357495/","abuse_ch"
 "357494","2020-05-04 22:34:00","https://spdtextile.com/sport/444Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357494/","abuse_ch"
 "357493","2020-05-04 22:33:57","https://spdtextile.com/sport/43l2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357493/","abuse_ch"
-"357492","2020-05-04 22:33:53","https://spdtextile.com/sport/43Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357492/","abuse_ch"
+"357492","2020-05-04 22:33:53","https://spdtextile.com/sport/43Bl1.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357492/","abuse_ch"
 "357491","2020-05-04 22:33:50","https://spdtextile.com/sport/42l2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357491/","abuse_ch"
 "357490","2020-05-04 22:33:48","https://spdtextile.com/sport/41Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357490/","abuse_ch"
 "357489","2020-05-04 22:33:45","https://spdtextile.com/sport/40l2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357489/","abuse_ch"
 "357488","2020-05-04 22:33:42","https://spdtextile.com/sport/40Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357488/","abuse_ch"
-"357487","2020-05-04 22:33:39","https://spdtextile.com/sport/3Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357487/","abuse_ch"
+"357487","2020-05-04 22:33:39","https://spdtextile.com/sport/3Bl1.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357487/","abuse_ch"
 "357486","2020-05-04 22:33:36","https://spdtextile.com/sport/39l2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357486/","abuse_ch"
-"357485","2020-05-04 22:33:31","https://spdtextile.com/sport/39Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357485/","abuse_ch"
+"357485","2020-05-04 22:33:31","https://spdtextile.com/sport/39Bl1.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357485/","abuse_ch"
 "357484","2020-05-04 22:33:26","https://spdtextile.com/sport/38l2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357484/","abuse_ch"
 "357483","2020-05-04 22:33:24","https://spdtextile.com/sport/37l2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357483/","abuse_ch"
 "357482","2020-05-04 22:33:08","https://spdtextile.com/sport/37Bl1.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357482/","abuse_ch"
-"357481","2020-05-04 22:32:33","https://spdtextile.com/sport/36Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357481/","abuse_ch"
+"357481","2020-05-04 22:32:33","https://spdtextile.com/sport/36Bl1.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357481/","abuse_ch"
 "357480","2020-05-04 22:32:00","https://spdtextile.com/sport/35Bl1.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357480/","abuse_ch"
 "357479","2020-05-04 22:31:28","https://spdtextile.com/sport/34l2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357479/","abuse_ch"
 "357478","2020-05-04 22:30:56","https://spdtextile.com/sport/34Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357478/","abuse_ch"
 "357477","2020-05-04 22:30:09","https://spdtextile.com/sport/33Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357477/","abuse_ch"
 "357476","2020-05-04 22:29:34","https://spdtextile.com/sport/32l2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357476/","abuse_ch"
-"357475","2020-05-04 22:29:02","https://spdtextile.com/sport/32Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357475/","abuse_ch"
-"357474","2020-05-04 22:28:29","https://spdtextile.com/sport/30Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357474/","abuse_ch"
-"357473","2020-05-04 22:27:54","https://spdtextile.com/sport/2l2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357473/","abuse_ch"
+"357475","2020-05-04 22:29:02","https://spdtextile.com/sport/32Bl1.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357475/","abuse_ch"
+"357474","2020-05-04 22:28:29","https://spdtextile.com/sport/30Bl1.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357474/","abuse_ch"
+"357473","2020-05-04 22:27:54","https://spdtextile.com/sport/2l2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357473/","abuse_ch"
 "357472","2020-05-04 22:27:22","https://spdtextile.com/sport/2Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357472/","abuse_ch"
 "357471","2020-05-04 22:26:49","https://spdtextile.com/sport/29Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357471/","abuse_ch"
-"357470","2020-05-04 22:26:16","https://spdtextile.com/sport/28Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357470/","abuse_ch"
-"357469","2020-05-04 22:25:40","https://spdtextile.com/sport/26Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357469/","abuse_ch"
+"357470","2020-05-04 22:26:16","https://spdtextile.com/sport/28Bl1.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357470/","abuse_ch"
+"357469","2020-05-04 22:25:40","https://spdtextile.com/sport/26Bl1.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357469/","abuse_ch"
 "357468","2020-05-04 22:25:05","https://spdtextile.com/sport/25Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357468/","abuse_ch"
 "357467","2020-05-04 22:24:33","https://spdtextile.com/sport/23l2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357467/","abuse_ch"
-"357466","2020-05-04 22:24:00","https://spdtextile.com/sport/200Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357466/","abuse_ch"
-"357465","2020-05-04 22:23:28","https://spdtextile.com/sport/1Bl1.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357465/","abuse_ch"
+"357466","2020-05-04 22:24:00","https://spdtextile.com/sport/200Cl2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357466/","abuse_ch"
+"357465","2020-05-04 22:23:28","https://spdtextile.com/sport/1Bl1.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357465/","abuse_ch"
 "357464","2020-05-04 22:22:54","https://spdtextile.com/sport/19l2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357464/","abuse_ch"
-"357463","2020-05-04 22:22:22","https://spdtextile.com/sport/198Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357463/","abuse_ch"
+"357463","2020-05-04 22:22:22","https://spdtextile.com/sport/198Cl2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357463/","abuse_ch"
 "357462","2020-05-04 22:21:49","https://spdtextile.com/sport/197Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357462/","abuse_ch"
 "357461","2020-05-04 22:21:15","https://spdtextile.com/sport/196Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357461/","abuse_ch"
 "357460","2020-05-04 22:20:42","https://spdtextile.com/sport/195Cl2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357460/","abuse_ch"
-"357459","2020-05-04 22:20:09","https://spdtextile.com/sport/194Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357459/","abuse_ch"
-"357458","2020-05-04 22:19:34","https://spdtextile.com/sport/193Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357458/","abuse_ch"
-"357457","2020-05-04 22:19:01","https://spdtextile.com/sport/192Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357457/","abuse_ch"
+"357459","2020-05-04 22:20:09","https://spdtextile.com/sport/194Cl2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357459/","abuse_ch"
+"357458","2020-05-04 22:19:34","https://spdtextile.com/sport/193Cl2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357458/","abuse_ch"
+"357457","2020-05-04 22:19:01","https://spdtextile.com/sport/192Cl2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357457/","abuse_ch"
 "357456","2020-05-04 22:18:30","https://spdtextile.com/sport/191Cl2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357456/","abuse_ch"
-"357455","2020-05-04 22:17:57","https://spdtextile.com/sport/18l2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357455/","abuse_ch"
+"357455","2020-05-04 22:17:57","https://spdtextile.com/sport/18l2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357455/","abuse_ch"
 "357454","2020-05-04 22:17:25","https://spdtextile.com/sport/18Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357454/","abuse_ch"
-"357453","2020-05-04 22:16:52","https://spdtextile.com/sport/189Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357453/","abuse_ch"
-"357452","2020-05-04 22:16:20","https://spdtextile.com/sport/187Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357452/","abuse_ch"
+"357453","2020-05-04 22:16:52","https://spdtextile.com/sport/189Cl2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357453/","abuse_ch"
+"357452","2020-05-04 22:16:20","https://spdtextile.com/sport/187Cl2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357452/","abuse_ch"
 "357451","2020-05-04 22:15:46","https://spdtextile.com/sport/186Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357451/","abuse_ch"
-"357450","2020-05-04 22:15:32","https://spdtextile.com/sport/185Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357450/","abuse_ch"
+"357450","2020-05-04 22:15:32","https://spdtextile.com/sport/185Cl2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357450/","abuse_ch"
 "357449","2020-05-04 22:15:29","https://spdtextile.com/sport/184Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357449/","abuse_ch"
-"357448","2020-05-04 22:15:23","https://spdtextile.com/sport/183Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357448/","abuse_ch"
+"357448","2020-05-04 22:15:23","https://spdtextile.com/sport/183Cl2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357448/","abuse_ch"
 "357447","2020-05-04 22:15:07","https://spdtextile.com/sport/182Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357447/","abuse_ch"
 "357446","2020-05-04 22:15:04","https://spdtextile.com/sport/181Cl2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357446/","abuse_ch"
 "357445","2020-05-04 22:15:02","https://spdtextile.com/sport/180Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357445/","abuse_ch"
@@ -713,119 +938,119 @@
 "357440","2020-05-04 22:14:47","https://spdtextile.com/sport/177Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357440/","abuse_ch"
 "357439","2020-05-04 22:14:35","https://spdtextile.com/sport/176Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357439/","abuse_ch"
 "357438","2020-05-04 22:14:32","https://spdtextile.com/sport/175Cl2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357438/","abuse_ch"
-"357437","2020-05-04 22:14:29","https://spdtextile.com/sport/174Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357437/","abuse_ch"
+"357437","2020-05-04 22:14:29","https://spdtextile.com/sport/174Cl2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357437/","abuse_ch"
 "357436","2020-05-04 22:14:26","https://spdtextile.com/sport/172Cl2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357436/","abuse_ch"
 "357435","2020-05-04 22:14:23","https://spdtextile.com/sport/171Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357435/","abuse_ch"
-"357434","2020-05-04 22:14:20","https://spdtextile.com/sport/16Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357434/","abuse_ch"
+"357434","2020-05-04 22:14:20","https://spdtextile.com/sport/16Cl2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357434/","abuse_ch"
 "357433","2020-05-04 22:14:15","https://spdtextile.com/sport/16Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357433/","abuse_ch"
 "357432","2020-05-04 22:14:11","https://spdtextile.com/sport/169Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357432/","abuse_ch"
-"357431","2020-05-04 22:14:04","https://spdtextile.com/sport/167Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357431/","abuse_ch"
+"357431","2020-05-04 22:14:04","https://spdtextile.com/sport/167Cl2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357431/","abuse_ch"
 "357430","2020-05-04 22:13:51","https://spdtextile.com/sport/164Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357430/","abuse_ch"
 "357429","2020-05-04 22:13:48","https://spdtextile.com/sport/163Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357429/","abuse_ch"
 "357428","2020-05-04 22:13:37","https://spdtextile.com/sport/161Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357428/","abuse_ch"
-"357427","2020-05-04 22:13:34","https://spdtextile.com/sport/15Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357427/","abuse_ch"
+"357427","2020-05-04 22:13:34","https://spdtextile.com/sport/15Cl2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357427/","abuse_ch"
 "357426","2020-05-04 22:13:29","http://voyageur.sisnettdesign.com/powvuggoxqc/2164661/ServiceContractAgreement_2164661_05012020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357426/","spamhaus"
-"357425","2020-05-04 22:13:18","https://spdtextile.com/sport/159Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357425/","abuse_ch"
+"357425","2020-05-04 22:13:18","https://spdtextile.com/sport/159Cl2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357425/","abuse_ch"
 "357424","2020-05-04 22:13:06","https://spdtextile.com/sport/158Cl2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357424/","abuse_ch"
-"357423","2020-05-04 22:13:01","https://spdtextile.com/sport/157Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357423/","abuse_ch"
+"357423","2020-05-04 22:13:01","https://spdtextile.com/sport/157Cl2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357423/","abuse_ch"
 "357422","2020-05-04 22:12:56","https://spdtextile.com/sport/155Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357422/","abuse_ch"
 "357421","2020-05-04 22:12:54","https://spdtextile.com/sport/154Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357421/","abuse_ch"
 "357420","2020-05-04 22:12:52","https://spdtextile.com/sport/153Cl2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357420/","abuse_ch"
-"357419","2020-05-04 22:12:48","https://spdtextile.com/sport/152Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357419/","abuse_ch"
-"357418","2020-05-04 22:12:45","https://spdtextile.com/sport/151Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357418/","abuse_ch"
+"357419","2020-05-04 22:12:48","https://spdtextile.com/sport/152Cl2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357419/","abuse_ch"
+"357418","2020-05-04 22:12:45","https://spdtextile.com/sport/151Cl2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357418/","abuse_ch"
 "357417","2020-05-04 22:12:38","https://spdtextile.com/sport/150Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357417/","abuse_ch"
 "357416","2020-05-04 22:12:35","https://spdtextile.com/sport/14l2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357416/","abuse_ch"
-"357415","2020-05-04 22:12:28","https://spdtextile.com/sport/14Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357415/","abuse_ch"
-"357414","2020-05-04 22:12:25","https://spdtextile.com/sport/14Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357414/","abuse_ch"
-"357413","2020-05-04 22:12:19","https://spdtextile.com/sport/149Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357413/","abuse_ch"
-"357412","2020-05-04 22:12:16","https://spdtextile.com/sport/148Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357412/","abuse_ch"
-"357411","2020-05-04 22:12:11","https://spdtextile.com/sport/148Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357411/","abuse_ch"
-"357410","2020-05-04 22:12:01","https://spdtextile.com/sport/147Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357410/","abuse_ch"
-"357409","2020-05-04 22:11:57","https://spdtextile.com/sport/146Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357409/","abuse_ch"
+"357415","2020-05-04 22:12:28","https://spdtextile.com/sport/14Cl2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357415/","abuse_ch"
+"357414","2020-05-04 22:12:25","https://spdtextile.com/sport/14Bl1.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357414/","abuse_ch"
+"357413","2020-05-04 22:12:19","https://spdtextile.com/sport/149Cl2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357413/","abuse_ch"
+"357412","2020-05-04 22:12:16","https://spdtextile.com/sport/148Cl2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357412/","abuse_ch"
+"357411","2020-05-04 22:12:11","https://spdtextile.com/sport/148Bl1.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357411/","abuse_ch"
+"357410","2020-05-04 22:12:01","https://spdtextile.com/sport/147Bl1.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357410/","abuse_ch"
+"357409","2020-05-04 22:11:57","https://spdtextile.com/sport/146Bl1.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357409/","abuse_ch"
 "357408","2020-05-04 22:11:53","https://spdtextile.com/sport/145Cl2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357408/","abuse_ch"
 "357407","2020-05-04 22:11:45","https://spdtextile.com/sport/144Bl1.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357407/","abuse_ch"
 "357406","2020-05-04 22:11:30","https://spdtextile.com/sport/143Cl2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357406/","abuse_ch"
 "357405","2020-05-04 22:11:27","https://spdtextile.com/sport/143Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357405/","abuse_ch"
 "357404","2020-05-04 22:11:21","https://spdtextile.com/sport/142Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357404/","abuse_ch"
 "357403","2020-05-04 22:11:17","https://spdtextile.com/sport/141Bl1.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357403/","abuse_ch"
-"357402","2020-05-04 22:11:14","https://spdtextile.com/sport/140Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357402/","abuse_ch"
+"357402","2020-05-04 22:11:14","https://spdtextile.com/sport/140Cl2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357402/","abuse_ch"
 "357401","2020-05-04 22:11:10","https://spdtextile.com/sport/140Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357401/","abuse_ch"
-"357400","2020-05-04 22:11:06","https://spdtextile.com/sport/13l2.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357400/","abuse_ch"
+"357400","2020-05-04 22:11:06","https://spdtextile.com/sport/13l2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357400/","abuse_ch"
 "357399","2020-05-04 22:11:04","https://spdtextile.com/sport/13Cl2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357399/","abuse_ch"
 "357398","2020-05-04 22:11:02","https://spdtextile.com/sport/13Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357398/","abuse_ch"
 "357397","2020-05-04 22:10:49","https://spdtextile.com/sport/139Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357397/","abuse_ch"
-"357396","2020-05-04 22:10:34","https://spdtextile.com/sport/139Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357396/","abuse_ch"
-"357395","2020-05-04 22:10:23","https://spdtextile.com/sport/138Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357395/","abuse_ch"
+"357396","2020-05-04 22:10:34","https://spdtextile.com/sport/139Bl1.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357396/","abuse_ch"
+"357395","2020-05-04 22:10:23","https://spdtextile.com/sport/138Cl2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357395/","abuse_ch"
 "357394","2020-05-04 22:10:10","https://spdtextile.com/sport/138Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357394/","abuse_ch"
 "357393","2020-05-04 22:10:00","https://spdtextile.com/sport/137Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357393/","abuse_ch"
-"357392","2020-05-04 22:09:57","https://spdtextile.com/sport/137Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357392/","abuse_ch"
+"357392","2020-05-04 22:09:57","https://spdtextile.com/sport/137Bl1.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357392/","abuse_ch"
 "357391","2020-05-04 22:09:54","https://spdtextile.com/sport/136Bl1.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357391/","abuse_ch"
 "357390","2020-05-04 22:09:47","https://spdtextile.com/sport/135Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357390/","abuse_ch"
-"357389","2020-05-04 22:09:44","https://spdtextile.com/sport/134Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357389/","abuse_ch"
+"357389","2020-05-04 22:09:44","https://spdtextile.com/sport/134Cl2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357389/","abuse_ch"
 "357388","2020-05-04 22:09:36","https://spdtextile.com/sport/133Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357388/","abuse_ch"
 "357387","2020-05-04 22:09:31","https://spdtextile.com/sport/133Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357387/","abuse_ch"
-"357386","2020-05-04 22:09:26","https://spdtextile.com/sport/132Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357386/","abuse_ch"
-"357385","2020-05-04 22:09:23","https://spdtextile.com/sport/131Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357385/","abuse_ch"
+"357386","2020-05-04 22:09:26","https://spdtextile.com/sport/132Cl2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357386/","abuse_ch"
+"357385","2020-05-04 22:09:23","https://spdtextile.com/sport/131Cl2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357385/","abuse_ch"
 "357384","2020-05-04 22:09:20","https://spdtextile.com/sport/131Bl1.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357384/","abuse_ch"
 "357383","2020-05-04 22:09:16","https://spdtextile.com/sport/130Cl2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357383/","abuse_ch"
 "357382","2020-05-04 22:09:11","https://spdtextile.com/sport/130Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357382/","abuse_ch"
-"357381","2020-05-04 22:08:54","https://spdtextile.com/sport/12l2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357381/","abuse_ch"
+"357381","2020-05-04 22:08:54","https://spdtextile.com/sport/12l2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357381/","abuse_ch"
 "357380","2020-05-04 22:08:52","https://spdtextile.com/sport/12Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357380/","abuse_ch"
-"357379","2020-05-04 22:08:48","https://spdtextile.com/sport/129Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357379/","abuse_ch"
+"357379","2020-05-04 22:08:48","https://spdtextile.com/sport/129Cl2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357379/","abuse_ch"
 "357378","2020-05-04 22:08:44","https://spdtextile.com/sport/129Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357378/","abuse_ch"
 "357377","2020-05-04 22:08:40","https://spdtextile.com/sport/128Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357377/","abuse_ch"
-"357376","2020-05-04 22:08:33","https://spdtextile.com/sport/127Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357376/","abuse_ch"
+"357376","2020-05-04 22:08:33","https://spdtextile.com/sport/127Bl1.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357376/","abuse_ch"
 "357375","2020-05-04 22:08:29","https://spdtextile.com/sport/126Cl2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357375/","abuse_ch"
 "357374","2020-05-04 22:08:17","https://pastebin.com/raw/i8Nx3ZCg","offline","malware_download","None","https://urlhaus.abuse.ch/url/357374/","JayTHL"
-"357373","2020-05-04 22:08:06","https://spdtextile.com/sport/126Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357373/","abuse_ch"
+"357373","2020-05-04 22:08:06","https://spdtextile.com/sport/126Bl1.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357373/","abuse_ch"
 "357372","2020-05-04 22:08:02","https://spdtextile.com/sport/125Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357372/","abuse_ch"
 "357371","2020-05-04 22:08:00","https://spdtextile.com/sport/125Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357371/","abuse_ch"
-"357370","2020-05-04 22:07:56","https://spdtextile.com/sport/124Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357370/","abuse_ch"
+"357370","2020-05-04 22:07:56","https://spdtextile.com/sport/124Cl2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357370/","abuse_ch"
 "357369","2020-05-04 22:07:54","https://spdtextile.com/sport/123Cl2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357369/","abuse_ch"
-"357368","2020-05-04 22:07:48","https://spdtextile.com/sport/123Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357368/","abuse_ch"
+"357368","2020-05-04 22:07:48","https://spdtextile.com/sport/123Bl1.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357368/","abuse_ch"
 "357367","2020-05-04 22:07:44","https://spdtextile.com/sport/122Cl2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357367/","abuse_ch"
 "357366","2020-05-04 22:07:42","https://pastebin.com/raw/g7vXFfPc","offline","malware_download","None","https://urlhaus.abuse.ch/url/357366/","JayTHL"
 "357365","2020-05-04 22:07:33","https://spdtextile.com/sport/122Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357365/","abuse_ch"
-"357364","2020-05-04 22:07:28","https://spdtextile.com/sport/121Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357364/","abuse_ch"
+"357364","2020-05-04 22:07:28","https://spdtextile.com/sport/121Bl1.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357364/","abuse_ch"
 "357363","2020-05-04 22:07:23","https://spdtextile.com/sport/120Cl2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357363/","abuse_ch"
-"357362","2020-05-04 22:07:19","https://spdtextile.com/sport/120Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357362/","abuse_ch"
+"357362","2020-05-04 22:07:19","https://spdtextile.com/sport/120Bl1.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357362/","abuse_ch"
 "357361","2020-05-04 22:07:06","https://spdtextile.com/sport/11l2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357361/","abuse_ch"
 "357360","2020-05-04 22:07:02","https://spdtextile.com/sport/11Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357360/","abuse_ch"
 "357359","2020-05-04 22:06:57","https://spdtextile.com/sport/119Cl2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357359/","abuse_ch"
 "357358","2020-05-04 22:06:53","https://spdtextile.com/sport/119Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357358/","abuse_ch"
 "357357","2020-05-04 22:06:51","https://spdtextile.com/sport/118Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357357/","abuse_ch"
 "357356","2020-05-04 22:06:46","https://spdtextile.com/sport/118Bl1.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357356/","abuse_ch"
-"357355","2020-05-04 22:06:43","https://spdtextile.com/sport/117Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357355/","abuse_ch"
+"357355","2020-05-04 22:06:43","https://spdtextile.com/sport/117Cl2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357355/","abuse_ch"
 "357354","2020-05-04 22:06:30","https://spdtextile.com/sport/117Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357354/","abuse_ch"
-"357353","2020-05-04 22:06:26","https://spdtextile.com/sport/116Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357353/","abuse_ch"
+"357353","2020-05-04 22:06:26","https://spdtextile.com/sport/116Cl2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357353/","abuse_ch"
 "357352","2020-05-04 22:06:16","https://spdtextile.com/sport/116Bl1.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357352/","abuse_ch"
 "357351","2020-05-04 22:06:08","https://spdtextile.com/sport/115Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357351/","abuse_ch"
-"357350","2020-05-04 22:05:31","https://spdtextile.com/sport/113Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357350/","abuse_ch"
-"357349","2020-05-04 22:05:26","https://spdtextile.com/sport/112Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357349/","abuse_ch"
+"357350","2020-05-04 22:05:31","https://spdtextile.com/sport/113Cl2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357350/","abuse_ch"
+"357349","2020-05-04 22:05:26","https://spdtextile.com/sport/112Cl2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357349/","abuse_ch"
 "357348","2020-05-04 22:05:22","https://spdtextile.com/sport/112Bl1.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357348/","abuse_ch"
 "357347","2020-05-04 22:05:17","https://spdtextile.com/sport/111Cl2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357347/","abuse_ch"
 "357346","2020-05-04 22:05:11","https://spdtextile.com/sport/111Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357346/","abuse_ch"
 "357345","2020-05-04 22:05:05","http://78.189.54.150:42679/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/357345/","geenensp"
-"357344","2020-05-04 22:04:08","https://spdtextile.com/sport/110Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357344/","abuse_ch"
+"357344","2020-05-04 22:04:08","https://spdtextile.com/sport/110Cl2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357344/","abuse_ch"
 "357343","2020-05-04 22:04:05","https://spdtextile.com/sport/110Bl1.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357343/","abuse_ch"
 "357342","2020-05-04 22:03:58","https://spdtextile.com/sport/10Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357342/","abuse_ch"
 "357341","2020-05-04 22:03:56","https://spdtextile.com/sport/10Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357341/","abuse_ch"
-"357340","2020-05-04 22:03:52","https://spdtextile.com/sport/109Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357340/","abuse_ch"
+"357340","2020-05-04 22:03:52","https://spdtextile.com/sport/109Cl2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357340/","abuse_ch"
 "357339","2020-05-04 22:03:45","https://spdtextile.com/sport/108Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357339/","abuse_ch"
 "357338","2020-05-04 22:03:40","https://spdtextile.com/sport/108Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357338/","abuse_ch"
 "357337","2020-05-04 22:03:32","https://spdtextile.com/sport/107Cl2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357337/","abuse_ch"
 "357336","2020-05-04 22:03:29","https://spdtextile.com/sport/105Cl2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357336/","abuse_ch"
-"357335","2020-05-04 22:03:24","https://spdtextile.com/sport/105Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357335/","abuse_ch"
+"357335","2020-05-04 22:03:24","https://spdtextile.com/sport/105Bl1.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357335/","abuse_ch"
 "357334","2020-05-04 22:03:19","https://spdtextile.com/sport/104Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357334/","abuse_ch"
 "357333","2020-05-04 22:02:59","https://spdtextile.com/sport/103Bl1.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357333/","abuse_ch"
 "357332","2020-05-04 22:02:25","https://spdtextile.com/sport/102Cl2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357332/","abuse_ch"
 "357331","2020-05-04 22:01:52","https://spdtextile.com/sport/101Cl2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357331/","abuse_ch"
-"357330","2020-05-04 22:01:18","https://spdtextile.com/sport/100Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357330/","abuse_ch"
+"357330","2020-05-04 22:01:18","https://spdtextile.com/sport/100Cl2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357330/","abuse_ch"
 "357329","2020-05-04 22:00:44","https://spdtextile.com/sport/100Bl1.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357329/","abuse_ch"
-"357328","2020-05-04 22:00:12","https://spdtextile.com/sport/1000Cl2.exe","offline","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/357328/","abuse_ch"
+"357328","2020-05-04 22:00:12","https://spdtextile.com/sport/1000Cl2.exe","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357328/","abuse_ch"
 "357327","2020-05-04 21:59:38","http://185.172.110.224/zy/arm7","online","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/357327/","Gandylyan1"
 "357326","2020-05-04 21:59:37","http://185.172.110.224/zy/arm5","online","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/357326/","Gandylyan1"
-"357325","2020-05-04 21:59:35","https://spdtextile.com/sport/rockstar.php","online","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357325/","abuse_ch"
+"357325","2020-05-04 21:59:35","https://spdtextile.com/sport/rockstar.php","offline","malware_download","exe,IcedID,opendir","https://urlhaus.abuse.ch/url/357325/","abuse_ch"
 "357324","2020-05-04 21:58:16","http://180.189.104.106:7516/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/357324/","geenensp"
 "357323","2020-05-04 21:58:12","https://ookul.org/wp-content/uploads/2020/05/tohwlkejpdfe/ServiceContractAgreement_6440560_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357323/","spamhaus"
 "357322","2020-05-04 21:57:37","https://auditionssupport.com/mxadxw/ServiceContractAgreement_51175154_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357322/","spamhaus"
@@ -840,14 +1065,14 @@
 "357313","2020-05-04 21:35:15","https://pastebin.com/raw/a57GC7pg","offline","malware_download","None","https://urlhaus.abuse.ch/url/357313/","JayTHL"
 "357312","2020-05-04 21:35:12","https://pastebin.com/raw/1dcQRxfP","offline","malware_download","None","https://urlhaus.abuse.ch/url/357312/","JayTHL"
 "357311","2020-05-04 21:27:21","https://franchisess.com/pvopryzvbla/ServiceContractAgreement_54563_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357311/","spamhaus"
-"357310","2020-05-04 21:27:10","http://SnackFreebie.com/oejellniu/ServiceContractAgreement_77244_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357310/","spamhaus"
+"357310","2020-05-04 21:27:10","http://SnackFreebie.com/oejellniu/ServiceContractAgreement_77244_05012020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357310/","spamhaus"
 "357309","2020-05-04 21:27:06","https://auditionssupport.com/mxadxw/595937051/ServiceContractAgreement_595937051_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357309/","spamhaus"
 "357308","2020-05-04 21:22:06","https://pastebin.com/raw/ZkGHXswZ","offline","malware_download","None","https://urlhaus.abuse.ch/url/357308/","JayTHL"
 "357307","2020-05-04 21:22:03","https://pastebin.com/raw/QVbvZsL9","offline","malware_download","None","https://urlhaus.abuse.ch/url/357307/","JayTHL"
 "357306","2020-05-04 21:14:27","http://washnworks.com/xpmcte/832178929/ServiceContractAgreement_832178929_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357306/","spamhaus"
-"357305","2020-05-04 21:14:20","http://24.72.128.195:23559/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/357305/","geenensp"
+"357305","2020-05-04 21:14:20","http://24.72.128.195:23559/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/357305/","geenensp"
 "357304","2020-05-04 21:14:16","https://freelancerauditions.com/mhymnvm/352216/ServiceContractAgreement_352216_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357304/","spamhaus"
-"357303","2020-05-04 21:11:05","https://toulousa.com/omg/rockspa.php","online","malware_download","exe,Trickbot","https://urlhaus.abuse.ch/url/357303/","malware_traffic"
+"357303","2020-05-04 21:11:05","https://toulousa.com/omg/rockspa.php","offline","malware_download","exe,Trickbot","https://urlhaus.abuse.ch/url/357303/","malware_traffic"
 "357302","2020-05-04 21:10:21","https://pastebin.com/raw/UReFeXDW","offline","malware_download","None","https://urlhaus.abuse.ch/url/357302/","JayTHL"
 "357301","2020-05-04 21:10:19","https://pastebin.com/raw/qVmYKrRZ","offline","malware_download","None","https://urlhaus.abuse.ch/url/357301/","JayTHL"
 "357300","2020-05-04 21:10:16","https://pastebin.com/raw/nPs8F4m4","offline","malware_download","None","https://urlhaus.abuse.ch/url/357300/","JayTHL"
@@ -856,11 +1081,11 @@
 "357297","2020-05-04 21:09:11","https://pastebin.com/raw/D7niSVLx","offline","malware_download","None","https://urlhaus.abuse.ch/url/357297/","JayTHL"
 "357296","2020-05-04 21:09:09","https://pastebin.com/raw/9cwsxpWQ","offline","malware_download","None","https://urlhaus.abuse.ch/url/357296/","JayTHL"
 "357295","2020-05-04 21:09:06","https://pastebin.com/raw/4GVU6r5t","offline","malware_download","None","https://urlhaus.abuse.ch/url/357295/","JayTHL"
-"357294","2020-05-04 21:06:05","http://5.252.179.60/b/x86_64","online","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/357294/","Gandylyan1"
-"357293","2020-05-04 21:06:03","http://5.252.179.60/a/x86_64","online","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/357293/","Gandylyan1"
+"357294","2020-05-04 21:06:05","http://5.252.179.60/b/x86_64","offline","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/357294/","Gandylyan1"
+"357293","2020-05-04 21:06:03","http://5.252.179.60/a/x86_64","offline","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/357293/","Gandylyan1"
 "357292","2020-05-04 21:05:07","http://172.45.13.66:46063/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/357292/","Gandylyan1"
 "357291","2020-05-04 21:04:36","http://123.11.5.184:51921/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/357291/","Gandylyan1"
-"357290","2020-05-04 21:04:31","http://183.215.188.47:35142/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/357290/","Gandylyan1"
+"357290","2020-05-04 21:04:31","http://183.215.188.47:35142/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/357290/","Gandylyan1"
 "357289","2020-05-04 21:04:28","http://199.83.207.100:56543/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/357289/","Gandylyan1"
 "357288","2020-05-04 21:04:22","http://116.114.95.20:44276/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/357288/","Gandylyan1"
 "357287","2020-05-04 21:04:16","http://111.43.223.117:34556/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/357287/","Gandylyan1"
@@ -880,12 +1105,12 @@
 "357273","2020-05-04 20:58:09","http://167.99.56.99/SBIDIOT/arm7","offline","malware_download","None","https://urlhaus.abuse.ch/url/357273/","JayTHL"
 "357272","2020-05-04 20:58:06","http://167.99.56.99/SBIDIOT/arm6","offline","malware_download","None","https://urlhaus.abuse.ch/url/357272/","JayTHL"
 "357271","2020-05-04 20:58:03","http://167.99.56.99/SBIDIOT/arm","offline","malware_download","None","https://urlhaus.abuse.ch/url/357271/","JayTHL"
-"357270","2020-05-04 20:53:07","http://5.252.179.60/c/mipsel","online","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/357270/","Gandylyan1"
-"357269","2020-05-04 20:53:05","http://5.252.179.60/c/aarch64","online","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/357269/","Gandylyan1"
-"357268","2020-05-04 20:53:03","http://5.252.179.60/c/armv7l","online","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/357268/","Gandylyan1"
-"357267","2020-05-04 20:50:15","https://jim.webengineerteam.com/wp-content/uploads/2020/05/vpjfwnydldc/ServiceContractAgreement_1933558_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357267/","spamhaus"
+"357270","2020-05-04 20:53:07","http://5.252.179.60/c/mipsel","offline","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/357270/","Gandylyan1"
+"357269","2020-05-04 20:53:05","http://5.252.179.60/c/aarch64","offline","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/357269/","Gandylyan1"
+"357268","2020-05-04 20:53:03","http://5.252.179.60/c/armv7l","offline","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/357268/","Gandylyan1"
+"357267","2020-05-04 20:50:15","https://jim.webengineerteam.com/wp-content/uploads/2020/05/vpjfwnydldc/ServiceContractAgreement_1933558_05012020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357267/","spamhaus"
 "357266","2020-05-04 20:50:10","https://jim.webengineerteam.com/wp-content/uploads/2020/05/vpjfwnydldc/ServiceContractAgreement_297243_05012020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357266/","spamhaus"
-"357265","2020-05-04 20:49:03","http://5.252.179.60/c/x86_64","online","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/357265/","Gandylyan1"
+"357265","2020-05-04 20:49:03","http://5.252.179.60/c/x86_64","offline","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/357265/","Gandylyan1"
 "357264","2020-05-04 20:39:21","http://157.245.217.96/SBIDIOT/zte","offline","malware_download","None","https://urlhaus.abuse.ch/url/357264/","JayTHL"
 "357263","2020-05-04 20:39:19","http://157.245.217.96/SBIDIOT/yarn","offline","malware_download","None","https://urlhaus.abuse.ch/url/357263/","JayTHL"
 "357262","2020-05-04 20:39:17","http://157.245.217.96/SBIDIOT/x86","offline","malware_download","None","https://urlhaus.abuse.ch/url/357262/","JayTHL"
@@ -900,30 +1125,30 @@
 "357253","2020-05-04 20:38:08","http://157.245.217.96/SBIDIOT/arm7","offline","malware_download","None","https://urlhaus.abuse.ch/url/357253/","JayTHL"
 "357252","2020-05-04 20:38:06","http://157.245.217.96/SBIDIOT/arm6","offline","malware_download","None","https://urlhaus.abuse.ch/url/357252/","JayTHL"
 "357251","2020-05-04 20:38:03","http://157.245.217.96/SBIDIOT/arm","offline","malware_download","None","https://urlhaus.abuse.ch/url/357251/","JayTHL"
-"357250","2020-05-04 20:11:33","https://nexity.me/wp-content/uploads/2020/05/lujfkbtyj/947512241/ServiceContractAgreement_947512241_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357250/","spamhaus"
+"357250","2020-05-04 20:11:33","https://nexity.me/wp-content/uploads/2020/05/lujfkbtyj/947512241/ServiceContractAgreement_947512241_05012020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357250/","spamhaus"
 "357249","2020-05-04 20:10:31","http://www.omitkyspisar.cz/wp-content/uploads/kyuod/ServiceContractAgreement_64190143_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357249/","spamhaus"
-"357248","2020-05-04 20:10:29","https://bistlearn.ir/wp-content/uploads/2020/05/rpbtautvhk/ServiceContractAgreement_346994_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357248/","spamhaus"
-"357247","2020-05-04 20:10:19","http://www.oxcssa.org.uk/wp-content/plugins/apikey/cyevr/ServiceContractAgreement_144649_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357247/","spamhaus"
-"357246","2020-05-04 20:10:14","http://www.monmariage.info/wp-content/uploads/2020/05/xixjwyvze/ServiceContractAgreement_4222165_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357246/","spamhaus"
+"357248","2020-05-04 20:10:29","https://bistlearn.ir/wp-content/uploads/2020/05/rpbtautvhk/ServiceContractAgreement_346994_05012020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357248/","spamhaus"
+"357247","2020-05-04 20:10:19","http://www.oxcssa.org.uk/wp-content/plugins/apikey/cyevr/ServiceContractAgreement_144649_05012020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357247/","spamhaus"
+"357246","2020-05-04 20:10:14","http://www.monmariage.info/wp-content/uploads/2020/05/xixjwyvze/ServiceContractAgreement_4222165_05012020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357246/","spamhaus"
 "357245","2020-05-04 20:09:43","http://www.omitkyspisar.cz/wp-content/uploads/kyuod/97641/ServiceContractAgreement_97641_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357245/","spamhaus"
 "357244","2020-05-04 20:09:41","http://www.sernayconsultores.com/wp-content/uploads/2020/05/advlzrmcxs/ServiceContractAgreement_080131_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357244/","spamhaus"
 "357243","2020-05-04 20:09:27","https://freelancerauditions.com/mhymnvm/ServiceContractAgreement_256555708_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357243/","spamhaus"
-"357242","2020-05-04 20:09:24","https://xueha.fun/wp-content/plugins/apikey/irwhomunbr/ServiceContractAgreement_75002172_05012020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357242/","spamhaus"
+"357242","2020-05-04 20:09:24","https://xueha.fun/wp-content/plugins/apikey/irwhomunbr/ServiceContractAgreement_75002172_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357242/","spamhaus"
 "357241","2020-05-04 20:09:18","https://bazzarghat.com/wp-content/uploads/2020/05/vxksz/ServiceContractAgreement_345711_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357241/","spamhaus"
-"357240","2020-05-04 20:09:13","https://xueha.fun/wp-content/plugins/apikey/irwhomunbr/ServiceContractAgreement_36242183_05012020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357240/","spamhaus"
-"357239","2020-05-04 20:08:51","http://www.monmariage.info/wp-content/uploads/2020/05/ylwfuwedi/ServiceContractAgreement_3245085_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357239/","spamhaus"
-"357238","2020-05-04 20:08:48","https://bistlearn.ir/wp-content/uploads/2020/05/rpbtautvhk/ServiceContractAgreement_06921680_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357238/","spamhaus"
-"357237","2020-05-04 20:08:46","http://anuragsharma.co.in/tjvkpdmcnkxf/860037038/ServiceContractAgreement_860037038_05012020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357237/","spamhaus"
+"357240","2020-05-04 20:09:13","https://xueha.fun/wp-content/plugins/apikey/irwhomunbr/ServiceContractAgreement_36242183_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357240/","spamhaus"
+"357239","2020-05-04 20:08:51","http://www.monmariage.info/wp-content/uploads/2020/05/ylwfuwedi/ServiceContractAgreement_3245085_05012020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357239/","spamhaus"
+"357238","2020-05-04 20:08:48","https://bistlearn.ir/wp-content/uploads/2020/05/rpbtautvhk/ServiceContractAgreement_06921680_05012020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357238/","spamhaus"
+"357237","2020-05-04 20:08:46","http://anuragsharma.co.in/tjvkpdmcnkxf/860037038/ServiceContractAgreement_860037038_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357237/","spamhaus"
 "357236","2020-05-04 20:08:41","https://gold-coin-pawnshop.com/cnjdrit/ServiceContractAgreement_842414066_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357236/","spamhaus"
-"357235","2020-05-04 20:08:38","https://lesa.at.true.by/bpnoyndvsg/ServiceContractAgreement_0007616_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357235/","spamhaus"
+"357235","2020-05-04 20:08:38","https://lesa.at.true.by/bpnoyndvsg/ServiceContractAgreement_0007616_05012020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357235/","spamhaus"
 "357234","2020-05-04 20:08:30","https://www.totalbizsolution.com/wp-content/plugins/apikey/npzvwirtuf/ServiceContractAgreement_5653345_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357234/","spamhaus"
-"357233","2020-05-04 20:08:22","http://www.sernayconsultores.com/wp-content/uploads/2020/05/advlzrmcxs/ServiceContractAgreement_2521161_05012020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357233/","spamhaus"
-"357232","2020-05-04 20:07:41","http://191.13.184.58:51459/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/357232/","geenensp"
+"357233","2020-05-04 20:08:22","http://www.sernayconsultores.com/wp-content/uploads/2020/05/advlzrmcxs/ServiceContractAgreement_2521161_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357233/","spamhaus"
+"357232","2020-05-04 20:07:41","http://191.13.184.58:51459/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/357232/","geenensp"
 "357231","2020-05-04 20:07:35","http://archivelviv.gov.ua/wp-content/uploads/2020/05/xjkchfsegik/ServiceContractAgreement_48120_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357231/","spamhaus"
 "357230","2020-05-04 20:07:29","https://freelancerauditions.com/mhymnvm/630002026/ServiceContractAgreement_630002026_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357230/","spamhaus"
 "357229","2020-05-04 20:07:24","http://daithanhphung.com/wp-content/uploads/bwwwvc/ServiceContractAgreement_39744762_05012020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357229/","spamhaus"
-"357228","2020-05-04 20:07:17","http://14.48.88.250:25973/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/357228/","geenensp"
-"357227","2020-05-04 20:07:11","https://pratapnursery.com/uopghjygi/37243/ServiceContractAgreement_37243_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357227/","spamhaus"
+"357228","2020-05-04 20:07:17","http://14.48.88.250:25973/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/357228/","geenensp"
+"357227","2020-05-04 20:07:11","https://pratapnursery.com/uopghjygi/37243/ServiceContractAgreement_37243_05012020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357227/","spamhaus"
 "357226","2020-05-04 20:07:08","http://77.73.69.50/mips","online","malware_download","ascii","https://urlhaus.abuse.ch/url/357226/","geenensp"
 "357225","2020-05-04 20:07:06","http://77.73.69.50/yoyobins.sh","online","malware_download","script","https://urlhaus.abuse.ch/url/357225/","geenensp"
 "357224","2020-05-04 20:07:04","https://bistlearn.ir/wp-content/uploads/2020/05/rpbtautvhk/28934/ServiceContractAgreement_28934_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357224/","spamhaus"
@@ -931,31 +1156,31 @@
 "357222","2020-05-04 20:06:46","https://ookul.org/wp-content/uploads/2020/05/tohwlkejpdfe/286944/ServiceContractAgreement_286944_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357222/","spamhaus"
 "357221","2020-05-04 20:06:31","https://bazzarghat.com/wp-content/uploads/2020/05/vxksz/ServiceContractAgreement_131904_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357221/","spamhaus"
 "357220","2020-05-04 20:06:24","https://starinfotechcollege.com/dkxvudocprr/ServiceContractAgreement_44400_05012020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357220/","spamhaus"
-"357219","2020-05-04 20:06:14","https://getfashionmania.com/wp-content/uploads/2020/05/xipim/ServiceContractAgreement_3918609_05012020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357219/","spamhaus"
+"357219","2020-05-04 20:06:14","https://getfashionmania.com/wp-content/uploads/2020/05/xipim/ServiceContractAgreement_3918609_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357219/","spamhaus"
 "357218","2020-05-04 19:28:44","http://123.202.118.92:23074/1","online","malware_download","None","https://urlhaus.abuse.ch/url/357218/","JayTHL"
 "357217","2020-05-04 19:28:38","http://62.45.109.181:37470/1","online","malware_download","None","https://urlhaus.abuse.ch/url/357217/","JayTHL"
 "357216","2020-05-04 19:28:35","http://76.168.130.248:43204/1","online","malware_download","None","https://urlhaus.abuse.ch/url/357216/","JayTHL"
 "357215","2020-05-04 19:28:29","http://190.138.92.253:50489/1","offline","malware_download","None","https://urlhaus.abuse.ch/url/357215/","JayTHL"
 "357214","2020-05-04 19:28:05","http://93.75.190.19:9803/1","online","malware_download","None","https://urlhaus.abuse.ch/url/357214/","JayTHL"
-"357213","2020-05-04 19:28:02","http://67.245.47.15:1717/1","online","malware_download","None","https://urlhaus.abuse.ch/url/357213/","JayTHL"
+"357213","2020-05-04 19:28:02","http://67.245.47.15:1717/1","offline","malware_download","None","https://urlhaus.abuse.ch/url/357213/","JayTHL"
 "357212","2020-05-04 19:27:54","http://123.202.118.92:23074/2","online","malware_download","None","https://urlhaus.abuse.ch/url/357212/","JayTHL"
 "357211","2020-05-04 19:27:47","http://62.45.109.181:37470/2","online","malware_download","None","https://urlhaus.abuse.ch/url/357211/","JayTHL"
 "357210","2020-05-04 19:27:44","http://76.168.130.248:43204/2","online","malware_download","None","https://urlhaus.abuse.ch/url/357210/","JayTHL"
 "357209","2020-05-04 19:27:33","http://190.138.92.253:50489/2","offline","malware_download","None","https://urlhaus.abuse.ch/url/357209/","JayTHL"
 "357208","2020-05-04 19:27:24","http://93.75.190.19:9803/2","online","malware_download","None","https://urlhaus.abuse.ch/url/357208/","JayTHL"
-"357207","2020-05-04 19:27:22","http://67.245.47.15:1717/2","online","malware_download","None","https://urlhaus.abuse.ch/url/357207/","JayTHL"
+"357207","2020-05-04 19:27:22","http://67.245.47.15:1717/2","offline","malware_download","None","https://urlhaus.abuse.ch/url/357207/","JayTHL"
 "357206","2020-05-04 19:27:16","http://123.202.118.92:23074/3","online","malware_download","None","https://urlhaus.abuse.ch/url/357206/","JayTHL"
 "357205","2020-05-04 19:27:10","http://62.45.109.181:37470/3","online","malware_download","None","https://urlhaus.abuse.ch/url/357205/","JayTHL"
 "357204","2020-05-04 19:27:07","http://76.168.130.248:43204/3","online","malware_download","None","https://urlhaus.abuse.ch/url/357204/","JayTHL"
 "357203","2020-05-04 19:27:00","http://190.138.92.253:50489/3","offline","malware_download","None","https://urlhaus.abuse.ch/url/357203/","JayTHL"
 "357202","2020-05-04 19:26:50","http://93.75.190.19:9803/3","online","malware_download","None","https://urlhaus.abuse.ch/url/357202/","JayTHL"
-"357201","2020-05-04 19:26:48","http://67.245.47.15:1717/3","online","malware_download","None","https://urlhaus.abuse.ch/url/357201/","JayTHL"
+"357201","2020-05-04 19:26:48","http://67.245.47.15:1717/3","offline","malware_download","None","https://urlhaus.abuse.ch/url/357201/","JayTHL"
 "357200","2020-05-04 19:26:41","http://123.202.118.92:23074/4","online","malware_download","None","https://urlhaus.abuse.ch/url/357200/","JayTHL"
 "357199","2020-05-04 19:26:33","http://62.45.109.181:37470/4","online","malware_download","None","https://urlhaus.abuse.ch/url/357199/","JayTHL"
 "357198","2020-05-04 19:26:29","http://76.168.130.248:43204/4","online","malware_download","None","https://urlhaus.abuse.ch/url/357198/","JayTHL"
 "357197","2020-05-04 19:26:23","http://190.138.92.253:50489/4","offline","malware_download","None","https://urlhaus.abuse.ch/url/357197/","JayTHL"
 "357196","2020-05-04 19:26:11","http://93.75.190.19:9803/4","online","malware_download","None","https://urlhaus.abuse.ch/url/357196/","JayTHL"
-"357195","2020-05-04 19:26:08","http://67.245.47.15:1717/4","online","malware_download","None","https://urlhaus.abuse.ch/url/357195/","JayTHL"
+"357195","2020-05-04 19:26:08","http://67.245.47.15:1717/4","offline","malware_download","None","https://urlhaus.abuse.ch/url/357195/","JayTHL"
 "357194","2020-05-04 19:09:14","https://www.mediafire.com/file/knl6gvtw9f8zhs7/X198GHNAFDACV09NM.zip/file","offline","malware_download","NanoCore,rat","https://urlhaus.abuse.ch/url/357194/","p5yb34m"
 "357193","2020-05-04 19:05:06","http://178.33.145.40/bins/bomba.arm","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/357193/","zbetcheckin"
 "357192","2020-05-04 19:05:04","http://178.33.145.40/bins/bomba.mips","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/357192/","zbetcheckin"
@@ -996,29 +1221,29 @@
 "357157","2020-05-04 18:56:05","http://167.71.188.236/SBIDIOT/arm6","offline","malware_download","None","https://urlhaus.abuse.ch/url/357157/","JayTHL"
 "357156","2020-05-04 18:56:03","http://167.71.188.236/SBIDIOT/arm","offline","malware_download","None","https://urlhaus.abuse.ch/url/357156/","JayTHL"
 "357155","2020-05-04 18:13:14","https://getfashionmania.com/wp-content/uploads/2020/05/xipim/165659510/ServiceContractAgreement_165659510_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357155/","spamhaus"
-"357154","2020-05-04 18:13:08","https://bistlearn.ir/wp-content/uploads/2020/05/didbaizfk/ServiceContractAgreement_329905855_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357154/","spamhaus"
-"357153","2020-05-04 18:13:05","https://prabhuandsons.com/wp-content/uploads/2020/05/ttmyf/ServiceContractAgreement_034852286_05012020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357153/","spamhaus"
+"357154","2020-05-04 18:13:08","https://bistlearn.ir/wp-content/uploads/2020/05/didbaizfk/ServiceContractAgreement_329905855_05012020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357154/","spamhaus"
+"357153","2020-05-04 18:13:05","https://prabhuandsons.com/wp-content/uploads/2020/05/ttmyf/ServiceContractAgreement_034852286_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357153/","spamhaus"
 "357152","2020-05-04 18:08:15","http://www.omitkyspisar.cz/wp-content/uploads/kyuod/893006426/ServiceContractAgreement_893006426_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357152/","spamhaus"
 "357151","2020-05-04 18:08:06","http://178.33.145.40/bins/bomba.x86","online","malware_download","32-bit,elf,x86-32","https://urlhaus.abuse.ch/url/357151/","geenensp"
 "357150","2020-05-04 18:08:03","http://178.33.145.40/bomba.sh","online","malware_download","script","https://urlhaus.abuse.ch/url/357150/","geenensp"
 "357149","2020-05-04 18:05:09","http://113.133.224.80:40528/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/357149/","Gandylyan1"
 "357148","2020-05-04 18:05:04","http://182.120.217.177:48350/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/357148/","Gandylyan1"
 "357147","2020-05-04 18:04:58","http://222.139.30.106:54863/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/357147/","Gandylyan1"
-"357146","2020-05-04 18:04:55","http://162.212.115.80:51539/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/357146/","Gandylyan1"
+"357146","2020-05-04 18:04:55","http://162.212.115.80:51539/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/357146/","Gandylyan1"
 "357145","2020-05-04 18:04:50","http://117.90.254.53:39156/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/357145/","Gandylyan1"
 "357144","2020-05-04 18:04:42","http://222.74.186.174:54449/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/357144/","Gandylyan1"
-"357143","2020-05-04 18:04:39","http://125.45.123.104:54833/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/357143/","Gandylyan1"
+"357143","2020-05-04 18:04:39","http://125.45.123.104:54833/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/357143/","Gandylyan1"
 "357142","2020-05-04 18:04:34","http://111.42.102.147:36933/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/357142/","Gandylyan1"
 "357141","2020-05-04 18:04:31","http://125.45.52.161:59828/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/357141/","Gandylyan1"
 "357140","2020-05-04 18:04:26","http://111.42.102.171:45563/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/357140/","Gandylyan1"
 "357139","2020-05-04 18:04:22","http://1.246.222.208:1560/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/357139/","Gandylyan1"
 "357138","2020-05-04 18:04:17","http://211.137.225.39:59636/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/357138/","Gandylyan1"
 "357137","2020-05-04 18:03:19","https://getfashionmania.com/wp-content/uploads/2020/05/xipim/ServiceContractAgreement_745638352_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357137/","spamhaus"
-"357136","2020-05-04 18:02:56","https://toulousa.com/wp-content/uploads/2020/05/kviajlyujzpw/98242552/ServiceContractAgreement_98242552_05012020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357136/","spamhaus"
+"357136","2020-05-04 18:02:56","https://toulousa.com/wp-content/uploads/2020/05/kviajlyujzpw/98242552/ServiceContractAgreement_98242552_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357136/","spamhaus"
 "357135","2020-05-04 18:02:24","https://gold-coin-pawnshop.com/cnjdrit/805227/ServiceContractAgreement_805227_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357135/","spamhaus"
 "357134","2020-05-04 18:01:47","http://anuragsharma.co.in/tjvkpdmcnkxf/ServiceContractAgreement_24372_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357134/","spamhaus"
-"357133","2020-05-04 18:01:13","https://mangawt.com/wp-content/uploads/afidlweynxoz/ServiceContractAgreement_482816428_05012020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357133/","spamhaus"
-"357132","2020-05-04 18:00:38","http://www.gopala.es/wp-content/uploads/2020/05/ukrhkcdrxyr/ServiceContractAgreement_145107906_05012020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357132/","spamhaus"
+"357133","2020-05-04 18:01:13","https://mangawt.com/wp-content/uploads/afidlweynxoz/ServiceContractAgreement_482816428_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357133/","spamhaus"
+"357132","2020-05-04 18:00:38","http://www.gopala.es/wp-content/uploads/2020/05/ukrhkcdrxyr/ServiceContractAgreement_145107906_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357132/","spamhaus"
 "357131","2020-05-04 17:54:09","http://voyageur.sisnettdesign.com/powvuggoxqc/4980696/ServiceContractAgreement_4980696_05012020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357131/","spamhaus"
 "357130","2020-05-04 17:53:34","http://sodmalwa.pl/PRT1221D2.pdf.jar","online","malware_download","Adwind,jar","https://urlhaus.abuse.ch/url/357130/","neoxmorpheus1"
 "357129","2020-05-04 17:49:47","https://nexity.me/wp-content/uploads/2020/05/lujfkbtyj/865695461/ServiceContractAgreement_865695461_05012020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357129/","spamhaus"
@@ -1044,83 +1269,83 @@
 "357109","2020-05-04 17:41:15","https://healthboro.site/wp-content/plugins/apikey/kznckswyxr/4585982/ServiceContractAgreement_4585982_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357109/","spamhaus"
 "357108","2020-05-04 17:41:09","https://starinfotechcollege.com/dkxvudocprr/ServiceContractAgreement_936285349_05012020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357108/","spamhaus"
 "357107","2020-05-04 17:34:49","https://franchisess.com/pvopryzvbla/944652/ServiceContractAgreement_944652_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357107/","spamhaus"
-"357106","2020-05-04 17:34:40","http://SnackFreebie.com/oejellniu/865776096/ServiceContractAgreement_865776096_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357106/","spamhaus"
-"357105","2020-05-04 17:34:31","https://tomorrowearth.net/wp-content/uploads/2020/05/inenzr/06173828/ServiceContractAgreement_06173828_05012020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357105/","spamhaus"
+"357106","2020-05-04 17:34:40","http://SnackFreebie.com/oejellniu/865776096/ServiceContractAgreement_865776096_05012020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357106/","spamhaus"
+"357105","2020-05-04 17:34:31","https://tomorrowearth.net/wp-content/uploads/2020/05/inenzr/06173828/ServiceContractAgreement_06173828_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357105/","spamhaus"
 "357104","2020-05-04 17:34:25","https://pratapnursery.com/uopghjygi/ServiceContractAgreement_93950705_05012020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357104/","spamhaus"
-"357103","2020-05-04 17:34:18","http://www.monmariage.info/wp-content/uploads/2020/05/xixjwyvze/ServiceContractAgreement_71981_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357103/","spamhaus"
+"357103","2020-05-04 17:34:18","http://www.monmariage.info/wp-content/uploads/2020/05/xixjwyvze/ServiceContractAgreement_71981_05012020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357103/","spamhaus"
 "357102","2020-05-04 17:34:13","http://www.oxcssa.org.uk/wp-content/plugins/apikey/cyevr/ServiceContractAgreement_5290042_05012020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357102/","spamhaus"
-"357101","2020-05-04 17:19:35","http://23.95.89.78/SBIDIOT/zte","online","malware_download","None","https://urlhaus.abuse.ch/url/357101/","JayTHL"
-"357100","2020-05-04 17:19:32","http://23.95.89.78/SBIDIOT/yarn","online","malware_download","None","https://urlhaus.abuse.ch/url/357100/","JayTHL"
-"357099","2020-05-04 17:19:30","http://23.95.89.78/SBIDIOT/x86","online","malware_download","None","https://urlhaus.abuse.ch/url/357099/","JayTHL"
-"357098","2020-05-04 17:19:28","http://23.95.89.78/SBIDIOT/spc","online","malware_download","None","https://urlhaus.abuse.ch/url/357098/","JayTHL"
-"357097","2020-05-04 17:19:25","http://23.95.89.78/SBIDIOT/sh4","online","malware_download","None","https://urlhaus.abuse.ch/url/357097/","JayTHL"
-"357096","2020-05-04 17:19:22","http://23.95.89.78/SBIDIOT/rtk","online","malware_download","None","https://urlhaus.abuse.ch/url/357096/","JayTHL"
-"357095","2020-05-04 17:19:20","http://23.95.89.78/SBIDIOT/root","online","malware_download","None","https://urlhaus.abuse.ch/url/357095/","JayTHL"
-"357094","2020-05-04 17:19:17","http://23.95.89.78/SBIDIOT/ppc","online","malware_download","None","https://urlhaus.abuse.ch/url/357094/","JayTHL"
-"357093","2020-05-04 17:19:15","http://23.95.89.78/SBIDIOT/mpsl","online","malware_download","None","https://urlhaus.abuse.ch/url/357093/","JayTHL"
-"357092","2020-05-04 17:19:13","http://23.95.89.78/SBIDIOT/mips","online","malware_download","None","https://urlhaus.abuse.ch/url/357092/","JayTHL"
-"357091","2020-05-04 17:19:10","http://23.95.89.78/SBIDIOT/m68k","online","malware_download","None","https://urlhaus.abuse.ch/url/357091/","JayTHL"
-"357090","2020-05-04 17:19:08","http://23.95.89.78/SBIDIOT/arm7","online","malware_download","None","https://urlhaus.abuse.ch/url/357090/","JayTHL"
-"357089","2020-05-04 17:19:05","http://23.95.89.78/SBIDIOT/arm6","online","malware_download","None","https://urlhaus.abuse.ch/url/357089/","JayTHL"
-"357088","2020-05-04 17:19:03","http://23.95.89.78/SBIDIOT/arm","online","malware_download","None","https://urlhaus.abuse.ch/url/357088/","JayTHL"
+"357101","2020-05-04 17:19:35","http://23.95.89.78/SBIDIOT/zte","offline","malware_download","None","https://urlhaus.abuse.ch/url/357101/","JayTHL"
+"357100","2020-05-04 17:19:32","http://23.95.89.78/SBIDIOT/yarn","offline","malware_download","None","https://urlhaus.abuse.ch/url/357100/","JayTHL"
+"357099","2020-05-04 17:19:30","http://23.95.89.78/SBIDIOT/x86","offline","malware_download","None","https://urlhaus.abuse.ch/url/357099/","JayTHL"
+"357098","2020-05-04 17:19:28","http://23.95.89.78/SBIDIOT/spc","offline","malware_download","None","https://urlhaus.abuse.ch/url/357098/","JayTHL"
+"357097","2020-05-04 17:19:25","http://23.95.89.78/SBIDIOT/sh4","offline","malware_download","None","https://urlhaus.abuse.ch/url/357097/","JayTHL"
+"357096","2020-05-04 17:19:22","http://23.95.89.78/SBIDIOT/rtk","offline","malware_download","None","https://urlhaus.abuse.ch/url/357096/","JayTHL"
+"357095","2020-05-04 17:19:20","http://23.95.89.78/SBIDIOT/root","offline","malware_download","None","https://urlhaus.abuse.ch/url/357095/","JayTHL"
+"357094","2020-05-04 17:19:17","http://23.95.89.78/SBIDIOT/ppc","offline","malware_download","None","https://urlhaus.abuse.ch/url/357094/","JayTHL"
+"357093","2020-05-04 17:19:15","http://23.95.89.78/SBIDIOT/mpsl","offline","malware_download","None","https://urlhaus.abuse.ch/url/357093/","JayTHL"
+"357092","2020-05-04 17:19:13","http://23.95.89.78/SBIDIOT/mips","offline","malware_download","None","https://urlhaus.abuse.ch/url/357092/","JayTHL"
+"357091","2020-05-04 17:19:10","http://23.95.89.78/SBIDIOT/m68k","offline","malware_download","None","https://urlhaus.abuse.ch/url/357091/","JayTHL"
+"357090","2020-05-04 17:19:08","http://23.95.89.78/SBIDIOT/arm7","offline","malware_download","None","https://urlhaus.abuse.ch/url/357090/","JayTHL"
+"357089","2020-05-04 17:19:05","http://23.95.89.78/SBIDIOT/arm6","offline","malware_download","None","https://urlhaus.abuse.ch/url/357089/","JayTHL"
+"357088","2020-05-04 17:19:03","http://23.95.89.78/SBIDIOT/arm","offline","malware_download","None","https://urlhaus.abuse.ch/url/357088/","JayTHL"
 "357087","2020-05-04 17:18:31","http://51.89.119.154/FTUdftu","offline","malware_download","None","https://urlhaus.abuse.ch/url/357087/","JayTHL"
-"357086","2020-05-04 17:18:29","http://51.89.119.154/FDFDHFC","online","malware_download","None","https://urlhaus.abuse.ch/url/357086/","JayTHL"
-"357085","2020-05-04 17:18:27","http://51.89.119.154/DFhxdhdf","online","malware_download","None","https://urlhaus.abuse.ch/url/357085/","JayTHL"
-"357084","2020-05-04 17:18:24","http://51.89.119.154/JIPJuipjh","online","malware_download","None","https://urlhaus.abuse.ch/url/357084/","JayTHL"
-"357083","2020-05-04 17:18:16","http://51.89.119.154/XDzdfxzf","online","malware_download","None","https://urlhaus.abuse.ch/url/357083/","JayTHL"
-"357082","2020-05-04 17:18:13","http://51.89.119.154/arm6","online","malware_download","None","https://urlhaus.abuse.ch/url/357082/","JayTHL"
-"357081","2020-05-04 17:18:10","http://51.89.119.154/RYrydry","online","malware_download","None","https://urlhaus.abuse.ch/url/357081/","JayTHL"
-"357080","2020-05-04 17:18:07","http://51.89.119.154/jhUOH","online","malware_download","None","https://urlhaus.abuse.ch/url/357080/","JayTHL"
-"357079","2020-05-04 17:18:04","http://51.89.119.154/JIPJIPJj","online","malware_download","None","https://urlhaus.abuse.ch/url/357079/","JayTHL"
+"357086","2020-05-04 17:18:29","http://51.89.119.154/FDFDHFC","offline","malware_download","None","https://urlhaus.abuse.ch/url/357086/","JayTHL"
+"357085","2020-05-04 17:18:27","http://51.89.119.154/DFhxdhdf","offline","malware_download","None","https://urlhaus.abuse.ch/url/357085/","JayTHL"
+"357084","2020-05-04 17:18:24","http://51.89.119.154/JIPJuipjh","offline","malware_download","None","https://urlhaus.abuse.ch/url/357084/","JayTHL"
+"357083","2020-05-04 17:18:16","http://51.89.119.154/XDzdfxzf","offline","malware_download","None","https://urlhaus.abuse.ch/url/357083/","JayTHL"
+"357082","2020-05-04 17:18:13","http://51.89.119.154/arm6","offline","malware_download","None","https://urlhaus.abuse.ch/url/357082/","JayTHL"
+"357081","2020-05-04 17:18:10","http://51.89.119.154/RYrydry","offline","malware_download","None","https://urlhaus.abuse.ch/url/357081/","JayTHL"
+"357080","2020-05-04 17:18:07","http://51.89.119.154/jhUOH","offline","malware_download","None","https://urlhaus.abuse.ch/url/357080/","JayTHL"
+"357079","2020-05-04 17:18:04","http://51.89.119.154/JIPJIPJj","offline","malware_download","None","https://urlhaus.abuse.ch/url/357079/","JayTHL"
 "357078","2020-05-04 17:15:06","http://www.oxcssa.org.uk/wp-content/plugins/apikey/cyevr/63950/ServiceContractAgreement_63950_05012020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357078/","spamhaus"
 "357077","2020-05-04 17:14:17","https://schoolqualification.com/wcykt/833003561/ServiceContractAgreement_833003561_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357077/","spamhaus"
-"357076","2020-05-04 17:14:07","http://anuragsharma.co.in/tjvkpdmcnkxf/3551203/ServiceContractAgreement_3551203_05012020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357076/","spamhaus"
-"357075","2020-05-04 17:13:06","https://toulousa.com/wp-content/uploads/2020/05/kviajlyujzpw/ServiceContractAgreement_2983828_05012020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357075/","spamhaus"
-"357074","2020-05-04 17:12:35","http://fedsfmr.ru/avg.exe","online","malware_download","exe,njRAT","https://urlhaus.abuse.ch/url/357074/","zbetcheckin"
+"357076","2020-05-04 17:14:07","http://anuragsharma.co.in/tjvkpdmcnkxf/3551203/ServiceContractAgreement_3551203_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357076/","spamhaus"
+"357075","2020-05-04 17:13:06","https://toulousa.com/wp-content/uploads/2020/05/kviajlyujzpw/ServiceContractAgreement_2983828_05012020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/357075/","spamhaus"
+"357074","2020-05-04 17:12:35","http://fedsfmr.ru/avg.exe","offline","malware_download","exe,njRAT","https://urlhaus.abuse.ch/url/357074/","zbetcheckin"
 "357073","2020-05-04 17:12:33","http://51.254.175.185/svchost.exe","online","malware_download","exe,njRAT","https://urlhaus.abuse.ch/url/357073/","zbetcheckin"
-"357072","2020-05-04 17:12:30","http://fedsfmr.ru/sqllite.exe","online","malware_download","exe,njRAT","https://urlhaus.abuse.ch/url/357072/","zbetcheckin"
-"357071","2020-05-04 17:12:26","http://fedsfmr.ru/yandex.exe","online","malware_download","exe,njRAT","https://urlhaus.abuse.ch/url/357071/","zbetcheckin"
-"357070","2020-05-04 17:12:07","http://fedsfmr.ru/host.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/357070/","zbetcheckin"
-"357069","2020-05-04 17:05:06","http://fedsfmr.ru/drweb.exe","online","malware_download","exe,njRAT","https://urlhaus.abuse.ch/url/357069/","zbetcheckin"
-"357068","2020-05-04 16:59:05","http://51.89.119.154/GHfjfgvj","online","malware_download","32-bit,elf,mips","https://urlhaus.abuse.ch/url/357068/","geenensp"
-"357067","2020-05-04 16:59:02","http://51.89.119.154/bins.sh","online","malware_download","ascii","https://urlhaus.abuse.ch/url/357067/","geenensp"
+"357072","2020-05-04 17:12:30","http://fedsfmr.ru/sqllite.exe","offline","malware_download","exe,njRAT","https://urlhaus.abuse.ch/url/357072/","zbetcheckin"
+"357071","2020-05-04 17:12:26","http://fedsfmr.ru/yandex.exe","offline","malware_download","exe,njRAT","https://urlhaus.abuse.ch/url/357071/","zbetcheckin"
+"357070","2020-05-04 17:12:07","http://fedsfmr.ru/host.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/357070/","zbetcheckin"
+"357069","2020-05-04 17:05:06","http://fedsfmr.ru/drweb.exe","offline","malware_download","exe,njRAT","https://urlhaus.abuse.ch/url/357069/","zbetcheckin"
+"357068","2020-05-04 16:59:05","http://51.89.119.154/GHfjfgvj","offline","malware_download","32-bit,elf,mips","https://urlhaus.abuse.ch/url/357068/","geenensp"
+"357067","2020-05-04 16:59:02","http://51.89.119.154/bins.sh","offline","malware_download","ascii","https://urlhaus.abuse.ch/url/357067/","geenensp"
 "357066","2020-05-04 16:58:04","http://93.171.33.234:27158/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/357066/","geenensp"
 "357065","2020-05-04 16:11:02","https://karlsuites.com/delightful/colours/browniee/","offline","malware_download","exe","https://urlhaus.abuse.ch/url/357065/","zbetcheckin"
-"357064","2020-05-04 15:50:06","http://59.127.31.71:32414/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/357064/","geenensp"
+"357064","2020-05-04 15:50:06","http://59.127.31.71:32414/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/357064/","geenensp"
 "357063","2020-05-04 15:38:32","http://tristatehf.org/dqbfyhal/88888.png","offline","malware_download","Qakbot,qbot,Quakbot","https://urlhaus.abuse.ch/url/357063/","notwhickey"
-"357062","2020-05-04 15:38:25","http://mitonegbh.xyz/xml/kanda.exe","online","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/357062/","anonymous"
-"357061","2020-05-04 15:38:20","http://mydesign.thinkeraibirds.com/nhawwgmvo/88888.png","offline","malware_download","exe,Qakbot,Quakbot,spx111","https://urlhaus.abuse.ch/url/357061/","lazyactivist192"
-"357060","2020-05-04 15:38:19","http://mvdrepair.com/urbeopk/88888.png","online","malware_download","exe,Qakbot,Quakbot,spx111","https://urlhaus.abuse.ch/url/357060/","lazyactivist192"
-"357059","2020-05-04 15:38:11","http://hotelbharatpurpalace.com/fjtpbqbq/88888.png","online","malware_download","exe,Qakbot,Quakbot,spx111","https://urlhaus.abuse.ch/url/357059/","lazyactivist192"
-"357058","2020-05-04 15:38:00","http://new.tristatehs.com/ohbjeojbvi/88888.png","online","malware_download","exe,Qakbot,Quakbot,spx111","https://urlhaus.abuse.ch/url/357058/","lazyactivist192"
+"357062","2020-05-04 15:38:25","http://mitonegbh.xyz/xml/kanda.exe","offline","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/357062/","anonymous"
+"357061","2020-05-04 15:38:20","http://mydesign.thinkeraibirds.com/nhawwgmvo/88888.png","online","malware_download","exe,Qakbot,Quakbot,spx111","https://urlhaus.abuse.ch/url/357061/","lazyactivist192"
+"357060","2020-05-04 15:38:19","http://mvdrepair.com/urbeopk/88888.png","offline","malware_download","exe,Qakbot,Quakbot,spx111","https://urlhaus.abuse.ch/url/357060/","lazyactivist192"
+"357059","2020-05-04 15:38:11","http://hotelbharatpurpalace.com/fjtpbqbq/88888.png","offline","malware_download","exe,Qakbot,Quakbot,spx111","https://urlhaus.abuse.ch/url/357059/","lazyactivist192"
+"357058","2020-05-04 15:38:00","http://new.tristatehs.com/ohbjeojbvi/88888.png","offline","malware_download","exe,Qakbot,Quakbot,spx111","https://urlhaus.abuse.ch/url/357058/","lazyactivist192"
 "357057","2020-05-04 15:37:57","http://tristatehs.com/vdvxsfdms/88888.png","offline","malware_download","exe,Qakbot,spx111","https://urlhaus.abuse.ch/url/357057/","lazyactivist192"
 "357056","2020-05-04 15:37:52","http://191.30.120.21:30240/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/357056/","geenensp"
-"357055","2020-05-04 15:37:48","http://199.83.203.229:50173/Mozi.m","online","malware_download","elf,gafgyt,Mozi","https://urlhaus.abuse.ch/url/357055/","07ac0n"
+"357055","2020-05-04 15:37:48","http://199.83.203.229:50173/Mozi.m","offline","malware_download","elf,gafgyt,Mozi","https://urlhaus.abuse.ch/url/357055/","07ac0n"
 "357054","2020-05-04 15:37:44","http://79.41.134.190:40428/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/357054/","geenensp"
-"357053","2020-05-04 15:37:41","http://217.61.22.186/armv5l","online","malware_download","None","https://urlhaus.abuse.ch/url/357053/","bjornruberg"
-"357052","2020-05-04 15:37:39","http://217.61.22.186/armv4l","online","malware_download","None","https://urlhaus.abuse.ch/url/357052/","bjornruberg"
-"357051","2020-05-04 15:37:37","http://217.61.22.186/sparc","online","malware_download","None","https://urlhaus.abuse.ch/url/357051/","bjornruberg"
-"357050","2020-05-04 15:37:36","http://217.61.22.186/m68k","online","malware_download","None","https://urlhaus.abuse.ch/url/357050/","bjornruberg"
-"357049","2020-05-04 15:37:34","http://217.61.22.186/i586","online","malware_download","None","https://urlhaus.abuse.ch/url/357049/","bjornruberg"
-"357048","2020-05-04 15:37:32","http://217.61.22.186/powerpc","online","malware_download","None","https://urlhaus.abuse.ch/url/357048/","bjornruberg"
-"357047","2020-05-04 15:37:31","http://217.61.22.186/i686","online","malware_download","None","https://urlhaus.abuse.ch/url/357047/","bjornruberg"
-"357046","2020-05-04 15:37:28","http://217.61.22.186/armv6l","online","malware_download","None","https://urlhaus.abuse.ch/url/357046/","bjornruberg"
-"357045","2020-05-04 15:37:26","http://217.61.22.186/x86","online","malware_download","None","https://urlhaus.abuse.ch/url/357045/","bjornruberg"
-"357044","2020-05-04 15:37:25","http://217.61.22.186/sh4","online","malware_download","None","https://urlhaus.abuse.ch/url/357044/","bjornruberg"
-"357043","2020-05-04 15:37:23","http://217.61.22.186/mipsel","online","malware_download","None","https://urlhaus.abuse.ch/url/357043/","bjornruberg"
-"357042","2020-05-04 15:37:21","http://217.61.22.186/mips","online","malware_download","None","https://urlhaus.abuse.ch/url/357042/","bjornruberg"
+"357053","2020-05-04 15:37:41","http://217.61.22.186/armv5l","offline","malware_download","None","https://urlhaus.abuse.ch/url/357053/","bjornruberg"
+"357052","2020-05-04 15:37:39","http://217.61.22.186/armv4l","offline","malware_download","None","https://urlhaus.abuse.ch/url/357052/","bjornruberg"
+"357051","2020-05-04 15:37:37","http://217.61.22.186/sparc","offline","malware_download","None","https://urlhaus.abuse.ch/url/357051/","bjornruberg"
+"357050","2020-05-04 15:37:36","http://217.61.22.186/m68k","offline","malware_download","None","https://urlhaus.abuse.ch/url/357050/","bjornruberg"
+"357049","2020-05-04 15:37:34","http://217.61.22.186/i586","offline","malware_download","None","https://urlhaus.abuse.ch/url/357049/","bjornruberg"
+"357048","2020-05-04 15:37:32","http://217.61.22.186/powerpc","offline","malware_download","None","https://urlhaus.abuse.ch/url/357048/","bjornruberg"
+"357047","2020-05-04 15:37:31","http://217.61.22.186/i686","offline","malware_download","None","https://urlhaus.abuse.ch/url/357047/","bjornruberg"
+"357046","2020-05-04 15:37:28","http://217.61.22.186/armv6l","offline","malware_download","None","https://urlhaus.abuse.ch/url/357046/","bjornruberg"
+"357045","2020-05-04 15:37:26","http://217.61.22.186/x86","offline","malware_download","None","https://urlhaus.abuse.ch/url/357045/","bjornruberg"
+"357044","2020-05-04 15:37:25","http://217.61.22.186/sh4","offline","malware_download","None","https://urlhaus.abuse.ch/url/357044/","bjornruberg"
+"357043","2020-05-04 15:37:23","http://217.61.22.186/mipsel","offline","malware_download","None","https://urlhaus.abuse.ch/url/357043/","bjornruberg"
+"357042","2020-05-04 15:37:21","http://217.61.22.186/mips","offline","malware_download","None","https://urlhaus.abuse.ch/url/357042/","bjornruberg"
 "357041","2020-05-04 15:37:20","http://217.61.22.186/oofbins.sh","offline","malware_download","None","https://urlhaus.abuse.ch/url/357041/","bjornruberg"
 "357040","2020-05-04 15:37:17","http://84.228.227.123:31612/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/357040/","geenensp"
 "357039","2020-05-04 15:37:13","http://116.110.18.194:45873/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/357039/","geenensp"
-"357038","2020-05-04 15:37:07","http://89.235.98.60:59655/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/357038/","geenensp"
+"357038","2020-05-04 15:37:07","http://89.235.98.60:59655/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/357038/","geenensp"
 "357037","2020-05-04 15:18:10","http://185.242.104.98/zlem/Mask%20Samples%20and%20Qty.zip","online","malware_download","None","https://urlhaus.abuse.ch/url/357037/","JAMESWT_MHT"
 "357036","2020-05-04 15:18:05","http://185.242.104.98/yjqf/script.vbs","offline","malware_download","None","https://urlhaus.abuse.ch/url/357036/","JAMESWT_MHT"
 "357035","2020-05-04 15:18:05","http://185.242.104.98/yjqf/UploadServices.jpg","offline","malware_download","None","https://urlhaus.abuse.ch/url/357035/","JAMESWT_MHT"
 "357034","2020-05-04 15:18:02","http://185.242.104.98/yjqf/TDRBYJNLWJGBONARPHKGIINWBSGTDMLZELMXGVNQ.jpg","offline","malware_download","None","https://urlhaus.abuse.ch/url/357034/","JAMESWT_MHT"
-"357033","2020-05-04 15:15:40","http://dreamfile.club/files/recovery@sholtd.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/357033/","JAMESWT_MHT"
-"357032","2020-05-04 15:15:37","http://dreamfile.club/files/recovery@customersupport.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/357032/","JAMESWT_MHT"
+"357033","2020-05-04 15:15:40","http://dreamfile.club/files/recovery@sholtd.exe","online","malware_download","None","https://urlhaus.abuse.ch/url/357033/","JAMESWT_MHT"
+"357032","2020-05-04 15:15:37","http://dreamfile.club/files/recovery@customersupport.exe","online","malware_download","None","https://urlhaus.abuse.ch/url/357032/","JAMESWT_MHT"
 "357031","2020-05-04 15:15:33","http://dreamfile.club/files/mainrem.exe","online","malware_download","None","https://urlhaus.abuse.ch/url/357031/","JAMESWT_MHT"
-"357030","2020-05-04 15:15:29","http://dreamfile.club/files/private@customersupport.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/357030/","JAMESWT_MHT"
+"357030","2020-05-04 15:15:29","http://dreamfile.club/files/private@customersupport.exe","online","malware_download","None","https://urlhaus.abuse.ch/url/357030/","JAMESWT_MHT"
 "357029","2020-05-04 15:15:26","http://dreamfile.club/files/bin.exe","offline","malware_download","Formbook","https://urlhaus.abuse.ch/url/357029/","JAMESWT_MHT"
 "357028","2020-05-04 15:15:23","http://dreamfile.club/files/Pb@2.exe","online","malware_download","None","https://urlhaus.abuse.ch/url/357028/","JAMESWT_MHT"
 "357027","2020-05-04 15:15:20","http://dreamfile.club/files/Pb@1.exe","online","malware_download","None","https://urlhaus.abuse.ch/url/357027/","JAMESWT_MHT"
@@ -1136,13 +1361,13 @@
 "357017","2020-05-04 15:06:52","http://125.44.116.149:58778/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/357017/","Gandylyan1"
 "357016","2020-05-04 15:06:41","http://218.93.189.163:56595/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/357016/","Gandylyan1"
 "357015","2020-05-04 15:06:14","http://103.117.153.30:51526/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/357015/","Gandylyan1"
-"357014","2020-05-04 15:06:11","http://221.210.211.16:37461/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/357014/","Gandylyan1"
+"357014","2020-05-04 15:06:11","http://221.210.211.16:37461/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/357014/","Gandylyan1"
 "357013","2020-05-04 15:06:08","http://115.48.34.1:38603/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/357013/","Gandylyan1"
 "357012","2020-05-04 15:06:05","http://111.43.223.168:59292/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/357012/","Gandylyan1"
-"357011","2020-05-04 15:06:00","http://111.43.223.27:49730/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/357011/","Gandylyan1"
+"357011","2020-05-04 15:06:00","http://111.43.223.27:49730/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/357011/","Gandylyan1"
 "357010","2020-05-04 15:05:57","http://115.230.80.192:41905/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/357010/","Gandylyan1"
 "357009","2020-05-04 15:05:50","http://111.43.223.136:35832/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/357009/","Gandylyan1"
-"357008","2020-05-04 15:05:46","http://49.68.129.106:46838/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/357008/","Gandylyan1"
+"357008","2020-05-04 15:05:46","http://49.68.129.106:46838/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/357008/","Gandylyan1"
 "357007","2020-05-04 15:05:14","http://182.127.67.155:56489/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/357007/","Gandylyan1"
 "357006","2020-05-04 15:05:08","http://113.102.205.189:53826/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/357006/","Gandylyan1"
 "357005","2020-05-04 15:05:03","http://115.50.0.131:57940/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/357005/","Gandylyan1"
@@ -1218,55 +1443,55 @@
 "356935","2020-05-04 14:00:25","http://159.65.165.29/SBIDIOT/arm","offline","malware_download","None","https://urlhaus.abuse.ch/url/356935/","JayTHL"
 "356934","2020-05-04 14:00:22","http://112.132.170.190:56699/","offline","malware_download","None","https://urlhaus.abuse.ch/url/356934/","JayTHL"
 "356933","2020-05-04 14:00:20","http://112.132.170.190:56699/i","offline","malware_download","None","https://urlhaus.abuse.ch/url/356933/","JayTHL"
-"356932","2020-05-04 13:38:08","http://fedsfmr.ru/svchost.exe","online","malware_download","AveMariaRAT","https://urlhaus.abuse.ch/url/356932/","JAMESWT_MHT"
+"356932","2020-05-04 13:38:08","http://fedsfmr.ru/svchost.exe","offline","malware_download","AveMariaRAT","https://urlhaus.abuse.ch/url/356932/","JAMESWT_MHT"
 "356931","2020-05-04 13:21:05","http://164.132.92.180//x86","online","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/356931/","Gandylyan1"
 "356930","2020-05-04 13:21:03","http://164.132.92.180//mips","online","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/356930/","Gandylyan1"
 "356929","2020-05-04 13:13:06","https://paste.ee/r/13DbH","offline","malware_download","None","https://urlhaus.abuse.ch/url/356929/","JAMESWT_MHT"
 "356928","2020-05-04 13:00:34","https://paste.ee/r/2TlZI","offline","malware_download","None","https://urlhaus.abuse.ch/url/356928/","JAMESWT_MHT"
 "356927","2020-05-04 12:44:08","http://maringareservas.com.br/Server","offline","malware_download","None","https://urlhaus.abuse.ch/url/356927/","JAMESWT_MHT"
 "356926","2020-05-04 12:44:06","http://maringareservas.com.br/new%201.hta","offline","malware_download","None","https://urlhaus.abuse.ch/url/356926/","JAMESWT_MHT"
-"356925","2020-05-04 12:43:21","http://maringareservas.com.br/Doc1.rtf","online","malware_download","None","https://urlhaus.abuse.ch/url/356925/","JAMESWT_MHT"
-"356924","2020-05-04 12:43:03","http://40.85.183.45/cock/cock.exe","online","malware_download","Formbook","https://urlhaus.abuse.ch/url/356924/","JAMESWT_MHT"
+"356925","2020-05-04 12:43:21","http://maringareservas.com.br/Doc1.rtf","offline","malware_download","None","https://urlhaus.abuse.ch/url/356925/","JAMESWT_MHT"
+"356924","2020-05-04 12:43:03","http://40.85.183.45/cock/cock.exe","offline","malware_download","Formbook","https://urlhaus.abuse.ch/url/356924/","JAMESWT_MHT"
 "356923","2020-05-04 12:42:10","https://screw-malwrhunterteam.com/Scan.txt","offline","malware_download","None","https://urlhaus.abuse.ch/url/356923/","JAMESWT_MHT"
 "356922","2020-05-04 12:42:06","https://screw-malwrhunterteam.com/1.xls","offline","malware_download","None","https://urlhaus.abuse.ch/url/356922/","JAMESWT_MHT"
 "356921","2020-05-04 12:41:06","https://screw-malwrhunterteam.com/Scan.exe","offline","malware_download","NetWire","https://urlhaus.abuse.ch/url/356921/","JAMESWT_MHT"
 "356920","2020-05-04 12:38:05","https://askaig.co.uk/supplier_remittance_batch_TRI.jar","offline","malware_download","None","https://urlhaus.abuse.ch/url/356920/","JAMESWT_MHT"
 "356919","2020-05-04 12:34:17","http://206.189.92.32/tmp/salt-store","online","malware_download","None","https://urlhaus.abuse.ch/url/356919/","JAMESWT_MHT"
 "356918","2020-05-04 12:33:08","http://206.189.92.32/tmp/v","online","malware_download","None","https://urlhaus.abuse.ch/url/356918/","JAMESWT_MHT"
-"356917","2020-05-04 12:30:06","http://193.142.146.30/bins/UnHAnaAW.arm5","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356917/","zbetcheckin"
-"356916","2020-05-04 12:30:03","http://193.142.146.30/bins/UnHAnaAW.ppc","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356916/","zbetcheckin"
-"356915","2020-05-04 12:27:07","http://193.142.146.30/bins/UnHAnaAW.m68k","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356915/","zbetcheckin"
+"356917","2020-05-04 12:30:06","http://193.142.146.30/bins/UnHAnaAW.arm5","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356917/","zbetcheckin"
+"356916","2020-05-04 12:30:03","http://193.142.146.30/bins/UnHAnaAW.ppc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356916/","zbetcheckin"
+"356915","2020-05-04 12:27:07","http://193.142.146.30/bins/UnHAnaAW.m68k","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356915/","zbetcheckin"
 "356914","2020-05-04 12:27:05","http://37.49.226.210/bins/UnHAnaAW.arm","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356914/","zbetcheckin"
 "356913","2020-05-04 12:27:02","http://37.49.226.210/bins/UnHAnaAW.spc","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356913/","zbetcheckin"
 "356912","2020-05-04 12:26:05","http://37.49.226.210/bins/UnHAnaAW.arm7","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356912/","zbetcheckin"
-"356911","2020-05-04 12:26:03","http://193.142.146.30/bins/UnHAnaAW.arm7","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356911/","zbetcheckin"
-"356910","2020-05-04 12:25:05","http://193.142.146.30/bins/UnHAnaAW.spc","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356910/","zbetcheckin"
+"356911","2020-05-04 12:26:03","http://193.142.146.30/bins/UnHAnaAW.arm7","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356911/","zbetcheckin"
+"356910","2020-05-04 12:25:05","http://193.142.146.30/bins/UnHAnaAW.spc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356910/","zbetcheckin"
 "356909","2020-05-04 12:25:03","http://37.49.226.210/bins/UnHAnaAW.m68k","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356909/","zbetcheckin"
 "356908","2020-05-04 12:21:10","http://37.49.226.210/bins/UnHAnaAW.sh4","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356908/","zbetcheckin"
-"356907","2020-05-04 12:21:08","http://193.142.146.30/bins/UnHAnaAW.mips","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356907/","zbetcheckin"
+"356907","2020-05-04 12:21:08","http://193.142.146.30/bins/UnHAnaAW.mips","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356907/","zbetcheckin"
 "356906","2020-05-04 12:21:06","http://37.49.226.210/bins/UnHAnaAW.ppc","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356906/","zbetcheckin"
 "356905","2020-05-04 12:21:04","http://37.49.226.210/bins/UnHAnaAW.arm6","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356905/","zbetcheckin"
-"356904","2020-05-04 12:21:02","http://193.142.146.30/bins/UnHAnaAW.arm6","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356904/","zbetcheckin"
+"356904","2020-05-04 12:21:02","http://193.142.146.30/bins/UnHAnaAW.arm6","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356904/","zbetcheckin"
 "356903","2020-05-04 12:20:06","http://37.49.226.210/bins/UnHAnaAW.mips","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356903/","zbetcheckin"
 "356902","2020-05-04 12:20:04","http://37.49.226.210/bins/UnHAnaAW.mpsl","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356902/","zbetcheckin"
 "356901","2020-05-04 12:16:13","http://37.49.226.210/bins/UnHAnaAW.arm5","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356901/","zbetcheckin"
-"356900","2020-05-04 12:16:11","http://193.142.146.30/bins/UnHAnaAW.sh4","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356900/","zbetcheckin"
-"356899","2020-05-04 12:16:09","http://193.142.146.30/bins/UnHAnaAW.mpsl","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356899/","zbetcheckin"
-"356898","2020-05-04 12:16:03","http://193.142.146.30/bins/UnHAnaAW.arm","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356898/","zbetcheckin"
+"356900","2020-05-04 12:16:11","http://193.142.146.30/bins/UnHAnaAW.sh4","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356900/","zbetcheckin"
+"356899","2020-05-04 12:16:09","http://193.142.146.30/bins/UnHAnaAW.mpsl","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356899/","zbetcheckin"
+"356898","2020-05-04 12:16:03","http://193.142.146.30/bins/UnHAnaAW.arm","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356898/","zbetcheckin"
 "356897","2020-05-04 12:06:55","http://49.115.207.17:58665/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356897/","Gandylyan1"
 "356896","2020-05-04 12:06:47","http://116.114.95.168:43982/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356896/","Gandylyan1"
 "356895","2020-05-04 12:06:44","http://61.52.218.18:35424/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356895/","Gandylyan1"
 "356894","2020-05-04 12:06:40","http://172.36.13.65:41363/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356894/","Gandylyan1"
 "356893","2020-05-04 12:06:08","http://116.114.95.34:53764/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356893/","Gandylyan1"
-"356892","2020-05-04 12:04:55","http://162.212.114.32:38295/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356892/","Gandylyan1"
-"356891","2020-05-04 12:04:51","http://222.105.26.35:58911/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356891/","Gandylyan1"
+"356892","2020-05-04 12:04:55","http://162.212.114.32:38295/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356892/","Gandylyan1"
+"356891","2020-05-04 12:04:51","http://222.105.26.35:58911/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356891/","Gandylyan1"
 "356890","2020-05-04 12:04:47","http://182.114.249.171:38664/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356890/","Gandylyan1"
 "356889","2020-05-04 12:04:44","http://111.42.66.7:36868/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356889/","Gandylyan1"
 "356888","2020-05-04 12:04:22","http://36.33.248.102:46814/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356888/","Gandylyan1"
 "356887","2020-05-04 12:04:17","http://120.209.99.122:34448/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356887/","Gandylyan1"
 "356886","2020-05-04 12:04:12","http://115.49.75.79:43198/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356886/","Gandylyan1"
-"356885","2020-05-04 12:04:10","http://42.238.149.21:56193/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356885/","Gandylyan1"
-"356884","2020-05-04 12:04:06","http://27.41.225.96:56250/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356884/","Gandylyan1"
+"356885","2020-05-04 12:04:10","http://42.238.149.21:56193/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356885/","Gandylyan1"
+"356884","2020-05-04 12:04:06","http://27.41.225.96:56250/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356884/","Gandylyan1"
 "356883","2020-05-04 12:04:02","http://183.7.34.210:35467/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356883/","Gandylyan1"
 "356882","2020-05-04 12:03:59","http://211.137.225.54:32893/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356882/","Gandylyan1"
 "356881","2020-05-04 12:03:56","http://111.43.223.164:37954/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356881/","Gandylyan1"
@@ -1286,7 +1511,7 @@
 "356867","2020-05-04 11:40:04","http://45.61.48.168/snype.sh","offline","malware_download","bash,elf,gafgyt","https://urlhaus.abuse.ch/url/356867/","0xrb"
 "356866","2020-05-04 11:39:05","http://136.244.77.163/bins/spc","offline","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/356866/","Gandylyan1"
 "356865","2020-05-04 11:39:03","http://136.244.77.163/bins/x86","offline","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/356865/","Gandylyan1"
-"356864","2020-05-04 11:38:05","http://193.142.146.30/bins/UnHAnaAW.x86","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356864/","0xrb"
+"356864","2020-05-04 11:38:05","http://193.142.146.30/bins/UnHAnaAW.x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356864/","0xrb"
 "356863","2020-05-04 11:38:03","http://37.49.226.210/bins/UnHAnaAW.x86","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356863/","0xrb"
 "356862","2020-05-04 10:59:07","http://aaload05.top/download.php?file=5.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/356862/","zbetcheckin"
 "356861","2020-05-04 10:02:04","http://107.174.83.166/beastmode/b3astmode.ppc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356861/","zbetcheckin"
@@ -1321,7 +1546,7 @@
 "356832","2020-05-04 09:04:55","http://42.230.252.207:46581/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356832/","Gandylyan1"
 "356831","2020-05-04 09:04:50","http://172.45.60.151:56285/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356831/","Gandylyan1"
 "356830","2020-05-04 09:04:18","http://110.179.50.161:49224/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356830/","Gandylyan1"
-"356829","2020-05-04 09:04:13","http://112.123.62.200:42743/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356829/","Gandylyan1"
+"356829","2020-05-04 09:04:13","http://112.123.62.200:42743/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356829/","Gandylyan1"
 "356828","2020-05-04 09:03:32","http://222.140.37.5:51960/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356828/","Gandylyan1"
 "356827","2020-05-04 09:03:28","http://162.212.115.219:49659/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356827/","Gandylyan1"
 "356826","2020-05-04 09:03:23","http://116.114.95.206:46666/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356826/","Gandylyan1"
@@ -1353,7 +1578,7 @@
 "356800","2020-05-04 07:17:03","http://45.147.228.245/window/ZMtnnQkt9UvAAAb.exe","offline","malware_download","exe,NetWire","https://urlhaus.abuse.ch/url/356800/","zbetcheckin"
 "356799","2020-05-04 06:34:23","http://149.56.79.215/Binarys/atomic.m68k","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356799/","zbetcheckin"
 "356798","2020-05-04 06:34:21","http://149.56.79.215/Binarys/atomic.arm5","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356798/","zbetcheckin"
-"356797","2020-05-04 06:34:18","http://dreamfile.club//files/recovery@sholtd.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/356797/","zbetcheckin"
+"356797","2020-05-04 06:34:18","http://dreamfile.club//files/recovery@sholtd.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/356797/","zbetcheckin"
 "356796","2020-05-04 06:34:11","http://149.56.79.215/Binarys/atomic.mips","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356796/","zbetcheckin"
 "356795","2020-05-04 06:34:08","http://149.56.79.215/Binarys/atomic.ppc","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356795/","zbetcheckin"
 "356794","2020-05-04 06:34:06","http://149.56.79.215/Binarys/atomic.mpsl","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356794/","zbetcheckin"
@@ -1362,7 +1587,7 @@
 "356791","2020-05-04 06:33:48","http://149.56.79.215/Binarys/atomic.sh4","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356791/","zbetcheckin"
 "356790","2020-05-04 06:33:46","http://dreamfile.club//files/Pb@2.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/356790/","zbetcheckin"
 "356789","2020-05-04 06:33:37","http://149.56.79.215/Binarys/atomic.arm","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356789/","zbetcheckin"
-"356788","2020-05-04 06:33:34","http://dreamfile.club//files/private@customersupport.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/356788/","zbetcheckin"
+"356788","2020-05-04 06:33:34","http://dreamfile.club//files/private@customersupport.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/356788/","zbetcheckin"
 "356787","2020-05-04 06:33:31","http://dreamfile.club//files/mainrem.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/356787/","zbetcheckin"
 "356786","2020-05-04 06:33:26","http://dreamfile.club//files/Pb@1.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/356786/","zbetcheckin"
 "356785","2020-05-04 06:33:13","http://dreamfile.club//files/Friendz@kl.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/356785/","zbetcheckin"
@@ -1376,7 +1601,7 @@
 "356777","2020-05-04 06:06:52","http://111.42.66.43:54641/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356777/","Gandylyan1"
 "356776","2020-05-04 06:06:48","http://123.11.25.254:57113/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356776/","Gandylyan1"
 "356775","2020-05-04 06:06:45","http://116.114.95.104:55955/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356775/","Gandylyan1"
-"356774","2020-05-04 06:06:41","http://42.235.49.199:42770/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356774/","Gandylyan1"
+"356774","2020-05-04 06:06:41","http://42.235.49.199:42770/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356774/","Gandylyan1"
 "356773","2020-05-04 06:06:38","http://112.17.78.202:46959/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356773/","Gandylyan1"
 "356772","2020-05-04 06:06:34","http://42.239.120.136:34566/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356772/","Gandylyan1"
 "356771","2020-05-04 06:06:02","http://115.58.216.246:40773/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356771/","Gandylyan1"
@@ -1386,15 +1611,15 @@
 "356767","2020-05-04 06:05:35","http://31.146.124.122:59537/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356767/","Gandylyan1"
 "356766","2020-05-04 06:05:32","http://111.43.223.147:35504/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356766/","Gandylyan1"
 "356765","2020-05-04 06:05:29","http://114.239.189.27:5220/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356765/","Gandylyan1"
-"356764","2020-05-04 06:05:25","http://42.230.51.38:58216/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356764/","Gandylyan1"
-"356763","2020-05-04 06:05:21","http://182.113.221.17:58029/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356763/","Gandylyan1"
+"356764","2020-05-04 06:05:25","http://42.230.51.38:58216/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356764/","Gandylyan1"
+"356763","2020-05-04 06:05:21","http://182.113.221.17:58029/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356763/","Gandylyan1"
 "356762","2020-05-04 06:05:18","http://106.110.205.207:60753/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356762/","Gandylyan1"
 "356761","2020-05-04 06:05:12","http://199.83.204.188:42713/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356761/","Gandylyan1"
 "356760","2020-05-04 06:05:08","http://110.18.194.20:57016/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356760/","Gandylyan1"
 "356759","2020-05-04 06:05:05","http://58.243.20.165:43481/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356759/","Gandylyan1"
 "356758","2020-05-04 06:04:04","http://123.11.39.188:39072/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356758/","Gandylyan1"
 "356757","2020-05-04 05:45:14","http://3ypackaging.com/pdf/SWIFT_payment_copy,pdf.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/356757/","zbetcheckin"
-"356756","2020-05-04 05:45:05","http://dreamfile.club//files/recovery@customersupport.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/356756/","zbetcheckin"
+"356756","2020-05-04 05:45:05","http://dreamfile.club//files/recovery@customersupport.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/356756/","zbetcheckin"
 "356755","2020-05-04 05:44:44","http://193.53.163.179:56188/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/356755/","geenensp"
 "356754","2020-05-04 05:44:39","http://187.45.49.101:30914/.i","online","malware_download","ascii","https://urlhaus.abuse.ch/url/356754/","geenensp"
 "356753","2020-05-04 05:44:25","http://80.174.46.113:26715/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/356753/","geenensp"
@@ -1405,15 +1630,15 @@
 "356748","2020-05-04 05:43:18","http://bigdealist.com/update.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/356748/","neoxmorpheus1"
 "356747","2020-05-04 05:43:09","http://118.33.41.227:47779/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/356747/","geenensp"
 "356746","2020-05-04 05:43:03","http://45.147.228.245/walmix/s3.EXE","offline","malware_download","exe,ParallaxRAT","https://urlhaus.abuse.ch/url/356746/","jstrosch"
-"356745","2020-05-04 04:49:26","https://dreamfile.club/files/private@customersupport.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/356745/","zbetcheckin"
-"356744","2020-05-04 04:49:23","https://dreamfile.club/files/recovery@sholtd.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/356744/","zbetcheckin"
+"356745","2020-05-04 04:49:26","https://dreamfile.club/files/private@customersupport.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/356745/","zbetcheckin"
+"356744","2020-05-04 04:49:23","https://dreamfile.club/files/recovery@sholtd.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/356744/","zbetcheckin"
 "356743","2020-05-04 04:49:19","https://dreamfile.club/files/Friendz@kl.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/356743/","zbetcheckin"
 "356742","2020-05-04 04:49:16","https://dreamfile.club/files/mainrem.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/356742/","zbetcheckin"
 "356741","2020-05-04 04:49:12","https://dreamfile.club/files/bin.exe","offline","malware_download","exe,Formbook","https://urlhaus.abuse.ch/url/356741/","zbetcheckin"
 "356740","2020-05-04 04:45:12","https://dreamfile.club/files/Nano@2021.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/356740/","zbetcheckin"
 "356739","2020-05-04 04:45:09","https://dreamfile.club/files/Pb@1.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/356739/","zbetcheckin"
 "356738","2020-05-04 04:45:05","https://dreamfile.club/files/Pb@2.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/356738/","zbetcheckin"
-"356737","2020-05-04 04:29:07","https://dreamfile.club/files/recovery@customersupport.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/356737/","zbetcheckin"
+"356737","2020-05-04 04:29:07","https://dreamfile.club/files/recovery@customersupport.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/356737/","zbetcheckin"
 "356736","2020-05-04 04:05:20","http://files.rakbot.ru/releases/RakBot-0.8.2.1_DRP_FIX.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/356736/","zbetcheckin"
 "356735","2020-05-04 04:05:08","http://rakbot.g3t.ru/releases/RakBot-0.8.2.1_DRP_FIX.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/356735/","zbetcheckin"
 "356734","2020-05-04 03:04:30","http://211.137.225.126:33457/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356734/","Gandylyan1"
@@ -1482,13 +1707,13 @@
 "356671","2020-05-03 21:04:54","http://111.43.223.33:39859/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356671/","Gandylyan1"
 "356670","2020-05-03 21:04:51","http://123.4.174.127:47403/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356670/","Gandylyan1"
 "356669","2020-05-03 21:04:47","http://221.5.28.114:56642/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356669/","Gandylyan1"
-"356668","2020-05-03 21:04:44","http://218.21.170.96:56901/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356668/","Gandylyan1"
+"356668","2020-05-03 21:04:44","http://218.21.170.96:56901/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356668/","Gandylyan1"
 "356667","2020-05-03 21:04:41","http://36.105.100.61:60506/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356667/","Gandylyan1"
 "356666","2020-05-03 21:04:30","http://112.17.130.136:59992/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356666/","Gandylyan1"
 "356665","2020-05-03 21:04:26","http://116.149.247.146:41126/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356665/","Gandylyan1"
 "356664","2020-05-03 21:04:21","http://123.11.74.12:37492/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356664/","Gandylyan1"
 "356663","2020-05-03 21:04:18","http://111.43.223.158:41712/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356663/","Gandylyan1"
-"356662","2020-05-03 21:04:14","http://116.26.114.202:44737/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356662/","Gandylyan1"
+"356662","2020-05-03 21:04:14","http://116.26.114.202:44737/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356662/","Gandylyan1"
 "356661","2020-05-03 21:04:09","http://180.123.219.198:55240/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356661/","Gandylyan1"
 "356660","2020-05-03 21:04:04","http://115.49.147.197:38119/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356660/","Gandylyan1"
 "356659","2020-05-03 20:48:18","http://142.44.211.179/mips","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/356659/","zbetcheckin"
@@ -1518,7 +1743,7 @@
 "356635","2020-05-03 18:07:02","http://45.14.151.249/mips","online","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/356635/","Gandylyan1"
 "356634","2020-05-03 18:06:22","http://162.212.115.37:54344/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356634/","Gandylyan1"
 "356633","2020-05-03 18:06:17","http://111.42.66.12:46862/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356633/","Gandylyan1"
-"356632","2020-05-03 18:06:13","http://42.239.91.19:50751/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356632/","Gandylyan1"
+"356632","2020-05-03 18:06:13","http://42.239.91.19:50751/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356632/","Gandylyan1"
 "356631","2020-05-03 18:06:10","http://172.39.23.143:38823/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356631/","Gandylyan1"
 "356630","2020-05-03 18:05:38","http://221.210.211.7:51440/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356630/","Gandylyan1"
 "356629","2020-05-03 18:05:35","http://172.45.20.220:47634/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356629/","Gandylyan1"
@@ -1540,9 +1765,9 @@
 "356613","2020-05-03 15:58:05","http://88.218.17.197/Seijin.arm6","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/356613/","zbetcheckin"
 "356612","2020-05-03 15:58:03","http://88.218.17.197/Seijin.sh4","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/356612/","zbetcheckin"
 "356611","2020-05-03 15:08:59","http://27.41.155.176:55270/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356611/","Gandylyan1"
-"356610","2020-05-03 15:08:56","http://27.41.135.19:52345/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356610/","Gandylyan1"
+"356610","2020-05-03 15:08:56","http://27.41.135.19:52345/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356610/","Gandylyan1"
 "356609","2020-05-03 15:08:50","http://1.246.222.107:2853/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356609/","Gandylyan1"
-"356608","2020-05-03 15:08:46","http://115.49.249.110:33393/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356608/","Gandylyan1"
+"356608","2020-05-03 15:08:46","http://115.49.249.110:33393/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356608/","Gandylyan1"
 "356607","2020-05-03 15:08:42","http://172.39.24.229:59192/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356607/","Gandylyan1"
 "356606","2020-05-03 15:08:10","http://27.41.223.172:33337/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356606/","Gandylyan1"
 "356605","2020-05-03 15:08:02","http://222.74.186.136:53408/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356605/","Gandylyan1"
@@ -1557,7 +1782,7 @@
 "356596","2020-05-03 15:05:13","http://111.42.102.83:60218/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356596/","Gandylyan1"
 "356595","2020-05-03 15:05:10","http://123.10.137.138:37591/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356595/","Gandylyan1"
 "356594","2020-05-03 15:05:00","http://49.143.32.92:4090/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356594/","Gandylyan1"
-"356593","2020-05-03 15:04:55","http://61.54.249.180:52960/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356593/","Gandylyan1"
+"356593","2020-05-03 15:04:55","http://61.54.249.180:52960/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356593/","Gandylyan1"
 "356592","2020-05-03 15:04:52","http://116.114.95.146:38492/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356592/","Gandylyan1"
 "356591","2020-05-03 14:19:34","http://saglikbakanli-hediyeinternet.org/20gb_hediye_internet.apk","offline","malware_download","anubis,apk ","https://urlhaus.abuse.ch/url/356591/","mertcangokgoz"
 "356590","2020-05-03 14:03:08","http://192.236.146.53:1691/dvrbot.x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356590/","zbetcheckin"
@@ -1570,7 +1795,7 @@
 "356583","2020-05-03 12:04:51","http://180.104.182.79:53749/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356583/","Gandylyan1"
 "356582","2020-05-03 12:04:44","http://39.148.41.86:48051/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356582/","Gandylyan1"
 "356581","2020-05-03 12:04:31","http://116.114.95.3:42743/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356581/","Gandylyan1"
-"356580","2020-05-03 12:04:24","http://182.126.183.47:51058/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356580/","Gandylyan1"
+"356580","2020-05-03 12:04:24","http://182.126.183.47:51058/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356580/","Gandylyan1"
 "356579","2020-05-03 12:04:20","http://42.225.204.32:59352/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356579/","Gandylyan1"
 "356578","2020-05-03 12:04:16","http://182.126.214.177:50081/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356578/","Gandylyan1"
 "356577","2020-05-03 12:04:11","http://120.212.211.71:53452/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356577/","Gandylyan1"
@@ -1598,9 +1823,9 @@
 "356555","2020-05-03 09:04:30","http://112.27.91.212:41392/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356555/","Gandylyan1"
 "356554","2020-05-03 09:04:16","http://1.246.223.4:1823/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356554/","Gandylyan1"
 "356553","2020-05-03 09:04:11","http://36.34.234.84:41091/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356553/","Gandylyan1"
-"356552","2020-05-03 09:04:09","http://61.168.45.178:47562/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356552/","Gandylyan1"
+"356552","2020-05-03 09:04:09","http://61.168.45.178:47562/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356552/","Gandylyan1"
 "356551","2020-05-03 09:04:04","http://124.230.97.68:43761/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356551/","Gandylyan1"
-"356550","2020-05-03 08:58:06","http://118.38.143.102:4391/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/356550/","geenensp"
+"356550","2020-05-03 08:58:06","http://118.38.143.102:4391/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/356550/","geenensp"
 "356549","2020-05-03 08:36:10","https://bitbucket.org/nilsudemir1881/hayatevesigar/downloads/evdekal.apk","offline","malware_download","None","https://urlhaus.abuse.ch/url/356549/","mertcangokgoz"
 "356548","2020-05-03 08:21:27","http://220.80.136.75:39857/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/356548/","geenensp"
 "356547","2020-05-03 08:21:22","https://hediyeinternetpaketleri.com/30gbHediye.apk","offline","malware_download","apk ,Cerberus","https://urlhaus.abuse.ch/url/356547/","mertcangokgoz"
@@ -1645,7 +1870,7 @@
 "356508","2020-05-03 06:03:58","http://182.112.26.101:55480/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356508/","Gandylyan1"
 "356507","2020-05-03 06:03:25","http://77.43.251.196:34278/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356507/","Gandylyan1"
 "356506","2020-05-03 06:03:21","http://42.231.75.21:49382/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356506/","Gandylyan1"
-"356505","2020-05-03 06:03:17","http://221.210.211.9:48495/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356505/","Gandylyan1"
+"356505","2020-05-03 06:03:17","http://221.210.211.9:48495/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356505/","Gandylyan1"
 "356504","2020-05-03 06:03:14","http://110.179.28.109:49224/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356504/","Gandylyan1"
 "356503","2020-05-03 06:03:11","http://49.81.91.113:49554/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356503/","Gandylyan1"
 "356502","2020-05-03 06:03:05","http://199.83.203.142:41866/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356502/","Gandylyan1"
@@ -1659,7 +1884,7 @@
 "356494","2020-05-03 03:05:44","http://199.83.204.187:44343/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356494/","Gandylyan1"
 "356493","2020-05-03 03:05:40","http://115.53.128.194:51467/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356493/","Gandylyan1"
 "356492","2020-05-03 03:05:34","http://124.119.139.208:50377/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356492/","Gandylyan1"
-"356491","2020-05-03 03:05:29","http://221.210.211.8:33782/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356491/","Gandylyan1"
+"356491","2020-05-03 03:05:29","http://221.210.211.8:33782/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356491/","Gandylyan1"
 "356490","2020-05-03 03:05:25","http://125.42.254.115:33045/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356490/","Gandylyan1"
 "356489","2020-05-03 03:05:19","http://221.15.3.111:49122/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356489/","Gandylyan1"
 "356488","2020-05-03 03:05:12","http://199.83.204.188:53195/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356488/","Gandylyan1"
@@ -1798,22 +2023,22 @@
 "356355","2020-05-02 15:03:51","http://219.157.65.73:60819/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356355/","Gandylyan1"
 "356354","2020-05-02 15:03:05","http://112.27.91.185:49075/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356354/","Gandylyan1"
 "356353","2020-05-02 14:17:05","http://14.53.20.41:22859/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/356353/","geenensp"
-"356352","2020-05-02 14:11:18","http://112.133.195.58/telnetmysh4","online","malware_download","elf,tsunami","https://urlhaus.abuse.ch/url/356352/","zbetcheckin"
-"356351","2020-05-02 14:11:16","http://112.133.195.58/telnetmyi686","online","malware_download","elf","https://urlhaus.abuse.ch/url/356351/","zbetcheckin"
-"356350","2020-05-02 14:11:13","http://112.133.195.58/telnetmym86k","online","malware_download","elf","https://urlhaus.abuse.ch/url/356350/","zbetcheckin"
-"356349","2020-05-02 14:11:09","http://112.133.195.58/telnetmymipsel","online","malware_download","elf","https://urlhaus.abuse.ch/url/356349/","zbetcheckin"
-"356348","2020-05-02 14:11:06","http://112.133.195.58/telnetmyx86","online","malware_download","elf","https://urlhaus.abuse.ch/url/356348/","zbetcheckin"
-"356347","2020-05-02 14:11:03","http://112.133.195.58/telnetmyi586","online","malware_download","elf","https://urlhaus.abuse.ch/url/356347/","zbetcheckin"
-"356346","2020-05-02 14:07:11","http://112.133.195.58/telnetmymips","online","malware_download","elf","https://urlhaus.abuse.ch/url/356346/","zbetcheckin"
-"356345","2020-05-02 14:07:07","http://112.133.195.58/telnetmypowerpc","online","malware_download","elf","https://urlhaus.abuse.ch/url/356345/","zbetcheckin"
-"356344","2020-05-02 14:07:04","http://112.133.195.58/telnetmyarmv6","online","malware_download","elf,tsunami","https://urlhaus.abuse.ch/url/356344/","zbetcheckin"
-"356343","2020-05-02 13:45:09","http://125.69.86.192:36608/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/356343/","zbetcheckin"
+"356352","2020-05-02 14:11:18","http://112.133.195.58/telnetmysh4","offline","malware_download","elf,tsunami","https://urlhaus.abuse.ch/url/356352/","zbetcheckin"
+"356351","2020-05-02 14:11:16","http://112.133.195.58/telnetmyi686","offline","malware_download","elf","https://urlhaus.abuse.ch/url/356351/","zbetcheckin"
+"356350","2020-05-02 14:11:13","http://112.133.195.58/telnetmym86k","offline","malware_download","elf","https://urlhaus.abuse.ch/url/356350/","zbetcheckin"
+"356349","2020-05-02 14:11:09","http://112.133.195.58/telnetmymipsel","offline","malware_download","elf","https://urlhaus.abuse.ch/url/356349/","zbetcheckin"
+"356348","2020-05-02 14:11:06","http://112.133.195.58/telnetmyx86","offline","malware_download","elf","https://urlhaus.abuse.ch/url/356348/","zbetcheckin"
+"356347","2020-05-02 14:11:03","http://112.133.195.58/telnetmyi586","offline","malware_download","elf","https://urlhaus.abuse.ch/url/356347/","zbetcheckin"
+"356346","2020-05-02 14:07:11","http://112.133.195.58/telnetmymips","offline","malware_download","elf","https://urlhaus.abuse.ch/url/356346/","zbetcheckin"
+"356345","2020-05-02 14:07:07","http://112.133.195.58/telnetmypowerpc","offline","malware_download","elf","https://urlhaus.abuse.ch/url/356345/","zbetcheckin"
+"356344","2020-05-02 14:07:04","http://112.133.195.58/telnetmyarmv6","offline","malware_download","elf,tsunami","https://urlhaus.abuse.ch/url/356344/","zbetcheckin"
+"356343","2020-05-02 13:45:09","http://125.69.86.192:36608/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/356343/","zbetcheckin"
 "356342","2020-05-02 13:18:05","http://118.232.209.108:27409/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/356342/","geenensp"
 "356341","2020-05-02 12:05:56","http://114.32.238.88:50478/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356341/","Gandylyan1"
 "356340","2020-05-02 12:05:50","http://42.230.3.101:42944/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356340/","Gandylyan1"
 "356339","2020-05-02 12:05:46","http://220.125.119.222:2587/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356339/","Gandylyan1"
 "356338","2020-05-02 12:05:13","http://182.127.80.89:38704/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356338/","Gandylyan1"
-"356337","2020-05-02 12:05:09","http://110.155.54.100:52706/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356337/","Gandylyan1"
+"356337","2020-05-02 12:05:09","http://110.155.54.100:52706/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356337/","Gandylyan1"
 "356336","2020-05-02 12:04:56","http://219.156.173.6:42733/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356336/","Gandylyan1"
 "356335","2020-05-02 12:04:50","http://221.15.248.24:50300/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356335/","Gandylyan1"
 "356334","2020-05-02 12:04:41","http://223.93.171.210:41388/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356334/","Gandylyan1"
@@ -1853,7 +2078,7 @@
 "356300","2020-05-02 10:01:40","http://arufels.com/explfiles/nanocrytped.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/356300/","gorimpthon"
 "356299","2020-05-02 10:01:08","http://arufels.com/explfiles/origv2crypted.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/356299/","gorimpthon"
 "356298","2020-05-02 10:00:35","http://arufels.com/explfiles/origv4crytped.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/356298/","gorimpthon"
-"356297","2020-05-02 09:49:29","http://118.38.242.167:3647/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/356297/","geenensp"
+"356297","2020-05-02 09:49:29","http://118.38.242.167:3647/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/356297/","geenensp"
 "356296","2020-05-02 09:49:23","http://45.154.1.58/bins/Gummy.mips","offline","malware_download","32-bit,elf,mips","https://urlhaus.abuse.ch/url/356296/","geenensp"
 "356295","2020-05-02 09:49:21","http://45.154.1.58/bins/Gummy.x86","offline","malware_download","32-bit,elf,x86-32","https://urlhaus.abuse.ch/url/356295/","geenensp"
 "356294","2020-05-02 09:49:19","http://hediyeler10gb-ramazan.net/hediye10gb.apk","offline","malware_download","anubis,apk ","https://urlhaus.abuse.ch/url/356294/","mertcangokgoz"
@@ -1994,8 +2219,8 @@
 "356159","2020-05-02 07:21:06","https://tatyefabio.clareiamente.com/iznyyhruec/ServiceContractAgreement_7550_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356159/","spamhaus"
 "356158","2020-05-02 07:21:03","https://tatyefabio.clareiamente.com/iznyyhruec/3252/ServiceContractAgreement_3252_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356158/","spamhaus"
 "356157","2020-05-02 07:20:05","http://healthcaring.xyz/wp-content/uploads/2020/04/tcabb/ServiceContractAgreement_1585_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356157/","spamhaus"
-"356156","2020-05-02 07:20:02","http://vistanewsite.ir/wp-content/uploads/2020/05/fraplwhzbdb/ServiceContractAgreement_2821_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356156/","spamhaus"
-"356155","2020-05-02 07:20:00","http://vistanewsite.ir/wp-content/uploads/2020/05/fraplwhzbdb/5750/ServiceContractAgreement_5750_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356155/","spamhaus"
+"356156","2020-05-02 07:20:02","http://vistanewsite.ir/wp-content/uploads/2020/05/fraplwhzbdb/ServiceContractAgreement_2821_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356156/","spamhaus"
+"356155","2020-05-02 07:20:00","http://vistanewsite.ir/wp-content/uploads/2020/05/fraplwhzbdb/5750/ServiceContractAgreement_5750_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356155/","spamhaus"
 "356154","2020-05-02 07:19:58","https://souq-aljwalat.com/wp-content/uploads/2020/05/zqwxkoa/6284/ServiceContractAgreement_6284_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356154/","spamhaus"
 "356153","2020-05-02 07:19:56","http://healthcaring.xyz/wp-content/uploads/2020/04/tcabb/4891/ServiceContractAgreement_4891_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356153/","spamhaus"
 "356152","2020-05-02 07:19:54","https://tatyefabio.clareiamente.com/iznyyhruec/ServiceContractAgreement_1163_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356152/","spamhaus"
@@ -2003,7 +2228,7 @@
 "356150","2020-05-02 07:19:47","http://www.earthfields.co.ke/wp-content/uploads/2020/05/pvosvygcc/ServiceContractAgreement_0770_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356150/","spamhaus"
 "356149","2020-05-02 07:19:44","https://scoda.ir/wp-content/plugins/apikey/iehi/3675/ServiceContractAgreement_3675_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356149/","spamhaus"
 "356148","2020-05-02 07:19:41","http://obinspirations.com/wp-content/uploads/2020/05/adnkf/ServiceContractAgreement_0783_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356148/","spamhaus"
-"356147","2020-05-02 07:19:38","http://vistanewsite.ir/wp-content/uploads/2020/05/fraplwhzbdb/ServiceContractAgreement_4055_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356147/","spamhaus"
+"356147","2020-05-02 07:19:38","http://vistanewsite.ir/wp-content/uploads/2020/05/fraplwhzbdb/ServiceContractAgreement_4055_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356147/","spamhaus"
 "356146","2020-05-02 07:19:36","https://shop.factoryfamily.co/wp-content/plugins/apikey/gojckwf/0272/ServiceContractAgreement_0272_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356146/","spamhaus"
 "356145","2020-05-02 07:19:34","https://homedecors.com.au/fdug/ServiceContractAgreement_2276_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356145/","spamhaus"
 "356144","2020-05-02 07:19:27","http://healthcaring.xyz/wp-content/uploads/2020/04/tcabb/2674/ServiceContractAgreement_2674_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356144/","spamhaus"
@@ -2022,7 +2247,7 @@
 "356131","2020-05-02 07:16:31","http://healthcaring.xyz/wp-content/uploads/2020/04/tcabb/8475/ServiceContractAgreement_8475_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356131/","spamhaus"
 "356130","2020-05-02 07:16:29","http://www.omitkyspisar.cz/wp-content/uploads/fdif/ServiceContractAgreement_2816_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356130/","spamhaus"
 "356129","2020-05-02 07:16:25","http://www.omitkyspisar.cz/wp-content/uploads/fdif/2905/ServiceContractAgreement_2905_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356129/","spamhaus"
-"356128","2020-05-02 07:16:21","http://219.70.238.66:64752/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/356128/","geenensp"
+"356128","2020-05-02 07:16:21","http://219.70.238.66:64752/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/356128/","geenensp"
 "356127","2020-05-02 07:16:15","https://celebritieswhogiveauctions.com/mtxo/6025/ServiceContractAgreement_6025_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356127/","spamhaus"
 "356126","2020-05-02 07:16:12","http://healthcaring.xyz/wp-content/uploads/2020/04/tcabb/ServiceContractAgreement_7632_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356126/","spamhaus"
 "356125","2020-05-02 07:16:10","https://engineeringegypt.com/wp-content/uploads/2020/05/zgzkipvfto/ServiceContractAgreement_0020_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356125/","spamhaus"
@@ -2054,7 +2279,7 @@
 "356099","2020-05-02 07:03:38","http://175.199.142.182:46597/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/356099/","geenensp"
 "356098","2020-05-02 07:03:32","http://www.earthfields.co.ke/wp-content/uploads/2020/05/pvosvygcc/ServiceContractAgreement_1159_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356098/","spamhaus"
 "356097","2020-05-02 07:03:27","https://letsallter.com/wp-content/plugins/apikey/prxcnukt/ServiceContractAgreement_2509_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356097/","spamhaus"
-"356096","2020-05-02 07:02:53","http://vistanewsite.ir/wp-content/uploads/2020/05/fraplwhzbdb/5836/ServiceContractAgreement_5836_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356096/","spamhaus"
+"356096","2020-05-02 07:02:53","http://vistanewsite.ir/wp-content/uploads/2020/05/fraplwhzbdb/5836/ServiceContractAgreement_5836_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356096/","spamhaus"
 "356095","2020-05-02 07:02:50","http://obinspirations.com/wp-content/uploads/2020/04/ehvyfi/ServiceContractAgreement_4334_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356095/","spamhaus"
 "356094","2020-05-02 07:02:43","http://cp-30.theborough.com.au/ytexdxlqe/5384/ServiceContractAgreement_5384_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356094/","spamhaus"
 "356093","2020-05-02 07:02:24","https://celebritieswhogiveauctions.com/mtxo/ServiceContractAgreement_9650_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356093/","spamhaus"
@@ -2062,7 +2287,7 @@
 "356091","2020-05-02 07:01:36","https://handballrek.com/wp-content/uploads/2020/05/tipvbwbms/ServiceContractAgreement_1559_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356091/","spamhaus"
 "356090","2020-05-02 07:01:02","http://37.49.226.230/AB4g5/kiga.x86","online","malware_download","32-bit,elf,x86-32","https://urlhaus.abuse.ch/url/356090/","geenensp"
 "356089","2020-05-02 07:00:15","http://61.77.146.65:20271/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/356089/","geenensp"
-"356088","2020-05-02 07:00:09","http://175.212.95.112:16670/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/356088/","geenensp"
+"356088","2020-05-02 07:00:09","http://175.212.95.112:16670/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/356088/","geenensp"
 "356087","2020-05-02 07:00:04","http://skyfalss.ir/hacnhhy/ServiceContractAgreement_7256_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356087/","spamhaus"
 "356086","2020-05-02 06:59:31","https://emobilodeme.com/wp-content/uploads/2020/05/mlkf/ServiceContractAgreement_4109_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356086/","spamhaus"
 "356085","2020-05-02 06:58:58","https://emobilodeme.com/wp-content/uploads/2020/05/mlkf/6262/ServiceContractAgreement_6262_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356085/","spamhaus"
@@ -2071,14 +2296,14 @@
 "356082","2020-05-02 06:56:47","http://www.omitkyspisar.cz/wp-content/uploads/fdif/4066/ServiceContractAgreement_4066_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356082/","spamhaus"
 "356081","2020-05-02 06:56:13","https://dbssistem.com.tr/wp-content/uploads/2020/05/nikdslx/ServiceContractAgreement_1099_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356081/","spamhaus"
 "356080","2020-05-02 06:55:40","https://lancamento-oneparkperdizes.com.br/wp-content/plugins/apikey/pagyufz/1528/ServiceContractAgreement_1528_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356080/","spamhaus"
-"356079","2020-05-02 06:55:07","https://onedrive.live.com/download?cid=E61E5F3F655316FA&resid=E61E5F3F655316FA%21127&authkey=ADuW61iLvQd_15w","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/356079/","lovemalware"
+"356079","2020-05-02 06:55:07","https://onedrive.live.com/download?cid=E61E5F3F655316FA&resid=E61E5F3F655316FA%21127&authkey=ADuW61iLvQd_15w","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/356079/","lovemalware"
 "356078","2020-05-02 06:54:33","https://shop.factoryfamily.co/wp-content/plugins/apikey/gojckwf/4538/ServiceContractAgreement_4538_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356078/","spamhaus"
 "356077","2020-05-02 06:54:00","http://cp-30.theborough.com.au/ytexdxlqe/6137/ServiceContractAgreement_6137_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356077/","spamhaus"
 "356076","2020-05-02 06:53:22","http://193.142.146.30/mips","offline","malware_download","32-bit,elf,mips","https://urlhaus.abuse.ch/url/356076/","geenensp"
 "356075","2020-05-02 06:53:20","http://193.142.146.30/yoyobins.sh","offline","malware_download","script","https://urlhaus.abuse.ch/url/356075/","geenensp"
 "356074","2020-05-02 06:52:46","https://homedecors.com.au/fdug/ServiceContractAgreement_4758_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356074/","spamhaus"
 "356073","2020-05-02 06:52:12","http://84.228.102.152:48248/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/356073/","geenensp"
-"356072","2020-05-02 06:52:08","http://187.107.191.197:16897/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/356072/","geenensp"
+"356072","2020-05-02 06:52:08","http://187.107.191.197:16897/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/356072/","geenensp"
 "356071","2020-05-02 06:52:04","http://62.219.227.20:8868/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/356071/","geenensp"
 "356070","2020-05-02 06:40:07","http://1.34.120.36:13383/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/356070/","geenensp"
 "356069","2020-05-02 06:21:06","http://186.93.107.30:9874/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/356069/","zbetcheckin"
@@ -2285,7 +2510,7 @@
 "355868","2020-05-01 20:06:17","https://sycrystalhk.com/wp-content/uploads/2020/05/duvplawtkw/ServiceContractAgreement_9571_04302020.zip","offline","malware_download","Qakbot,qbot,spx110,zip","https://urlhaus.abuse.ch/url/355868/","malware_traffic"
 "355867","2020-05-01 20:06:07","https://sycrystalhk.com/wp-content/uploads/2020/05/duvplawtkw/ServiceContractAgreement_5695_04302020.zip","offline","malware_download","Qakbot,qbot,spx110,zip","https://urlhaus.abuse.ch/url/355867/","malware_traffic"
 "355866","2020-05-01 20:06:04","https://sycrystalhk.com/wp-content/uploads/2020/05/duvplawtkw/4959/ServiceContractAgreement_4959_04302020.zip","offline","malware_download","Qakbot,qbot,spx110,zip","https://urlhaus.abuse.ch/url/355866/","malware_traffic"
-"355865","2020-05-01 20:06:00","https://souq-aljwalat.com/wp-content/uploads/2020/05/zqwxkoa/ServiceContractAgreement_8516_04302020.zip","online","malware_download","Qakbot,qbot,spx110,zip","https://urlhaus.abuse.ch/url/355865/","malware_traffic"
+"355865","2020-05-01 20:06:00","https://souq-aljwalat.com/wp-content/uploads/2020/05/zqwxkoa/ServiceContractAgreement_8516_04302020.zip","offline","malware_download","Qakbot,qbot,spx110,zip","https://urlhaus.abuse.ch/url/355865/","malware_traffic"
 "355864","2020-05-01 20:05:47","https://shop.factoryfamily.co/wp-content/plugins/apikey/gojckwf/8873/ServiceContractAgreement_8873_04302020.zip","offline","malware_download","Qakbot,qbot,spx110,zip","https://urlhaus.abuse.ch/url/355864/","malware_traffic"
 "355863","2020-05-01 20:05:31","https://shop.factoryfamily.co/wp-content/plugins/apikey/gojckwf/1711/ServiceContractAgreement_1711_04302020.zip","offline","malware_download","Qakbot,qbot,spx110,zip","https://urlhaus.abuse.ch/url/355863/","malware_traffic"
 "355862","2020-05-01 20:05:19","https://scoda.ir/wp-content/plugins/apikey/iehi/ServiceContractAgreement_4108_04302020.zip","offline","malware_download","Qakbot,qbot,spx110,zip","https://urlhaus.abuse.ch/url/355862/","malware_traffic"
@@ -2317,8 +2542,8 @@
 "355836","2020-05-01 20:02:32","http://cp-30.theborough.com.au/ytexdxlqe/3892/ServiceContractAgreement_3892_04302020.zip","offline","malware_download","Qakbot,qbot,spx110,zip","https://urlhaus.abuse.ch/url/355836/","malware_traffic"
 "355835","2020-05-01 20:02:26","http://colombet-taxi.fr/fwtewqww/8022/ServiceContractAgreement_8022_04302020.zip","offline","malware_download","Qakbot,qbot,spx110,zip","https://urlhaus.abuse.ch/url/355835/","malware_traffic"
 "355834","2020-05-01 20:02:23","http://colombet-taxi.fr/fwtewqww/6398/ServiceContractAgreement_6398_04302020.zip","offline","malware_download","Qakbot,qbot,spx110,zip","https://urlhaus.abuse.ch/url/355834/","malware_traffic"
-"355833","2020-05-01 20:02:20","http://clareiamente.clareiamente.com/hcbljo/ServiceContractAgreement_6845_04302020.zip","offline","malware_download","Qakbot,qbot,spx110,zip","https://urlhaus.abuse.ch/url/355833/","malware_traffic"
-"355832","2020-05-01 20:02:16","http://clareiamente.clareiamente.com/hcbljo/ServiceContractAgreement_0160_04302020.zip","online","malware_download","Qakbot,qbot,spx110,zip","https://urlhaus.abuse.ch/url/355832/","malware_traffic"
+"355833","2020-05-01 20:02:20","http://clareiamente.clareiamente.com/hcbljo/ServiceContractAgreement_6845_04302020.zip","online","malware_download","Qakbot,qbot,spx110,zip","https://urlhaus.abuse.ch/url/355833/","malware_traffic"
+"355832","2020-05-01 20:02:16","http://clareiamente.clareiamente.com/hcbljo/ServiceContractAgreement_0160_04302020.zip","offline","malware_download","Qakbot,qbot,spx110,zip","https://urlhaus.abuse.ch/url/355832/","malware_traffic"
 "355831","2020-05-01 20:01:41","http://clareiamente.clareiamente.com/hcbljo/5159/ServiceContractAgreement_5159_04302020.zip","offline","malware_download","Qakbot,qbot,spx110,zip","https://urlhaus.abuse.ch/url/355831/","malware_traffic"
 "355830","2020-05-01 20:01:06","http://clareiamente.clareiamente.com/hcbljo/3836/ServiceContractAgreement_3836_04302020.zip","online","malware_download","Qakbot,qbot,spx110,zip","https://urlhaus.abuse.ch/url/355830/","malware_traffic"
 "355829","2020-05-01 20:00:33","http://agentmama.online/wvxxpg/2309/ServiceContractAgreement_2309_04302020.zip","offline","malware_download","Qakbot,qbot,spx110,zip","https://urlhaus.abuse.ch/url/355829/","malware_traffic"
@@ -2338,17 +2563,17 @@
 "355815","2020-05-01 18:57:40","https://pastebin.com/raw/tMLRC8ww","offline","malware_download","None","https://urlhaus.abuse.ch/url/355815/","JayTHL"
 "355814","2020-05-01 18:57:07","https://pastebin.com/raw/niFzzF7F","offline","malware_download","None","https://urlhaus.abuse.ch/url/355814/","JayTHL"
 "355813","2020-05-01 18:56:34","https://pastebin.com/raw/cJMnuT5j","offline","malware_download","None","https://urlhaus.abuse.ch/url/355813/","JayTHL"
-"355812","2020-05-01 18:44:29","http://88.218.16.118/bins/qazwsxedc.x86","online","malware_download","None","https://urlhaus.abuse.ch/url/355812/","JayTHL"
-"355811","2020-05-01 18:44:27","http://88.218.16.118/bins/qazwsxedc.spc","online","malware_download","None","https://urlhaus.abuse.ch/url/355811/","JayTHL"
-"355810","2020-05-01 18:44:24","http://88.218.16.118/bins/qazwsxedc.sh4","online","malware_download","None","https://urlhaus.abuse.ch/url/355810/","JayTHL"
-"355809","2020-05-01 18:44:22","http://88.218.16.118/bins/qazwsxedc.ppc","online","malware_download","None","https://urlhaus.abuse.ch/url/355809/","JayTHL"
-"355808","2020-05-01 18:44:20","http://88.218.16.118/bins/qazwsxedc.mpsl","online","malware_download","None","https://urlhaus.abuse.ch/url/355808/","JayTHL"
-"355807","2020-05-01 18:44:17","http://88.218.16.118/bins/qazwsxedc.mips","online","malware_download","None","https://urlhaus.abuse.ch/url/355807/","JayTHL"
-"355806","2020-05-01 18:44:16","http://88.218.16.118/bins/qazwsxedc.m68k","online","malware_download","None","https://urlhaus.abuse.ch/url/355806/","JayTHL"
-"355805","2020-05-01 18:44:13","http://88.218.16.118/bins/qazwsxedc.arm7","online","malware_download","None","https://urlhaus.abuse.ch/url/355805/","JayTHL"
-"355804","2020-05-01 18:44:11","http://88.218.16.118/bins/qazwsxedc.arm6","online","malware_download","None","https://urlhaus.abuse.ch/url/355804/","JayTHL"
-"355803","2020-05-01 18:44:09","http://88.218.16.118/bins/qazwsxedc.arm5","online","malware_download","None","https://urlhaus.abuse.ch/url/355803/","JayTHL"
-"355802","2020-05-01 18:44:07","http://88.218.16.118/bins/qazwsxedc.arm","online","malware_download","None","https://urlhaus.abuse.ch/url/355802/","JayTHL"
+"355812","2020-05-01 18:44:29","http://88.218.16.118/bins/qazwsxedc.x86","offline","malware_download","None","https://urlhaus.abuse.ch/url/355812/","JayTHL"
+"355811","2020-05-01 18:44:27","http://88.218.16.118/bins/qazwsxedc.spc","offline","malware_download","None","https://urlhaus.abuse.ch/url/355811/","JayTHL"
+"355810","2020-05-01 18:44:24","http://88.218.16.118/bins/qazwsxedc.sh4","offline","malware_download","None","https://urlhaus.abuse.ch/url/355810/","JayTHL"
+"355809","2020-05-01 18:44:22","http://88.218.16.118/bins/qazwsxedc.ppc","offline","malware_download","None","https://urlhaus.abuse.ch/url/355809/","JayTHL"
+"355808","2020-05-01 18:44:20","http://88.218.16.118/bins/qazwsxedc.mpsl","offline","malware_download","None","https://urlhaus.abuse.ch/url/355808/","JayTHL"
+"355807","2020-05-01 18:44:17","http://88.218.16.118/bins/qazwsxedc.mips","offline","malware_download","None","https://urlhaus.abuse.ch/url/355807/","JayTHL"
+"355806","2020-05-01 18:44:16","http://88.218.16.118/bins/qazwsxedc.m68k","offline","malware_download","None","https://urlhaus.abuse.ch/url/355806/","JayTHL"
+"355805","2020-05-01 18:44:13","http://88.218.16.118/bins/qazwsxedc.arm7","offline","malware_download","None","https://urlhaus.abuse.ch/url/355805/","JayTHL"
+"355804","2020-05-01 18:44:11","http://88.218.16.118/bins/qazwsxedc.arm6","offline","malware_download","None","https://urlhaus.abuse.ch/url/355804/","JayTHL"
+"355803","2020-05-01 18:44:09","http://88.218.16.118/bins/qazwsxedc.arm5","offline","malware_download","None","https://urlhaus.abuse.ch/url/355803/","JayTHL"
+"355802","2020-05-01 18:44:07","http://88.218.16.118/bins/qazwsxedc.arm","offline","malware_download","None","https://urlhaus.abuse.ch/url/355802/","JayTHL"
 "355801","2020-05-01 18:44:05","http://45.84.196.167/SBIDIOT/zte","offline","malware_download","None","https://urlhaus.abuse.ch/url/355801/","JayTHL"
 "355800","2020-05-01 18:44:03","http://45.84.196.167/SBIDIOT/yarn","offline","malware_download","None","https://urlhaus.abuse.ch/url/355800/","JayTHL"
 "355799","2020-05-01 18:44:01","http://45.84.196.167/SBIDIOT/x86","offline","malware_download","None","https://urlhaus.abuse.ch/url/355799/","JayTHL"
@@ -2448,12 +2673,12 @@
 "355705","2020-05-01 18:39:10","http://107.175.197.164/bins/blxntz.arm6","online","malware_download","None","https://urlhaus.abuse.ch/url/355705/","JayTHL"
 "355704","2020-05-01 18:39:08","http://107.175.197.164/bins/blxntz.arm5","online","malware_download","None","https://urlhaus.abuse.ch/url/355704/","JayTHL"
 "355703","2020-05-01 18:39:05","http://107.175.197.164/bins/blxntz.arm","online","malware_download","None","https://urlhaus.abuse.ch/url/355703/","JayTHL"
-"355702","2020-05-01 18:22:05","http://jahesa.com/wordpress/wp-content/plugins/sid/yilp1xp3.ljo.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/355702/","zbetcheckin"
+"355702","2020-05-01 18:22:05","http://jahesa.com/wordpress/wp-content/plugins/sid/yilp1xp3.ljo.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/355702/","zbetcheckin"
 "355701","2020-05-01 18:19:11","https://pastebin.com/raw/JYW4wryi","offline","malware_download","None","https://urlhaus.abuse.ch/url/355701/","JayTHL"
-"355700","2020-05-01 18:18:19","http://www.jahesa.com/wordpress/wp-content/plugins/sid/yilp1xp3.ljo.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/355700/","zbetcheckin"
-"355699","2020-05-01 18:18:14","http://jahesa.com/wordpress/wp-content/plugins/sid/hhhuu.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/355699/","zbetcheckin"
-"355698","2020-05-01 18:18:07","http://jahesa.com/wordpress/wp-content/plugins/sid/ub2tcjwd.0hq.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/355698/","zbetcheckin"
-"355697","2020-05-01 18:14:15","http://www.jahesa.com/wordpress/wp-content/plugins/sid/hhhuu.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/355697/","zbetcheckin"
+"355700","2020-05-01 18:18:19","http://www.jahesa.com/wordpress/wp-content/plugins/sid/yilp1xp3.ljo.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/355700/","zbetcheckin"
+"355699","2020-05-01 18:18:14","http://jahesa.com/wordpress/wp-content/plugins/sid/hhhuu.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/355699/","zbetcheckin"
+"355698","2020-05-01 18:18:07","http://jahesa.com/wordpress/wp-content/plugins/sid/ub2tcjwd.0hq.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/355698/","zbetcheckin"
+"355697","2020-05-01 18:14:15","http://www.jahesa.com/wordpress/wp-content/plugins/sid/hhhuu.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/355697/","zbetcheckin"
 "355696","2020-05-01 18:14:04","https://lancamento-oneparkperdizes.com.br/wp-content/plugins/apikey/pagyufz/ServiceContractAgreement_5928_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355696/","spamhaus"
 "355695","2020-05-01 18:06:26","https://dbssistem.com.tr/wp-content/uploads/2020/05/nikdslx/ServiceContractAgreement_0939_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355695/","spamhaus"
 "355694","2020-05-01 18:06:23","http://obinspirations.com/wp-content/uploads/2020/05/adnkf/0441/ServiceContractAgreement_0441_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355694/","spamhaus"
@@ -2497,7 +2722,7 @@
 "355656","2020-05-01 17:39:05","https://engineeringegypt.com/wp-content/uploads/2020/05/zgzkipvfto/5907/ServiceContractAgreement_5907_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355656/","spamhaus"
 "355655","2020-05-01 17:34:45","https://shop.factoryfamily.co/wp-content/plugins/apikey/gojckwf/2393/ServiceContractAgreement_2393_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355655/","spamhaus"
 "355654","2020-05-01 17:34:42","http://quantominds.com/ystgg/ServiceContractAgreement_6617_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355654/","spamhaus"
-"355653","2020-05-01 17:34:36","https://dbssistem.com.tr/wp-content/uploads/2020/05/nikdslx/2570/ServiceContractAgreement_2570_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355653/","spamhaus"
+"355653","2020-05-01 17:34:36","https://dbssistem.com.tr/wp-content/uploads/2020/05/nikdslx/2570/ServiceContractAgreement_2570_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355653/","spamhaus"
 "355652","2020-05-01 17:34:28","https://handballrek.com/wp-content/uploads/2020/05/tipvbwbms/9940/ServiceContractAgreement_9940_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355652/","spamhaus"
 "355651","2020-05-01 17:34:15","https://scoda.ir/wp-content/plugins/apikey/iehi/ServiceContractAgreement_4100_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355651/","spamhaus"
 "355650","2020-05-01 17:34:09","http://healthcaring.xyz/wp-content/uploads/2020/04/tcabb/ServiceContractAgreement_9158_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355650/","spamhaus"
@@ -2534,7 +2759,7 @@
 "355619","2020-05-01 17:17:05","http://185.244.39.123//mips","offline","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/355619/","Gandylyan1"
 "355618","2020-05-01 17:17:03","http://185.244.39.123//x86","offline","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/355618/","Gandylyan1"
 "355617","2020-05-01 16:52:33","https://pastebin.com/raw/BrGbzbsE","offline","malware_download","None","https://urlhaus.abuse.ch/url/355617/","JayTHL"
-"355616","2020-05-01 16:43:19","http://clareiamente.clareiamente.com/hcbljo/2726/ServiceContractAgreement_2726_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355616/","spamhaus"
+"355616","2020-05-01 16:43:19","http://clareiamente.clareiamente.com/hcbljo/2726/ServiceContractAgreement_2726_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355616/","spamhaus"
 "355615","2020-05-01 16:43:13","https://lancamento-oneparkperdizes.com.br/wp-content/plugins/apikey/pagyufz/6074/ServiceContractAgreement_6074_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355615/","spamhaus"
 "355614","2020-05-01 16:43:05","https://handballrek.com/wp-content/uploads/2020/05/tipvbwbms/ServiceContractAgreement_4628_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355614/","spamhaus"
 "355613","2020-05-01 16:40:20","https://pastebin.com/raw/cXRUtga3","offline","malware_download","None","https://urlhaus.abuse.ch/url/355613/","JayTHL"
@@ -2561,8 +2786,8 @@
 "355592","2020-05-01 15:53:10","https://homedecors.com.au/fdug/2464/ServiceContractAgreement_2464_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355592/","spamhaus"
 "355591","2020-05-01 15:52:24","https://homedecors.com.au/fdug/ServiceContractAgreement_9296_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355591/","spamhaus"
 "355590","2020-05-01 15:52:15","https://souq-aljwalat.com/wp-content/uploads/2020/05/zqwxkoa/ServiceContractAgreement_4233_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355590/","spamhaus"
-"355589","2020-05-01 15:52:12","http://vistanewsite.ir/wp-content/uploads/2020/05/fraplwhzbdb/ServiceContractAgreement_6322_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355589/","spamhaus"
-"355588","2020-05-01 15:52:08","http://vistanewsite.ir/wp-content/uploads/2020/05/fraplwhzbdb/9650/ServiceContractAgreement_9650_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355588/","spamhaus"
+"355589","2020-05-01 15:52:12","http://vistanewsite.ir/wp-content/uploads/2020/05/fraplwhzbdb/ServiceContractAgreement_6322_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355589/","spamhaus"
+"355588","2020-05-01 15:52:08","http://vistanewsite.ir/wp-content/uploads/2020/05/fraplwhzbdb/9650/ServiceContractAgreement_9650_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355588/","spamhaus"
 "355587","2020-05-01 15:52:05","https://lesawilson.com/tgsxujpbbxp/7888/ServiceContractAgreement_7888_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355587/","spamhaus"
 "355586","2020-05-01 15:51:13","http://jocuri.trophygaming.net/bins/DEMONS.arm5","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/355586/","zbetcheckin"
 "355585","2020-05-01 15:51:11","http://jocuri.trophygaming.net/bins/DEMONS.arm","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/355585/","zbetcheckin"
@@ -2590,7 +2815,7 @@
 "355563","2020-05-01 15:32:14","http://coronetsfrank.ug/ds.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/355563/","abuse_ch"
 "355562","2020-05-01 15:26:08","https://pastebin.com/raw/mts8YDHq","offline","malware_download","None","https://urlhaus.abuse.ch/url/355562/","JayTHL"
 "355561","2020-05-01 15:26:05","https://pastebin.com/raw/K0Nb7ZJu","offline","malware_download","None","https://urlhaus.abuse.ch/url/355561/","JayTHL"
-"355560","2020-05-01 15:12:06","http://www.jahesa.com/wordpress/wp-content/plugins/sid/ub2tcjwd.0hq.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/355560/","abuse_ch"
+"355560","2020-05-01 15:12:06","http://www.jahesa.com/wordpress/wp-content/plugins/sid/ub2tcjwd.0hq.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/355560/","abuse_ch"
 "355559","2020-05-01 15:08:05","http://217.218.218.196:33127/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/355559/","geenensp"
 "355558","2020-05-01 15:07:55","http://123.11.194.45:49759/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355558/","Gandylyan1"
 "355557","2020-05-01 15:07:50","http://172.36.19.40:43417/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355557/","Gandylyan1"
@@ -2602,7 +2827,7 @@
 "355551","2020-05-01 15:05:54","http://106.110.97.187:33010/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355551/","Gandylyan1"
 "355550","2020-05-01 15:05:20","http://221.14.13.121:45051/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355550/","Gandylyan1"
 "355549","2020-05-01 15:05:10","http://112.28.98.69:40069/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355549/","Gandylyan1"
-"355548","2020-05-01 15:04:38","http://112.17.123.56:36909/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355548/","Gandylyan1"
+"355548","2020-05-01 15:04:38","http://112.17.123.56:36909/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355548/","Gandylyan1"
 "355547","2020-05-01 15:03:43","http://220.171.194.244:54439/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355547/","Gandylyan1"
 "355546","2020-05-01 15:03:39","http://162.212.114.107:39847/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355546/","Gandylyan1"
 "355545","2020-05-01 15:03:35","http://115.53.130.208:51467/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355545/","Gandylyan1"
@@ -2612,7 +2837,7 @@
 "355541","2020-05-01 15:01:35","http://baybars.xyz/bratio.txt","online","malware_download","Encoded,rat","https://urlhaus.abuse.ch/url/355541/","abuse_ch"
 "355540","2020-05-01 14:43:16","http://104.168.198.194/i686","online","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/355540/","Gandylyan1"
 "355539","2020-05-01 14:43:13","http://104.168.198.194/arm7","online","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/355539/","Gandylyan1"
-"355538","2020-05-01 14:43:10","http://104.168.198.194/arm6","online","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/355538/","Gandylyan1"
+"355538","2020-05-01 14:43:10","http://104.168.198.194/arm6","offline","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/355538/","Gandylyan1"
 "355537","2020-05-01 14:43:07","http://104.168.198.194/arm5","online","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/355537/","Gandylyan1"
 "355536","2020-05-01 14:43:03","http://104.168.198.194/i586","online","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/355536/","Gandylyan1"
 "355535","2020-05-01 14:36:03","http://185.242.105.116/azji/Cepte5.txt","offline","malware_download","remcos,RemcosRAT","https://urlhaus.abuse.ch/url/355535/","anonymous"
@@ -2650,7 +2875,7 @@
 "355503","2020-05-01 12:46:04","http://coronetsfrank.ug/az2.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/355503/","zbetcheckin"
 "355502","2020-05-01 12:34:08","https://pastebin.com/raw/46MBBJZz","offline","malware_download","None","https://urlhaus.abuse.ch/url/355502/","JayTHL"
 "355501","2020-05-01 12:32:09","http://23.94.154.115/update/kolinsBil.php","online","malware_download","Trickbot","https://urlhaus.abuse.ch/url/355501/","anonymous"
-"355500","2020-05-01 12:31:07","http://drivolani.us/Host_OBZgejvWK90.bin","online","malware_download","Encoded,GuLoader,NetWire,rat","https://urlhaus.abuse.ch/url/355500/","abuse_ch"
+"355500","2020-05-01 12:31:07","http://drivolani.us/Host_OBZgejvWK90.bin","offline","malware_download","Encoded,GuLoader,NetWire,rat","https://urlhaus.abuse.ch/url/355500/","abuse_ch"
 "355499","2020-05-01 12:10:05","https://pastebin.com/raw/6rEqZxyq","offline","malware_download","None","https://urlhaus.abuse.ch/url/355499/","JayTHL"
 "355498","2020-05-01 12:04:41","http://49.115.195.186:36885/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355498/","Gandylyan1"
 "355497","2020-05-01 12:04:37","http://218.31.2.125:46536/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355497/","Gandylyan1"
@@ -2660,7 +2885,7 @@
 "355493","2020-05-01 12:04:17","http://111.43.223.156:34205/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355493/","Gandylyan1"
 "355492","2020-05-01 12:04:14","http://219.155.209.111:51102/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355492/","Gandylyan1"
 "355491","2020-05-01 12:04:10","http://182.142.119.93:48142/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355491/","Gandylyan1"
-"355490","2020-05-01 12:04:04","http://115.59.17.176:47818/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355490/","Gandylyan1"
+"355490","2020-05-01 12:04:04","http://115.59.17.176:47818/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355490/","Gandylyan1"
 "355489","2020-05-01 12:03:41","http://221.15.4.252:46581/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355489/","Gandylyan1"
 "355488","2020-05-01 12:03:37","http://182.127.88.130:42944/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355488/","Gandylyan1"
 "355487","2020-05-01 12:03:34","http://186.225.177.46:54312/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355487/","Gandylyan1"
@@ -2683,21 +2908,21 @@
 "355470","2020-05-01 11:07:08","https://kiaowadubai.com/docs_qsb/87923/Buy-Sell%20Agreement_87923_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355470/","spamhaus"
 "355469","2020-05-01 11:07:03","https://mindseed.in/blog/wp-content/uploads/2020/04/docs_yfg/Buy-Sell%20Agreement_75961533_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355469/","spamhaus"
 "355468","2020-05-01 11:02:07","http://coronetsfrank.ug/br.exe","offline","malware_download","AsyncRAT,exe","https://urlhaus.abuse.ch/url/355468/","abuse_ch"
-"355467","2020-05-01 10:57:53","http://sylvaclouds.eu/dhad/dhad.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/355467/","Jouliok"
+"355467","2020-05-01 10:57:53","http://sylvaclouds.eu/dhad/dhad.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/355467/","Jouliok"
 "355466","2020-05-01 10:55:34","http://usapglobal.usapglobal.org/cjjja/cjjjjjjjjjjjjjjjjjjj.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/355466/","abuse_ch"
 "355465","2020-05-01 10:42:08","https://taterbugfarm.com/license.exe","offline","malware_download","exe,RaccoonStealer","https://urlhaus.abuse.ch/url/355465/","abuse_ch"
 "355464","2020-05-01 10:37:28","http://sylvaclouds.eu/rawny/rawny.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/355464/","Jouliok"
 "355463","2020-05-01 10:37:21","http://sylvaclouds.eu/billz/billz.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/355463/","Jouliok"
 "355462","2020-05-01 10:37:14","http://sylvaclouds.eu/captz/captz.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/355462/","Jouliok"
 "355461","2020-05-01 10:37:07","http://sylvaclouds.eu/toolshome/SLEEPINGP.exe","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/355461/","Jouliok"
-"355460","2020-05-01 10:27:06","http://185.172.110.234/bins/x86","online","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/355460/","Gandylyan1"
-"355459","2020-05-01 10:27:05","http://185.172.110.234/bins/mips","online","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/355459/","Gandylyan1"
-"355458","2020-05-01 10:27:03","http://185.172.110.234/bins/mpsl","online","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/355458/","Gandylyan1"
+"355460","2020-05-01 10:27:06","http://185.172.110.234/bins/x86","offline","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/355460/","Gandylyan1"
+"355459","2020-05-01 10:27:05","http://185.172.110.234/bins/mips","offline","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/355459/","Gandylyan1"
+"355458","2020-05-01 10:27:03","http://185.172.110.234/bins/mpsl","offline","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/355458/","Gandylyan1"
 "355457","2020-05-01 10:26:35","http://dl4.joxi.net/drive/2020/04/06/0040/2206/2631838/38/ff0c5b2d33.txt","offline","malware_download","Encoded,njRAT,rat","https://urlhaus.abuse.ch/url/355457/","abuse_ch"
-"355456","2020-05-01 10:20:06","http://185.172.110.234/bins/arm7","online","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/355456/","Gandylyan1"
-"355455","2020-05-01 10:20:04","http://185.172.110.234/bins/arm6","online","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/355455/","Gandylyan1"
-"355454","2020-05-01 10:18:16","http://185.172.110.234/bins/arm5","online","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/355454/","Gandylyan1"
-"355453","2020-05-01 10:18:14","http://185.172.110.234/bins/arm","online","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/355453/","Gandylyan1"
+"355456","2020-05-01 10:20:06","http://185.172.110.234/bins/arm7","offline","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/355456/","Gandylyan1"
+"355455","2020-05-01 10:20:04","http://185.172.110.234/bins/arm6","offline","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/355455/","Gandylyan1"
+"355454","2020-05-01 10:18:16","http://185.172.110.234/bins/arm5","offline","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/355454/","Gandylyan1"
+"355453","2020-05-01 10:18:14","http://185.172.110.234/bins/arm","offline","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/355453/","Gandylyan1"
 "355452","2020-05-01 10:18:12","http://27.155.87.120:7766/lll.sh","online","malware_download","None","https://urlhaus.abuse.ch/url/355452/","bjornruberg"
 "355451","2020-05-01 10:18:05","http://senevdekaldiyehediyenet.com/hediye20gb.apk","offline","malware_download","apk ,Cerberus","https://urlhaus.abuse.ch/url/355451/","mertcangokgoz"
 "355450","2020-05-01 10:08:08","https://paste.ee/r/Zafeb","offline","malware_download","Encoded","https://urlhaus.abuse.ch/url/355450/","abuse_ch"
@@ -2793,11 +3018,11 @@
 "355360","2020-05-01 07:13:36","http://185.233.186.129/Demon.mips","offline","malware_download","32-bit,elf,mips","https://urlhaus.abuse.ch/url/355360/","geenensp"
 "355359","2020-05-01 07:13:32","http://185.233.186.129/bins.sh","offline","malware_download","script","https://urlhaus.abuse.ch/url/355359/","geenensp"
 "355358","2020-05-01 07:13:30","http://113.98.242.211:49851/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/355358/","geenensp"
-"355357","2020-05-01 07:12:46","http://36.39.47.194:47932/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/355357/","geenensp"
+"355357","2020-05-01 07:12:46","http://36.39.47.194:47932/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/355357/","geenensp"
 "355356","2020-05-01 07:12:42","http://82.81.232.68:9442/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/355356/","geenensp"
-"355355","2020-05-01 07:12:35","http://sylvaclouds.eu/khalif/khalif.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/355355/","gorimpthon"
+"355355","2020-05-01 07:12:35","http://sylvaclouds.eu/khalif/khalif.exe","offline","malware_download","AgentTesla,exe,Loki","https://urlhaus.abuse.ch/url/355355/","gorimpthon"
 "355354","2020-05-01 07:12:23","http://sylvaclouds.eu/newbrand/New%20cript.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/355354/","gorimpthon"
-"355353","2020-05-01 07:11:49","http://sylvaclouds.eu/nwamax/nwamax.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/355353/","gorimpthon"
+"355353","2020-05-01 07:11:49","http://sylvaclouds.eu/nwamax/nwamax.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/355353/","gorimpthon"
 "355352","2020-05-01 07:11:13","http://156.96.48.220/mips","offline","malware_download","32-bit,elf,mips","https://urlhaus.abuse.ch/url/355352/","geenensp"
 "355351","2020-05-01 07:11:10","http://156.96.48.220/EkSgbins.sh","offline","malware_download","script","https://urlhaus.abuse.ch/url/355351/","geenensp"
 "355350","2020-05-01 07:11:05","http://121.168.227.85:18959/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/355350/","geenensp"
@@ -2893,7 +3118,7 @@
 "355260","2020-05-01 01:13:04","https://www.azenzatowers.com/wp-content/uploads/2020/04/zgesczf/8171558/ServiceContractAgreement_8171558_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355260/","malware_traffic"
 "355259","2020-05-01 01:12:29","https://www.tourenhelicoptero.com/wp-content/uploads/2020/04/jrtnwyaolip/562447/ServiceContractAgreement_562447_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355259/","malware_traffic"
 "355258","2020-05-01 01:12:25","http://www.mecbox.cn/wp-content/uploads/2020/04/pxrg/ServiceContractAgreement_161004735_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355258/","malware_traffic"
-"355257","2020-05-01 01:12:21","https://yuluobo.com/wp-content/plugins/apikey/jzpt/ServiceContractAgreement_940979882_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355257/","malware_traffic"
+"355257","2020-05-01 01:12:21","https://yuluobo.com/wp-content/plugins/apikey/jzpt/ServiceContractAgreement_940979882_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355257/","malware_traffic"
 "355256","2020-05-01 01:12:15","http://misskproductions.co.za/cgpnbjtwui/32956200/ServiceContractAgreement_32956200_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355256/","malware_traffic"
 "355255","2020-05-01 01:12:11","https://www.dotpay.id/wp-content/uploads/2020/04/ckfsevy/224253/ServiceContractAgreement_224253_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355255/","malware_traffic"
 "355254","2020-05-01 01:12:06","http://arifrehan.xyz/wp-content/uploads/2020/04/ksxdxoooi/305634/ServiceContractAgreement_305634_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355254/","malware_traffic"
@@ -2905,7 +3130,7 @@
 "355248","2020-05-01 01:11:50","https://z.loyaltyaboveall.com/kvjkqh/ServiceContractAgreement_551435_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355248/","malware_traffic"
 "355247","2020-05-01 01:11:49","https://z.loyaltyaboveall.com/kvjkqh/ServiceContractAgreement_3784696_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355247/","malware_traffic"
 "355246","2020-05-01 01:11:47","https://z.loyaltyaboveall.com/kvjkqh/184304/ServiceContractAgreement_184304_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355246/","malware_traffic"
-"355245","2020-05-01 01:11:44","https://yuluobo.com/wp-content/plugins/apikey/jzpt/ServiceContractAgreement_17883167_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355245/","malware_traffic"
+"355245","2020-05-01 01:11:44","https://yuluobo.com/wp-content/plugins/apikey/jzpt/ServiceContractAgreement_17883167_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355245/","malware_traffic"
 "355244","2020-05-01 01:11:39","https://yuluobo.com/wp-content/plugins/apikey/jzpt/324564/ServiceContractAgreement_324564_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355244/","malware_traffic"
 "355243","2020-05-01 01:11:29","https://xn--d1aciabhfsdfe0a7e3b.xn--p1acf/wp-content/uploads/2020/04/vrydko/ServiceContractAgreement_236384825_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355243/","malware_traffic"
 "355242","2020-05-01 01:11:26","https://xn--d1aciabhfsdfe0a7e3b.xn--p1acf/wp-content/uploads/2020/04/vrydko/98512403/ServiceContractAgreement_98512403_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355242/","malware_traffic"
@@ -2984,13 +3209,13 @@
 "355169","2020-05-01 00:12:12","https://jhorapatarastana.xyz/ptpkvgi/ServiceContractAgreement_338258_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355169/","malware_traffic"
 "355168","2020-05-01 00:12:09","https://jhorapatarastana.xyz/ptpkvgi/47157394/ServiceContractAgreement_47157394_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355168/","malware_traffic"
 "355167","2020-05-01 00:12:07","https://jhorapatarastana.xyz/ptpkvgi/04271/ServiceContractAgreement_04271_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355167/","malware_traffic"
-"355166","2020-05-01 00:12:05","https://itrigger.cn/wp-content/uploads/2020/04/wvcmkcon/ServiceContractAgreement_763721_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355166/","malware_traffic"
+"355166","2020-05-01 00:12:05","https://itrigger.cn/wp-content/uploads/2020/04/wvcmkcon/ServiceContractAgreement_763721_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355166/","malware_traffic"
 "355165","2020-05-01 00:11:59","http://www.kolibri-fabrika.ru/wp-content/uploads/2020/04/tlzgibsc/09861/ServiceContractAgreement_09861_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355165/","malware_traffic"
 "355164","2020-05-01 00:11:56","http://itrigger.cn/wp-content/uploads/2020/04/wvcmkcon/ServiceContractAgreement_763721_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355164/","malware_traffic"
-"355163","2020-05-01 00:11:51","https://itrigger.cn/wp-content/uploads/2020/04/wvcmkcon/ServiceContractAgreement_45023177_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355163/","malware_traffic"
-"355162","2020-05-01 00:11:41","https://itrigger.cn/wp-content/uploads/2020/04/wvcmkcon/ServiceContractAgreement_16477_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355162/","malware_traffic"
+"355163","2020-05-01 00:11:51","https://itrigger.cn/wp-content/uploads/2020/04/wvcmkcon/ServiceContractAgreement_45023177_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355163/","malware_traffic"
+"355162","2020-05-01 00:11:41","https://itrigger.cn/wp-content/uploads/2020/04/wvcmkcon/ServiceContractAgreement_16477_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355162/","malware_traffic"
 "355161","2020-05-01 00:11:37","https://itrigger.cn/wp-content/uploads/2020/04/wvcmkcon/75213/ServiceContractAgreement_75213_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355161/","malware_traffic"
-"355160","2020-05-01 00:11:31","https://itrigger.cn/wp-content/uploads/2020/04/wvcmkcon/6862554/ServiceContractAgreement_6862554_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355160/","malware_traffic"
+"355160","2020-05-01 00:11:31","https://itrigger.cn/wp-content/uploads/2020/04/wvcmkcon/6862554/ServiceContractAgreement_6862554_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355160/","malware_traffic"
 "355159","2020-05-01 00:11:23","https://haisannhatrang.com.vn/wp-content/plugins/apikey/kndghkh/ServiceContractAgreement_7360825_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355159/","malware_traffic"
 "355158","2020-05-01 00:11:16","https://haisannhatrang.com.vn/wp-content/plugins/apikey/kndghkh/ServiceContractAgreement_721247429_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355158/","malware_traffic"
 "355157","2020-05-01 00:11:11","https://freeprofessionalwebhosting.com/wp-content/uploads/2020/04/pozgtf/712977/ServiceContractAgreement_712977_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355157/","malware_traffic"
@@ -3012,8 +3237,8 @@
 "355141","2020-05-01 00:09:11","https://avestor.uz/wp-content/uploads/2020/04/dbaogom/47424064/ServiceContractAgreement_47424064_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355141/","malware_traffic"
 "355140","2020-05-01 00:09:09","https://avestor.uz/wp-content/uploads/2020/04/dbaogom/2556655/ServiceContractAgreement_2556655_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355140/","malware_traffic"
 "355139","2020-05-01 00:09:07","https://avestor.uz/wp-content/uploads/2020/04/dbaogom/00347539/ServiceContractAgreement_00347539_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355139/","malware_traffic"
-"355138","2020-05-01 00:09:03","http://www.mecbox.cn/wp-content/uploads/2020/04/pxrg/ServiceContractAgreement_99901073_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355138/","malware_traffic"
-"355137","2020-05-01 00:09:00","http://www.mecbox.cn/wp-content/uploads/2020/04/pxrg/ServiceContractAgreement_53680_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355137/","malware_traffic"
+"355138","2020-05-01 00:09:03","http://www.mecbox.cn/wp-content/uploads/2020/04/pxrg/ServiceContractAgreement_99901073_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355138/","malware_traffic"
+"355137","2020-05-01 00:09:00","http://www.mecbox.cn/wp-content/uploads/2020/04/pxrg/ServiceContractAgreement_53680_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355137/","malware_traffic"
 "355136","2020-05-01 00:08:58","http://www.mecbox.cn/wp-content/uploads/2020/04/pxrg/ServiceContractAgreement_3091456_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355136/","malware_traffic"
 "355135","2020-05-01 00:08:46","http://www.mecbox.cn/wp-content/uploads/2020/04/pxrg/ServiceContractAgreement_1215829_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355135/","malware_traffic"
 "355134","2020-05-01 00:08:40","http://www.kolibri-fabrika.ru/wp-content/uploads/2020/04/tlzgibsc/42790/ServiceContractAgreement_42790_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355134/","malware_traffic"
@@ -3021,7 +3246,7 @@
 "355132","2020-05-01 00:08:32","http://www.azenzatowers.com/wp-content/uploads/2020/04/zgesczf/ServiceContractAgreement_851535552_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355132/","malware_traffic"
 "355131","2020-05-01 00:07:22","http://172.36.46.198:57832/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355131/","Gandylyan1"
 "355130","2020-05-01 00:06:50","http://111.43.223.52:44564/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355130/","Gandylyan1"
-"355129","2020-05-01 00:06:47","http://182.127.242.93:36171/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355129/","Gandylyan1"
+"355129","2020-05-01 00:06:47","http://182.127.242.93:36171/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355129/","Gandylyan1"
 "355128","2020-05-01 00:06:42","http://216.180.117.101:33555/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355128/","Gandylyan1"
 "355127","2020-05-01 00:06:38","http://125.40.75.189:43741/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355127/","Gandylyan1"
 "355126","2020-05-01 00:06:33","http://172.36.57.117:58726/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355126/","Gandylyan1"
@@ -3038,7 +3263,7 @@
 "355115","2020-05-01 00:04:57","http://172.36.24.88:37562/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355115/","Gandylyan1"
 "355114","2020-05-01 00:04:26","http://221.210.211.132:55474/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355114/","Gandylyan1"
 "355113","2020-05-01 00:04:19","http://221.210.211.16:37945/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355113/","Gandylyan1"
-"355112","2020-05-01 00:04:16","http://112.17.104.45:42071/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355112/","Gandylyan1"
+"355112","2020-05-01 00:04:16","http://112.17.104.45:42071/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355112/","Gandylyan1"
 "355111","2020-05-01 00:04:05","http://199.83.203.137:34781/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355111/","Gandylyan1"
 "355110","2020-05-01 00:03:00","http://vibicloud.com/wp-content/uploads/2020/04/bluoljyrzh/213610/servicecontractagreement_213610_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355110/","malware_traffic"
 "355109","2020-05-01 00:02:42","http://uyen.vn/rxmln/ServiceContractAgreement_23932918_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355109/","malware_traffic"
@@ -3054,8 +3279,8 @@
 "355099","2020-05-01 00:00:52","http://phuphamca.com/rftt/ServiceContractAgreement_7034895_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355099/","malware_traffic"
 "355098","2020-05-01 00:00:35","http://phuphamca.com/rftt/ServiceContractAgreement_6422943_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355098/","malware_traffic"
 "355097","2020-05-01 00:00:08","http://phuphamca.com/rftt/ServiceContractAgreement_54864195_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355097/","malware_traffic"
-"355096","2020-04-30 23:59:57","http://phuphamca.com/rftt/ServiceContractAgreement_074722_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355096/","malware_traffic"
-"355095","2020-04-30 23:59:49","http://phuphamca.com/rftt/208425456/ServiceContractAgreement_208425456_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355095/","malware_traffic"
+"355096","2020-04-30 23:59:57","http://phuphamca.com/rftt/ServiceContractAgreement_074722_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355096/","malware_traffic"
+"355095","2020-04-30 23:59:49","http://phuphamca.com/rftt/208425456/ServiceContractAgreement_208425456_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355095/","malware_traffic"
 "355094","2020-04-30 23:59:42","http://mecbox.cn/wp-content/uploads/2020/04/pxrg/servicecontractagreement_83409172_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355094/","malware_traffic"
 "355093","2020-04-30 23:59:38","http://kposter.alexandruplesea.ro/xspqzuhv/ServiceContractAgreement_74979218_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355093/","malware_traffic"
 "355092","2020-04-30 23:59:06","http://kposter.alexandruplesea.ro/xspqzuhv/8715655/ServiceContractAgreement_8715655_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355092/","malware_traffic"
@@ -3068,10 +3293,10 @@
 "355085","2020-04-30 23:57:55","http://arifrehan.xyz/wp-content/uploads/2020/04/ksxdxoooi/52502623/ServiceContractAgreement_52502623_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355085/","malware_traffic"
 "355084","2020-04-30 23:57:17","http://arifrehan.xyz/wp-content/uploads/2020/04/ksxdxoooi/37943454/ServiceContractAgreement_37943454_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355084/","malware_traffic"
 "355083","2020-04-30 23:56:45","http://arifrehan.xyz/wp-content/uploads/2020/04/ksxdxoooi/289618301/ServiceContractAgreement_289618301_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355083/","malware_traffic"
-"355082","2020-04-30 23:56:04","http://adnquocte.com/jttlp/ServiceContractAgreement_19794501_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355082/","malware_traffic"
-"355081","2020-04-30 23:55:58","http://adnquocte.com/jttlp/47851039/ServiceContractAgreement_47851039_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355081/","malware_traffic"
+"355082","2020-04-30 23:56:04","http://adnquocte.com/jttlp/ServiceContractAgreement_19794501_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355082/","malware_traffic"
+"355081","2020-04-30 23:55:58","http://adnquocte.com/jttlp/47851039/ServiceContractAgreement_47851039_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355081/","malware_traffic"
 "355080","2020-04-30 23:55:56","http://adnquocte.com/jttlp/277768/servicecontractagreement_277768_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355080/","malware_traffic"
-"355079","2020-04-30 23:55:52","http://itrigger.cn/wp-content/uploads/2020/04/wvcmkcon/ServiceContractAgreement%20_763721_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355079/","malware_traffic"
+"355079","2020-04-30 23:55:52","http://itrigger.cn/wp-content/uploads/2020/04/wvcmkcon/ServiceContractAgreement%20_763721_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355079/","malware_traffic"
 "355078","2020-04-30 23:55:48","http://freeprofessionalwebhosting.com/wp-content/uploads/2020/04/pozgtf/712977/ServiceContractAgreement_712977_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355078/","malware_traffic"
 "355077","2020-04-30 23:55:45","http://enixc.com/wp-content/uploads/2020/04/uxai/78850/servicecontractagreement_78850_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355077/","malware_traffic"
 "355076","2020-04-30 23:55:40","http://enixc.com/wp-content/uploads/2020/04/uxai/47119/ServiceContractAgreement_47119_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355076/","malware_traffic"
@@ -3160,8 +3385,8 @@
 "354993","2020-04-30 18:03:04","http://usapglobal.usapglobal.org/smile/smileeeecry.exe","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/354993/","zbetcheckin"
 "354992","2020-04-30 17:56:06","http://37.49.226.209/bins/hoho.mips","online","malware_download","elf","https://urlhaus.abuse.ch/url/354992/","zbetcheckin"
 "354991","2020-04-30 17:56:04","http://167.250.49.155/scandale/PDFXCview.exe","online","malware_download","exe,kovter","https://urlhaus.abuse.ch/url/354991/","zbetcheckin"
-"354990","2020-04-30 17:52:15","https://billieellish.org/scandale/Dustman.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/354990/","zbetcheckin"
-"354989","2020-04-30 17:52:13","https://billieellish.org/ransomware%20builder_pack/ransomware.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/354989/","zbetcheckin"
+"354990","2020-04-30 17:52:15","https://billieellish.org/scandale/Dustman.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354990/","zbetcheckin"
+"354989","2020-04-30 17:52:13","https://billieellish.org/ransomware%20builder_pack/ransomware.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354989/","zbetcheckin"
 "354988","2020-04-30 17:52:11","http://37.49.226.209/bins/hoho.arm","online","malware_download","elf","https://urlhaus.abuse.ch/url/354988/","zbetcheckin"
 "354987","2020-04-30 17:52:09","http://167.250.49.155/scandale/hostr.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/354987/","zbetcheckin"
 "354986","2020-04-30 17:52:06","http://167.250.49.155/scandale/Win32.WannaPeace.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/354986/","zbetcheckin"
@@ -3390,7 +3615,7 @@
 "354745","2020-04-30 12:18:08","https://gitlab.com/burov/tools/raw/master/bin/fp-sb-test.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354745/","zbetcheckin"
 "354744","2020-04-30 12:17:12","http://thesecuritysoftwarescannerindustrgreat.duckdns.org/badi/vbc.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/354744/","zbetcheckin"
 "354743","2020-04-30 12:17:09","http://tinckorm.beget.tech/testbuild.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/354743/","zbetcheckin"
-"354742","2020-04-30 12:17:05","http://baritaco.com/rem.exe","offline","malware_download","exe,RemcosRAT","https://urlhaus.abuse.ch/url/354742/","abuse_ch"
+"354742","2020-04-30 12:17:05","http://baritaco.com/rem.exe","online","malware_download","exe,RemcosRAT","https://urlhaus.abuse.ch/url/354742/","abuse_ch"
 "354741","2020-04-30 12:16:04","http://45.95.168.247/AB4g5/kiga.x86","offline","malware_download","32-bit,elf,x86-32","https://urlhaus.abuse.ch/url/354741/","geenensp"
 "354740","2020-04-30 12:13:10","http://185.112.146.165/meter/99.kiri.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354740/","zbetcheckin"
 "354739","2020-04-30 12:13:08","http://185.112.146.165/meter/waza.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354739/","zbetcheckin"
@@ -3480,7 +3705,7 @@
 "354654","2020-04-30 09:26:18","http://russchine2wsdyspecia20plumbingmaterialnb.duckdns.org/russdoc/regasm.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/354654/","gorimpthon"
 "354653","2020-04-30 09:26:16","http://alexandredekerchove.com/ylwhbcphyy/Buy-Sell_Agreement_6970_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354653/","spamhaus"
 "354652","2020-04-30 09:26:13","http://koravit.zaeteaw.net/okmqhrfdsvj/Buy-Sell_Agreement_5690_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354652/","spamhaus"
-"354651","2020-04-30 09:26:11","https://aelogica.com/zznohyxa/Buy-Sell_Agreement_06229_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354651/","spamhaus"
+"354651","2020-04-30 09:26:11","https://aelogica.com/zznohyxa/Buy-Sell_Agreement_06229_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354651/","spamhaus"
 "354650","2020-04-30 09:26:05","http://187.250.220.89:45717/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/354650/","geenensp"
 "354649","2020-04-30 09:18:05","http://45.84.196.200/bins/Hilix.arm5","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/354649/","zbetcheckin"
 "354648","2020-04-30 09:18:03","http://45.84.196.200/bins/Hilix.arm","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/354648/","zbetcheckin"
@@ -3523,7 +3748,7 @@
 "354611","2020-04-30 09:00:17","https://kamagra.in.rs/bqcbhf/865772/Buy-Sell_Agreement_865772_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354611/","spamhaus"
 "354610","2020-04-30 08:59:43","https://bluecollarfinancial.net/gfmixt/Buy-Sell_Agreement_3474002_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354610/","spamhaus"
 "354609","2020-04-30 08:59:08","http://dev.apshaps.se/sdub/2766780/Buy-Sell_Agreement_2766780_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354609/","spamhaus"
-"354608","2020-04-30 08:58:35","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/Buy-Sell_Agreement_41879921_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354608/","spamhaus"
+"354608","2020-04-30 08:58:35","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/Buy-Sell_Agreement_41879921_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354608/","spamhaus"
 "354607","2020-04-30 08:54:24","https://pastebin.com/raw/TFER19JK","offline","malware_download","None","https://urlhaus.abuse.ch/url/354607/","JayTHL"
 "354606","2020-04-30 08:54:18","https://pastebin.com/raw/fves4YW3","offline","malware_download","None","https://urlhaus.abuse.ch/url/354606/","JayTHL"
 "354605","2020-04-30 08:54:11","http://cloud-server-updater2.co.za/doc/buer.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/354605/","abuse_ch"
@@ -3533,7 +3758,7 @@
 "354601","2020-04-30 08:52:50","http://morruko.antesos.com/fqtylehpb/Buy-Sell_Agreement_7410_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354601/","spamhaus"
 "354600","2020-04-30 08:52:47","https://www.francois-champion.com/lqkb/3923182/Buy-Sell_Agreement_3923182_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354600/","spamhaus"
 "354599","2020-04-30 08:52:43","http://drinkopolykopen.nl/wp-content/uploads/2020/04/nnpebk/7230934/Buy-Sell_Agreement_7230934_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354599/","spamhaus"
-"354598","2020-04-30 08:52:39","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/Buy-Sell_Agreement_65313434_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354598/","spamhaus"
+"354598","2020-04-30 08:52:39","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/Buy-Sell_Agreement_65313434_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354598/","spamhaus"
 "354597","2020-04-30 08:52:33","http://koravit.zaeteaw.net/okmqhrfdsvj/82347/Buy-Sell_Agreement_82347_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354597/","spamhaus"
 "354596","2020-04-30 08:52:31","https://rangebroadcasting.com/vfbc/7041182/Buy-Sell_Agreement_7041182_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354596/","spamhaus"
 "354595","2020-04-30 08:52:26","http://Muanha.xyz/cfewahhzze/Buy-Sell_Agreement_3947_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354595/","spamhaus"
@@ -3544,11 +3769,11 @@
 "354590","2020-04-30 08:41:06","http://greenleaveperu.com/media/cms/more.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/354590/","zbetcheckin"
 "354589","2020-04-30 08:41:03","https://pastebin.com/raw/dpcdmkv4","offline","malware_download","None","https://urlhaus.abuse.ch/url/354589/","JayTHL"
 "354588","2020-04-30 08:39:14","http://tinckorm.beget.tech/klip.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354588/","abuse_ch"
-"354587","2020-04-30 08:36:36","http://arcticprospectus.com/filesmy/filemy.exe","online","malware_download","DanaBot,exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/354587/","abuse_ch"
+"354587","2020-04-30 08:36:36","http://arcticprospectus.com/filesmy/filemy.exe","offline","malware_download","DanaBot,exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/354587/","abuse_ch"
 "354586","2020-04-30 08:36:26","http://cheriyilbuilders.com/ixwqumcq/1200859/Buy-Sell_Agreement_1200859_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354586/","spamhaus"
 "354585","2020-04-30 08:36:21","http://cheriyilbuilders.com/ixwqumcq/8638399/Buy-Sell_Agreement_8638399_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354585/","spamhaus"
 "354584","2020-04-30 08:36:19","http://cerradocredito.com.br/wp-content/uploads/2020/04/beazvgceu/Buy-Sell_Agreement_9562_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354584/","spamhaus"
-"354583","2020-04-30 08:36:12","http://staging.popclusive.asia/okppdsnq/314752/Buy-Sell_Agreement_314752_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354583/","spamhaus"
+"354583","2020-04-30 08:36:12","http://staging.popclusive.asia/okppdsnq/314752/Buy-Sell_Agreement_314752_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354583/","spamhaus"
 "354582","2020-04-30 08:36:07","http://alexandredekerchove.com/ylwhbcphyy/0870/Buy-Sell_Agreement_0870_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354582/","spamhaus"
 "354581","2020-04-30 08:36:05","http://duongfpt.ga/lxgqgox/74547418/Buy-Sell_Agreement_74547418_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354581/","spamhaus"
 "354580","2020-04-30 08:35:58","http://sunboom-gift.com/zwbaxf/892950/Buy-Sell_Agreement_892950_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354580/","spamhaus"
@@ -3562,7 +3787,7 @@
 "354572","2020-04-30 08:28:26","https://supportalaskausa.org/2_WDxDpF243.bin","offline","malware_download","encrypted,opendir","https://urlhaus.abuse.ch/url/354572/","abuse_ch"
 "354571","2020-04-30 08:28:23","https://supportalaskausa.org/spad.msi","offline","malware_download","msi,opendir","https://urlhaus.abuse.ch/url/354571/","abuse_ch"
 "354570","2020-04-30 08:28:18","https://vip.recommendedtoyoo.com/bdhycmsxctp/6643/Buy-Sell_Agreement_6643_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354570/","spamhaus"
-"354569","2020-04-30 08:28:13","https://vip.recommendedtoyoo.com/bdhycmsxctp/Buy-Sell_Agreement_404343_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354569/","spamhaus"
+"354569","2020-04-30 08:28:13","https://vip.recommendedtoyoo.com/bdhycmsxctp/Buy-Sell_Agreement_404343_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354569/","spamhaus"
 "354568","2020-04-30 08:28:09","https://rangebroadcasting.com/vfbc/Buy-Sell_Agreement_421253_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354568/","spamhaus"
 "354567","2020-04-30 08:28:04","http://113.116.176.162:7555/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/354567/","geenensp"
 "354566","2020-04-30 08:27:48","http://oskarnews.gazashare.com/pelsq/5187/Buy-Sell_Agreement_5187_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354566/","spamhaus"
@@ -3611,12 +3836,12 @@
 "354523","2020-04-30 07:19:24","https://kamagra.in.rs/bqcbhf/428972/Buy-Sell_Agreement_428972_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354523/","spamhaus"
 "354522","2020-04-30 07:19:15","http://koravit.zaeteaw.net/okmqhrfdsvj/Buy-Sell_Agreement_9160_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354522/","spamhaus"
 "354521","2020-04-30 07:19:13","http://189.252.214.199:46043/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/354521/","geenensp"
-"354520","2020-04-30 07:19:08","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/9864025/Buy-Sell_Agreement_9864025_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354520/","spamhaus"
-"354519","2020-04-30 07:19:00","https://rangebroadcasting.com/vfbc/95996/Buy-Sell_Agreement_95996_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354519/","spamhaus"
+"354520","2020-04-30 07:19:08","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/9864025/Buy-Sell_Agreement_9864025_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354520/","spamhaus"
+"354519","2020-04-30 07:19:00","https://rangebroadcasting.com/vfbc/95996/Buy-Sell_Agreement_95996_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354519/","spamhaus"
 "354518","2020-04-30 07:18:55","http://oralloy.com/xyqkbu/Buy-Sell_Agreement_660534_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354518/","spamhaus"
 "354517","2020-04-30 07:18:51","https://cryptoomarket.com/fhws/710920/Buy-Sell_Agreement_710920_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354517/","spamhaus"
 "354516","2020-04-30 07:18:48","http://koravit.zaeteaw.net/okmqhrfdsvj/154744/Buy-Sell_Agreement_154744_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354516/","spamhaus"
-"354515","2020-04-30 07:18:46","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/6680/Buy-Sell_Agreement_6680_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354515/","spamhaus"
+"354515","2020-04-30 07:18:46","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/6680/Buy-Sell_Agreement_6680_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354515/","spamhaus"
 "354514","2020-04-30 07:18:40","http://bolescy.com/otue/1563143/Buy-Sell_Agreement_1563143_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354514/","spamhaus"
 "354513","2020-04-30 07:18:35","http://cerradocredito.com.br/wp-content/uploads/2020/04/beazvgceu/Buy-Sell_Agreement_58325_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354513/","spamhaus"
 "354512","2020-04-30 07:18:33","http://alexandredekerchove.com/ylwhbcphyy/0358/Buy-Sell_Agreement_0358_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354512/","spamhaus"
@@ -3650,7 +3875,7 @@
 "354484","2020-04-30 06:34:16","http://chnes17wsdywealthandmoduleorganisationui.duckdns.org/secure/svchost.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/354484/","gorimpthon"
 "354483","2020-04-30 06:34:13","http://45.89.230.141/Pipe/mips","offline","malware_download","32-bit,elf,mips","https://urlhaus.abuse.ch/url/354483/","geenensp"
 "354482","2020-04-30 06:34:11","http://45.89.230.141/Pipe/EkSgbins.sh","offline","malware_download","script","https://urlhaus.abuse.ch/url/354482/","geenensp"
-"354481","2020-04-30 06:34:08","https://vip.recommendedtoyoo.com/bdhycmsxctp/Buy-Sell_Agreement_033755_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354481/","spamhaus"
+"354481","2020-04-30 06:34:08","https://vip.recommendedtoyoo.com/bdhycmsxctp/Buy-Sell_Agreement_033755_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354481/","spamhaus"
 "354480","2020-04-30 06:34:04","https://cdn.discordapp.com/attachments/687683954882641920/704665307087896576/COVID-19.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/354480/","spamhaus"
 "354479","2020-04-30 06:33:31","http://thesecuritysoftwarescannerindustrgreat.duckdns.org/lvc/vbc.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/354479/","gorimpthon"
 "354478","2020-04-30 06:33:26","http://thesecuritysoftwarescannerindustrgreat.duckdns.org/lvc/mn.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/354478/","gorimpthon"
@@ -3670,7 +3895,7 @@
 "354464","2020-04-30 06:32:11","http://oralloy.com/xyqkbu/286537/Buy-Sell_Agreement_286537_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354464/","spamhaus"
 "354463","2020-04-30 06:32:07","http://www.cheriyilbuilders.com/herevryxugc/9767904/Buy-Sell_Agreement_9767904_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354463/","spamhaus"
 "354462","2020-04-30 06:32:04","https://www.francois-champion.com/lqkb/Buy-Sell_Agreement_64516_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354462/","spamhaus"
-"354461","2020-04-30 06:32:02","https://aelogica.com/zznohyxa/Buy-Sell_Agreement_2972_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354461/","spamhaus"
+"354461","2020-04-30 06:32:02","https://aelogica.com/zznohyxa/Buy-Sell_Agreement_2972_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354461/","spamhaus"
 "354460","2020-04-30 06:25:34","http://cerradocredito.com.br/wp-content/uploads/2020/04/beazvgceu/Buy-Sell_Agreement_199795_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354460/","spamhaus"
 "354459","2020-04-30 06:24:36","http://sunboom-gift.com/zwbaxf/85728/Buy-Sell_Agreement_85728_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354459/","spamhaus"
 "354458","2020-04-30 06:14:08","https://pastebin.com/raw/aQsDT3md","offline","malware_download","None","https://urlhaus.abuse.ch/url/354458/","JayTHL"
@@ -3678,14 +3903,14 @@
 "354456","2020-04-30 06:13:53","http://morruko.antesos.com/fqtylehpb/4887191/Buy-Sell_Agreement_4887191_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354456/","spamhaus"
 "354455","2020-04-30 06:13:49","http://jaservicioscontables.casteviajes.com/xekqbxkehlx/Buy-Sell_Agreement_162998_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354455/","spamhaus"
 "354454","2020-04-30 06:13:44","http://duongfpt.ga/lxgqgox/93282146/Buy-Sell_Agreement_93282146_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354454/","spamhaus"
-"354453","2020-04-30 06:13:41","https://rangebroadcasting.com/vfbc/Buy-Sell_Agreement_0679634_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354453/","spamhaus"
+"354453","2020-04-30 06:13:41","https://rangebroadcasting.com/vfbc/Buy-Sell_Agreement_0679634_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354453/","spamhaus"
 "354452","2020-04-30 06:13:34","http://virustreatments.empeeevents.com/eyyudu/Buy-Sell_Agreement_3812_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354452/","spamhaus"
 "354451","2020-04-30 06:13:27","http://oralloy.com/xyqkbu/Buy-Sell_Agreement_3496851_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354451/","spamhaus"
 "354450","2020-04-30 06:13:24","http://dev.apshaps.se/sdub/954656/Buy-Sell_Agreement_954656_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354450/","spamhaus"
 "354449","2020-04-30 06:13:19","http://duongfpt.ga/lxgqgox/2278274/Buy-Sell_Agreement_2278274_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354449/","spamhaus"
 "354448","2020-04-30 06:13:04","https://www.francois-champion.com/lqkb/59420/Buy-Sell_Agreement_59420_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354448/","spamhaus"
 "354447","2020-04-30 06:13:00","http://britica.vn/dqsfv/3334209/Buy-Sell_Agreement_3334209_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354447/","spamhaus"
-"354446","2020-04-30 06:12:57","https://rangebroadcasting.com/vfbc/Buy-Sell_Agreement_4224_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354446/","spamhaus"
+"354446","2020-04-30 06:12:57","https://rangebroadcasting.com/vfbc/Buy-Sell_Agreement_4224_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354446/","spamhaus"
 "354445","2020-04-30 06:12:53","http://morruko.antesos.com/fqtylehpb/Buy-Sell_Agreement_578038_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354445/","spamhaus"
 "354444","2020-04-30 06:12:47","http://koravit.zaeteaw.net/okmqhrfdsvj/Buy-Sell_Agreement_71264_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354444/","spamhaus"
 "354443","2020-04-30 06:12:42","https://kamagra.in.rs/bqcbhf/Buy-Sell_Agreement_75361572_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354443/","spamhaus"
@@ -3695,15 +3920,15 @@
 "354439","2020-04-30 06:12:10","http://61.75.111.224:46181/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/354439/","geenensp"
 "354438","2020-04-30 06:12:05","http://81.249.64.61:47159/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/354438/","geenensp"
 "354437","2020-04-30 06:12:01","http://bolescy.com/otue/10261/Buy-Sell_Agreement_10261_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354437/","spamhaus"
-"354436","2020-04-30 06:11:49","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/Buy-Sell_Agreement_3466_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354436/","spamhaus"
+"354436","2020-04-30 06:11:49","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/Buy-Sell_Agreement_3466_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354436/","spamhaus"
 "354435","2020-04-30 06:11:44","https://www.francois-champion.com/lqkb/776618/Buy-Sell_Agreement_776618_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354435/","spamhaus"
 "354434","2020-04-30 06:11:38","http://drinkopolykopen.nl/wp-content/uploads/2020/04/nnpebk/54192/Buy-Sell_Agreement_54192_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354434/","spamhaus"
-"354433","2020-04-30 06:11:35","http://virustreatments.empeeevents.com/eyyudu/5220/Buy-Sell_Agreement_5220_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354433/","spamhaus"
+"354433","2020-04-30 06:11:35","http://virustreatments.empeeevents.com/eyyudu/5220/Buy-Sell_Agreement_5220_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354433/","spamhaus"
 "354432","2020-04-30 06:11:30","http://cheriyilbuilders.com/ixwqumcq/78911569/Buy-Sell_Agreement_78911569_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354432/","spamhaus"
 "354431","2020-04-30 06:11:26","http://morruko.antesos.com/fqtylehpb/Buy-Sell_Agreement_4479_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354431/","spamhaus"
 "354430","2020-04-30 06:11:24","http://jaservicioscontables.casteviajes.com/xekqbxkehlx/4164189/Buy-Sell_Agreement_4164189_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354430/","spamhaus"
 "354429","2020-04-30 06:11:09","http://oralloy.com/xyqkbu/Buy-Sell_Agreement_3795_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354429/","spamhaus"
-"354428","2020-04-30 06:11:05","http://staging.popclusive.asia/okppdsnq/Buy-Sell_Agreement_66313_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354428/","spamhaus"
+"354428","2020-04-30 06:11:05","http://staging.popclusive.asia/okppdsnq/Buy-Sell_Agreement_66313_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354428/","spamhaus"
 "354427","2020-04-30 06:10:15","http://drinkopolykopen.nl/wp-content/uploads/2020/04/nnpebk/4496/Buy-Sell_Agreement_4496_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354427/","spamhaus"
 "354426","2020-04-30 06:10:13","http://evdekal-kampanyasi20gbhediye.com/EvdeKal-20gbhediye.apk","offline","malware_download","apk ,Cerberus","https://urlhaus.abuse.ch/url/354426/","mertcangokgoz"
 "354425","2020-04-30 06:10:02","http://virustreatments.empeeevents.com/eyyudu/Buy-Sell_Agreement_82412_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354425/","spamhaus"
@@ -3865,7 +4090,7 @@
 "354269","2020-04-29 21:04:37","http://199.83.205.205:47145/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354269/","Gandylyan1"
 "354268","2020-04-29 21:04:25","http://111.42.103.55:53196/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354268/","Gandylyan1"
 "354267","2020-04-29 21:04:22","http://182.126.213.171:50081/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354267/","Gandylyan1"
-"354266","2020-04-29 21:04:18","http://114.239.37.159:39279/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354266/","Gandylyan1"
+"354266","2020-04-29 21:04:18","http://114.239.37.159:39279/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354266/","Gandylyan1"
 "354265","2020-04-29 21:04:14","http://42.227.186.34:41088/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354265/","Gandylyan1"
 "354264","2020-04-29 21:04:10","http://180.124.214.4:41864/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354264/","Gandylyan1"
 "354263","2020-04-29 21:04:05","http://182.121.152.74:59597/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354263/","Gandylyan1"
@@ -3919,7 +4144,7 @@
 "354215","2020-04-29 18:37:15","http://oralloy.com/xyqkbu/1564384/Buy-Sell_Agreement_1564384_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354215/","spamhaus"
 "354214","2020-04-29 18:37:13","http://oralloy.com/xyqkbu/16120/Buy-Sell_Agreement_16120_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354214/","spamhaus"
 "354213","2020-04-29 18:36:04","http://dev.apshaps.se/sdub/3655876/Buy-Sell_Agreement_3655876_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354213/","spamhaus"
-"354212","2020-04-29 18:28:03","https://vip.recommendedtoyoo.com/bdhycmsxctp/2017982/Buy-Sell_Agreement_2017982_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354212/","spamhaus"
+"354212","2020-04-29 18:28:03","https://vip.recommendedtoyoo.com/bdhycmsxctp/2017982/Buy-Sell_Agreement_2017982_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354212/","spamhaus"
 "354211","2020-04-29 18:27:20","http://silverstargalaxy.com.silverstartv.website/cmea/59975/Buy-Sell_Agreement_59975_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354211/","spamhaus"
 "354210","2020-04-29 18:27:12","http://cerradocredito.com.br/wp-content/uploads/2020/04/beazvgceu/65281/Buy-Sell_Agreement_65281_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354210/","spamhaus"
 "354209","2020-04-29 18:27:09","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/2423/Buy-Sell_Agreement_2423_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354209/","spamhaus"
@@ -3954,15 +4179,15 @@
 "354180","2020-04-29 18:04:13","http://124.67.89.74:49591/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354180/","Gandylyan1"
 "354179","2020-04-29 18:04:12","http://211.137.225.77:59159/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354179/","Gandylyan1"
 "354178","2020-04-29 18:04:04","http://115.61.2.125:45051/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354178/","Gandylyan1"
-"354177","2020-04-29 18:01:39","http://staging.popclusive.asia/okppdsnq/Buy-Sell_Agreement_5038_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354177/","spamhaus"
+"354177","2020-04-29 18:01:39","http://staging.popclusive.asia/okppdsnq/Buy-Sell_Agreement_5038_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354177/","spamhaus"
 "354176","2020-04-29 18:01:35","http://oskarnews.gazashare.com/pelsq/Buy-Sell_Agreement_25166746_04282020.zip","offline","malware_download","geofenced,zip","https://urlhaus.abuse.ch/url/354176/","anonymous"
-"354175","2020-04-29 18:01:32","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/Buy-Sell_Agreement_86169_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354175/","spamhaus"
+"354175","2020-04-29 18:01:32","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/Buy-Sell_Agreement_86169_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354175/","spamhaus"
 "354174","2020-04-29 17:53:50","http://oskarnews.gazashare.com/pelsq/3939567/Buy-Sell_Agreement_3939567_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354174/","spamhaus"
 "354173","2020-04-29 17:53:15","http://jaservicioscontables.casteviajes.com/xekqbxkehlx/5699246/Buy-Sell_Agreement_5699246_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354173/","spamhaus"
 "354172","2020-04-29 17:52:40","https://kamagra.in.rs/bqcbhf/6078657/Buy-Sell_Agreement_6078657_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354172/","spamhaus"
 "354171","2020-04-29 17:52:05","https://www.francois-champion.com/lqkb/Buy-Sell_Agreement_04275750_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354171/","spamhaus"
 "354170","2020-04-29 17:51:33","http://dzapasigroup.usapglobal.org/pbnxnmc/Buy-Sell_Agreement_3442_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354170/","spamhaus"
-"354169","2020-04-29 17:40:31","http://demo13.dsdemosite.com/alugzfn/Buy-Sell_Agreement_5506_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354169/","spamhaus"
+"354169","2020-04-29 17:40:31","http://demo13.dsdemosite.com/alugzfn/Buy-Sell_Agreement_5506_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354169/","spamhaus"
 "354168","2020-04-29 17:40:12","http://10022020newfolder1002002231-service1002.space/raccon.exe","offline","malware_download","GuLoader","https://urlhaus.abuse.ch/url/354168/","vxvault"
 "354167","2020-04-29 17:40:05","http://jaservicioscontables.casteviajes.com/xekqbxkehlx/Buy-Sell_Agreement_6726834_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354167/","spamhaus"
 "354166","2020-04-29 17:39:07","http://oz.timeisletitgo.ru/520257778.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/354166/","vxvault"
@@ -3970,7 +4195,7 @@
 "354164","2020-04-29 17:38:58","http://37.49.226.209/bins/dvrbot.x86","offline","malware_download","32-bit,elf,x86-32","https://urlhaus.abuse.ch/url/354164/","geenensp"
 "354163","2020-04-29 17:38:56","http://Muanha.xyz/cfewahhzze/35555/Buy-Sell_Agreement_35555_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354163/","spamhaus"
 "354162","2020-04-29 17:38:40","http://www.cheriyilbuilders.com/herevryxugc/385904/Buy-Sell_Agreement_385904_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354162/","spamhaus"
-"354161","2020-04-29 17:38:37","https://rangebroadcasting.com/vfbc/810366/Buy-Sell_Agreement_810366_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354161/","spamhaus"
+"354161","2020-04-29 17:38:37","https://rangebroadcasting.com/vfbc/810366/Buy-Sell_Agreement_810366_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354161/","spamhaus"
 "354160","2020-04-29 17:38:33","https://kamagra.in.rs/bqcbhf/Buy-Sell_Agreement_4147_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354160/","spamhaus"
 "354159","2020-04-29 17:38:22","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/Buy-Sell_Agreement_49553_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354159/","spamhaus"
 "354158","2020-04-29 17:38:15","http://Muanha.xyz/cfewahhzze/58145827/Buy-Sell_Agreement_58145827_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354158/","spamhaus"
@@ -3989,13 +4214,13 @@
 "354145","2020-04-29 17:18:11","http://sunboom-gift.com/zwbaxf/Buy-Sell_Agreement_855948_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354145/","spamhaus"
 "354144","2020-04-29 17:18:05","https://cryptoomarket.com/fhws/7289616/Buy-Sell_Agreement_7289616_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354144/","spamhaus"
 "354143","2020-04-29 17:17:54","http://cheriyilbuilders.com/ixwqumcq/238380/Buy-Sell_Agreement_238380_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354143/","spamhaus"
-"354142","2020-04-29 17:17:42","https://rangebroadcasting.com/vfbc/Buy-Sell_Agreement_7507_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354142/","spamhaus"
-"354141","2020-04-29 17:17:35","http://jessymart.flexyhub.com/ssuzzix/Buy-Sell_Agreement_54933_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354141/","spamhaus"
-"354140","2020-04-29 17:17:24","http://demo13.dsdemosite.com/alugzfn/Buy-Sell_Agreement_0761_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354140/","spamhaus"
+"354142","2020-04-29 17:17:42","https://rangebroadcasting.com/vfbc/Buy-Sell_Agreement_7507_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354142/","spamhaus"
+"354141","2020-04-29 17:17:35","http://jessymart.flexyhub.com/ssuzzix/Buy-Sell_Agreement_54933_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354141/","spamhaus"
+"354140","2020-04-29 17:17:24","http://demo13.dsdemosite.com/alugzfn/Buy-Sell_Agreement_0761_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354140/","spamhaus"
 "354139","2020-04-29 17:17:14","http://www.cheriyilbuilders.com/herevryxugc/Buy-Sell_Agreement_203749_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354139/","spamhaus"
 "354138","2020-04-29 17:15:08","https://pastebin.com/raw/yjQwfwLu","offline","malware_download","None","https://urlhaus.abuse.ch/url/354138/","JayTHL"
 "354137","2020-04-29 17:15:03","https://pastebin.com/raw/Tps40B96","offline","malware_download","None","https://urlhaus.abuse.ch/url/354137/","JayTHL"
-"354136","2020-04-29 17:08:00","https://rangebroadcasting.com/vfbc/Buy-Sell_Agreement_62115_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354136/","spamhaus"
+"354136","2020-04-29 17:08:00","https://rangebroadcasting.com/vfbc/Buy-Sell_Agreement_62115_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354136/","spamhaus"
 "354135","2020-04-29 17:07:51","http://jaservicioscontables.casteviajes.com/xekqbxkehlx/Buy-Sell_Agreement_8464289_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354135/","spamhaus"
 "354134","2020-04-29 17:07:48","http://denunciesoftwareilegal.org.br/wp-content/plugins/apikey/bfgvnffqfo/389730/Buy-Sell_Agreement_389730_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354134/","spamhaus"
 "354133","2020-04-29 17:07:47","http://oralloy.com/xyqkbu/Buy-Sell_Agreement_339039_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354133/","spamhaus"
@@ -4006,7 +4231,7 @@
 "354128","2020-04-29 17:07:24","http://oskarnews.gazashare.com/pelsq/21205/Buy-Sell_Agreement_21205_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354128/","spamhaus"
 "354127","2020-04-29 17:07:19","http://denunciesoftwareilegal.org.br/wp-content/plugins/apikey/bfgvnffqfo/Buy-Sell_Agreement_8325_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354127/","spamhaus"
 "354126","2020-04-29 17:07:15","http://duongfpt.ga/lxgqgox/Buy-Sell_Agreement_8606_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354126/","spamhaus"
-"354125","2020-04-29 17:07:10","http://jessymart.flexyhub.com/ssuzzix/Buy-Sell_Agreement_32854692_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354125/","spamhaus"
+"354125","2020-04-29 17:07:10","http://jessymart.flexyhub.com/ssuzzix/Buy-Sell_Agreement_32854692_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354125/","spamhaus"
 "354124","2020-04-29 17:07:05","https://aelogica.com/zznohyxa/Buy-Sell_Agreement_56786568_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354124/","spamhaus"
 "354123","2020-04-29 17:06:14","https://drive.google.com/uc?export=download&id=1Q2PX2OM5w6WFMrF_5lIhxBuqpcaxfjtr","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/354123/","lovemalware"
 "354122","2020-04-29 17:06:04","https://onedrive.live.com/download?cid=3112E77688F09693&resid=3112E77688F09693%21320&authkey=AOOUjzuf408Dclw","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/354122/","lovemalware"
@@ -4025,16 +4250,16 @@
 "354109","2020-04-29 16:47:15","http://cheriyilbuilders.com/ixwqumcq/Buy-Sell_Agreement_660298_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354109/","spamhaus"
 "354108","2020-04-29 16:47:11","http://cheriyilbuilders.com/ixwqumcq/Buy-Sell_Agreement_07288_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354108/","spamhaus"
 "354107","2020-04-29 16:47:08","http://jaservicioscontables.casteviajes.com/xekqbxkehlx/4546012/Buy-Sell_Agreement_4546012_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354107/","spamhaus"
-"354106","2020-04-29 16:47:06","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/4852/Buy-Sell_Agreement_4852_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354106/","spamhaus"
-"354105","2020-04-29 16:39:14","http://demo13.dsdemosite.com/alugzfn/Buy-Sell_Agreement_5945315_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354105/","spamhaus"
+"354106","2020-04-29 16:47:06","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/4852/Buy-Sell_Agreement_4852_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354106/","spamhaus"
+"354105","2020-04-29 16:39:14","http://demo13.dsdemosite.com/alugzfn/Buy-Sell_Agreement_5945315_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354105/","spamhaus"
 "354104","2020-04-29 16:39:05","http://dzapasigroup.usapglobal.org/pbnxnmc/48527452/Buy-Sell_Agreement_48527452_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354104/","spamhaus"
 "354103","2020-04-29 16:33:35","http://britica.vn/dqsfv/1457750/Buy-Sell_Agreement_1457750_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354103/","spamhaus"
 "354102","2020-04-29 16:33:27","https://aelogica.com/zznohyxa/Buy-Sell_Agreement_2316516_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354102/","spamhaus"
 "354101","2020-04-29 16:33:24","https://cryptoomarket.com/fhws/Buy-Sell_Agreement_01796037_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354101/","spamhaus"
-"354100","2020-04-29 16:33:19","https://rangebroadcasting.com/vfbc/Buy-Sell_Agreement_6246_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354100/","spamhaus"
+"354100","2020-04-29 16:33:19","https://rangebroadcasting.com/vfbc/Buy-Sell_Agreement_6246_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354100/","spamhaus"
 "354099","2020-04-29 16:33:14","http://Muanha.xyz/cfewahhzze/Buy-Sell_Agreement_6877_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354099/","spamhaus"
-"354098","2020-04-29 16:33:10","https://rangebroadcasting.com/vfbc/0127/Buy-Sell_Agreement_0127_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354098/","spamhaus"
-"354097","2020-04-29 16:33:05","https://vip.recommendedtoyoo.com/bdhycmsxctp/73579/Buy-Sell_Agreement_73579_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354097/","spamhaus"
+"354098","2020-04-29 16:33:10","https://rangebroadcasting.com/vfbc/0127/Buy-Sell_Agreement_0127_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354098/","spamhaus"
+"354097","2020-04-29 16:33:05","https://vip.recommendedtoyoo.com/bdhycmsxctp/73579/Buy-Sell_Agreement_73579_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354097/","spamhaus"
 "354096","2020-04-29 16:32:02","http://www.cheriyilbuilders.com/herevryxugc/Buy-Sell_Agreement_39432145_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354096/","spamhaus"
 "354095","2020-04-29 16:31:58","http://81.196.213.134:6632/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/354095/","geenensp"
 "354094","2020-04-29 16:31:51","https://rangebroadcasting.com/vfbc/Buy-Sell_Agreement_7898_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354094/","spamhaus"
@@ -4047,10 +4272,10 @@
 "354087","2020-04-29 16:30:07","http://drinkopolykopen.nl/wp-content/uploads/2020/04/nnpebk/62008/Buy-Sell_Agreement_62008_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354087/","spamhaus"
 "354086","2020-04-29 16:29:05","http://promassager.ga/yltkoe/109475/Buy-Sell_Agreement_109475_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354086/","spamhaus"
 "354085","2020-04-29 16:28:32","http://oskarnews.gazashare.com/pelsq/Buy-Sell_Agreement_4478060_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354085/","spamhaus"
-"354084","2020-04-29 16:27:57","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/899516/Buy-Sell_Agreement_899516_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354084/","spamhaus"
+"354084","2020-04-29 16:27:57","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/899516/Buy-Sell_Agreement_899516_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354084/","spamhaus"
 "354083","2020-04-29 16:27:25","http://jaservicioscontables.casteviajes.com/xekqbxkehlx/Buy-Sell_Agreement_874829_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354083/","spamhaus"
 "354082","2020-04-29 16:26:51","http://promassager.ga/yltkoe/65758864/Buy-Sell_Agreement_65758864_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354082/","spamhaus"
-"354081","2020-04-29 16:25:47","http://virustreatments.empeeevents.com/eyyudu/Buy-Sell_Agreement_3493806_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354081/","spamhaus"
+"354081","2020-04-29 16:25:47","http://virustreatments.empeeevents.com/eyyudu/Buy-Sell_Agreement_3493806_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354081/","spamhaus"
 "354080","2020-04-29 16:25:12","http://denunciesoftwareilegal.org.br/wp-content/plugins/apikey/bfgvnffqfo/Buy-Sell_Agreement_19864_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354080/","spamhaus"
 "354079","2020-04-29 16:25:11","http://alexandredekerchove.com/ylwhbcphyy/Buy-Sell_Agreement_23494_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354079/","spamhaus"
 "354078","2020-04-29 16:24:38","http://silverstargalaxy.com.silverstartv.website/cmea/94603139/Buy-Sell_Agreement_94603139_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354078/","spamhaus"
@@ -4077,7 +4302,7 @@
 "354057","2020-04-29 15:39:59","http://denunciesoftwareilegal.org.br/wp-content/plugins/apikey/bfgvnffqfo/77655/Buy-Sell_Agreement_77655_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354057/","spamhaus"
 "354056","2020-04-29 15:39:56","http://bolescy.com/otue/108897/Buy-Sell_Agreement_108897_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354056/","spamhaus"
 "354055","2020-04-29 15:39:53","https://aelogica.com/zznohyxa/Buy-Sell_Agreement_5514688_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354055/","spamhaus"
-"354054","2020-04-29 15:39:49","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/4194555/Buy-Sell_Agreement_4194555_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354054/","spamhaus"
+"354054","2020-04-29 15:39:49","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/4194555/Buy-Sell_Agreement_4194555_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354054/","spamhaus"
 "354053","2020-04-29 15:39:43","http://jaservicioscontables.casteviajes.com/xekqbxkehlx/Buy-Sell_Agreement_9764_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354053/","spamhaus"
 "354052","2020-04-29 15:39:29","https://aelogica.com/zznohyxa/Buy-Sell_Agreement_346856_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354052/","spamhaus"
 "354051","2020-04-29 15:39:27","http://ade.topepics.com/pkthdrgdb/4779/Buy-Sell_Agreement_4779_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354051/","spamhaus"
@@ -4095,20 +4320,20 @@
 "354039","2020-04-29 15:22:43","http://dzapasigroup.usapglobal.org/pbnxnmc/3054/Buy-Sell_Agreement_3054_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354039/","spamhaus"
 "354038","2020-04-29 15:22:40","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/Buy-Sell_Agreement_647741_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354038/","spamhaus"
 "354037","2020-04-29 15:22:37","http://duongfpt.ga/lxgqgox/Buy-Sell_Agreement_4191_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354037/","spamhaus"
-"354036","2020-04-29 15:22:29","http://virustreatments.empeeevents.com/eyyudu/6941/Buy-Sell_Agreement_6941_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354036/","spamhaus"
-"354035","2020-04-29 15:22:24","http://jessymart.flexyhub.com/ssuzzix/8889210/Buy-Sell_Agreement_8889210_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354035/","spamhaus"
+"354036","2020-04-29 15:22:29","http://virustreatments.empeeevents.com/eyyudu/6941/Buy-Sell_Agreement_6941_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354036/","spamhaus"
+"354035","2020-04-29 15:22:24","http://jessymart.flexyhub.com/ssuzzix/8889210/Buy-Sell_Agreement_8889210_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354035/","spamhaus"
 "354034","2020-04-29 15:22:20","http://www.cheriyilbuilders.com/herevryxugc/Buy-Sell_Agreement_80209884_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354034/","spamhaus"
 "354033","2020-04-29 15:22:16","http://alexandredekerchove.com/ylwhbcphyy/Buy-Sell_Agreement_6091790_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354033/","spamhaus"
 "354032","2020-04-29 15:22:13","http://promassager.ga/yltkoe/Buy-Sell_Agreement_207769_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354032/","spamhaus"
 "354031","2020-04-29 15:22:10","http://denunciesoftwareilegal.org.br/wp-content/plugins/apikey/bfgvnffqfo/19041295/Buy-Sell_Agreement_19041295_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354031/","spamhaus"
 "354030","2020-04-29 15:22:08","https://kamagra.in.rs/bqcbhf/Buy-Sell_Agreement_8082_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354030/","spamhaus"
-"354029","2020-04-29 15:22:03","http://jessymart.flexyhub.com/ssuzzix/0314864/Buy-Sell_Agreement_0314864_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354029/","spamhaus"
+"354029","2020-04-29 15:22:03","http://jessymart.flexyhub.com/ssuzzix/0314864/Buy-Sell_Agreement_0314864_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354029/","spamhaus"
 "354028","2020-04-29 15:21:15","http://NCERTSOLUTIONACADEMY.COM/yghks/Buy-Sell_Agreement_329681_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354028/","spamhaus"
 "354027","2020-04-29 15:21:13","http://denunciesoftwareilegal.org.br/wp-content/plugins/apikey/bfgvnffqfo/Buy-Sell_Agreement_4038071_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354027/","spamhaus"
 "354026","2020-04-29 15:21:10","http://dzapasigroup.usapglobal.org/pbnxnmc/80499641/Buy-Sell_Agreement_80499641_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354026/","spamhaus"
 "354025","2020-04-29 15:17:04","http://104.168.198.194/mipsel","online","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/354025/","Gandylyan1"
 "354024","2020-04-29 15:15:06","https://taxukrebates.com/","offline","malware_download","phishing","https://urlhaus.abuse.ch/url/354024/","anonymous"
-"354023","2020-04-29 15:08:07","https://vip.recommendedtoyoo.com/bdhycmsxctp/Buy-Sell_Agreement_1571_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354023/","spamhaus"
+"354023","2020-04-29 15:08:07","https://vip.recommendedtoyoo.com/bdhycmsxctp/Buy-Sell_Agreement_1571_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354023/","spamhaus"
 "354022","2020-04-29 15:07:35","http://alexandredekerchove.com/ylwhbcphyy/71191/Buy-Sell_Agreement_71191_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354022/","spamhaus"
 "354021","2020-04-29 15:07:33","http://silverstargalaxy.com.silverstartv.website/cmea/2003/Buy-Sell_Agreement_2003_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354021/","spamhaus"
 "354020","2020-04-29 15:07:31","http://Muanha.xyz/cfewahhzze/Buy-Sell_Agreement_3250669_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354020/","spamhaus"
@@ -4117,7 +4342,7 @@
 "354017","2020-04-29 15:07:23","https://cryptoomarket.com/fhws/3204949/Buy-Sell_Agreement_3204949_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354017/","spamhaus"
 "354016","2020-04-29 15:07:20","http://oralloy.com/xyqkbu/49290/Buy-Sell_Agreement_49290_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354016/","spamhaus"
 "354015","2020-04-29 15:07:17","http://jaservicioscontables.casteviajes.com/xekqbxkehlx/Buy-Sell_Agreement_38489451_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354015/","spamhaus"
-"354014","2020-04-29 15:07:13","https://rangebroadcasting.com/vfbc/130632/Buy-Sell_Agreement_130632_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354014/","spamhaus"
+"354014","2020-04-29 15:07:13","https://rangebroadcasting.com/vfbc/130632/Buy-Sell_Agreement_130632_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354014/","spamhaus"
 "354013","2020-04-29 15:07:05","http://koravit.zaeteaw.net/okmqhrfdsvj/Buy-Sell_Agreement_50369_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354013/","spamhaus"
 "354012","2020-04-29 15:06:16","http://222.138.181.140:52260/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354012/","Gandylyan1"
 "354011","2020-04-29 15:06:11","http://112.122.61.250:35738/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354011/","Gandylyan1"
@@ -4135,14 +4360,14 @@
 "353999","2020-04-29 15:04:15","http://125.113.66.85:33978/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/353999/","Gandylyan1"
 "353998","2020-04-29 15:04:10","http://42.239.168.235:55153/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/353998/","Gandylyan1"
 "353997","2020-04-29 15:03:08","https://vip.recommendedtoyoo.com/bdhycmsxctp/Buy-Sell_Agreement_952550_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353997/","spamhaus"
-"353996","2020-04-29 15:03:03","https://vip.recommendedtoyoo.com/bdhycmsxctp/Buy-Sell_Agreement_130494_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353996/","spamhaus"
+"353996","2020-04-29 15:03:03","https://vip.recommendedtoyoo.com/bdhycmsxctp/Buy-Sell_Agreement_130494_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353996/","spamhaus"
 "353995","2020-04-29 15:02:51","http://drinkopolykopen.nl/wp-content/uploads/2020/04/nnpebk/Buy-Sell_Agreement_831344_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353995/","spamhaus"
 "353994","2020-04-29 15:02:49","http://cheriyilbuilders.com/ixwqumcq/5765074/Buy-Sell_Agreement_5765074_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353994/","spamhaus"
 "353993","2020-04-29 15:02:46","http://www.cheriyilbuilders.com/herevryxugc/Buy-Sell_Agreement_232663_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353993/","spamhaus"
 "353992","2020-04-29 15:02:33","http://koravit.zaeteaw.net/okmqhrfdsvj/Buy-Sell_Agreement_0150293_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353992/","spamhaus"
 "353991","2020-04-29 15:02:29","http://oralloy.com/xyqkbu/Buy-Sell_Agreement_86031_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353991/","spamhaus"
 "353990","2020-04-29 15:02:10","http://alexandredekerchove.com/ylwhbcphyy/54335544/Buy-Sell_Agreement_54335544_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353990/","spamhaus"
-"353989","2020-04-29 15:02:06","https://rangebroadcasting.com/vfbc/Buy-Sell_Agreement_9106293_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353989/","spamhaus"
+"353989","2020-04-29 15:02:06","https://rangebroadcasting.com/vfbc/Buy-Sell_Agreement_9106293_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353989/","spamhaus"
 "353988","2020-04-29 15:01:53","http://dev.apshaps.se/sdub/3757/Buy-Sell_Agreement_3757_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353988/","spamhaus"
 "353987","2020-04-29 15:01:51","https://www.francois-champion.com/lqkb/Buy-Sell_Agreement_71497458_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353987/","spamhaus"
 "353986","2020-04-29 15:01:46","http://cerradocredito.com.br/wp-content/uploads/2020/04/beazvgceu/05562669/Buy-Sell_Agreement_05562669_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353986/","spamhaus"
@@ -4151,7 +4376,7 @@
 "353983","2020-04-29 14:54:17","http://NCERTSOLUTIONACADEMY.COM/yghks/2597807/Buy-Sell_Agreement_2597807_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353983/","spamhaus"
 "353982","2020-04-29 14:54:15","http://sunboom-gift.com/zwbaxf/14663643/Buy-Sell_Agreement_14663643_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353982/","spamhaus"
 "353981","2020-04-29 14:54:09","http://Muanha.xyz/cfewahhzze/3497/Buy-Sell_Agreement_3497_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353981/","spamhaus"
-"353980","2020-04-29 14:54:07","https://rangebroadcasting.com/vfbc/Buy-Sell_Agreement_47414_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353980/","spamhaus"
+"353980","2020-04-29 14:54:07","https://rangebroadcasting.com/vfbc/Buy-Sell_Agreement_47414_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353980/","spamhaus"
 "353979","2020-04-29 14:50:49","http://arianegerkens.com/ujfnohl/22222.png","offline","malware_download","Qakbot,qbot,Quakbot","https://urlhaus.abuse.ch/url/353979/","notwhickey"
 "353978","2020-04-29 14:50:37","http://sunboom-gift.com/zwbaxf/08853/Buy-Sell_Agreement_08853_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353978/","spamhaus"
 "353977","2020-04-29 14:50:31","http://dzapasigroup.usapglobal.org/pbnxnmc/Buy-Sell_Agreement_5316_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353977/","spamhaus"
@@ -4159,12 +4384,12 @@
 "353975","2020-04-29 14:50:16","http://demo13.dsdemosite.com/alugzfn/Buy-Sell_Agreement_5465012_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353975/","spamhaus"
 "353974","2020-04-29 14:50:09","https://bluecollarfinancial.net/gfmixt/Buy-Sell_Agreement_8000484_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353974/","spamhaus"
 "353973","2020-04-29 14:50:04","https://aelogica.com/zznohyxa/8295/Buy-Sell_Agreement_8295_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353973/","spamhaus"
-"353972","2020-04-29 14:46:25","http://staging.popclusive.asia/okppdsnq/00827/Buy-Sell_Agreement_00827_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353972/","spamhaus"
-"353971","2020-04-29 14:46:18","http://jessymart.flexyhub.com/ssuzzix/Buy-Sell_Agreement_4896_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353971/","spamhaus"
+"353972","2020-04-29 14:46:25","http://staging.popclusive.asia/okppdsnq/00827/Buy-Sell_Agreement_00827_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353972/","spamhaus"
+"353971","2020-04-29 14:46:18","http://jessymart.flexyhub.com/ssuzzix/Buy-Sell_Agreement_4896_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353971/","spamhaus"
 "353970","2020-04-29 14:46:13","http://dev.apshaps.se/sdub/Buy-Sell_Agreement_443872_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353970/","spamhaus"
 "353969","2020-04-29 14:46:11","https://vip.recommendedtoyoo.com/bdhycmsxctp/70840/Buy-Sell_Agreement_70840_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353969/","spamhaus"
-"353968","2020-04-29 14:45:43","http://virustreatments.empeeevents.com/eyyudu/Buy-Sell_Agreement_7595546_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353968/","spamhaus"
-"353967","2020-04-29 14:45:37","http://jessymart.flexyhub.com/ssuzzix/5876060/Buy-Sell_Agreement_5876060_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353967/","spamhaus"
+"353968","2020-04-29 14:45:43","http://virustreatments.empeeevents.com/eyyudu/Buy-Sell_Agreement_7595546_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353968/","spamhaus"
+"353967","2020-04-29 14:45:37","http://jessymart.flexyhub.com/ssuzzix/5876060/Buy-Sell_Agreement_5876060_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353967/","spamhaus"
 "353966","2020-04-29 14:45:34","https://aelogica.com/zznohyxa/94346/Buy-Sell_Agreement_94346_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353966/","spamhaus"
 "353965","2020-04-29 14:45:23","http://cheriyilbuilders.com/ixwqumcq/99014435/Buy-Sell_Agreement_99014435_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353965/","spamhaus"
 "353964","2020-04-29 14:45:19","http://promassager.ga/yltkoe/7587410/Buy-Sell_Agreement_7587410_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353964/","spamhaus"
@@ -4195,7 +4420,7 @@
 "353939","2020-04-29 14:39:31","http://oskarnews.gazashare.com/pelsq/Buy-Sell_Agreement_31209_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353939/","spamhaus"
 "353938","2020-04-29 14:39:29","http://denunciesoftwareilegal.org.br/wp-content/plugins/apikey/bfgvnffqfo/5433950/Buy-Sell_Agreement_5433950_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353938/","spamhaus"
 "353937","2020-04-29 14:39:17","http://dzapasigroup.usapglobal.org/pbnxnmc/35459684/Buy-Sell_Agreement_35459684_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353937/","spamhaus"
-"353936","2020-04-29 14:39:13","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/Buy-Sell_Agreement_41088_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353936/","spamhaus"
+"353936","2020-04-29 14:39:13","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/Buy-Sell_Agreement_41088_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353936/","spamhaus"
 "353935","2020-04-29 14:39:09","http://bolescy.com/otue/Buy-Sell_Agreement_5472_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353935/","spamhaus"
 "353934","2020-04-29 14:39:05","http://duongfpt.ga/lxgqgox/50076/Buy-Sell_Agreement_50076_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353934/","spamhaus"
 "353933","2020-04-29 14:39:02","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/Buy-Sell_Agreement_8485512_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353933/","spamhaus"
@@ -4215,30 +4440,30 @@
 "353919","2020-04-29 14:37:19","http://51.89.119.154/bins/powerpc","offline","malware_download","None","https://urlhaus.abuse.ch/url/353919/","JayTHL"
 "353918","2020-04-29 14:37:18","http://51.89.119.154/bins/mipsel","online","malware_download","None","https://urlhaus.abuse.ch/url/353918/","JayTHL"
 "353917","2020-04-29 14:37:16","http://51.89.119.154/bins/mips","online","malware_download","None","https://urlhaus.abuse.ch/url/353917/","JayTHL"
-"353916","2020-04-29 14:37:14","http://51.89.119.154/bins/m68k","online","malware_download","None","https://urlhaus.abuse.ch/url/353916/","JayTHL"
+"353916","2020-04-29 14:37:14","http://51.89.119.154/bins/m68k","offline","malware_download","None","https://urlhaus.abuse.ch/url/353916/","JayTHL"
 "353915","2020-04-29 14:37:12","http://51.89.119.154/bins/i686","online","malware_download","None","https://urlhaus.abuse.ch/url/353915/","JayTHL"
 "353914","2020-04-29 14:37:10","http://51.89.119.154/bins/i586","online","malware_download","None","https://urlhaus.abuse.ch/url/353914/","JayTHL"
 "353913","2020-04-29 14:37:08","http://51.89.119.154/bins/arm7","online","malware_download","None","https://urlhaus.abuse.ch/url/353913/","JayTHL"
 "353912","2020-04-29 14:37:07","http://51.89.119.154/bins/arm5","offline","malware_download","None","https://urlhaus.abuse.ch/url/353912/","JayTHL"
-"353911","2020-04-29 14:37:05","http://51.89.119.154/bins/arm","online","malware_download","None","https://urlhaus.abuse.ch/url/353911/","JayTHL"
+"353911","2020-04-29 14:37:05","http://51.89.119.154/bins/arm","offline","malware_download","None","https://urlhaus.abuse.ch/url/353911/","JayTHL"
 "353910","2020-04-29 14:37:03","http://51.89.119.154/bins/KKK.sh","offline","malware_download","None","https://urlhaus.abuse.ch/url/353910/","JayTHL"
 "353909","2020-04-29 14:31:21","https://cryptoomarket.com/fhws/963978/Buy-Sell_Agreement_963978_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353909/","spamhaus"
-"353908","2020-04-29 14:31:16","http://demo13.dsdemosite.com/alugzfn/Buy-Sell_Agreement_0090_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353908/","spamhaus"
+"353908","2020-04-29 14:31:16","http://demo13.dsdemosite.com/alugzfn/Buy-Sell_Agreement_0090_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353908/","spamhaus"
 "353907","2020-04-29 14:31:13","http://Muanha.xyz/cfewahhzze/Buy-Sell_Agreement_6709320_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353907/","spamhaus"
 "353906","2020-04-29 14:31:09","https://rangebroadcasting.com/vfbc/504577/Buy-Sell_Agreement_504577_04282020.zip","online","malware_download","ESP,Quakbot","https://urlhaus.abuse.ch/url/353906/","spamhaus"
 "353905","2020-04-29 14:31:03","http://virustreatments.empeeevents.com/eyyudu/Buy-Sell_Agreement_2788_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353905/","spamhaus"
-"353904","2020-04-29 14:30:58","https://aelogica.com/zznohyxa/Buy-Sell_Agreement_25066542_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353904/","spamhaus"
+"353904","2020-04-29 14:30:58","https://aelogica.com/zznohyxa/Buy-Sell_Agreement_25066542_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353904/","spamhaus"
 "353903","2020-04-29 14:30:23","http://staging.popclusive.asia/okppdsnq/Buy-Sell_Agreement_22473650_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353903/","spamhaus"
 "353902","2020-04-29 14:30:13","https://vip.recommendedtoyoo.com/bdhycmsxctp/Buy-Sell_Agreement_57552714_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353902/","spamhaus"
-"353901","2020-04-29 14:30:08","https://vip.recommendedtoyoo.com/bdhycmsxctp/Buy-Sell_Agreement_35096983_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353901/","spamhaus"
+"353901","2020-04-29 14:30:08","https://vip.recommendedtoyoo.com/bdhycmsxctp/Buy-Sell_Agreement_35096983_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353901/","spamhaus"
 "353900","2020-04-29 14:29:32","http://stelamedien.de/wp/parcel.php","offline","malware_download","Trickbot","https://urlhaus.abuse.ch/url/353900/","anonymous"
 "353899","2020-04-29 14:29:29","http://alexandredekerchove.com/ylwhbcphyy/Buy-Sell_Agreement_021354_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353899/","spamhaus"
-"353898","2020-04-29 14:29:25","https://rangebroadcasting.com/vfbc/21146543/Buy-Sell_Agreement_21146543_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353898/","spamhaus"
+"353898","2020-04-29 14:29:25","https://rangebroadcasting.com/vfbc/21146543/Buy-Sell_Agreement_21146543_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353898/","spamhaus"
 "353897","2020-04-29 14:29:22","http://drinkopolykopen.nl/wp-content/uploads/2020/04/nnpebk/610227/Buy-Sell_Agreement_610227_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353897/","spamhaus"
 "353896","2020-04-29 14:29:20","http://silverstargalaxy.com.silverstartv.website/cmea/Buy-Sell_Agreement_4586594_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353896/","spamhaus"
 "353895","2020-04-29 14:29:14","http://www.cheriyilbuilders.com/herevryxugc/80423486/Buy-Sell_Agreement_80423486_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353895/","spamhaus"
-"353894","2020-04-29 14:29:12","http://virustreatments.empeeevents.com/eyyudu/Buy-Sell_Agreement_5812432_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353894/","spamhaus"
-"353893","2020-04-29 14:29:07","http://staging.popclusive.asia/okppdsnq/96671/Buy-Sell_Agreement_96671_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353893/","spamhaus"
+"353894","2020-04-29 14:29:12","http://virustreatments.empeeevents.com/eyyudu/Buy-Sell_Agreement_5812432_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353894/","spamhaus"
+"353893","2020-04-29 14:29:07","http://staging.popclusive.asia/okppdsnq/96671/Buy-Sell_Agreement_96671_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353893/","spamhaus"
 "353892","2020-04-29 14:29:03","https://bluecollarfinancial.net/gfmixt/Buy-Sell_Agreement_856388_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353892/","spamhaus"
 "353891","2020-04-29 14:28:58","http://britica.vn/dqsfv/Buy-Sell_Agreement_52744_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353891/","spamhaus"
 "353890","2020-04-29 14:28:52","http://drinkopolykopen.nl/wp-content/uploads/2020/04/nnpebk/442375/Buy-Sell_Agreement_442375_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353890/","spamhaus"
@@ -4246,12 +4471,12 @@
 "353888","2020-04-29 14:28:17","http://dev.apshaps.se/sdub/Buy-Sell_Agreement_2457_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353888/","spamhaus"
 "353887","2020-04-29 14:28:14","http://NCERTSOLUTIONACADEMY.COM/yghks/Buy-Sell_Agreement_5833942_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353887/","spamhaus"
 "353886","2020-04-29 14:28:12","http://promassager.ga/yltkoe/7604/Buy-Sell_Agreement_7604_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353886/","spamhaus"
-"353885","2020-04-29 14:28:07","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/Buy-Sell_Agreement_578727_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353885/","spamhaus"
+"353885","2020-04-29 14:28:07","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/Buy-Sell_Agreement_578727_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353885/","spamhaus"
 "353884","2020-04-29 14:28:02","http://silverstargalaxy.com.silverstartv.website/cmea/95147/Buy-Sell_Agreement_95147_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353884/","spamhaus"
 "353883","2020-04-29 14:27:59","http://bolescy.com/otue/Buy-Sell_Agreement_14503_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353883/","spamhaus"
 "353882","2020-04-29 14:27:56","http://bolescy.com/otue/8739403/Buy-Sell_Agreement_8739403_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353882/","spamhaus"
 "353881","2020-04-29 14:27:53","http://oskarnews.gazashare.com/pelsq/Buy-Sell_Agreement_14165_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353881/","spamhaus"
-"353880","2020-04-29 14:27:48","http://jessymart.flexyhub.com/ssuzzix/3866/Buy-Sell_Agreement_3866_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353880/","spamhaus"
+"353880","2020-04-29 14:27:48","http://jessymart.flexyhub.com/ssuzzix/3866/Buy-Sell_Agreement_3866_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353880/","spamhaus"
 "353879","2020-04-29 14:27:46","http://www.cheriyilbuilders.com/herevryxugc/Buy-Sell_Agreement_1328_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353879/","spamhaus"
 "353878","2020-04-29 14:27:40","http://morruko.antesos.com/fqtylehpb/Buy-Sell_Agreement_6586635_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353878/","spamhaus"
 "353877","2020-04-29 14:27:37","http://sunboom-gift.com/zwbaxf/Buy-Sell_Agreement_828327_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353877/","spamhaus"
@@ -4261,11 +4486,11 @@
 "353873","2020-04-29 14:27:22","https://rangebroadcasting.com/vfbc/0305/Buy-Sell_Agreement_0305_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353873/","spamhaus"
 "353872","2020-04-29 14:27:18","http://cerradocredito.com.br/wp-content/uploads/2020/04/beazvgceu/Buy-Sell_Agreement_16907797_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353872/","spamhaus"
 "353871","2020-04-29 14:27:16","http://NCERTSOLUTIONACADEMY.COM/yghks/87700391/Buy-Sell_Agreement_87700391_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353871/","spamhaus"
-"353870","2020-04-29 14:27:11","http://jessymart.flexyhub.com/ssuzzix/0257123/Buy-Sell_Agreement_0257123_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353870/","spamhaus"
+"353870","2020-04-29 14:27:11","http://jessymart.flexyhub.com/ssuzzix/0257123/Buy-Sell_Agreement_0257123_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353870/","spamhaus"
 "353869","2020-04-29 14:27:08","http://cerradocredito.com.br/wp-content/uploads/2020/04/beazvgceu/626389/Buy-Sell_Agreement_626389_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353869/","spamhaus"
 "353868","2020-04-29 14:27:03","http://ade.topepics.com/pkthdrgdb/27224/Buy-Sell_Agreement_27224_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353868/","spamhaus"
 "353867","2020-04-29 14:26:57","http://NCERTSOLUTIONACADEMY.COM/yghks/25607548/Buy-Sell_Agreement_25607548_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353867/","spamhaus"
-"353866","2020-04-29 14:26:55","http://staging.popclusive.asia/okppdsnq/94144607/Buy-Sell_Agreement_94144607_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353866/","spamhaus"
+"353866","2020-04-29 14:26:55","http://staging.popclusive.asia/okppdsnq/94144607/Buy-Sell_Agreement_94144607_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353866/","spamhaus"
 "353865","2020-04-29 14:26:49","http://dev.apshaps.se/sdub/Buy-Sell_Agreement_555260_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353865/","spamhaus"
 "353864","2020-04-29 14:26:44","https://kamagra.in.rs/bqcbhf/8599/Buy-Sell_Agreement_8599_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353864/","spamhaus"
 "353863","2020-04-29 14:26:41","http://NCERTSOLUTIONACADEMY.COM/yghks/Buy-Sell_Agreement_4693_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353863/","spamhaus"
@@ -4275,13 +4500,13 @@
 "353859","2020-04-29 14:26:20","http://morruko.antesos.com/fqtylehpb/9510131/Buy-Sell_Agreement_9510131_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353859/","spamhaus"
 "353858","2020-04-29 14:26:15","http://duongfpt.ga/lxgqgox/Buy-Sell_Agreement_4460233_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353858/","spamhaus"
 "353857","2020-04-29 14:26:10","http://dzapasigroup.usapglobal.org/pbnxnmc/Buy-Sell_Agreement_94794_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353857/","spamhaus"
-"353856","2020-04-29 14:26:05","https://vip.recommendedtoyoo.com/bdhycmsxctp/Buy-Sell_Agreement_06414491_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353856/","spamhaus"
+"353856","2020-04-29 14:26:05","https://vip.recommendedtoyoo.com/bdhycmsxctp/Buy-Sell_Agreement_06414491_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353856/","spamhaus"
 "353855","2020-04-29 14:25:23","http://silverstargalaxy.com.silverstartv.website/cmea/Buy-Sell_Agreement_731464_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353855/","spamhaus"
 "353854","2020-04-29 14:25:09","https://bluecollarfinancial.net/gfmixt/5884/Buy-Sell_Agreement_5884_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353854/","spamhaus"
 "353853","2020-04-29 14:25:04","http://104.168.198.194/x86_64","online","malware_download","64-bit,elf,x86-64","https://urlhaus.abuse.ch/url/353853/","geenensp"
 "353852","2020-04-29 14:22:14","http://cheaptours.in.ua/wp-content/cache/hyper-cache/cheaptours.in.ua/2016/information.exe","offline","malware_download","Trickbot","https://urlhaus.abuse.ch/url/353852/","anonymous"
 "353851","2020-04-29 14:20:10","https://mylocalfoodie.com.au/wp-content/cjayq/cjcrypt.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/353851/","JayTHL"
-"353850","2020-04-29 14:12:08","http://sylvaclouds.eu/toolshome/toolshome.exe","offline","malware_download","Formbook","https://urlhaus.abuse.ch/url/353850/","James_inthe_box"
+"353850","2020-04-29 14:12:08","http://sylvaclouds.eu/toolshome/toolshome.exe","online","malware_download","Formbook","https://urlhaus.abuse.ch/url/353850/","James_inthe_box"
 "353849","2020-04-29 13:58:05","http://45.95.169.234/SBIDIOT/zte","offline","malware_download","None","https://urlhaus.abuse.ch/url/353849/","JayTHL"
 "353848","2020-04-29 13:58:03","http://45.95.169.234/SBIDIOT/yarn","offline","malware_download","None","https://urlhaus.abuse.ch/url/353848/","JayTHL"
 "353847","2020-04-29 13:58:00","http://45.95.169.234/SBIDIOT/x86","offline","malware_download","None","https://urlhaus.abuse.ch/url/353847/","JayTHL"
@@ -4310,7 +4535,7 @@
 "353824","2020-04-29 13:57:00","http://104.168.169.137/kc-botnet/ppc","offline","malware_download","None","https://urlhaus.abuse.ch/url/353824/","JayTHL"
 "353823","2020-04-29 13:56:57","http://104.168.169.137/kc-botnet/mpsl","online","malware_download","None","https://urlhaus.abuse.ch/url/353823/","JayTHL"
 "353822","2020-04-29 13:56:55","http://104.168.169.137/kc-botnet/mips","online","malware_download","None","https://urlhaus.abuse.ch/url/353822/","JayTHL"
-"353821","2020-04-29 13:56:53","http://104.168.169.137/kc-botnet/m68k","online","malware_download","None","https://urlhaus.abuse.ch/url/353821/","JayTHL"
+"353821","2020-04-29 13:56:53","http://104.168.169.137/kc-botnet/m68k","offline","malware_download","None","https://urlhaus.abuse.ch/url/353821/","JayTHL"
 "353820","2020-04-29 13:56:49","http://104.168.169.137/kc-botnet/arm7","online","malware_download","None","https://urlhaus.abuse.ch/url/353820/","JayTHL"
 "353819","2020-04-29 13:56:47","http://104.168.169.137/kc-botnet/arm6","online","malware_download","None","https://urlhaus.abuse.ch/url/353819/","JayTHL"
 "353818","2020-04-29 13:56:45","http://104.168.169.137/kc-botnet/arm5","online","malware_download","None","https://urlhaus.abuse.ch/url/353818/","JayTHL"
@@ -4344,7 +4569,7 @@
 "353790","2020-04-29 10:33:49","http://147.75.67.253/bins/x86","offline","malware_download",",DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/353790/","Gandylyan1"
 "353789","2020-04-29 10:33:29","http://147.75.67.253/bins/x86_64","offline","malware_download",",DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/353789/","Gandylyan1"
 "353788","2020-04-29 10:01:10","https://kazanturkiye20gb.com/kazan20gbturkiye.apk","offline","malware_download","None","https://urlhaus.abuse.ch/url/353788/","GodOfTh75431522"
-"353787","2020-04-29 10:00:06","http://176.178.184.124:32217/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353787/","geenensp"
+"353787","2020-04-29 10:00:06","http://176.178.184.124:32217/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353787/","geenensp"
 "353786","2020-04-29 09:44:06","https://chinatyres.net/IuNbOpen/5osndo411.exe","offline","malware_download","exe,Trickbot","https://urlhaus.abuse.ch/url/353786/","zbetcheckin"
 "353785","2020-04-29 09:42:04","https://pyxalis.com/wp-content/plugins/os/dss.exe","offline","malware_download","Formbook","https://urlhaus.abuse.ch/url/353785/","Racco42"
 "353784","2020-04-29 09:40:30","https://chinatyres.net/IuNbOpen/20osndo411.exe","offline","malware_download","exe,Trickbot","https://urlhaus.abuse.ch/url/353784/","zbetcheckin"
@@ -4382,7 +4607,7 @@
 "353752","2020-04-29 09:03:37","http://coderived.in/zlseg/Buy-Sell_Agreement_34704566_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353752/","spamhaus"
 "353751","2020-04-29 09:03:33","http://anadolutatili.com/xtfdux/17055888/Buy-Sell_Agreement_17055888_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353751/","spamhaus"
 "353750","2020-04-29 09:03:28","http://healtina.com/xcaspvi/5392047/Buy-Sell_Agreement_5392047_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353750/","spamhaus"
-"353749","2020-04-29 09:03:26","https://rangebroadcasting.com/obrmn/93586244/Buy-Sell_Agreement_93586244_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353749/","spamhaus"
+"353749","2020-04-29 09:03:26","https://rangebroadcasting.com/obrmn/93586244/Buy-Sell_Agreement_93586244_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353749/","spamhaus"
 "353748","2020-04-29 09:03:13","https://nmal.info/ntsphsl/9082650/Buy-Sell_Agreement_9082650_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353748/","spamhaus"
 "353747","2020-04-29 09:03:12","https://www.loodgieterjoost.be/wp-content/uploads/2020/04/osiwprp/Buy-Sell_Agreement_470336_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353747/","spamhaus"
 "353746","2020-04-29 09:03:07","http://bookmytripping.com/tgxmxcm/30307798/Buy-Sell_Agreement_30307798_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353746/","spamhaus"
@@ -4390,14 +4615,14 @@
 "353744","2020-04-29 09:02:57","http://cyberemprende.cl/wjoh/38575/Buy-Sell_Agreement_38575_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353744/","spamhaus"
 "353743","2020-04-29 09:02:53","http://ufabet168168.329263.com/tmpf/Buy-Sell_Agreement_658957_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353743/","spamhaus"
 "353742","2020-04-29 09:02:46","https://how.ph/mrb/706759/Buy-Sell_Agreement_706759_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353742/","spamhaus"
-"353741","2020-04-29 09:02:37","http://myexpertca.in/fomi/63279611/Buy-Sell_Agreement_63279611_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353741/","spamhaus"
+"353741","2020-04-29 09:02:37","http://myexpertca.in/fomi/63279611/Buy-Sell_Agreement_63279611_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353741/","spamhaus"
 "353740","2020-04-29 09:02:21","http://vaeqpu.329263.com/al/Buy-Sell_Agreement_23601612_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353740/","spamhaus"
 "353739","2020-04-29 09:02:18","https://www.loodgieterjoost.be/wp-content/uploads/2020/04/osiwprp/Buy-Sell_Agreement_3544_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353739/","spamhaus"
 "353738","2020-04-29 09:02:15","http://yucatanentiemporeal.com/wp-content/uploads/2020/04/nwl/3096/Buy-Sell_Agreement_3096_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353738/","spamhaus"
 "353737","2020-04-29 09:02:03","https://miraab.ir/wp-content/uploads/2020/04/tk/4080595/Buy-Sell_Agreement_4080595_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353737/","spamhaus"
 "353736","2020-04-29 09:01:56","http://www.amodoutours.com/rretwxj/Buy-Sell_Agreement_75358549_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353736/","spamhaus"
 "353735","2020-04-29 09:01:52","https://www.dzyzz.cn/wp-content/plugins/apikey/zwj/Buy-Sell_Agreement_81785720_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353735/","spamhaus"
-"353734","2020-04-29 09:01:40","http://www.gainsdirectory.com/imtlt/Buy-Sell_Agreement_80540_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353734/","spamhaus"
+"353734","2020-04-29 09:01:40","http://www.gainsdirectory.com/imtlt/Buy-Sell_Agreement_80540_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353734/","spamhaus"
 "353733","2020-04-29 09:01:35","https://rugab.se/c/68691/Buy-Sell_Agreement_68691_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353733/","spamhaus"
 "353732","2020-04-29 09:01:32","http://tulmix-beton.ru/hpoakm/Buy-Sell_Agreement_6239939_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353732/","spamhaus"
 "353731","2020-04-29 08:57:27","http://194.48.152.10/Pipe/i586","offline","malware_download","elf","https://urlhaus.abuse.ch/url/353731/","zbetcheckin"
@@ -4419,19 +4644,19 @@
 "353715","2020-04-29 08:41:16","http://alnajimaa.website.bahaoption.website/uktvs/Buy-Sell_Agreement_5473_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353715/","spamhaus"
 "353714","2020-04-29 08:41:11","https://www.mfpburundi.bi/wp-content/uploads/2020/04/pb/Buy-Sell_Agreement_170999_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353714/","spamhaus"
 "353713","2020-04-29 08:41:10","http://earningtipsbd.com/pn/280019/Buy-Sell_Agreement_280019_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353713/","spamhaus"
-"353712","2020-04-29 08:41:08","http://www.gainsdirectory.com/imtlt/11119/Buy-Sell_Agreement_11119_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353712/","spamhaus"
+"353712","2020-04-29 08:41:08","http://www.gainsdirectory.com/imtlt/11119/Buy-Sell_Agreement_11119_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353712/","spamhaus"
 "353711","2020-04-29 08:41:05","http://delmaestro.espacioeterno.com/e/Buy-Sell_Agreement_23577525_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353711/","spamhaus"
 "353710","2020-04-29 08:41:03","http://yucatanentiemporeal.com/wp-content/uploads/2020/04/nwl/Buy-Sell_Agreement_50658585_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353710/","spamhaus"
 "353709","2020-04-29 08:40:55","http://cyberemprende.cl/wjoh/8373/Buy-Sell_Agreement_8373_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353709/","spamhaus"
 "353708","2020-04-29 08:40:48","http://ufabet168168.329263.com/tmpf/Buy-Sell_Agreement_6108_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353708/","spamhaus"
 "353707","2020-04-29 08:40:43","https://aliyousefpoor.com/urcu/Buy-Sell_Agreement_24920_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353707/","spamhaus"
-"353706","2020-04-29 08:40:41","http://healtina.com/xcaspvi/2017128/Buy-Sell_Agreement_2017128_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353706/","spamhaus"
+"353706","2020-04-29 08:40:41","http://healtina.com/xcaspvi/2017128/Buy-Sell_Agreement_2017128_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353706/","spamhaus"
 "353705","2020-04-29 08:40:39","https://kingdomcarecan.com/nbdvaba/Buy-Sell_Agreement_04521_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353705/","spamhaus"
-"353704","2020-04-29 08:40:30","https://dienmaycu.vn/rcckjv/Buy-Sell_Agreement_762354_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353704/","spamhaus"
+"353704","2020-04-29 08:40:30","https://dienmaycu.vn/rcckjv/Buy-Sell_Agreement_762354_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353704/","spamhaus"
 "353703","2020-04-29 08:40:26","http://alnajimaa.website.bahaoption.website/uktvs/978968/Buy-Sell_Agreement_978968_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353703/","spamhaus"
 "353702","2020-04-29 08:40:22","https://kingdomcarecan.com/nbdvaba/Buy-Sell_Agreement_08047_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353702/","spamhaus"
 "353701","2020-04-29 08:40:16","http://www.amodoutours.com/rretwxj/83870466/Buy-Sell_Agreement_83870466_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353701/","spamhaus"
-"353700","2020-04-29 08:40:14","http://jjjexx.329263.com/vi/Buy-Sell_Agreement_181721_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353700/","spamhaus"
+"353700","2020-04-29 08:40:14","http://jjjexx.329263.com/vi/Buy-Sell_Agreement_181721_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353700/","spamhaus"
 "353699","2020-04-29 08:40:09","https://alucard.online/yarx/20711/Buy-Sell_Agreement_20711_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353699/","spamhaus"
 "353698","2020-04-29 08:40:05","http://www.energyplusjuice.ir/wp-content/uploads/2020/04/m/Buy-Sell_Agreement_14391_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353698/","spamhaus"
 "353697","2020-04-29 08:38:03","https://pastebin.com/raw/iVtywrUz","offline","malware_download","None","https://urlhaus.abuse.ch/url/353697/","JayTHL"
@@ -4443,12 +4668,12 @@
 "353691","2020-04-29 08:14:06","http://mlbfreestream.ml/q/51548833/Buy-Sell_Agreement_51548833_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353691/","spamhaus"
 "353690","2020-04-29 08:14:01","http://cpagrace.cl/k/8312/Buy-Sell_Agreement_8312_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353690/","spamhaus"
 "353689","2020-04-29 08:13:28","http://elabugablog.ru/zzj/Buy-Sell_Agreement_6905408_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353689/","spamhaus"
-"353688","2020-04-29 08:13:25","http://arowanafishforsale.com/dbmwl/1922788/Buy-Sell_Agreement_1922788_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353688/","spamhaus"
+"353688","2020-04-29 08:13:25","http://arowanafishforsale.com/dbmwl/1922788/Buy-Sell_Agreement_1922788_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353688/","spamhaus"
 "353687","2020-04-29 08:13:20","http://earningtipsbd.com/pn/Buy-Sell_Agreement_481073_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353687/","spamhaus"
 "353686","2020-04-29 08:11:40","http://alnajimaa.website.bahaoption.website/uktvs/89732/Buy-Sell_Agreement_89732_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353686/","spamhaus"
 "353685","2020-04-29 08:11:35","http://myexpertca.in/fomi/89079745/Buy-Sell_Agreement_89079745_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353685/","spamhaus"
 "353684","2020-04-29 08:11:32","http://mlbfreestream.gq/n/Buy-Sell_Agreement_35749554_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353684/","spamhaus"
-"353683","2020-04-29 08:11:26","http://healtina.com/xcaspvi/16772926/Buy-Sell_Agreement_16772926_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353683/","spamhaus"
+"353683","2020-04-29 08:11:26","http://healtina.com/xcaspvi/16772926/Buy-Sell_Agreement_16772926_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353683/","spamhaus"
 "353682","2020-04-29 08:11:20","http://www.energyplusjuice.ir/wp-content/uploads/2020/04/m/002783/Buy-Sell_Agreement_002783_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353682/","spamhaus"
 "353681","2020-04-29 08:11:15","http://www.amodoutours.com/rretwxj/8052388/Buy-Sell_Agreement_8052388_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353681/","spamhaus"
 "353680","2020-04-29 08:11:13","http://hdlive-espntv.live-sportshd.website/bpg/23066489/Buy-Sell_Agreement_23066489_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353680/","spamhaus"
@@ -4469,14 +4694,14 @@
 "353665","2020-04-29 08:02:38","https://rugab.se/c/5776/Buy-Sell_Agreement_5776_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353665/","spamhaus"
 "353664","2020-04-29 08:02:35","https://badintentionsprod.com/kq/Buy-Sell_Agreement_4077_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353664/","spamhaus"
 "353663","2020-04-29 08:02:32","https://alucard.online/yarx/Buy-Sell_Agreement_5821_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353663/","spamhaus"
-"353662","2020-04-29 08:02:28","http://anadolutatili.com/xtfdux/12602/Buy-Sell_Agreement_12602_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353662/","spamhaus"
+"353662","2020-04-29 08:02:28","http://anadolutatili.com/xtfdux/12602/Buy-Sell_Agreement_12602_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353662/","spamhaus"
 "353661","2020-04-29 08:02:22","https://aliyousefpoor.com/urcu/Buy-Sell_Agreement_907724_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353661/","spamhaus"
 "353660","2020-04-29 08:02:18","https://wwealthllc.com/sjokmsq/Buy-Sell_Agreement_594068_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353660/","spamhaus"
 "353659","2020-04-29 08:02:12","https://aliyousefpoor.com/urcu/Buy-Sell_Agreement_87065224_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353659/","spamhaus"
 "353658","2020-04-29 08:02:08","http://bonyamin.com/wyupb/36769/Buy-Sell_Agreement_36769_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353658/","spamhaus"
 "353657","2020-04-29 08:02:02","https://drwendyellis.com/laqrip/Buy-Sell_Agreement_9435083_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353657/","spamhaus"
-"353656","2020-04-29 08:01:55","http://sexybaccarat.329263.com/k/021803/Buy-Sell_Agreement_021803_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353656/","spamhaus"
-"353655","2020-04-29 08:01:48","http://kgfs3.329263.com/cvsf/94279544/Buy-Sell_Agreement_94279544_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353655/","spamhaus"
+"353656","2020-04-29 08:01:55","http://sexybaccarat.329263.com/k/021803/Buy-Sell_Agreement_021803_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353656/","spamhaus"
+"353655","2020-04-29 08:01:48","http://kgfs3.329263.com/cvsf/94279544/Buy-Sell_Agreement_94279544_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353655/","spamhaus"
 "353654","2020-04-29 08:01:44","http://earningtipsbd.com/pn/16352769/Buy-Sell_Agreement_16352769_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353654/","spamhaus"
 "353653","2020-04-29 08:01:40","https://drwendyellis.com/laqrip/262184/Buy-Sell_Agreement_262184_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353653/","spamhaus"
 "353652","2020-04-29 08:01:28","http://rentaroom.ml/oqqthv/33859/Buy-Sell_Agreement_33859_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353652/","spamhaus"
@@ -4485,7 +4710,7 @@
 "353649","2020-04-29 07:59:37","http://62.215.101.230:59574/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353649/","geenensp"
 "353648","2020-04-29 07:58:18","http://avto-pro.hostenko.com/too/50673/Buy-Sell_Agreement_50673_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353648/","spamhaus"
 "353647","2020-04-29 07:57:46","http://sportstrem.gq/imqmxkw/Buy-Sell_Agreement_0493_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353647/","spamhaus"
-"353646","2020-04-29 07:57:10","http://fifa555easy.329263.com/x/57599/Buy-Sell_Agreement_57599_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353646/","spamhaus"
+"353646","2020-04-29 07:57:10","http://fifa555easy.329263.com/x/57599/Buy-Sell_Agreement_57599_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353646/","spamhaus"
 "353645","2020-04-29 07:56:33","http://djonur24.de/hdc/Buy-Sell_Agreement_5473_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353645/","spamhaus"
 "353644","2020-04-29 07:37:09","https://pastebin.com/raw/1viY3naQ","offline","malware_download","None","https://urlhaus.abuse.ch/url/353644/","JayTHL"
 "353643","2020-04-29 07:24:05","https://fast.rentaroom.ml/euzxp/1854/Buy-Sell_Agreement_1854_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353643/","spamhaus"
@@ -4493,7 +4718,7 @@
 "353641","2020-04-29 07:23:07","https://langwieser.at/FedEx/ShippingInfo.jar","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353641/","spamhaus"
 "353640","2020-04-29 07:23:02","http://mlbfreestream.ml/q/Buy-Sell_Agreement_7955_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353640/","spamhaus"
 "353639","2020-04-29 07:22:57","https://siseco.mx/wp-content/uploads/2020/04/beomqxc/Buy-Sell_Agreement_900336_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353639/","spamhaus"
-"353638","2020-04-29 07:22:51","https://royalplusmobile.ir/wp-content/uploads/2020/04/ohzjt/8368/Buy-Sell_Agreement_8368_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353638/","spamhaus"
+"353638","2020-04-29 07:22:51","https://royalplusmobile.ir/wp-content/uploads/2020/04/ohzjt/8368/Buy-Sell_Agreement_8368_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353638/","spamhaus"
 "353637","2020-04-29 07:22:45","http://delmaestro.espacioeterno.com/e/Buy-Sell_Agreement_424391_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353637/","spamhaus"
 "353636","2020-04-29 07:22:43","http://yucatanentiemporeal.com/wp-content/uploads/2020/04/nwl/90695556/Buy-Sell_Agreement_90695556_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353636/","spamhaus"
 "353635","2020-04-29 07:22:37","http://24.115.48.43:37623/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353635/","geenensp"
@@ -4503,18 +4728,18 @@
 "353631","2020-04-29 07:22:25","http://livetvsports.ml/z/Buy-Sell_Agreement_54596_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353631/","spamhaus"
 "353630","2020-04-29 07:22:21","http://coderived.in/zlseg/Buy-Sell_Agreement_1571081_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353630/","spamhaus"
 "353629","2020-04-29 07:22:16","http://sexybaccarat.329263.com/k/Buy-Sell_Agreement_62226978_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353629/","spamhaus"
-"353628","2020-04-29 07:22:08","http://myexpertca.in/fomi/Buy-Sell_Agreement_23325291_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353628/","spamhaus"
+"353628","2020-04-29 07:22:08","http://myexpertca.in/fomi/Buy-Sell_Agreement_23325291_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353628/","spamhaus"
 "353627","2020-04-29 07:21:57","http://www.alnahrainfilminstitute.com/kuhjz/5389/Buy-Sell_Agreement_5389_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353627/","spamhaus"
 "353626","2020-04-29 07:21:54","http://alnajimaa.website.bahaoption.website/uktvs/3704870/Buy-Sell_Agreement_3704870_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353626/","spamhaus"
 "353625","2020-04-29 07:21:50","https://brenleyquartzgh.com/ga/Buy-Sell_Agreement_60370501_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353625/","spamhaus"
 "353624","2020-04-29 07:21:45","http://sportshlive.xyz/gzld/Buy-Sell_Agreement_5741597_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353624/","spamhaus"
 "353623","2020-04-29 07:21:36","http://www.alnahrainfilminstitute.com/kuhjz/28179863/Buy-Sell_Agreement_28179863_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353623/","spamhaus"
-"353622","2020-04-29 07:21:34","http://arowanafishforsale.com/dbmwl/Buy-Sell_Agreement_698683_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353622/","spamhaus"
+"353622","2020-04-29 07:21:34","http://arowanafishforsale.com/dbmwl/Buy-Sell_Agreement_698683_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353622/","spamhaus"
 "353621","2020-04-29 07:21:29","http://www.amodoutours.com/rretwxj/350310/Buy-Sell_Agreement_350310_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353621/","spamhaus"
 "353620","2020-04-29 07:21:27","http://amedeoscognamiglio.329263.com/i/24827473/Buy-Sell_Agreement_24827473_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353620/","spamhaus"
 "353619","2020-04-29 07:21:17","http://rentaroom.ml/oqqthv/4912/Buy-Sell_Agreement_4912_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353619/","spamhaus"
 "353618","2020-04-29 07:21:13","https://siseco.mx/wp-content/uploads/2020/04/beomqxc/14307/Buy-Sell_Agreement_14307_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353618/","spamhaus"
-"353617","2020-04-29 07:21:06","http://fifa555easy.329263.com/x/441957/Buy-Sell_Agreement_441957_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353617/","spamhaus"
+"353617","2020-04-29 07:21:06","http://fifa555easy.329263.com/x/441957/Buy-Sell_Agreement_441957_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353617/","spamhaus"
 "353616","2020-04-29 07:20:58","https://pcexperts.co.za/wp-content/uploads/2020/04/tmk/6097/Buy-Sell_Agreement_6097_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353616/","spamhaus"
 "353615","2020-04-29 07:20:51","https://wwealthllc.com/sjokmsq/Buy-Sell_Agreement_087485_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353615/","spamhaus"
 "353614","2020-04-29 07:20:37","http://yucatanentiemporeal.com/wp-content/uploads/2020/04/nwl/60928197/Buy-Sell_Agreement_60928197_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353614/","spamhaus"
@@ -4536,7 +4761,7 @@
 "353598","2020-04-29 06:43:03","http://208.68.39.30/sparc","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353598/","zbetcheckin"
 "353597","2020-04-29 06:40:24","http://delmaestro.espacioeterno.com/e/3213/Buy-Sell_Agreement_3213_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353597/","spamhaus"
 "353596","2020-04-29 06:40:15","https://fast.rentaroom.ml/euzxp/3987487/Buy-Sell_Agreement_3987487_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353596/","spamhaus"
-"353595","2020-04-29 06:40:06","http://www.alnahrainfilminstitute.com/kuhjz/51737/Buy-Sell_Agreement_51737_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353595/","spamhaus"
+"353595","2020-04-29 06:40:06","http://www.alnahrainfilminstitute.com/kuhjz/51737/Buy-Sell_Agreement_51737_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353595/","spamhaus"
 "353594","2020-04-29 06:40:03","https://rugab.se/c/6033102/Buy-Sell_Agreement_6033102_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353594/","spamhaus"
 "353593","2020-04-29 06:39:11","https://pastebin.com/raw/i1wFXeRQ","offline","malware_download","None","https://urlhaus.abuse.ch/url/353593/","JayTHL"
 "353592","2020-04-29 06:39:07","http://www.gbf.com/my/68488988/Buy-Sell_Agreement_68488988_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353592/","spamhaus"
@@ -4544,7 +4769,7 @@
 "353590","2020-04-29 06:38:59","https://aliyousefpoor.com/urcu/Buy-Sell_Agreement_9315_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353590/","spamhaus"
 "353589","2020-04-29 06:38:52","https://www.mfpburundi.bi/wp-content/uploads/2020/04/pb/3220667/Buy-Sell_Agreement_3220667_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353589/","spamhaus"
 "353588","2020-04-29 06:38:47","https://nmal.info/ntsphsl/1838107/Buy-Sell_Agreement_1838107_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353588/","spamhaus"
-"353587","2020-04-29 06:38:45","http://jjjexx.329263.com/vi/Buy-Sell_Agreement_6004581_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353587/","spamhaus"
+"353587","2020-04-29 06:38:45","http://jjjexx.329263.com/vi/Buy-Sell_Agreement_6004581_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353587/","spamhaus"
 "353586","2020-04-29 06:38:42","http://mlbfreestream.gq/n/Buy-Sell_Agreement_410171_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353586/","spamhaus"
 "353585","2020-04-29 06:38:36","http://cpagrace.cl/k/Buy-Sell_Agreement_3571_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353585/","spamhaus"
 "353584","2020-04-29 06:37:51","http://bookmytripping.com/tgxmxcm/822343/Buy-Sell_Agreement_822343_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353584/","spamhaus"
@@ -4557,9 +4782,9 @@
 "353577","2020-04-29 06:37:21","https://nmal.info/ntsphsl/Buy-Sell_Agreement_0573515_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353577/","spamhaus"
 "353576","2020-04-29 06:37:18","https://www.loodgieterjoost.be/wp-content/uploads/2020/04/osiwprp/Buy-Sell_Agreement_132341_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353576/","spamhaus"
 "353575","2020-04-29 06:37:12","https://delmaestro.cl/wtdeng/Buy-Sell_Agreement_53907_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353575/","spamhaus"
-"353574","2020-04-29 06:37:09","http://vaeqpu.329263.com/al/Buy-Sell_Agreement_13490_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353574/","spamhaus"
+"353574","2020-04-29 06:37:09","http://vaeqpu.329263.com/al/Buy-Sell_Agreement_13490_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353574/","spamhaus"
 "353573","2020-04-29 06:36:44","http://livetvsports.ml/z/4244/Buy-Sell_Agreement_4244_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353573/","spamhaus"
-"353572","2020-04-29 06:36:38","https://dienmaycu.vn/rcckjv/Buy-Sell_Agreement_8596071_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353572/","spamhaus"
+"353572","2020-04-29 06:36:38","https://dienmaycu.vn/rcckjv/Buy-Sell_Agreement_8596071_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353572/","spamhaus"
 "353571","2020-04-29 06:36:35","http://vaeqpu.329263.com/al/56057178/Buy-Sell_Agreement_56057178_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353571/","spamhaus"
 "353570","2020-04-29 06:36:30","https://www.loodgieterjoost.be/wp-content/uploads/2020/04/osiwprp/82152/Buy-Sell_Agreement_82152_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353570/","spamhaus"
 "353569","2020-04-29 06:36:28","http://85.217.170.105/mips","online","malware_download","32-bit,elf,mips","https://urlhaus.abuse.ch/url/353569/","geenensp"
@@ -4579,7 +4804,7 @@
 "353555","2020-04-29 06:34:42","http://lakropack.com/s/Buy-Sell_Agreement_94827816_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353555/","spamhaus"
 "353554","2020-04-29 06:34:37","https://www.cinnamoncreations.com.au/h/Buy-Sell_Agreement_46257_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353554/","spamhaus"
 "353553","2020-04-29 06:34:32","https://wwealthllc.com/sjokmsq/Buy-Sell_Agreement_58805622_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353553/","spamhaus"
-"353552","2020-04-29 06:34:28","http://vaeqpu.329263.com/al/Buy-Sell_Agreement_62844279_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353552/","spamhaus"
+"353552","2020-04-29 06:34:28","http://vaeqpu.329263.com/al/Buy-Sell_Agreement_62844279_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353552/","spamhaus"
 "353551","2020-04-29 06:34:24","http://lakropack.com/s/Buy-Sell_Agreement_723121_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353551/","spamhaus"
 "353550","2020-04-29 06:34:21","http://lakropack.com/s/Buy-Sell_Agreement_3132_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353550/","spamhaus"
 "353549","2020-04-29 06:34:17","http://veniceshop.ru/wp-content/uploads/2020/04/xwrxtgh/Buy-Sell_Agreement_64879608_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353549/","spamhaus"
@@ -4597,8 +4822,8 @@
 "353537","2020-04-29 06:32:28","http://41.64.170.241:38406/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353537/","geenensp"
 "353536","2020-04-29 06:32:23","https://siseco.mx/wp-content/uploads/2020/04/beomqxc/5997272/Buy-Sell_Agreement_5997272_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353536/","spamhaus"
 "353535","2020-04-29 06:32:18","http://arowanafishforsale.com/dbmwl/03134/Buy-Sell_Agreement_03134_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353535/","spamhaus"
-"353534","2020-04-29 06:24:17","http://175.212.52.9:65408/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353534/","geenensp"
-"353533","2020-04-29 06:24:13","http://jjjexx.329263.com/vi/79300/Buy-Sell_Agreement_79300_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353533/","spamhaus"
+"353534","2020-04-29 06:24:17","http://175.212.52.9:65408/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353534/","geenensp"
+"353533","2020-04-29 06:24:13","http://jjjexx.329263.com/vi/79300/Buy-Sell_Agreement_79300_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353533/","spamhaus"
 "353532","2020-04-29 06:23:40","http://208.68.39.30/mips","offline","malware_download","32-bit,elf,mips","https://urlhaus.abuse.ch/url/353532/","geenensp"
 "353531","2020-04-29 06:23:37","http://208.68.39.30/EkSgbins.sh","offline","malware_download","script","https://urlhaus.abuse.ch/url/353531/","geenensp"
 "353530","2020-04-29 06:23:34","http://218.32.118.1:13579/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353530/","geenensp"
@@ -4730,7 +4955,7 @@
 "353404","2020-04-28 21:04:03","http://115.49.74.215:45757/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353404/","Gandylyan1"
 "353403","2020-04-28 21:03:59","http://60.189.29.124:51717/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353403/","Gandylyan1"
 "353402","2020-04-28 21:03:54","http://111.42.103.37:36346/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353402/","Gandylyan1"
-"353401","2020-04-28 21:03:51","http://162.212.113.149:47364/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353401/","Gandylyan1"
+"353401","2020-04-28 21:03:51","http://162.212.113.149:47364/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353401/","Gandylyan1"
 "353400","2020-04-28 21:03:47","http://123.13.5.90:57818/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353400/","Gandylyan1"
 "353399","2020-04-28 21:03:43","http://42.230.253.28:46581/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353399/","Gandylyan1"
 "353398","2020-04-28 21:03:39","http://211.137.225.2:58348/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353398/","Gandylyan1"
@@ -4759,7 +4984,7 @@
 "353375","2020-04-28 19:36:31","http://rentaroom.ml/oqqthv/710814/Buy-Sell_Agreement_710814_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353375/","spamhaus"
 "353374","2020-04-28 19:36:26","https://siseco.mx/wp-content/uploads/2020/04/beomqxc/Buy-Sell_Agreement_19253_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353374/","spamhaus"
 "353373","2020-04-28 19:36:20","https://drwendyellis.com/laqrip/89870436/Buy-Sell_Agreement_89870436_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353373/","spamhaus"
-"353372","2020-04-28 19:36:07","http://arowanafishforsale.com/dbmwl/03121/Buy-Sell_Agreement_03121_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353372/","spamhaus"
+"353372","2020-04-28 19:36:07","http://arowanafishforsale.com/dbmwl/03121/Buy-Sell_Agreement_03121_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353372/","spamhaus"
 "353371","2020-04-28 19:32:05","http://kosslouer.com/uu/596088/Buy-Sell_Agreement_596088_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353371/","spamhaus"
 "353370","2020-04-28 19:32:03","http://healtina.com/xcaspvi/Buy-Sell_Agreement_1596675_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353370/","spamhaus"
 "353369","2020-04-28 19:27:13","https://rugab.se/c/81176/Buy-Sell_Agreement_81176_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353369/","spamhaus"
@@ -4776,15 +5001,15 @@
 "353358","2020-04-28 19:24:42","http://humdingerdesigns.com.au/mockup/wp-includes/js/jquery/ui/api.lib.php","offline","malware_download","Dridex,zip","https://urlhaus.abuse.ch/url/353358/","malware_traffic"
 "353357","2020-04-28 19:24:35","http://harimbaofek.net/wp-content/themes/twentynineteen/sass/blocks/api.core.php","offline","malware_download","Dridex,zip","https://urlhaus.abuse.ch/url/353357/","malware_traffic"
 "353356","2020-04-28 19:24:30","http://dentistesamson.com/wp-content/plugins/LayerSlider/demos/carousel/framework.php","offline","malware_download","Dridex,zip","https://urlhaus.abuse.ch/url/353356/","malware_traffic"
-"353355","2020-04-28 19:24:27","http://amedeoscognamiglio.329263.com/i/Buy-Sell_Agreement_5137311_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353355/","spamhaus"
+"353355","2020-04-28 19:24:27","http://amedeoscognamiglio.329263.com/i/Buy-Sell_Agreement_5137311_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353355/","spamhaus"
 "353354","2020-04-28 19:24:22","https://www.dzyzz.cn/wp-content/plugins/apikey/zwj/7778718/Buy-Sell_Agreement_7778718_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353354/","spamhaus"
-"353353","2020-04-28 19:24:14","http://ufabet168168.329263.com/tmpf/Buy-Sell_Agreement_2467273_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353353/","spamhaus"
+"353353","2020-04-28 19:24:14","http://ufabet168168.329263.com/tmpf/Buy-Sell_Agreement_2467273_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353353/","spamhaus"
 "353352","2020-04-28 19:24:09","http://hdlive-espntv.live-sportshd.website/bpg/Buy-Sell_Agreement_7257829_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353352/","spamhaus"
-"353351","2020-04-28 19:24:07","http://kgfs3.329263.com/cvsf/Buy-Sell_Agreement_2272_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353351/","spamhaus"
+"353351","2020-04-28 19:24:07","http://kgfs3.329263.com/cvsf/Buy-Sell_Agreement_2272_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353351/","spamhaus"
 "353350","2020-04-28 19:24:03","http://bookmytripping.com/tgxmxcm/49493346/Buy-Sell_Agreement_49493346_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353350/","spamhaus"
 "353349","2020-04-28 19:19:17","http://filegotosecureothers.duckdns.org/dmb/vbc.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/353349/","abuse_ch"
 "353348","2020-04-28 19:19:13","http://vasylivka.lebrada.gov.ua/wp-content/themes/calliope/mwqpxes/Buy-Sell_Agreement_85618_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353348/","spamhaus"
-"353347","2020-04-28 19:17:19","http://vaeqpu.329263.com/al/7396/Buy-Sell_Agreement_7396_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353347/","spamhaus"
+"353347","2020-04-28 19:17:19","http://vaeqpu.329263.com/al/7396/Buy-Sell_Agreement_7396_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353347/","spamhaus"
 "353346","2020-04-28 19:17:12","http://kosslouer.com/uu/Buy-Sell_Agreement_48064345_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353346/","spamhaus"
 "353345","2020-04-28 19:17:07","http://173.21.50.161:16647/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353345/","geenensp"
 "353344","2020-04-28 19:17:04","http://yucatanentiemporeal.com/wp-content/uploads/2020/04/nwl/Buy-Sell_Agreement_80104_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353344/","spamhaus"
@@ -4797,7 +5022,7 @@
 "353337","2020-04-28 19:04:15","https://delmaestro.cl/wtdeng/82374/Buy-Sell_Agreement_82374_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353337/","spamhaus"
 "353336","2020-04-28 19:04:11","http://maharatal3zl.com/xdlycfp/Buy-Sell_Agreement_0922006_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353336/","spamhaus"
 "353335","2020-04-28 19:04:06","https://brenleyquartzgh.com/ga/Buy-Sell_Agreement_21615_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353335/","spamhaus"
-"353334","2020-04-28 19:03:02","http://fifa555easy.329263.com/x/38011086/Buy-Sell_Agreement_38011086_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353334/","spamhaus"
+"353334","2020-04-28 19:03:02","http://fifa555easy.329263.com/x/38011086/Buy-Sell_Agreement_38011086_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353334/","spamhaus"
 "353333","2020-04-28 19:02:55","http://escarateeventos.ladevi.cl/yworbn/44978/Buy-Sell_Agreement_44978_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353333/","spamhaus"
 "353332","2020-04-28 19:02:52","https://nmal.info/ntsphsl/84675/Buy-Sell_Agreement_84675_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353332/","spamhaus"
 "353331","2020-04-28 19:02:50","http://lagalaxy88easy.329263.com/lbrnxxd/Buy-Sell_Agreement_7744679_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353331/","spamhaus"
@@ -4817,15 +5042,15 @@
 "353317","2020-04-28 19:00:38","https://nmal.info/ntsphsl/8805/Buy-Sell_Agreement_8805_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353317/","spamhaus"
 "353316","2020-04-28 19:00:05","http://yucatanentiemporeal.com/wp-content/uploads/2020/04/nwl/29202/Buy-Sell_Agreement_29202_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353316/","spamhaus"
 "353315","2020-04-28 18:59:33","http://elabugablog.ru/zzj/Buy-Sell_Agreement_67570_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353315/","spamhaus"
-"353314","2020-04-28 18:27:03","http://88.218.16.37/NAnazCgFwSxQ8sK.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/353314/","zbetcheckin"
-"353313","2020-04-28 18:24:04","http://88.218.16.37/D3nXjwy5EMjHNdM.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/353313/","zbetcheckin"
+"353314","2020-04-28 18:27:03","http://88.218.16.37/NAnazCgFwSxQ8sK.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/353314/","zbetcheckin"
+"353313","2020-04-28 18:24:04","http://88.218.16.37/D3nXjwy5EMjHNdM.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/353313/","zbetcheckin"
 "353312","2020-04-28 18:22:08","https://digibookspublishing.com/license.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/353312/","zbetcheckin"
-"353311","2020-04-28 18:21:10","http://modcloudserver.eu/ahihi/rawone.exe","online","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/353311/","zbetcheckin"
-"353310","2020-04-28 18:20:38","http://modcloudserver.eu/stanz/stanz.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/353310/","zbetcheckin"
-"353309","2020-04-28 18:13:17","http://ufabet168168.329263.com/tmpf/9173652/Buy-Sell_Agreement_9173652_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353309/","spamhaus"
+"353311","2020-04-28 18:21:10","http://modcloudserver.eu/ahihi/rawone.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/353311/","zbetcheckin"
+"353310","2020-04-28 18:20:38","http://modcloudserver.eu/stanz/stanz.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/353310/","zbetcheckin"
+"353309","2020-04-28 18:13:17","http://ufabet168168.329263.com/tmpf/9173652/Buy-Sell_Agreement_9173652_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353309/","spamhaus"
 "353308","2020-04-28 18:13:03","http://bookmytripping.com/tgxmxcm/Buy-Sell_Agreement_04173399_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353308/","spamhaus"
 "353307","2020-04-28 18:08:09","http://mlbfreestream.gq/n/042516/Buy-Sell_Agreement_042516_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353307/","spamhaus"
-"353306","2020-04-28 18:08:05","http://healtina.com/xcaspvi/62858/Buy-Sell_Agreement_62858_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353306/","spamhaus"
+"353306","2020-04-28 18:08:05","http://healtina.com/xcaspvi/62858/Buy-Sell_Agreement_62858_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353306/","spamhaus"
 "353305","2020-04-28 18:06:48","http://bbfjjf8.com/we20lo85/aio0i32p.php?l=nok12.cab","offline","malware_download","geofenced,us,USA,Valak","https://urlhaus.abuse.ch/url/353305/","JAMESWT_MHT"
 "353304","2020-04-28 18:06:46","http://bbfjjf8.com/we20lo85/aio0i32p.php?l=nok11.cab","offline","malware_download","geofenced,us,USA,Valak","https://urlhaus.abuse.ch/url/353304/","JAMESWT_MHT"
 "353303","2020-04-28 18:06:44","http://bbfjjf8.com/we20lo85/aio0i32p.php?l=nok10.cab","offline","malware_download","geofenced,us,USA,Valak","https://urlhaus.abuse.ch/url/353303/","JAMESWT_MHT"
@@ -4853,11 +5078,11 @@
 "353281","2020-04-28 18:04:13","http://89.148.204.161:43288/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353281/","Gandylyan1"
 "353280","2020-04-28 18:04:09","http://162.212.115.125:55939/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353280/","Gandylyan1"
 "353279","2020-04-28 18:04:05","http://182.119.102.175:52826/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353279/","Gandylyan1"
-"353278","2020-04-28 17:57:41","http://healtina.com/xcaspvi/9824902/Buy-Sell_Agreement_9824902_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353278/","spamhaus"
+"353278","2020-04-28 17:57:41","http://healtina.com/xcaspvi/9824902/Buy-Sell_Agreement_9824902_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353278/","spamhaus"
 "353277","2020-04-28 17:57:08","http://avto-pro.hostenko.com/too/4955024/Buy-Sell_Agreement_4955024_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353277/","spamhaus"
-"353276","2020-04-28 17:56:33","http://www.gainsdirectory.com/imtlt/Buy-Sell_Agreement_7954433_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353276/","spamhaus"
+"353276","2020-04-28 17:56:33","http://www.gainsdirectory.com/imtlt/Buy-Sell_Agreement_7954433_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353276/","spamhaus"
 "353275","2020-04-28 17:51:34","http://genqur.com/_flox.exe","offline","malware_download","Dridex,exe","https://urlhaus.abuse.ch/url/353275/","abuse_ch"
-"353274","2020-04-28 17:47:13","https://royalplusmobile.ir/wp-content/uploads/2020/04/ohzjt/22076/Buy-Sell_Agreement_22076_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353274/","spamhaus"
+"353274","2020-04-28 17:47:13","https://royalplusmobile.ir/wp-content/uploads/2020/04/ohzjt/22076/Buy-Sell_Agreement_22076_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353274/","spamhaus"
 "353273","2020-04-28 17:47:07","http://escarateeventos.ladevi.cl/yworbn/1682/Buy-Sell_Agreement_1682_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353273/","spamhaus"
 "353272","2020-04-28 17:46:14","http://yucatanentiemporeal.com/wp-content/uploads/2020/04/nwl/1889533/Buy-Sell_Agreement_1889533_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353272/","spamhaus"
 "353271","2020-04-28 17:46:12","http://maharatal3zl.com/xdlycfp/38973/Buy-Sell_Agreement_38973_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353271/","spamhaus"
@@ -4867,8 +5092,8 @@
 "353267","2020-04-28 17:45:50","http://djonur24.de/hdc/Buy-Sell_Agreement_6780_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353267/","spamhaus"
 "353266","2020-04-28 17:45:41","http://hdlive-espntv.live-sportshd.website/bpg/Buy-Sell_Agreement_43738_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353266/","spamhaus"
 "353265","2020-04-28 17:45:23","https://drwendyellis.com/laqrip/Buy-Sell_Agreement_456989_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353265/","spamhaus"
-"353264","2020-04-28 17:45:18","http://arowanafishforsale.com/dbmwl/Buy-Sell_Agreement_2539_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353264/","spamhaus"
-"353263","2020-04-28 17:34:26","http://www.alnahrainfilminstitute.com/kuhjz/Buy-Sell_Agreement_8555_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353263/","spamhaus"
+"353264","2020-04-28 17:45:18","http://arowanafishforsale.com/dbmwl/Buy-Sell_Agreement_2539_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353264/","spamhaus"
+"353263","2020-04-28 17:34:26","http://www.alnahrainfilminstitute.com/kuhjz/Buy-Sell_Agreement_8555_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353263/","spamhaus"
 "353262","2020-04-28 17:34:20","https://nmal.info/ntsphsl/Buy-Sell_Agreement_726528_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353262/","spamhaus"
 "353261","2020-04-28 17:34:15","http://earningtipsbd.com/pn/Buy-Sell_Agreement_10363433_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353261/","spamhaus"
 "353260","2020-04-28 17:34:09","http://www.alnahrainfilminstitute.com/kuhjz/Buy-Sell_Agreement_94655_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353260/","spamhaus"
@@ -4878,10 +5103,10 @@
 "353256","2020-04-28 17:17:05","http://mlbfreestream.gq/n/Buy-Sell_Agreement_764238_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353256/","spamhaus"
 "353255","2020-04-28 17:16:14","https://miraab.ir/wp-content/uploads/2020/04/tk/298413/Buy-Sell_Agreement_298413_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353255/","spamhaus"
 "353254","2020-04-28 17:16:10","http://sportstrem.gq/imqmxkw/0835/Buy-Sell_Agreement_0835_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353254/","spamhaus"
-"353253","2020-04-28 17:14:18","http://www.alnahrainfilminstitute.com/kuhjz/Buy-Sell_Agreement_744702_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353253/","spamhaus"
+"353253","2020-04-28 17:14:18","http://www.alnahrainfilminstitute.com/kuhjz/Buy-Sell_Agreement_744702_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353253/","spamhaus"
 "353252","2020-04-28 17:14:16","https://brenleyquartzgh.com/ga/50602/Buy-Sell_Agreement_50602_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353252/","spamhaus"
-"353251","2020-04-28 17:14:10","http://lagalaxy88easy.329263.com/lbrnxxd/Buy-Sell_Agreement_538674_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353251/","spamhaus"
-"353250","2020-04-28 17:12:08","http://vaeqpu.329263.com/al/73044112/Buy-Sell_Agreement_73044112_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353250/","spamhaus"
+"353251","2020-04-28 17:14:10","http://lagalaxy88easy.329263.com/lbrnxxd/Buy-Sell_Agreement_538674_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353251/","spamhaus"
+"353250","2020-04-28 17:12:08","http://vaeqpu.329263.com/al/73044112/Buy-Sell_Agreement_73044112_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353250/","spamhaus"
 "353249","2020-04-28 17:12:05","http://kandiandcolor.codeworkscanada.com/v/Buy-Sell_Agreement_6751913_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353249/","spamhaus"
 "353248","2020-04-28 17:10:06","http://uewizi.com/_flox.exe","offline","malware_download","Dridex,exe","https://urlhaus.abuse.ch/url/353248/","abuse_ch"
 "353247","2020-04-28 17:06:12","http://myexpertca.in/fomi/655664/Buy-Sell_Agreement_655664_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353247/","spamhaus"
@@ -4892,8 +5117,8 @@
 "353242","2020-04-28 17:04:36","http://www.amodoutours.com/rretwxj/Buy-Sell_Agreement_76046632_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353242/","spamhaus"
 "353241","2020-04-28 17:04:34","https://drwendyellis.com/laqrip/Buy-Sell_Agreement_548596_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353241/","spamhaus"
 "353240","2020-04-28 17:04:31","https://delmaestro.cl/wtdeng/0829/Buy-Sell_Agreement_0829_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353240/","spamhaus"
-"353239","2020-04-28 17:04:27","http://ufabet168168.329263.com/tmpf/Buy-Sell_Agreement_8854_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353239/","spamhaus"
-"353238","2020-04-28 17:04:20","http://arowanafishforsale.com/dbmwl/Buy-Sell_Agreement_1148_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353238/","spamhaus"
+"353239","2020-04-28 17:04:27","http://ufabet168168.329263.com/tmpf/Buy-Sell_Agreement_8854_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353239/","spamhaus"
+"353238","2020-04-28 17:04:20","http://arowanafishforsale.com/dbmwl/Buy-Sell_Agreement_1148_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353238/","spamhaus"
 "353237","2020-04-28 17:04:09","http://kosslouer.com/uu/29800863/Buy-Sell_Agreement_29800863_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353237/","spamhaus"
 "353236","2020-04-28 17:04:06","http://djonur24.de/hdc/Buy-Sell_Agreement_5964970_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353236/","spamhaus"
 "353235","2020-04-28 17:01:30","http://denverktrade.xyz/css/bin_nSySIpsJT214.bin","offline","malware_download","encrypted,GuLoader,opendir","https://urlhaus.abuse.ch/url/353235/","abuse_ch"
@@ -4902,7 +5127,7 @@
 "353232","2020-04-28 17:01:09","http://denverktrade.xyz/css/bin_EAxjkLSe173.bin","offline","malware_download","encrypted,GuLoader,opendir","https://urlhaus.abuse.ch/url/353232/","abuse_ch"
 "353231","2020-04-28 17:01:05","http://denverktrade.xyz/css/bin_BgdIEZ91.bin","offline","malware_download","encrypted,GuLoader,opendir","https://urlhaus.abuse.ch/url/353231/","abuse_ch"
 "353230","2020-04-28 17:00:07","http://denverktrade.xyz/css/bin_KkhYIB85.bin","offline","malware_download","encrypted,Formbook,GuLoader,opendir","https://urlhaus.abuse.ch/url/353230/","abuse_ch"
-"353229","2020-04-28 16:52:25","http://amedeoscognamiglio.329263.com/i/8825/Buy-Sell_Agreement_8825_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353229/","spamhaus"
+"353229","2020-04-28 16:52:25","http://amedeoscognamiglio.329263.com/i/8825/Buy-Sell_Agreement_8825_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353229/","spamhaus"
 "353228","2020-04-28 16:52:22","http://anadolutatili.com/xtfdux/1648/Buy-Sell_Agreement_1648_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353228/","spamhaus"
 "353227","2020-04-28 16:52:19","https://www.foreveramericabrands.com/xaayvq/4629/Buy-Sell_Agreement_4629_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353227/","spamhaus"
 "353226","2020-04-28 16:52:16","http://kosslouer.com/uu/3207/Buy-Sell_Agreement_3207_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353226/","spamhaus"
@@ -4991,8 +5216,8 @@
 "353143","2020-04-28 14:39:06","http://mcdc.club/pics/6011779.exe","offline","malware_download","exe,lucifer","https://urlhaus.abuse.ch/url/353143/","zbetcheckin"
 "353142","2020-04-28 14:38:16","http://mcdc.club/pics/rtrp.jpg","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/353142/","zbetcheckin"
 "353141","2020-04-28 14:34:08","http://mcdc.club/pics/6130079.jpg","offline","malware_download","exe,lucifer","https://urlhaus.abuse.ch/url/353141/","zbetcheckin"
-"353140","2020-04-28 14:20:04","http://88.218.16.37/Srr45MA8prCJUWh.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/353140/","zbetcheckin"
-"353139","2020-04-28 14:19:37","http://mytex.pe/phsse/88888.png","online","malware_download","exe,Qakbot,Quakbot,spx107","https://urlhaus.abuse.ch/url/353139/","lazyactivist192"
+"353140","2020-04-28 14:20:04","http://88.218.16.37/Srr45MA8prCJUWh.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/353140/","zbetcheckin"
+"353139","2020-04-28 14:19:37","http://mytex.pe/phsse/88888.png","offline","malware_download","exe,Qakbot,Quakbot,spx107","https://urlhaus.abuse.ch/url/353139/","lazyactivist192"
 "353138","2020-04-28 14:19:28","http://cirugiagenital.com.mx/rrigg/88888.png","offline","malware_download","exe,Qakbot,Quakbot,spx107","https://urlhaus.abuse.ch/url/353138/","lazyactivist192"
 "353137","2020-04-28 14:19:23","http://clubtempel.de/zeksv/88888.png","offline","malware_download","exe,Qakbot,Quakbot,spx107","https://urlhaus.abuse.ch/url/353137/","lazyactivist192"
 "353136","2020-04-28 14:19:20","http://can-media.de/e/88888.png","offline","malware_download","exe,Qakbot,Quakbot,spx107","https://urlhaus.abuse.ch/url/353136/","lazyactivist192"
@@ -5013,7 +5238,7 @@
 "353121","2020-04-28 12:58:06","http://thesecuritysoftwarescannerindustrgreat.duckdns.org/ba/vbc.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/353121/","oppimaniac"
 "353120","2020-04-28 12:45:17","http://bbfjjf8.com//we20lo85/aio0i32p.php?l=nok9.cab","offline","malware_download","None","https://urlhaus.abuse.ch/url/353120/","cocaman"
 "353119","2020-04-28 12:45:10","http://modcloudserver.eu//billiz/billiz.exe","online","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/353119/","cocaman"
-"353118","2020-04-28 12:45:03","http://88.218.16.37//Srr45MA8prCJUWh.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/353118/","cocaman"
+"353118","2020-04-28 12:45:03","http://88.218.16.37//Srr45MA8prCJUWh.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/353118/","cocaman"
 "353117","2020-04-28 12:40:08","http://mcdc.club/pics/784000.jpg","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/353117/","abuse_ch"
 "353116","2020-04-28 12:25:06","http://46.20.211.254:16982/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353116/","geenensp"
 "353115","2020-04-28 12:17:05","http://216.180.117.191:53446/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353115/","zbetcheckin"
@@ -5055,7 +5280,7 @@
 "353079","2020-04-28 09:46:03","http://167.99.110.100/zehir/z3hir.x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/353079/","0xrb"
 "353078","2020-04-28 09:45:36","http://206.189.68.47/zehir/z3hir.x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/353078/","0xrb"
 "353077","2020-04-28 09:45:03","http://45.95.168.97/SBIDIOT/x86","online","malware_download","elf","https://urlhaus.abuse.ch/url/353077/","0xrb"
-"353076","2020-04-28 09:44:03","http://192.236.147.67/0xxx0xxxasdajshdsajhkgdja/Sa0aS.x86","online","malware_download","elf,mirai,upx","https://urlhaus.abuse.ch/url/353076/","0xrb"
+"353076","2020-04-28 09:44:03","http://192.236.147.67/0xxx0xxxasdajshdsajhkgdja/Sa0aS.x86","offline","malware_download","elf,mirai,upx","https://urlhaus.abuse.ch/url/353076/","0xrb"
 "353075","2020-04-28 09:37:24","http://87e2jwewp.sudyd80oefw08e902ollaidhailsfu89q.online:44783/jaws","offline","malware_download","bash,elf,mirai","https://urlhaus.abuse.ch/url/353075/","0xrb"
 "353074","2020-04-28 09:37:19","http://81.17.16.122:44783/9/shoppings.arc","online","malware_download","elf,mirai,upx","https://urlhaus.abuse.ch/url/353074/","0xrb"
 "353073","2020-04-28 09:37:16","https://pastebin.com/raw/nm4CjdyS","offline","malware_download","None","https://urlhaus.abuse.ch/url/353073/","JayTHL"
@@ -5126,7 +5351,7 @@
 "353008","2020-04-28 07:35:59","https://pakdesighee.com/wp-content/uploads/2020/04/docs_l9e/Buy-Sell%20Agreement_5519370_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353008/","spamhaus"
 "353007","2020-04-28 07:35:55","http://orujedu.com/wp-content/uploads/2020/04/docs_f8n/02449/Buy-Sell%20Agreement_02449_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353007/","spamhaus"
 "353006","2020-04-28 07:35:51","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/Buy-Sell%20Agreement_7223_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353006/","spamhaus"
-"353005","2020-04-28 07:35:36","https://www.patrickchan-hk.net/wp-content/uploads/2020/04/docs_csa/Buy-Sell%20Agreement_20133_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353005/","spamhaus"
+"353005","2020-04-28 07:35:36","https://www.patrickchan-hk.net/wp-content/uploads/2020/04/docs_csa/Buy-Sell%20Agreement_20133_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353005/","spamhaus"
 "353004","2020-04-28 07:35:28","https://darazexpress.pk/wp-content/uploads/2020/04/docs_7tp/31086224/Buy-Sell%20Agreement_31086224_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353004/","spamhaus"
 "353003","2020-04-28 07:35:25","http://www.running-bike.com/docs_155/7449/Buy-Sell%20Agreement_7449_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353003/","spamhaus"
 "353002","2020-04-28 07:35:14","https://youngspiritshop.com/docs_8s0/1548/Buy-Sell%20Agreement_1548_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353002/","spamhaus"
@@ -5140,7 +5365,7 @@
 "352994","2020-04-28 07:31:56","https://darazexpress.pk/wp-content/uploads/2020/04/docs_7tp/Buy-Sell%20Agreement_5299045_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352994/","spamhaus"
 "352993","2020-04-28 07:31:54","https://www.patrickchan-hk.net/wp-content/uploads/2020/04/docs_csa/Buy-Sell%20Agreement_78170227_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352993/","spamhaus"
 "352992","2020-04-28 07:31:46","https://www.leaksfly.com/docs_1tj/71964624/Buy-Sell%20Agreement_71964624_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352992/","spamhaus"
-"352991","2020-04-28 07:31:44","https://heavenif.co.za/blog/wp-content/themes/calliope/docs_kwc/Buy-Sell%20Agreement_730298_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352991/","spamhaus"
+"352991","2020-04-28 07:31:44","https://heavenif.co.za/blog/wp-content/themes/calliope/docs_kwc/Buy-Sell%20Agreement_730298_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352991/","spamhaus"
 "352990","2020-04-28 07:31:41","https://www.teleporterhire.ie/wp-content/uploads/2020/04/docs_1sn/6641/Buy-Sell%20Agreement_6641_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352990/","spamhaus"
 "352989","2020-04-28 07:31:39","https://www.internaut.in/wp-content/uploads/2020/04/docs_kl7/Buy-Sell%20Agreement_4849567_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352989/","spamhaus"
 "352988","2020-04-28 07:31:07","https://parmisco.com/docs_mc0/5349/Buy-Sell%20Agreement_5349_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352988/","spamhaus"
@@ -5224,7 +5449,7 @@
 "352910","2020-04-28 06:34:55","https://mirandaspaintingca.com/wp-content/uploads/2020/04/docs_kjk/Buy-Sell%20Agreement_145236_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352910/","spamhaus"
 "352909","2020-04-28 06:34:50","https://ftvlicenses.in/wp-content/uploads/2020/04/docs_ypk/Buy-Sell%20Agreement_90844_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352909/","spamhaus"
 "352908","2020-04-28 06:34:35","https://www.h2obbs.cn/wp-content/themes/calliope/docs_3kj/Buy-Sell%20Agreement_0943607_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352908/","spamhaus"
-"352907","2020-04-28 06:34:29","https://pakdesighee.com/wp-content/uploads/2020/04/docs_l9e/Buy-Sell%20Agreement_9002_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352907/","spamhaus"
+"352907","2020-04-28 06:34:29","https://pakdesighee.com/wp-content/uploads/2020/04/docs_l9e/Buy-Sell%20Agreement_9002_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352907/","spamhaus"
 "352906","2020-04-28 06:34:19","https://onikstrgovina.com/docs_0nd/726973/Buy-Sell%20Agreement_726973_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352906/","spamhaus"
 "352905","2020-04-28 06:33:54","http://huniandijual.com/wp-content/uploads/2020/04/docs_x5r/6155/Buy-Sell%20Agreement_6155_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352905/","spamhaus"
 "352904","2020-04-28 06:33:52","https://premiumshop.id/wp-content/uploads/2020/04/docs_ha7/Buy-Sell%20Agreement_23882737_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352904/","spamhaus"
@@ -5301,7 +5526,7 @@
 "352833","2020-04-28 05:54:22","http://121.148.122.219:5895/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/352833/","geenensp"
 "352832","2020-04-28 05:54:17","http://106.248.202.245:45017/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/352832/","geenensp"
 "352831","2020-04-28 05:54:13","http://1.64.98.249:62482/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/352831/","geenensp"
-"352830","2020-04-28 05:54:07","http://dongiln.co/paymentslip/paymentslip.rar","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352830/","spamhaus"
+"352830","2020-04-28 05:54:07","http://dongiln.co/paymentslip/paymentslip.rar","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352830/","spamhaus"
 "352829","2020-04-28 05:53:38","http://121.122.87.76:53453/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/352829/","geenensp"
 "352828","2020-04-28 05:53:34","http://5.206.227.18/bot/bot.mipsel","online","malware_download","CoinMiner,elf","https://urlhaus.abuse.ch/url/352828/","hypoweb"
 "352827","2020-04-28 05:53:32","http://5.206.227.18/bot/bot.arm4","online","malware_download","CoinMiner,elf","https://urlhaus.abuse.ch/url/352827/","hypoweb"
@@ -5326,8 +5551,8 @@
 "352808","2020-04-28 05:35:08","http://159.89.233.138/zehir/z3hir.arm6","offline","malware_download","None","https://urlhaus.abuse.ch/url/352808/","JayTHL"
 "352807","2020-04-28 05:35:06","http://159.89.233.138/zehir/z3hir.arm5","offline","malware_download","None","https://urlhaus.abuse.ch/url/352807/","JayTHL"
 "352806","2020-04-28 05:35:04","http://159.89.233.138/zehir/z3hir.arm","offline","malware_download","None","https://urlhaus.abuse.ch/url/352806/","JayTHL"
-"352805","2020-04-28 05:28:06","https://onedrive.live.com/download?cid=FE8464CFA794DA31&resid=FE8464CFA794DA31!377&authkey=AAu9JE4OqfFRyD4","online","malware_download","None","https://urlhaus.abuse.ch/url/352805/","JayTHL"
-"352804","2020-04-28 05:28:03","https://onedrive.live.com/download?cid=E61E5F3F655316FA&resid=E61E5F3F655316FA!125&authkey=AB5cY3xSz3aDDbE","online","malware_download","None","https://urlhaus.abuse.ch/url/352804/","JayTHL"
+"352805","2020-04-28 05:28:06","https://onedrive.live.com/download?cid=FE8464CFA794DA31&resid=FE8464CFA794DA31!377&authkey=AAu9JE4OqfFRyD4","offline","malware_download","None","https://urlhaus.abuse.ch/url/352805/","JayTHL"
+"352804","2020-04-28 05:28:03","https://onedrive.live.com/download?cid=E61E5F3F655316FA&resid=E61E5F3F655316FA!125&authkey=AB5cY3xSz3aDDbE","offline","malware_download","None","https://urlhaus.abuse.ch/url/352804/","JayTHL"
 "352803","2020-04-28 05:27:58","https://onedrive.live.com/download?cid=D06D60404544FB85&resid=D06D60404544FB85!874&authkey=ALKzCbXZ-dSCGuM","online","malware_download","None","https://urlhaus.abuse.ch/url/352803/","JayTHL"
 "352802","2020-04-28 05:27:55","https://onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E!1345&authkey=AEVvyhOnxHtcDh0","online","malware_download","None","https://urlhaus.abuse.ch/url/352802/","JayTHL"
 "352801","2020-04-28 05:27:53","https://onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E!1343&authkey=ABODYSRxU9L2xxU","online","malware_download","None","https://urlhaus.abuse.ch/url/352801/","JayTHL"
@@ -5335,8 +5560,8 @@
 "352799","2020-04-28 05:27:48","https://onedrive.live.com/download?cid=C061B9F3C86761D4&resid=C061B9F3C86761D4!414&authkey=APWkYt_XIbziWsc","offline","malware_download","None","https://urlhaus.abuse.ch/url/352799/","JayTHL"
 "352798","2020-04-28 05:27:44","https://onedrive.live.com/download?cid=B8BA73DB68DA7C0B&resid=B8BA73DB68DA7C0B!7521&authkey=ABLT9zDyq2D4rb0","online","malware_download","None","https://urlhaus.abuse.ch/url/352798/","JayTHL"
 "352797","2020-04-28 05:27:41","https://onedrive.live.com/download?cid=7C41DDCFA01AEFF7&resid=7C41DDCFA01AEFF7!5298&authkey=ALbZYIzuqCZFv9s","online","malware_download","None","https://urlhaus.abuse.ch/url/352797/","JayTHL"
-"352796","2020-04-28 05:27:39","https://onedrive.live.com/download?cid=7366FEFC2190D2E3&resid=7366FEFC2190D2E3!207&authkey=AKdm-uaXR7N96rk","online","malware_download","None","https://urlhaus.abuse.ch/url/352796/","JayTHL"
-"352795","2020-04-28 05:27:36","https://onedrive.live.com/download?cid=7366FEFC2190D2E3&resid=7366FEFC2190D2E3!195&authkey=AG9WIgSqvGrNwdI","online","malware_download","None","https://urlhaus.abuse.ch/url/352795/","JayTHL"
+"352796","2020-04-28 05:27:39","https://onedrive.live.com/download?cid=7366FEFC2190D2E3&resid=7366FEFC2190D2E3!207&authkey=AKdm-uaXR7N96rk","offline","malware_download","None","https://urlhaus.abuse.ch/url/352796/","JayTHL"
+"352795","2020-04-28 05:27:36","https://onedrive.live.com/download?cid=7366FEFC2190D2E3&resid=7366FEFC2190D2E3!195&authkey=AG9WIgSqvGrNwdI","offline","malware_download","None","https://urlhaus.abuse.ch/url/352795/","JayTHL"
 "352794","2020-04-28 05:27:33","https://onedrive.live.com/download?cid=72EF66C14DF86B76&resid=72EF66C14DF86B76!191&authkey=AOumzH6K1KEmsCU","online","malware_download","None","https://urlhaus.abuse.ch/url/352794/","JayTHL"
 "352793","2020-04-28 05:27:29","https://onedrive.live.com/download?cid=6CD2E7E257C16E46&resid=6CD2E7E257C16E46!173&authkey=AK5nXNLF4pJAieU","online","malware_download","None","https://urlhaus.abuse.ch/url/352793/","JayTHL"
 "352792","2020-04-28 05:27:27","https://onedrive.live.com/download?cid=6CD2E7E257C16E46&resid=6CD2E7E257C16E46!158&authkey=ACpreL1y7oJkJqY","online","malware_download","None","https://urlhaus.abuse.ch/url/352792/","JayTHL"
@@ -5542,7 +5767,7 @@
 "352592","2020-04-28 00:04:40","http://175.4.192.21:34060/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352592/","Gandylyan1"
 "352591","2020-04-28 00:04:27","http://182.124.77.75:38722/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352591/","Gandylyan1"
 "352590","2020-04-28 00:04:24","http://111.42.66.137:53652/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352590/","Gandylyan1"
-"352589","2020-04-28 00:04:20","http://106.110.129.163:33094/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352589/","Gandylyan1"
+"352589","2020-04-28 00:04:20","http://106.110.129.163:33094/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352589/","Gandylyan1"
 "352588","2020-04-28 00:04:16","http://183.147.67.39:45764/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352588/","Gandylyan1"
 "352587","2020-04-28 00:04:12","http://113.102.205.218:42789/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352587/","Gandylyan1"
 "352586","2020-04-28 00:04:09","http://218.31.4.75:58310/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352586/","Gandylyan1"
@@ -5550,7 +5775,7 @@
 "352584","2020-04-27 23:18:07","http://dizocserebozanew.com/calle1320/x30.exe","offline","malware_download","cryptbot,DanaBot,exe,Trickbot","https://urlhaus.abuse.ch/url/352584/","p5yb34m"
 "352583","2020-04-27 23:03:06","http://plexle.us/Th5xrRAm","offline","malware_download","elf","https://urlhaus.abuse.ch/url/352583/","zbetcheckin"
 "352582","2020-04-27 22:28:34","http://brightstore.com.ng/cjy/cjcrypttt.exe","offline","malware_download","lokibot","https://urlhaus.abuse.ch/url/352582/","James_inthe_box"
-"352581","2020-04-27 22:24:03","http://88.218.16.37/yZhLDBjcFMDlgz4.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/352581/","zbetcheckin"
+"352581","2020-04-27 22:24:03","http://88.218.16.37/yZhLDBjcFMDlgz4.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/352581/","zbetcheckin"
 "352580","2020-04-27 22:13:06","http://aurumboy.com/file5.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/352580/","zbetcheckin"
 "352579","2020-04-27 21:53:08","https://devastatedibexe.com/dj/dj.exe","offline","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/352579/","James_inthe_box"
 "352578","2020-04-27 21:11:58","https://firebasestorage.googleapis.com/v0/b/tl-018.appspot.com/o/action-etc.js?alt=media&token=4835fbea-bbed-47d7-b19a-fea2ed417dac","online","malware_download","None","https://urlhaus.abuse.ch/url/352578/","JayTHL"
@@ -5566,7 +5791,7 @@
 "352568","2020-04-27 21:03:43","http://111.43.223.52:51159/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352568/","Gandylyan1"
 "352567","2020-04-27 21:03:39","http://199.83.207.49:54682/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352567/","Gandylyan1"
 "352566","2020-04-27 21:03:35","http://221.161.31.8:56066/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352566/","Gandylyan1"
-"352565","2020-04-27 21:03:31","http://36.35.160.240:38882/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352565/","Gandylyan1"
+"352565","2020-04-27 21:03:31","http://36.35.160.240:38882/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352565/","Gandylyan1"
 "352564","2020-04-27 21:03:25","http://120.212.208.227:48733/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352564/","Gandylyan1"
 "352563","2020-04-27 21:03:20","http://175.10.73.252:48250/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352563/","Gandylyan1"
 "352562","2020-04-27 21:03:14","http://176.113.161.93:42166/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352562/","Gandylyan1"
@@ -5619,7 +5844,7 @@
 "352515","2020-04-27 20:24:28","https://parmisco.com/docs_mc0/68491/Buy-Sell%20Agreement_68491_04242020.zip","offline","malware_download","Qakbot,qbot,sxp105,zip","https://urlhaus.abuse.ch/url/352515/","malware_traffic"
 "352514","2020-04-27 20:24:23","https://parmisco.com/docs_mc0/484059/Buy-Sell%20Agreement_484059_04242020.zip","offline","malware_download","Qakbot,qbot,sxp105,zip","https://urlhaus.abuse.ch/url/352514/","malware_traffic"
 "352513","2020-04-27 20:24:20","https://parmisco.com/docs_mc0/21829/Buy-Sell%20Agreement_21829_04242020.zip","offline","malware_download","Qakbot,qbot,sxp105,zip","https://urlhaus.abuse.ch/url/352513/","malware_traffic"
-"352512","2020-04-27 20:24:16","https://pakdesighee.com/wp-content/uploads/2020/04/docs_l9e/Buy-Sell%20Agreement_16014406_04242020.zip","offline","malware_download","Qakbot,qbot,sxp105,zip","https://urlhaus.abuse.ch/url/352512/","malware_traffic"
+"352512","2020-04-27 20:24:16","https://pakdesighee.com/wp-content/uploads/2020/04/docs_l9e/Buy-Sell%20Agreement_16014406_04242020.zip","online","malware_download","Qakbot,qbot,sxp105,zip","https://urlhaus.abuse.ch/url/352512/","malware_traffic"
 "352511","2020-04-27 20:23:54","https://onikstrgovina.com/docs_0nd/Buy-Sell%20Agreement_88899_04242020.zip","offline","malware_download","Qakbot,qbot,sxp105,zip","https://urlhaus.abuse.ch/url/352511/","malware_traffic"
 "352510","2020-04-27 20:23:51","https://onikstrgovina.com/docs_0nd/9033834/Buy-Sell%20Agreement_9033834_04242020.zip","offline","malware_download","Qakbot,qbot,sxp105,zip","https://urlhaus.abuse.ch/url/352510/","malware_traffic"
 "352509","2020-04-27 20:23:49","https://onikstrgovina.com/docs_0nd/0855703/Buy-Sell%20Agreement_0855703_04242020.zip","offline","malware_download","Qakbot,qbot,sxp105,zip","https://urlhaus.abuse.ch/url/352509/","malware_traffic"
@@ -5646,11 +5871,11 @@
 "352488","2020-04-27 20:13:58","http://cecadesayu.corazondelcielo.mx/docs_ytk/0191867/Buy-Sell%20Agreement_0191867_04242020.zip","offline","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352488/","malware_traffic"
 "352487","2020-04-27 20:13:55","https://kiaowadubai.com/docs_qsb/Buy-Sell%20Agreement_37855099_04242020.zip","offline","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352487/","malware_traffic"
 "352486","2020-04-27 20:13:50","https://kiaowadubai.com/docs_qsb/6455/Buy-Sell%20Agreement_6455_04242020.zip","offline","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352486/","malware_traffic"
-"352485","2020-04-27 20:13:47","https://itohukuk.com/wp-content/uploads/2020/04/docs_u9n/387824/Buy-Sell%20Agreement_387824_04242020.zip","online","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352485/","malware_traffic"
+"352485","2020-04-27 20:13:47","https://itohukuk.com/wp-content/uploads/2020/04/docs_u9n/387824/Buy-Sell%20Agreement_387824_04242020.zip","offline","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352485/","malware_traffic"
 "352484","2020-04-27 20:13:45","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/9116273/Buy-Sell%20Agreement_9116273_04242020.zip","offline","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352484/","malware_traffic"
 "352483","2020-04-27 20:13:41","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/0070320/Buy-Sell%20Agreement_0070320_04242020.zip","offline","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352483/","malware_traffic"
 "352482","2020-04-27 20:13:36","https://heavenif.co.za/blog/wp-content/themes/calliope/docs_kwc/Buy-Sell%20Agreement_85693132_04242020.zip","offline","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352482/","malware_traffic"
-"352481","2020-04-27 20:13:32","https://heavenif.co.za/blog/wp-content/themes/calliope/docs_kwc/Buy-Sell%20Agreement_8473004_04242020.zip","online","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352481/","malware_traffic"
+"352481","2020-04-27 20:13:32","https://heavenif.co.za/blog/wp-content/themes/calliope/docs_kwc/Buy-Sell%20Agreement_8473004_04242020.zip","offline","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352481/","malware_traffic"
 "352480","2020-04-27 20:13:27","https://heavenif.co.za/blog/wp-content/themes/calliope/docs_kwc/385661/Buy-Sell%20Agreement_385661_04242020.zip","online","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352480/","malware_traffic"
 "352479","2020-04-27 20:13:23","https://heavenif.co.za/blog/wp-content/themes/calliope/docs_kwc/20826984/Buy-Sell%20Agreement_20826984_04242020.zip","offline","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352479/","malware_traffic"
 "352478","2020-04-27 20:13:19","https://formadiksiuij.com/wp-content/uploads/2020/04/docs_25c/Buy-Sell%20Agreement_305245_04242020.zip","offline","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352478/","malware_traffic"
@@ -5757,7 +5982,7 @@
 "352377","2020-04-27 18:21:03","https://darazexpress.pk/wp-content/uploads/2020/04/docs_7tp/91278/Buy-Sell%20Agreement_91278_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352377/","spamhaus"
 "352376","2020-04-27 18:19:38","http://79.159.207.150:1524/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/352376/","geenensp"
 "352375","2020-04-27 18:19:36","https://onikstrgovina.com/docs_0nd/62718678/Buy-Sell%20Agreement_62718678_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352375/","spamhaus"
-"352374","2020-04-27 18:15:23","https://heavenif.co.za/blog/wp-content/themes/calliope/docs_kwc/Buy-Sell%20Agreement_1197_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352374/","spamhaus"
+"352374","2020-04-27 18:15:23","https://heavenif.co.za/blog/wp-content/themes/calliope/docs_kwc/Buy-Sell%20Agreement_1197_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352374/","spamhaus"
 "352373","2020-04-27 18:15:13","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/106811/Buy-Sell%20Agreement_106811_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352373/","spamhaus"
 "352372","2020-04-27 18:09:02","https://onikstrgovina.com/docs_0nd/Buy-Sell%20Agreement_433299_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352372/","spamhaus"
 "352371","2020-04-27 18:07:16","http://www.pacificstarimpex.com/wp-content/themes/calliope/docs_v79/Buy-Sell%20Agreement_571385_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352371/","spamhaus"
@@ -5784,13 +6009,13 @@
 "352350","2020-04-27 18:03:09","http://123.9.233.170:46389/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352350/","Gandylyan1"
 "352349","2020-04-27 18:03:04","http://219.155.135.6:44227/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352349/","Gandylyan1"
 "352348","2020-04-27 17:58:04","https://ticte.in/wp-content/uploads/2020/04/docs_o2i/Buy-Sell%20Agreement_057093_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352348/","spamhaus"
-"352347","2020-04-27 17:56:03","http://88.218.16.37/9dudiNwDI5cxFKk.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/352347/","abuse_ch"
+"352347","2020-04-27 17:56:03","http://88.218.16.37/9dudiNwDI5cxFKk.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/352347/","abuse_ch"
 "352346","2020-04-27 17:55:12","https://www.leaksfly.com/docs_1tj/944378/Buy-Sell%20Agreement_944378_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352346/","spamhaus"
 "352345","2020-04-27 17:55:10","http://www.s172.com/wp-content/uploads/2020/04/docs_x1c/Buy-Sell%20Agreement_316191_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352345/","spamhaus"
 "352344","2020-04-27 17:54:38","http://www.s172.com/wp-content/uploads/2020/04/docs_x1c/Buy-Sell%20Agreement_63216730_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352344/","spamhaus"
 "352343","2020-04-27 17:54:06","http://cecadesayu.corazondelcielo.mx/docs_ytk/Buy-Sell%20Agreement_20922_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352343/","spamhaus"
-"352342","2020-04-27 17:51:19","http://221.155.68.193:54408/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/352342/","geenensp"
-"352341","2020-04-27 17:51:14","https://pakdesighee.com/wp-content/uploads/2020/04/docs_l9e/0161/Buy-Sell%20Agreement_0161_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352341/","spamhaus"
+"352342","2020-04-27 17:51:19","http://221.155.68.193:54408/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/352342/","geenensp"
+"352341","2020-04-27 17:51:14","https://pakdesighee.com/wp-content/uploads/2020/04/docs_l9e/0161/Buy-Sell%20Agreement_0161_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352341/","spamhaus"
 "352340","2020-04-27 17:51:11","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/6260776/Buy-Sell%20Agreement_6260776_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352340/","spamhaus"
 "352339","2020-04-27 17:51:08","https://minimalisku.com/wp-content/uploads/2020/04/docs_tp8/22158/Buy-Sell%20Agreement_22158_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352339/","spamhaus"
 "352338","2020-04-27 17:51:05","https://altatecnica.com.mx/wp-content/uploads/2020/04/docs_qvi/Buy-Sell%20Agreement_104703_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352338/","spamhaus"
@@ -5805,7 +6030,7 @@
 "352329","2020-04-27 17:40:05","https://formadiksiuij.com/wp-content/uploads/2020/04/docs_25c/Buy-Sell%20Agreement_7429247_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352329/","spamhaus"
 "352328","2020-04-27 17:40:00","http://www.running-bike.com/docs_155/5337859/Buy-Sell%20Agreement_5337859_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352328/","spamhaus"
 "352327","2020-04-27 17:39:55","https://www.tulsairishpub.com/blog/wp-content/themes/calliope/docs_khi/0166159/Buy-Sell%20Agreement_0166159_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352327/","spamhaus"
-"352326","2020-04-27 17:39:52","https://itohukuk.com/wp-content/uploads/2020/04/docs_u9n/06893779/Buy-Sell%20Agreement_06893779_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352326/","spamhaus"
+"352326","2020-04-27 17:39:52","https://itohukuk.com/wp-content/uploads/2020/04/docs_u9n/06893779/Buy-Sell%20Agreement_06893779_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352326/","spamhaus"
 "352325","2020-04-27 17:39:43","https://www.patrickchan-hk.net/wp-content/uploads/2020/04/docs_csa/Buy-Sell%20Agreement_7580_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352325/","spamhaus"
 "352324","2020-04-27 17:39:29","https://kiaowadubai.com/docs_qsb/Buy-Sell%20Agreement_15171881_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352324/","spamhaus"
 "352323","2020-04-27 17:39:24","https://ticte.in/wp-content/uploads/2020/04/docs_o2i/Buy-Sell%20Agreement_57903931_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352323/","spamhaus"
@@ -5817,7 +6042,7 @@
 "352317","2020-04-27 17:38:29","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/8096673/Buy-Sell%20Agreement_8096673_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352317/","spamhaus"
 "352316","2020-04-27 17:38:20","http://121.123.37.121:5229/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/352316/","geenensp"
 "352315","2020-04-27 17:38:14","http://80.210.20.94:37396/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/352315/","geenensp"
-"352314","2020-04-27 17:38:10","https://heavenif.co.za/blog/wp-content/themes/calliope/docs_kwc/0259743/Buy-Sell%20Agreement_0259743_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352314/","spamhaus"
+"352314","2020-04-27 17:38:10","https://heavenif.co.za/blog/wp-content/themes/calliope/docs_kwc/0259743/Buy-Sell%20Agreement_0259743_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352314/","spamhaus"
 "352313","2020-04-27 17:38:03","https://darazexpress.pk/wp-content/uploads/2020/04/docs_7tp/807898/Buy-Sell%20Agreement_807898_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352313/","spamhaus"
 "352312","2020-04-27 17:38:00","https://minimalisku.com/wp-content/uploads/2020/04/docs_tp8/Buy-Sell%20Agreement_99062_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352312/","spamhaus"
 "352311","2020-04-27 17:37:57","https://manamobile.store/wp-content/uploads/2020/04/docs_s1f/Buy-Sell%20Agreement_74658_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352311/","spamhaus"
@@ -5878,7 +6103,7 @@
 "352256","2020-04-27 16:33:26","https://coberturasgenerales.pe/wp-content/uploads/2020/04/docs_2hj/Buy-Sell%20Agreement_0476691_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352256/","spamhaus"
 "352255","2020-04-27 16:33:21","http://huniandijual.com/wp-content/uploads/2020/04/docs_x5r/Buy-Sell%20Agreement_334311_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352255/","spamhaus"
 "352254","2020-04-27 16:33:08","https://www.vagtachobrasil.com/wp-content/uploads/2020/04/docs_w7f/Buy-Sell%20Agreement_2686679_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352254/","spamhaus"
-"352253","2020-04-27 16:33:00","https://pakdesighee.com/wp-content/uploads/2020/04/docs_l9e/6987817/Buy-Sell%20Agreement_6987817_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352253/","spamhaus"
+"352253","2020-04-27 16:33:00","https://pakdesighee.com/wp-content/uploads/2020/04/docs_l9e/6987817/Buy-Sell%20Agreement_6987817_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352253/","spamhaus"
 "352252","2020-04-27 16:32:57","https://ftvlicenses.in/wp-content/uploads/2020/04/docs_ypk/79834712/Buy-Sell%20Agreement_79834712_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352252/","spamhaus"
 "352251","2020-04-27 16:32:54","http://orujedu.com/wp-content/uploads/2020/04/docs_f8n/51439450/Buy-Sell%20Agreement_51439450_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352251/","spamhaus"
 "352250","2020-04-27 16:32:51","http://orujedu.com/wp-content/uploads/2020/04/docs_f8n/Buy-Sell%20Agreement_92646947_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352250/","spamhaus"
@@ -6219,7 +6444,7 @@
 "351915","2020-04-27 11:08:18","http://hmbwgroup.com/wp-includes/js/tinymce/skins/wordpress/yu.exe","offline","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/351915/","JAMESWT_MHT"
 "351914","2020-04-27 11:08:15","http://114.35.2.68:15878/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351914/","geenensp"
 "351913","2020-04-27 11:08:08","http://114.35.2.68:32308/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351913/","geenensp"
-"351912","2020-04-27 11:07:03","http://88.218.16.37/HOyAJr0lqxvcwYJ.exe","online","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/351912/","JAMESWT_MHT"
+"351912","2020-04-27 11:07:03","http://88.218.16.37/HOyAJr0lqxvcwYJ.exe","offline","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/351912/","JAMESWT_MHT"
 "351911","2020-04-27 11:05:05","https://bitbucket.org/shobaka420/222333/downloads/usb.exe","online","malware_download","njRAT","https://urlhaus.abuse.ch/url/351911/","anonymous"
 "351910","2020-04-27 10:35:13","https://anjelo-directhelp.de/img/jonl.jpg","offline","malware_download","exe,Smoke Loader","https://urlhaus.abuse.ch/url/351910/","zbetcheckin"
 "351909","2020-04-27 10:35:09","https://anjelo-directhelp.de/img/idir.jpg","offline","malware_download","exe,Formbook","https://urlhaus.abuse.ch/url/351909/","zbetcheckin"
@@ -6301,7 +6526,7 @@
 "351833","2020-04-27 06:17:08","http://78.186.190.222:17012/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351833/","geenensp"
 "351832","2020-04-27 06:16:43","http://106.104.115.213:30358/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351832/","geenensp"
 "351831","2020-04-27 06:16:38","http://59.125.190.210:56936/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351831/","geenensp"
-"351830","2020-04-27 06:16:34","http://221.158.124.81:2063/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351830/","geenensp"
+"351830","2020-04-27 06:16:34","http://221.158.124.81:2063/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351830/","geenensp"
 "351829","2020-04-27 06:16:30","http://107.175.8.75/mips","offline","malware_download","32-bit,elf,mips","https://urlhaus.abuse.ch/url/351829/","geenensp"
 "351828","2020-04-27 06:16:27","http://107.175.8.75/niggabins.sh","offline","malware_download","script","https://urlhaus.abuse.ch/url/351828/","geenensp"
 "351827","2020-04-27 06:16:25","http://1.34.183.212:62109/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351827/","geenensp"
@@ -6321,7 +6546,7 @@
 "351813","2020-04-27 06:13:24","http://213.57.78.231:21145/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351813/","geenensp"
 "351812","2020-04-27 06:13:20","https://onedrive.live.com/download?cid=0F51D04C9D556964&resid=F51D04C9D556964%21114&authkey=ADFDjmcsu3yb9zI","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/351812/","lovemalware"
 "351811","2020-04-27 06:13:17","https://drive.google.com/uc?export=download&id=1QraiRF82pwlwn4kIUCdceWgFaYUeX7Jd","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/351811/","lovemalware"
-"351810","2020-04-27 06:13:09","http://88.218.16.37/z9KKjJSU69oPOYb.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/351810/","gorimpthon"
+"351810","2020-04-27 06:13:09","http://88.218.16.37/z9KKjJSU69oPOYb.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/351810/","gorimpthon"
 "351809","2020-04-27 06:13:06","http://177.76.198.208:31009/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351809/","geenensp"
 "351808","2020-04-27 06:06:07","https://drive.google.com/file/d/17NPtkoB3zBnCXoDLNcLUKTF_K5G2SeRj/view?usp=drive_web","offline","malware_download","Parallax","https://urlhaus.abuse.ch/url/351808/","PO3T1985"
 "351807","2020-04-27 06:05:34","http://111.42.102.147:44221/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351807/","Gandylyan1"
@@ -6360,7 +6585,7 @@
 "351774","2020-04-27 03:04:40","http://123.5.125.10:43656/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351774/","Gandylyan1"
 "351773","2020-04-27 03:04:36","http://182.124.4.130:48494/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351773/","Gandylyan1"
 "351772","2020-04-27 03:04:32","http://172.36.19.98:53923/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351772/","Gandylyan1"
-"351771","2020-04-27 02:41:05","http://45.95.55.58/a-r.m-4.GHOUL","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351771/","zbetcheckin"
+"351771","2020-04-27 02:41:05","http://45.95.55.58/a-r.m-4.GHOUL","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351771/","zbetcheckin"
 "351770","2020-04-27 02:41:03","http://107.174.24.117/orbitclient.mpsl","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351770/","zbetcheckin"
 "351769","2020-04-27 02:37:17","http://107.174.24.117/orbitclient.sh4","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351769/","zbetcheckin"
 "351768","2020-04-27 02:37:14","http://185.247.118.127/armv5l","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351768/","zbetcheckin"
@@ -6369,50 +6594,50 @@
 "351765","2020-04-27 02:37:08","http://107.174.24.117/orbitclient.x86","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351765/","zbetcheckin"
 "351764","2020-04-27 02:37:05","http://91.134.252.221/yakuza.ppc","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351764/","zbetcheckin"
 "351763","2020-04-27 02:37:03","http://23.95.89.78/beastmode/b3astmode.arm6","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351763/","zbetcheckin"
-"351762","2020-04-27 02:36:16","http://45.95.55.58/p-p.c-.GHOUL","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351762/","zbetcheckin"
+"351762","2020-04-27 02:36:16","http://45.95.55.58/p-p.c-.GHOUL","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351762/","zbetcheckin"
 "351761","2020-04-27 02:36:14","http://23.95.89.78/beastmode/b3astmode.ppc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351761/","zbetcheckin"
 "351760","2020-04-27 02:36:10","http://91.134.252.221/yakuza.i586","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351760/","zbetcheckin"
-"351759","2020-04-27 02:36:08","http://45.95.55.58/i-5.8-6.GHOUL","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351759/","zbetcheckin"
+"351759","2020-04-27 02:36:08","http://45.95.55.58/i-5.8-6.GHOUL","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351759/","zbetcheckin"
 "351758","2020-04-27 02:36:06","http://185.247.118.127/powerpc","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351758/","zbetcheckin"
 "351757","2020-04-27 02:36:04","https://pastebin.com/raw/3euxXyD5","offline","malware_download","None","https://urlhaus.abuse.ch/url/351757/","JayTHL"
 "351756","2020-04-27 02:32:26","http://185.247.118.127/i586","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351756/","zbetcheckin"
 "351755","2020-04-27 02:32:24","http://107.174.24.117/orbitclient.x32","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351755/","zbetcheckin"
 "351754","2020-04-27 02:32:22","http://185.247.118.127/armv4l","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351754/","zbetcheckin"
-"351753","2020-04-27 02:32:20","http://45.95.55.58/s-h.4-.GHOUL","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351753/","zbetcheckin"
+"351753","2020-04-27 02:32:20","http://45.95.55.58/s-h.4-.GHOUL","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351753/","zbetcheckin"
 "351752","2020-04-27 02:32:18","http://185.247.118.127/i686","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351752/","zbetcheckin"
 "351751","2020-04-27 02:32:16","http://185.247.118.127/m68k","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351751/","zbetcheckin"
 "351750","2020-04-27 02:32:14","http://91.134.252.221/yakuza.sh4","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351750/","zbetcheckin"
-"351749","2020-04-27 02:32:12","http://45.95.55.58/m-i.p-s.GHOUL","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351749/","zbetcheckin"
+"351749","2020-04-27 02:32:12","http://45.95.55.58/m-i.p-s.GHOUL","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351749/","zbetcheckin"
 "351748","2020-04-27 02:32:10","http://23.95.89.78/beastmode/b3astmode.mpsl","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351748/","zbetcheckin"
-"351747","2020-04-27 02:32:08","http://45.95.55.58/x-8.6-.GHOUL","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351747/","zbetcheckin"
+"351747","2020-04-27 02:32:08","http://45.95.55.58/x-8.6-.GHOUL","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351747/","zbetcheckin"
 "351746","2020-04-27 02:32:06","http://91.134.252.221/yakuza.x32","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351746/","zbetcheckin"
 "351745","2020-04-27 02:32:04","http://107.174.24.117/orbitclient.i586","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351745/","zbetcheckin"
 "351744","2020-04-27 02:28:22","http://23.95.89.78/beastmode/b3astmode.arm7","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351744/","zbetcheckin"
 "351743","2020-04-27 02:28:19","http://91.134.252.221/yakuza.mpsl","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351743/","zbetcheckin"
-"351742","2020-04-27 02:28:17","http://45.95.55.58/a-r.m-6.GHOUL","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351742/","zbetcheckin"
+"351742","2020-04-27 02:28:17","http://45.95.55.58/a-r.m-6.GHOUL","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351742/","zbetcheckin"
 "351741","2020-04-27 02:28:15","http://107.174.24.117/orbitclient.mips","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351741/","zbetcheckin"
 "351740","2020-04-27 02:28:12","http://185.247.118.127/sh4","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351740/","zbetcheckin"
 "351739","2020-04-27 02:28:10","http://23.95.89.78/beastmode/b3astmode.arm5","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351739/","zbetcheckin"
 "351738","2020-04-27 02:28:07","http://91.134.252.221/yakuza.mips","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351738/","zbetcheckin"
-"351737","2020-04-27 02:28:05","http://45.95.55.58/a-r.m-5.GHOUL","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351737/","zbetcheckin"
+"351737","2020-04-27 02:28:05","http://45.95.55.58/a-r.m-5.GHOUL","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351737/","zbetcheckin"
 "351736","2020-04-27 02:28:04","http://107.174.24.117/orbitclient.arm6","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351736/","zbetcheckin"
 "351735","2020-04-27 02:27:03","http://185.247.118.127/mipsel","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351735/","zbetcheckin"
 "351734","2020-04-27 02:25:15","http://185.247.118.127/x86","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351734/","zbetcheckin"
 "351733","2020-04-27 02:25:13","http://23.95.89.78/beastmode/b3astmode.m68k","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351733/","zbetcheckin"
 "351732","2020-04-27 02:25:10","https://pastebin.com/raw/QutJTFjC","offline","malware_download","None","https://urlhaus.abuse.ch/url/351732/","JayTHL"
-"351731","2020-04-27 02:24:38","http://45.95.55.58/m-6.8-k.GHOUL","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351731/","zbetcheckin"
+"351731","2020-04-27 02:24:38","http://45.95.55.58/m-6.8-k.GHOUL","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351731/","zbetcheckin"
 "351730","2020-04-27 02:24:36","https://pastebin.com/raw/JAbsT5ZU","offline","malware_download","None","https://urlhaus.abuse.ch/url/351730/","JayTHL"
 "351729","2020-04-27 02:24:03","http://23.95.89.78/beastmode/b3astmode.mips","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351729/","zbetcheckin"
 "351728","2020-04-27 02:23:18","http://91.134.252.221/yakuza.arm6","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351728/","zbetcheckin"
 "351727","2020-04-27 02:23:15","http://185.247.118.127/sparc","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351727/","zbetcheckin"
 "351726","2020-04-27 02:23:13","http://23.95.89.78/beastmode/b3astmode.arm","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351726/","zbetcheckin"
-"351725","2020-04-27 02:23:10","http://45.95.55.58/m-p.s-l.GHOUL","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351725/","zbetcheckin"
+"351725","2020-04-27 02:23:10","http://45.95.55.58/m-p.s-l.GHOUL","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351725/","zbetcheckin"
 "351724","2020-04-27 02:23:08","http://107.174.24.117/orbitclient.m68k","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351724/","zbetcheckin"
 "351723","2020-04-27 02:23:04","http://91.209.70.22/Corona.x86_64","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351723/","zbetcheckin"
 "351722","2020-04-27 02:23:02","http://185.247.118.127/mips","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351722/","zbetcheckin"
-"351721","2020-04-27 02:19:18","http://45.95.55.58/a-r.m-7.GHOUL","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351721/","zbetcheckin"
+"351721","2020-04-27 02:19:18","http://45.95.55.58/a-r.m-7.GHOUL","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351721/","zbetcheckin"
 "351720","2020-04-27 02:19:16","http://185.247.118.127/armv6l","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351720/","zbetcheckin"
-"351719","2020-04-27 02:19:14","http://45.95.55.58/x-3.2-.GHOUL","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351719/","zbetcheckin"
+"351719","2020-04-27 02:19:14","http://45.95.55.58/x-3.2-.GHOUL","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351719/","zbetcheckin"
 "351718","2020-04-27 02:19:12","http://107.174.24.117/orbitclient.arm4","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351718/","zbetcheckin"
 "351717","2020-04-27 02:19:10","http://23.95.89.78/beastmode/b3astmode.sh4","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351717/","zbetcheckin"
 "351716","2020-04-27 02:19:08","http://91.134.252.221/yakuza.x86","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351716/","zbetcheckin"
@@ -6435,7 +6660,7 @@
 "351699","2020-04-27 01:41:06","http://91.134.252.221/bins.sh","online","malware_download","shellscript","https://urlhaus.abuse.ch/url/351699/","zbetcheckin"
 "351698","2020-04-27 01:41:04","http://185.247.118.127/AXISbins.sh","offline","malware_download","shellscript","https://urlhaus.abuse.ch/url/351698/","zbetcheckin"
 "351697","2020-04-27 01:41:01","http://91.209.70.22/Corona.arm5","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351697/","zbetcheckin"
-"351696","2020-04-27 01:38:06","http://45.95.55.58/GhOul.sh","offline","malware_download","shellscript","https://urlhaus.abuse.ch/url/351696/","zbetcheckin"
+"351696","2020-04-27 01:38:06","http://45.95.55.58/GhOul.sh","online","malware_download","shellscript","https://urlhaus.abuse.ch/url/351696/","zbetcheckin"
 "351695","2020-04-27 01:38:03","http://91.209.70.22/Corona.arm7","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351695/","zbetcheckin"
 "351694","2020-04-27 01:36:14","http://eytbf.xyz/chrome.apk","offline","malware_download","None","https://urlhaus.abuse.ch/url/351694/","JayTHL"
 "351693","2020-04-27 01:36:11","http://exvxa.xyz/chrome.apk","offline","malware_download","None","https://urlhaus.abuse.ch/url/351693/","JayTHL"
@@ -6599,7 +6824,7 @@
 "351535","2020-04-26 11:25:10","https://cdn.discordapp.com/attachments/703043908958945395/703146782430986361/Valve_Purchase_Order_-_PO_3400448631.gz","offline","malware_download","AgentTesla,gz","https://urlhaus.abuse.ch/url/351535/","abuse_ch"
 "351534","2020-04-26 10:49:02","https://pastebin.com/raw/fGuLigdN","offline","malware_download","None","https://urlhaus.abuse.ch/url/351534/","JayTHL"
 "351533","2020-04-26 10:47:08","https://drive.google.com/uc?export=download&id=1LenovtgyAHBqRMDh4gviDedXsQSxcqnG","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/351533/","lovemalware"
-"351532","2020-04-26 10:46:14","https://onedrive.live.com/download?cid=E61E5F3F655316FA&resid=E61E5F3F655316FA%21125&authkey=AB5cY3xSz3aDDbE","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/351532/","lovemalware"
+"351532","2020-04-26 10:46:14","https://onedrive.live.com/download?cid=E61E5F3F655316FA&resid=E61E5F3F655316FA%21125&authkey=AB5cY3xSz3aDDbE","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/351532/","lovemalware"
 "351531","2020-04-26 10:46:07","http://220.120.114.39:16272/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351531/","geenensp"
 "351530","2020-04-26 10:36:03","https://pastebin.com/raw/JMVCR5sr","offline","malware_download","None","https://urlhaus.abuse.ch/url/351530/","JayTHL"
 "351529","2020-04-26 10:32:13","http://108.77.246.129:55235/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351529/","geenensp"
@@ -6638,7 +6863,7 @@
 "351496","2020-04-26 08:09:13","https://pastebin.com/raw/x2FWDwsg","offline","malware_download","None","https://urlhaus.abuse.ch/url/351496/","JayTHL"
 "351495","2020-04-26 07:44:09","https://pastebin.com/raw/PYksXff9","offline","malware_download","None","https://urlhaus.abuse.ch/url/351495/","JayTHL"
 "351494","2020-04-26 07:44:06","https://pastebin.com/raw/EMAw6Yy7","offline","malware_download","None","https://urlhaus.abuse.ch/url/351494/","JayTHL"
-"351493","2020-04-26 07:43:32","https://onedrive.live.com/download?cid=D06D60404544FB85&resid=D06D60404544FB85%21874&authkey=ALKzCbXZ-dSCGuM","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/351493/","lovemalware"
+"351493","2020-04-26 07:43:32","https://onedrive.live.com/download?cid=D06D60404544FB85&resid=D06D60404544FB85%21874&authkey=ALKzCbXZ-dSCGuM","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/351493/","lovemalware"
 "351492","2020-04-26 07:43:22","https://drive.google.com/uc?export=download&id=1naAOkyOIOFmtWtFge6OWeKJafelD3Jll","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/351492/","lovemalware"
 "351491","2020-04-26 07:43:15","https://onedrive.live.com/download?cid=6CD2E7E257C16E46&resid=6CD2E7E257C16E46%21173&authkey=AK5nXNLF4pJAieU","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/351491/","lovemalware"
 "351490","2020-04-26 07:43:12","https://drive.google.com/uc?export=download&id=1nndvQ_2_7DoYyuqvCVWmOrY_4lyrplB7","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/351490/","lovemalware"
@@ -6651,7 +6876,7 @@
 "351483","2020-04-26 07:28:41","http://165.227.184.147/bins/Hilix.arm6","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351483/","zbetcheckin"
 "351482","2020-04-26 07:28:09","http://165.227.184.147/bins/Hilix.ppc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351482/","zbetcheckin"
 "351481","2020-04-26 07:27:38","http://165.227.184.147/bins/Hilix.arm","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351481/","zbetcheckin"
-"351480","2020-04-26 07:27:06","https://onedrive.live.com/download?cid=7366FEFC2190D2E3&resid=7366FEFC2190D2E3%21207&authkey=AKdm-uaXR7N96rk","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/351480/","lovemalware"
+"351480","2020-04-26 07:27:06","https://onedrive.live.com/download?cid=7366FEFC2190D2E3&resid=7366FEFC2190D2E3%21207&authkey=AKdm-uaXR7N96rk","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/351480/","lovemalware"
 "351479","2020-04-26 07:27:02","http://opulcegino1212.ilawa.pl/sp08042020_encrypted_B61E50F.bin","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/351479/","lovemalware"
 "351478","2020-04-26 07:23:32","http://165.227.184.147/bins/Hilix.arm5","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351478/","zbetcheckin"
 "351477","2020-04-26 07:20:04","https://pastebin.com/raw/VyTBBvUp","offline","malware_download","None","https://urlhaus.abuse.ch/url/351477/","JayTHL"
@@ -6670,16 +6895,16 @@
 "351464","2020-04-26 07:11:04","http://198.98.59.174/ap/ad.mips","offline","malware_download","elf","https://urlhaus.abuse.ch/url/351464/","zbetcheckin"
 "351463","2020-04-26 07:10:32","http://198.98.59.174/ap/ad.arm4","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351463/","zbetcheckin"
 "351462","2020-04-26 07:09:07","http://213.202.255.4/x0ox0ox0oxDefault/z0r0.arm7","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351462/","zbetcheckin"
-"351461","2020-04-26 07:09:05","http://213.202.255.4/x0ox0ox0oxDefault/z0r0.sh4","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351461/","zbetcheckin"
+"351461","2020-04-26 07:09:05","http://213.202.255.4/x0ox0ox0oxDefault/z0r0.sh4","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351461/","zbetcheckin"
 "351460","2020-04-26 07:09:02","http://213.202.255.4/x0ox0ox0oxDefault/z0r0.mips","offline","malware_download","elf","https://urlhaus.abuse.ch/url/351460/","zbetcheckin"
 "351459","2020-04-26 07:08:03","https://pastebin.com/raw/u1M7F3BJ","offline","malware_download","None","https://urlhaus.abuse.ch/url/351459/","JayTHL"
 "351458","2020-04-26 07:07:09","http://198.98.59.174/ap/ad.i686","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351458/","zbetcheckin"
-"351457","2020-04-26 07:06:37","http://213.202.255.4/x0ox0ox0oxDefault/z0r0.spc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351457/","zbetcheckin"
+"351457","2020-04-26 07:06:37","http://213.202.255.4/x0ox0ox0oxDefault/z0r0.spc","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351457/","zbetcheckin"
 "351456","2020-04-26 07:06:35","http://198.98.59.174/ap/ad.mpsl","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351456/","zbetcheckin"
-"351455","2020-04-26 07:06:03","http://213.202.255.4/x0ox0ox0oxDefault/z0r0.mpsl","offline","malware_download","elf","https://urlhaus.abuse.ch/url/351455/","zbetcheckin"
+"351455","2020-04-26 07:06:03","http://213.202.255.4/x0ox0ox0oxDefault/z0r0.mpsl","online","malware_download","elf","https://urlhaus.abuse.ch/url/351455/","zbetcheckin"
 "351454","2020-04-26 07:05:40","http://198.98.59.174/ap/ad.ppc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351454/","zbetcheckin"
 "351453","2020-04-26 07:05:08","http://213.202.255.4/x0ox0ox0oxDefault/z0r0.ppc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351453/","zbetcheckin"
-"351452","2020-04-26 07:05:06","http://213.202.255.4/x0ox0ox0oxDefault/z0r0.m68k","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351452/","zbetcheckin"
+"351452","2020-04-26 07:05:06","http://213.202.255.4/x0ox0ox0oxDefault/z0r0.m68k","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351452/","zbetcheckin"
 "351451","2020-04-26 07:05:03","http://213.202.255.4/x0ox0ox0oxDefault/z0r0.arm6","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351451/","zbetcheckin"
 "351450","2020-04-26 07:02:42","http://198.98.59.174/ap/ad.arm5","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351450/","zbetcheckin"
 "351449","2020-04-26 07:02:10","http://213.202.255.4/x0ox0ox0oxDefault/z0r0.arm","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351449/","zbetcheckin"
@@ -6755,7 +6980,7 @@
 "351379","2020-04-26 03:08:05","http://107.175.36.162/bins/hoho.arm5","offline","malware_download","None","https://urlhaus.abuse.ch/url/351379/","JayTHL"
 "351378","2020-04-26 03:08:03","http://107.175.36.162/bins/hoho.arm","offline","malware_download","None","https://urlhaus.abuse.ch/url/351378/","JayTHL"
 "351377","2020-04-26 03:07:17","http://61.53.239.70:45057/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351377/","Gandylyan1"
-"351376","2020-04-26 03:07:12","http://114.226.81.92:54707/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351376/","Gandylyan1"
+"351376","2020-04-26 03:07:12","http://114.226.81.92:54707/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351376/","Gandylyan1"
 "351375","2020-04-26 03:07:08","http://218.21.170.44:60893/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351375/","Gandylyan1"
 "351374","2020-04-26 03:07:05","http://42.231.97.164:54545/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351374/","Gandylyan1"
 "351373","2020-04-26 03:07:00","http://162.212.114.104:59479/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351373/","Gandylyan1"
@@ -6990,7 +7215,7 @@
 "351144","2020-04-25 14:12:03","http://91.177.139.132:14677/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351144/","geenensp"
 "351143","2020-04-25 14:01:10","https://pastebin.com/raw/n4pq0gRF","offline","malware_download","None","https://urlhaus.abuse.ch/url/351143/","JayTHL"
 "351142","2020-04-25 13:54:11","http://27.206.66.103:34642/Mozi.a","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351142/","zbetcheckin"
-"351141","2020-04-25 13:54:05","http://121.135.146.40:1560/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/351141/","zbetcheckin"
+"351141","2020-04-25 13:54:05","http://121.135.146.40:1560/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/351141/","zbetcheckin"
 "351140","2020-04-25 13:53:03","http://88.218.16.38/z1cPlpf1xVadcBD.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/351140/","abuse_ch"
 "351139","2020-04-25 13:36:05","https://pastebin.com/raw/zYu4pmhT","offline","malware_download","None","https://urlhaus.abuse.ch/url/351139/","JayTHL"
 "351138","2020-04-25 12:59:33","https://pastebin.com/raw/FkvqkQTD","offline","malware_download","None","https://urlhaus.abuse.ch/url/351138/","JayTHL"
@@ -7313,9 +7538,9 @@
 "350821","2020-04-24 22:54:03","http://178.128.242.198/Pandoras_Box/pandora.arm","offline","malware_download","None","https://urlhaus.abuse.ch/url/350821/","JayTHL"
 "350820","2020-04-24 22:20:07","http://114.35.158.123:54597/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/350820/","zbetcheckin"
 "350819","2020-04-24 22:12:08","http://auxilioenergiacovid19.com/LoadMain.dll","offline","malware_download","exe","https://urlhaus.abuse.ch/url/350819/","zbetcheckin"
-"350818","2020-04-24 21:44:06","https://zethla.com/wp-content/themes/calliope/docs_osb/61488/Buy-Sell%20Agreement_61488_04232020.zip","online","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350818/","malware_traffic"
+"350818","2020-04-24 21:44:06","https://zethla.com/wp-content/themes/calliope/docs_osb/61488/Buy-Sell%20Agreement_61488_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350818/","malware_traffic"
 "350817","2020-04-24 21:43:09","http://https:/zethla.com/wp-content/themes/calliope/docs_osb/3242815/Buy-Sell%20Agreement_3242815_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350817/","malware_traffic"
-"350816","2020-04-24 21:43:07","https://zethla.com/wp-content/themes/calliope/docs_osb/3242815/Buy-Sell%20Agreement_3242815_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350816/","malware_traffic"
+"350816","2020-04-24 21:43:07","https://zethla.com/wp-content/themes/calliope/docs_osb/3242815/Buy-Sell%20Agreement_3242815_04232020.zip","online","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350816/","malware_traffic"
 "350815","2020-04-24 21:42:52","https://www.qelie.com/wp-content/docs_q30/19188/Buy-Sell%20Agreement_19188_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350815/","malware_traffic"
 "350814","2020-04-24 21:42:47","https://www.e24bay.in/docs_6su/Buy-Sell%20Agreement_683710_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350814/","malware_traffic"
 "350813","2020-04-24 21:42:45","https://www.e24bay.in/docs_6su/Buy-Sell%20Agreement_30590_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350813/","malware_traffic"
@@ -7327,7 +7552,7 @@
 "350807","2020-04-24 21:42:18","https://serviciosinfoware.cl/docs_846/Buy-Sell%20Agreement_14067_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350807/","malware_traffic"
 "350806","2020-04-24 21:42:15","https://serviciosinfoware.cl/docs_846/8289510/Buy-Sell%20Agreement_8289510_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350806/","malware_traffic"
 "350805","2020-04-24 21:42:09","https://seibee.biz/docs_3z8/976048239/Buy-Sell%20Agreement_976048239_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350805/","malware_traffic"
-"350804","2020-04-24 21:42:00","https://redeemerssports.com/wp-content/themes/calliope/docs_i4t/6737406/Buy-Sell%20Agreement_6737406_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350804/","malware_traffic"
+"350804","2020-04-24 21:42:00","https://redeemerssports.com/wp-content/themes/calliope/docs_i4t/6737406/Buy-Sell%20Agreement_6737406_04232020.zip","online","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350804/","malware_traffic"
 "350803","2020-04-24 21:41:57","https://redeemerssports.com/wp-content/themes/calliope/docs_i4t/346947/Buy-Sell%20Agreement_346947_04232020.zip","online","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350803/","malware_traffic"
 "350802","2020-04-24 21:41:51","https://melusinkiwane.com/docs_c95/Buy-Sell%20Agreement_615778_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350802/","malware_traffic"
 "350801","2020-04-24 21:41:49","https://melusinkiwane.com/docs_c95/87464/Buy-Sell%20Agreement_87464_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350801/","malware_traffic"
@@ -7363,8 +7588,8 @@
 "350771","2020-04-24 21:38:31","http://gestoriagyg.com.mx/wp-content/plugins/apikey/docs_twh/Buy-Sell%20Agreement_6319074_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350771/","malware_traffic"
 "350770","2020-04-24 21:38:27","http://flowesie.fr/wp-content/uploads/2020/04/docs_91y/Buy-Sell%20Agreement_3875935_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350770/","malware_traffic"
 "350769","2020-04-24 21:38:23","http://flowesie.fr/wp-content/uploads/2020/04/docs_91y/47396/Buy-Sell%20Agreement_47396_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350769/","malware_traffic"
-"350768","2020-04-24 21:38:21","http://bxbx28.cn/wp-content/plugins/apikey/docs_1fc/Buy-Sell%20Agreement_341946123_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350768/","malware_traffic"
-"350767","2020-04-24 21:38:12","http://bxbx28.cn/wp-content/plugins/apikey/docs_1fc/Buy-Sell%20Agreement_261264_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350767/","malware_traffic"
+"350768","2020-04-24 21:38:21","http://bxbx28.cn/wp-content/plugins/apikey/docs_1fc/Buy-Sell%20Agreement_341946123_04232020.zip","online","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350768/","malware_traffic"
+"350767","2020-04-24 21:38:12","http://bxbx28.cn/wp-content/plugins/apikey/docs_1fc/Buy-Sell%20Agreement_261264_04232020.zip","online","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350767/","malware_traffic"
 "350766","2020-04-24 21:38:07","http://bxbx28.cn/wp-content/plugins/apikey/docs_1fc/6614881/Buy-Sell%20Agreement_6614881_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350766/","malware_traffic"
 "350765","2020-04-24 21:06:04","http://172.39.76.165:33406/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/350765/","Gandylyan1"
 "350764","2020-04-24 21:05:32","http://111.42.66.146:34789/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/350764/","Gandylyan1"
@@ -7475,7 +7700,7 @@
 "350658","2020-04-24 15:12:08","http://wmwifbajxxbcxmucxmlc.com/files/april24.dll","offline","malware_download","dll,zloader","https://urlhaus.abuse.ch/url/350658/","abuse_ch"
 "350657","2020-04-24 15:07:21","http://115.58.105.197:33132/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/350657/","Gandylyan1"
 "350656","2020-04-24 15:07:13","http://221.210.211.30:57728/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/350656/","Gandylyan1"
-"350655","2020-04-24 15:07:10","http://117.55.133.56:44802/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/350655/","geenensp"
+"350655","2020-04-24 15:07:10","http://117.55.133.56:44802/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/350655/","geenensp"
 "350654","2020-04-24 15:06:39","http://182.127.208.131:37243/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/350654/","Gandylyan1"
 "350653","2020-04-24 15:06:23","http://49.89.195.43:40712/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/350653/","Gandylyan1"
 "350652","2020-04-24 15:06:11","http://111.42.102.78:34552/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/350652/","Gandylyan1"
@@ -7598,7 +7823,7 @@
 "350535","2020-04-24 09:30:38","http://kal20gb.site/GooglePlay.apk","offline","malware_download","apk ,Cerberus","https://urlhaus.abuse.ch/url/350535/","mertcangokgoz"
 "350534","2020-04-24 09:12:06","http://kazankazan20gb.com/kazan20gb.apk","offline","malware_download","apk ,Cerberus","https://urlhaus.abuse.ch/url/350534/","mertcangokgoz"
 "350533","2020-04-24 09:08:09","http://52d043de7c7accd8.com/y2.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/350533/","abuse_ch"
-"350532","2020-04-24 09:08:04","http://88.218.16.37/EocJyfwjX51UduQ.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/350532/","cocaman"
+"350532","2020-04-24 09:08:04","http://88.218.16.37/EocJyfwjX51UduQ.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/350532/","cocaman"
 "350531","2020-04-24 09:06:39","http://evdekalana20gb-hehe.com/20gb_hediye_internet.apk","offline","malware_download","anubis,apk ","https://urlhaus.abuse.ch/url/350531/","mertcangokgoz"
 "350530","2020-04-24 09:06:35","http://80.211.110.143:1691/dvrbot.arm7","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/350530/","zbetcheckin"
 "350529","2020-04-24 09:06:33","http://45.95.168.202/snype.ppc","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350529/","zbetcheckin"
@@ -7615,7 +7840,7 @@
 "350518","2020-04-24 09:05:56","http://221.210.211.7:38126/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/350518/","Gandylyan1"
 "350517","2020-04-24 09:05:52","http://115.54.168.18:52267/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/350517/","Gandylyan1"
 "350516","2020-04-24 09:05:45","http://27.41.216.113:39637/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/350516/","Gandylyan1"
-"350515","2020-04-24 09:05:41","http://58.243.190.127:56985/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/350515/","Gandylyan1"
+"350515","2020-04-24 09:05:41","http://58.243.190.127:56985/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/350515/","Gandylyan1"
 "350514","2020-04-24 09:05:37","http://123.11.76.92:56182/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/350514/","Gandylyan1"
 "350513","2020-04-24 09:05:32","http://111.43.223.145:54157/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/350513/","Gandylyan1"
 "350512","2020-04-24 09:05:27","http://180.124.129.94:55049/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/350512/","Gandylyan1"
@@ -9008,7 +9233,7 @@
 "349117","2020-04-23 20:58:03","https://onedrive.live.com/download?cid=FF1D187273DFBF73&resid=FF1D187273DFBF73!693&authkey=AGcpKHnEWFTE_Yc","online","malware_download","None","https://urlhaus.abuse.ch/url/349117/","JayTHL"
 "349116","2020-04-23 20:57:30","https://onedrive.live.com/download?cid=F293CEBB54E5EA71&resid=F293CEBB54E5EA71!195&authkey=AB6tMixR6iRg3d0","offline","malware_download","None","https://urlhaus.abuse.ch/url/349116/","JayTHL"
 "349115","2020-04-23 20:56:58","https://onedrive.live.com/download?cid=EAE9B5435CFAEBAA&resid=EAE9B5435CFAEBAA!232&authkey=AAuY9sGJCcGPZX8","online","malware_download","None","https://urlhaus.abuse.ch/url/349115/","JayTHL"
-"349114","2020-04-23 20:56:25","https://onedrive.live.com/download?cid=E61E5F3F655316FA&resid=E61E5F3F655316FA!124&authkey=ADKlC5yRN_vbmt8","online","malware_download","None","https://urlhaus.abuse.ch/url/349114/","JayTHL"
+"349114","2020-04-23 20:56:25","https://onedrive.live.com/download?cid=E61E5F3F655316FA&resid=E61E5F3F655316FA!124&authkey=ADKlC5yRN_vbmt8","offline","malware_download","None","https://urlhaus.abuse.ch/url/349114/","JayTHL"
 "349113","2020-04-23 20:55:51","https://onedrive.live.com/download?cid=D5825CD44FFD03A7&resid=D5825CD44FFD03A7!841&authkey=AJahuq67BKwKerk","offline","malware_download","None","https://urlhaus.abuse.ch/url/349113/","JayTHL"
 "349112","2020-04-23 20:55:19","https://onedrive.live.com/download?cid=D06D60404544FB85&resid=D06D60404544FB85!875&authkey=AKa55YbDhQNOC6c","online","malware_download","None","https://urlhaus.abuse.ch/url/349112/","JayTHL"
 "349111","2020-04-23 20:54:45","https://onedrive.live.com/download?cid=D06D60404544FB85&resid=D06D60404544FB85!872&authkey=AP9HcHZTYWO8ZUo","online","malware_download","None","https://urlhaus.abuse.ch/url/349111/","JayTHL"
@@ -9031,7 +9256,7 @@
 "349094","2020-04-23 20:50:13","https://onedrive.live.com/download?cid=4DF11EDA676A355F&resid=4DF11EDA676A355F!130&authkey=!AKd6uxvLjTLVpxU","online","malware_download","None","https://urlhaus.abuse.ch/url/349094/","JayTHL"
 "349093","2020-04-23 20:50:10","https://onedrive.live.com/download?cid=4B676EA3FF139B93&resid=4B676EA3FF139B93!133&authkey=AMfIx63GLyTFLGo","online","malware_download","None","https://urlhaus.abuse.ch/url/349093/","JayTHL"
 "349092","2020-04-23 20:49:55","https://onedrive.live.com/download?cid=41F2978DA9CE0256&resid=41F2978DA9CE0256!113&authkey=AEOaNIW0sQpOAcU","online","malware_download","None","https://urlhaus.abuse.ch/url/349092/","JayTHL"
-"349091","2020-04-23 20:49:46","https://onedrive.live.com/download?cid=18418ADACEFED6E2&resid=18418ADACEFED6E2!129&authkey=APQOONsrCe0ArI4","online","malware_download","None","https://urlhaus.abuse.ch/url/349091/","JayTHL"
+"349091","2020-04-23 20:49:46","https://onedrive.live.com/download?cid=18418ADACEFED6E2&resid=18418ADACEFED6E2!129&authkey=APQOONsrCe0ArI4","offline","malware_download","None","https://urlhaus.abuse.ch/url/349091/","JayTHL"
 "349090","2020-04-23 20:49:35","https://onedrive.live.com/download?cid=15128527F18DE6B7&resid=15128527F18DE6B7!107&authkey=!ALYQ3vqt_d-o4n4","offline","malware_download","None","https://urlhaus.abuse.ch/url/349090/","JayTHL"
 "349089","2020-04-23 20:49:32","https://onedrive.live.com/download?cid=1164EA2B0783A793&resid=1164EA2B0783A793!128&authkey=AOoJuE9Aw_IzFkA","online","malware_download","None","https://urlhaus.abuse.ch/url/349089/","JayTHL"
 "349088","2020-04-23 20:49:28","https://onedrive.live.com/download?cid=0C707F50E538E089&resid=C707F50E538E089!108&authkey=AFlvxX6otk0Mz4Q","offline","malware_download","None","https://urlhaus.abuse.ch/url/349088/","JayTHL"
@@ -9069,7 +9294,7 @@
 "349056","2020-04-23 18:03:40","http://61.53.121.31:44611/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/349056/","Gandylyan1"
 "349055","2020-04-23 18:03:36","http://checktime.pk/br.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/349055/","abuse_ch"
 "349054","2020-04-23 18:00:38","https://theholistictraineruncut.com/Jhas.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/349054/","abuse_ch"
-"349053","2020-04-23 17:56:05","http://197.51.235.38:37532/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/349053/","geenensp"
+"349053","2020-04-23 17:56:05","http://197.51.235.38:37532/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/349053/","geenensp"
 "349052","2020-04-23 17:49:10","http://139.99.236.237/bins/Hilix.spc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/349052/","zbetcheckin"
 "349051","2020-04-23 17:49:07","http://162.250.126.186/bins/kalon.spc","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/349051/","zbetcheckin"
 "349050","2020-04-23 17:49:05","http://107.158.154.94/beastmode/b3astmode.arm6","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/349050/","zbetcheckin"
@@ -9274,7 +9499,7 @@
 "348851","2020-04-23 13:12:21","https://drive.google.com/uc?export=download&id=1B1hE5bfX_Ev6U7OQomOYnY9XI4XLWVq0","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348851/","lovemalware"
 "348850","2020-04-23 13:12:18","https://drive.google.com/uc?export=download&id=1vJM9j2aZY_wJvEJPQ6K_nqZGrobhGuHP","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348850/","lovemalware"
 "348849","2020-04-23 13:12:07","https://beeps.my/css/files/ol-wp_encrypted_26B1A80.bin","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348849/","lovemalware"
-"348848","2020-04-23 13:12:04","https://onedrive.live.com/download?cid=01F191D863B4D5A4&resid=1F191D863B4D5A4%21158&authkey=AMsoii5Nr6PomHc","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348848/","lovemalware"
+"348848","2020-04-23 13:12:04","https://onedrive.live.com/download?cid=01F191D863B4D5A4&resid=1F191D863B4D5A4%21158&authkey=AMsoii5Nr6PomHc","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348848/","lovemalware"
 "348847","2020-04-23 13:11:43","http://170.130.172.42/kratos.x86","offline","malware_download","64-bit,elf,x86-64","https://urlhaus.abuse.ch/url/348847/","geenensp"
 "348846","2020-04-23 13:11:40","http://107.172.157.176/arm5","offline","malware_download","elf","https://urlhaus.abuse.ch/url/348846/","hypoweb"
 "348845","2020-04-23 13:11:38","http://107.172.157.176/arm4","offline","malware_download","elf","https://urlhaus.abuse.ch/url/348845/","hypoweb"
@@ -9486,7 +9711,7 @@
 "348638","2020-04-23 06:42:11","https://drive.google.com/uc?export=download&id=1n6vwEhBTiK-gkqz5fVqPagDtz3fUYPdj","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348638/","lovemalware"
 "348637","2020-04-23 06:22:15","https://www.igrejayhwh.com/wo/newbackomo_encrypted_13CF940.bin","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348637/","lovemalware"
 "348636","2020-04-23 06:21:11","https://drive.google.com/uc?export=download&id=1aRM9yUylrkcQUb4aIsXHn4WuzZF95byX","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348636/","lovemalware"
-"348635","2020-04-23 06:21:04","https://onedrive.live.com/download?cid=7366FEFC2190D2E3&resid=7366FEFC2190D2E3%21195&authkey=AG9WIgSqvGrNwdI","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348635/","lovemalware"
+"348635","2020-04-23 06:21:04","https://onedrive.live.com/download?cid=7366FEFC2190D2E3&resid=7366FEFC2190D2E3%21195&authkey=AG9WIgSqvGrNwdI","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348635/","lovemalware"
 "348634","2020-04-23 06:20:24","http://121.186.105.200:43951/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348634/","geenensp"
 "348633","2020-04-23 06:20:19","https://drive.google.com/uc?export=download&id=15_2qc-PMvZLt1gMfLtB3Jd5TKpqWSKxR","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348633/","lovemalware"
 "348632","2020-04-23 06:19:38","https://drive.google.com/uc?export=download&id=1Iy1vilczX904GPDd_AILSDY1mPYG9aVu","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348632/","lovemalware"
@@ -9561,7 +9786,7 @@
 "348563","2020-04-23 05:41:21","http://51.178.81.75/mips","offline","malware_download","elf,gafgyt","https://urlhaus.abuse.ch/url/348563/","hypoweb"
 "348562","2020-04-23 05:41:19","http://121.136.137.7:19702/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348562/","geenensp"
 "348561","2020-04-23 05:41:14","http://193.56.28.192/microsoft.vbs","offline","malware_download","RevengeRAT,wshrat","https://urlhaus.abuse.ch/url/348561/","0xCARNAGE"
-"348560","2020-04-23 05:41:11","http://5.185.85.122:59374/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348560/","geenensp"
+"348560","2020-04-23 05:41:11","http://5.185.85.122:59374/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348560/","geenensp"
 "348559","2020-04-23 05:40:10","http://175.215.226.31:46507/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348559/","geenensp"
 "348558","2020-04-23 05:40:06","http://187.172.131.1:31783/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348558/","geenensp"
 "348557","2020-04-23 04:54:07","http://179.43.149.178/Bleach.arm4t","offline","malware_download","elf,tsunami","https://urlhaus.abuse.ch/url/348557/","zbetcheckin"
@@ -9578,7 +9803,7 @@
 "348546","2020-04-23 04:46:02","http://179.43.149.178/Bleach.mips","offline","malware_download","elf,tsunami","https://urlhaus.abuse.ch/url/348546/","zbetcheckin"
 "348545","2020-04-23 04:42:06","http://179.43.149.178/bins.sh","offline","malware_download","shellscript","https://urlhaus.abuse.ch/url/348545/","zbetcheckin"
 "348544","2020-04-23 04:42:02","http://155.138.234.174/axisbins.sh","offline","malware_download","shellscript","https://urlhaus.abuse.ch/url/348544/","zbetcheckin"
-"348543","2020-04-23 03:04:34","http://106.124.188.160:36796/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348543/","Gandylyan1"
+"348543","2020-04-23 03:04:34","http://106.124.188.160:36796/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348543/","Gandylyan1"
 "348542","2020-04-23 03:04:29","http://222.140.152.168:52778/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348542/","Gandylyan1"
 "348541","2020-04-23 03:04:25","http://123.8.11.108:40582/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348541/","Gandylyan1"
 "348540","2020-04-23 03:04:20","http://199.83.203.59:40346/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348540/","Gandylyan1"
@@ -9659,7 +9884,7 @@
 "348465","2020-04-22 21:04:41","http://125.45.122.62:60492/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348465/","Gandylyan1"
 "348464","2020-04-22 21:04:37","http://221.210.211.16:50436/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348464/","Gandylyan1"
 "348463","2020-04-22 21:04:34","http://182.123.195.110:58449/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348463/","Gandylyan1"
-"348462","2020-04-22 21:04:30","http://180.115.66.239:57055/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348462/","Gandylyan1"
+"348462","2020-04-22 21:04:30","http://180.115.66.239:57055/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348462/","Gandylyan1"
 "348461","2020-04-22 21:04:24","http://39.148.50.71:55559/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348461/","Gandylyan1"
 "348460","2020-04-22 21:04:21","http://123.8.63.163:46427/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348460/","Gandylyan1"
 "348459","2020-04-22 21:04:17","http://112.17.163.139:44455/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348459/","Gandylyan1"
@@ -9717,7 +9942,7 @@
 "348406","2020-04-22 18:15:47","http://longform.harker.org/wp-content/themes/mapro/pump/Judgement_04212020_9352.zip","offline","malware_download","Qakbot,qbot,spx102,zip","https://urlhaus.abuse.ch/url/348406/","malware_traffic"
 "348405","2020-04-22 18:15:38","http://longform.harker.org/wp-content/themes/mapro/pump/Judgement_04212020_3626.zip","offline","malware_download","Qakbot,qbot,spx102,zip","https://urlhaus.abuse.ch/url/348405/","malware_traffic"
 "348404","2020-04-22 18:15:33","http://longform.harker.org/wp-content/themes/mapro/pump/2495/Judgement_04212020_2495.zip","offline","malware_download","Qakbot,qbot,spx102,zip","https://urlhaus.abuse.ch/url/348404/","malware_traffic"
-"348403","2020-04-22 18:14:54","http://garage.themebuffets.com/wp-content/themes/mapro/pump/0416/judgement_04212020_0416.zip","offline","malware_download","Qakbot,qbot,spx102,zip","https://urlhaus.abuse.ch/url/348403/","malware_traffic"
+"348403","2020-04-22 18:14:54","http://garage.themebuffets.com/wp-content/themes/mapro/pump/0416/judgement_04212020_0416.zip","online","malware_download","Qakbot,qbot,spx102,zip","https://urlhaus.abuse.ch/url/348403/","malware_traffic"
 "348402","2020-04-22 18:14:19","http://cirkuscloudhosting.site/wp-content/themes/mapro/pump/Judgement_04212020_4918.zip","offline","malware_download","Qakbot,qbot,spx102,zip","https://urlhaus.abuse.ch/url/348402/","malware_traffic"
 "348401","2020-04-22 18:13:45","http://cirkuscloudhosting.site/wp-content/themes/mapro/pump/Judgement_04212020_2975.zip","offline","malware_download","Qakbot,qbot,spx102,zip","https://urlhaus.abuse.ch/url/348401/","malware_traffic"
 "348400","2020-04-22 18:13:10","http://cirkuscloudhosting.site/wp-content/themes/mapro/pump/1529/Judgement_04212020_1529.zip","offline","malware_download","Qakbot,qbot,spx102,zip","https://urlhaus.abuse.ch/url/348400/","malware_traffic"
@@ -9729,7 +9954,7 @@
 "348394","2020-04-22 18:04:23","http://125.45.174.15:39043/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348394/","Gandylyan1"
 "348393","2020-04-22 18:04:16","http://172.39.13.104:43373/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348393/","Gandylyan1"
 "348392","2020-04-22 18:03:44","http://112.27.91.247:52286/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348392/","Gandylyan1"
-"348391","2020-04-22 18:03:37","http://180.116.17.37:35098/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348391/","Gandylyan1"
+"348391","2020-04-22 18:03:37","http://180.116.17.37:35098/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348391/","Gandylyan1"
 "348390","2020-04-22 18:03:33","http://182.112.5.58:36134/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348390/","Gandylyan1"
 "348389","2020-04-22 18:03:28","http://218.21.170.85:43670/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348389/","Gandylyan1"
 "348388","2020-04-22 18:03:24","http://111.43.223.52:59909/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348388/","Gandylyan1"
@@ -9766,7 +9991,7 @@
 "348357","2020-04-22 15:51:04","http://64.225.53.49/x86","offline","malware_download","64-bit,elf,x86-64","https://urlhaus.abuse.ch/url/348357/","geenensp"
 "348356","2020-04-22 15:48:14","https://update-adobe.dsapq.com/UpdAdobePlayer.v11.5.1.apk","offline","malware_download","None","https://urlhaus.abuse.ch/url/348356/","JayTHL"
 "348355","2020-04-22 15:41:37","http://tcdrill-71.cf/ghhg.exe","offline","malware_download","Formbook","https://urlhaus.abuse.ch/url/348355/","JayTHL"
-"348354","2020-04-22 15:30:22","http://petromltd.com/","offline","malware_download","None","https://urlhaus.abuse.ch/url/348354/","JayTHL"
+"348354","2020-04-22 15:30:22","http://petromltd.com/","online","malware_download","None","https://urlhaus.abuse.ch/url/348354/","JayTHL"
 "348353","2020-04-22 15:30:18","http://petromltd.com/Preview.PDF.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/348353/","JayTHL"
 "348352","2020-04-22 15:27:07","http://178.216.110.171:44242/","offline","malware_download","None","https://urlhaus.abuse.ch/url/348352/","JayTHL"
 "348351","2020-04-22 15:27:04","http://178.216.110.171:44242/i","offline","malware_download","None","https://urlhaus.abuse.ch/url/348351/","JayTHL"
@@ -9942,15 +10167,15 @@
 "348181","2020-04-22 14:08:08","http://42.113.104.40:10796/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348181/","geenensp"
 "348180","2020-04-22 14:03:05","http://173.168.197.166:4638/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348180/","geenensp"
 "348179","2020-04-22 13:35:05","http://206.189.142.52/test.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/348179/","zbetcheckin"
-"348178","2020-04-22 13:23:41","http://modcloudserver.eu/anandz/anandz.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/348178/","zbetcheckin"
-"348177","2020-04-22 13:23:09","http://modcloudserver.eu/cafilez/cafilez.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/348177/","zbetcheckin"
+"348178","2020-04-22 13:23:41","http://modcloudserver.eu/anandz/anandz.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/348178/","zbetcheckin"
+"348177","2020-04-22 13:23:09","http://modcloudserver.eu/cafilez/cafilez.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/348177/","zbetcheckin"
 "348176","2020-04-22 13:23:03","https://paste.ee/r/SdssK","offline","malware_download","Encoded","https://urlhaus.abuse.ch/url/348176/","abuse_ch"
 "348175","2020-04-22 13:20:19","http://quecik.com/j1x/1447032.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/348175/","zbetcheckin"
-"348174","2020-04-22 13:20:15","http://modcloudserver.eu/uzmod2/uzmod2.exe","online","malware_download","exe,Formbook","https://urlhaus.abuse.ch/url/348174/","zbetcheckin"
-"348173","2020-04-22 13:19:39","http://modcloudserver.eu/nwamaz/nwamaz.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/348173/","zbetcheckin"
+"348174","2020-04-22 13:20:15","http://modcloudserver.eu/uzmod2/uzmod2.exe","offline","malware_download","exe,Formbook","https://urlhaus.abuse.ch/url/348174/","zbetcheckin"
+"348173","2020-04-22 13:19:39","http://modcloudserver.eu/nwamaz/nwamaz.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/348173/","zbetcheckin"
 "348172","2020-04-22 13:19:07","http://quecik.com/j1x/1856137.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/348172/","zbetcheckin"
 "348171","2020-04-22 13:16:07","http://www.apexsruveyors.com/date/eat.png","offline","malware_download","exe,NanoCore,rat","https://urlhaus.abuse.ch/url/348171/","abuse_ch"
-"348170","2020-04-22 13:15:44","http://modcloudserver.eu/uzmod1/uzmod1.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/348170/","zbetcheckin"
+"348170","2020-04-22 13:15:44","http://modcloudserver.eu/uzmod1/uzmod1.exe","online","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/348170/","zbetcheckin"
 "348169","2020-04-22 13:15:06","http://cloudcast.best/d5c65ad6c021ab6adcf98a48b62e294c/updateprofile.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/348169/","zbetcheckin"
 "348168","2020-04-22 13:06:04","http://russchine2specialstdy7plumbingmaterialmk.duckdns.org/russdoc/regasm.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/348168/","gorimpthon"
 "348167","2020-04-22 13:06:03","http://cheshirecheetah.com/wp-content/themes/mapro/pump/55555.png","offline","malware_download","exe,Qakbot,Quakbot,spx102","https://urlhaus.abuse.ch/url/348167/","lazyactivist192"
@@ -9980,7 +10205,7 @@
 "348143","2020-04-22 12:01:05","http://misty-beppu-9627.lovesick.jp/ERC/EIC.exe","offline","malware_download","exe,Trickbot","https://urlhaus.abuse.ch/url/348143/","zbetcheckin"
 "348142","2020-04-22 11:57:48","http://misty-beppu-9627.lovesick.jp/Img/CIC.exe","offline","malware_download","exe,Trickbot","https://urlhaus.abuse.ch/url/348142/","zbetcheckin"
 "348141","2020-04-22 11:57:43","https://petromltd.com/Preview.PDF.exe","offline","malware_download"," 2020-04-22,Trickbot","https://urlhaus.abuse.ch/url/348141/","anonymous"
-"348140","2020-04-22 11:57:32","http://modcloudserver.eu/damiano/damiano.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/348140/","DanielStepanic"
+"348140","2020-04-22 11:57:32","http://modcloudserver.eu/damiano/damiano.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/348140/","DanielStepanic"
 "348139","2020-04-22 11:53:07","https://drive.google.com/uc?export=download&id=17BWiKHlfcejUbmN-vR5GRCXiHK4aZ5eh","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/348139/","abuse_ch"
 "348138","2020-04-22 11:49:06","http://quecik.com/j1x/6010277.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/348138/","abuse_ch"
 "348137","2020-04-22 11:46:06","http://139.99.180.76/bins/arm","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/348137/","zbetcheckin"
@@ -10008,7 +10233,7 @@
 "348115","2020-04-22 09:29:06","http://clubemacae1.com.br/braga/b.jpg","offline","malware_download","RevengeRAT","https://urlhaus.abuse.ch/url/348115/","anonymous"
 "348114","2020-04-22 09:27:03","http://78.159.97.56/bins/x86","online","malware_download","32-bit,elf,x86-32","https://urlhaus.abuse.ch/url/348114/","geenensp"
 "348113","2020-04-22 09:11:25","https://13pope.com/wrd/troll.exe","online","malware_download","None","https://urlhaus.abuse.ch/url/348113/","cyber__sloth"
-"348112","2020-04-22 09:11:22","https://13pope.com/wrd/order_evoucher.exe","offline","malware_download","NanoCore","https://urlhaus.abuse.ch/url/348112/","cyber__sloth"
+"348112","2020-04-22 09:11:22","https://13pope.com/wrd/order_evoucher.exe","online","malware_download","NanoCore","https://urlhaus.abuse.ch/url/348112/","cyber__sloth"
 "348111","2020-04-22 09:11:07","https://13pope.com/wrd/receipt.exe","online","malware_download","NanoCore","https://urlhaus.abuse.ch/url/348111/","cyber__sloth"
 "348110","2020-04-22 09:09:07","http://115.49.229.3:59666/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348110/","Gandylyan1"
 "348109","2020-04-22 09:09:03","http://182.116.45.90:43512/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348109/","Gandylyan1"
@@ -10036,7 +10261,7 @@
 "348087","2020-04-22 09:04:14","http://111.43.223.86:56363/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348087/","Gandylyan1"
 "348086","2020-04-22 09:04:11","http://116.114.95.108:56841/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348086/","Gandylyan1"
 "348085","2020-04-22 09:04:08","http://222.136.253.78:34373/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348085/","Gandylyan1"
-"348084","2020-04-22 08:54:33","http://dhlservices.duckdns.org/DHL/Receipt%20Address%20Confirmation%20(Please%20Sign)_Pdf.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/348084/","zbetcheckin"
+"348084","2020-04-22 08:54:33","http://dhlservices.duckdns.org/DHL/Receipt%20Address%20Confirmation%20(Please%20Sign)_Pdf.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/348084/","zbetcheckin"
 "348083","2020-04-22 08:37:21","http://103.60.110.111:443/ma/fdlaunchera.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/348083/","zbetcheckin"
 "348082","2020-04-22 08:37:18","http://103.60.110.111:443/ma/ReportServser.exe","online","malware_download","CoinMiner,exe","https://urlhaus.abuse.ch/url/348082/","zbetcheckin"
 "348081","2020-04-22 08:37:10","http://hotgifts.online/app/watchdog.exe","offline","malware_download","exe,glupteba","https://urlhaus.abuse.ch/url/348081/","zbetcheckin"
@@ -10134,7 +10359,7 @@
 "347989","2020-04-22 06:06:14","http://211.137.225.113:43476/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347989/","Gandylyan1"
 "347988","2020-04-22 06:05:43","http://123.11.76.85:52757/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347988/","Gandylyan1"
 "347987","2020-04-22 06:05:38","http://219.155.211.147:39125/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347987/","Gandylyan1"
-"347986","2020-04-22 06:05:35","http://117.123.171.105:55768/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347986/","Gandylyan1"
+"347986","2020-04-22 06:05:35","http://117.123.171.105:55768/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347986/","Gandylyan1"
 "347985","2020-04-22 06:05:30","http://111.43.223.60:35002/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347985/","Gandylyan1"
 "347984","2020-04-22 06:05:26","http://221.210.211.9:35459/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347984/","Gandylyan1"
 "347983","2020-04-22 06:05:22","http://45.3.8.36:48928/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347983/","Gandylyan1"
@@ -10209,7 +10434,7 @@
 "347914","2020-04-22 03:06:58","http://182.112.9.3:45291/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347914/","Gandylyan1"
 "347913","2020-04-22 03:06:26","http://36.35.161.232:33136/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347913/","Gandylyan1"
 "347912","2020-04-22 03:05:54","http://172.36.35.164:57514/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347912/","Gandylyan1"
-"347911","2020-04-22 03:05:22","http://117.95.226.223:57324/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347911/","Gandylyan1"
+"347911","2020-04-22 03:05:22","http://117.95.226.223:57324/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347911/","Gandylyan1"
 "347910","2020-04-22 03:04:50","http://124.230.96.27:54927/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347910/","Gandylyan1"
 "347909","2020-04-22 03:04:44","http://125.45.79.19:51369/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347909/","Gandylyan1"
 "347908","2020-04-22 03:04:40","http://199.83.203.82:54747/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347908/","Gandylyan1"
@@ -10265,7 +10490,7 @@
 "347858","2020-04-22 00:05:15","http://173.15.162.146:4217/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347858/","Gandylyan1"
 "347857","2020-04-22 00:05:12","http://219.155.98.182:51850/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347857/","Gandylyan1"
 "347856","2020-04-22 00:05:08","http://180.125.172.181:38410/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347856/","Gandylyan1"
-"347855","2020-04-22 00:05:04","http://49.70.137.78:57384/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347855/","Gandylyan1"
+"347855","2020-04-22 00:05:04","http://49.70.137.78:57384/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347855/","Gandylyan1"
 "347854","2020-04-22 00:04:32","http://27.41.141.116:37266/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347854/","Gandylyan1"
 "347853","2020-04-22 00:04:28","http://42.231.173.223:51925/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347853/","Gandylyan1"
 "347852","2020-04-22 00:04:25","http://115.58.74.77:58082/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347852/","Gandylyan1"
@@ -10306,7 +10531,7 @@
 "347817","2020-04-21 20:23:03","http://www.4up4.com/uploads/file_2020-04-21_161702.jpg","offline","malware_download","base64,exe,reverse","https://urlhaus.abuse.ch/url/347817/","oppimaniac"
 "347816","2020-04-21 19:44:21","http://13pope.com/wrd/troll.exe","online","malware_download","None","https://urlhaus.abuse.ch/url/347816/","JayTHL"
 "347815","2020-04-21 19:44:16","http://13pope.com/wrd/receipt.exe","online","malware_download","NanoCore","https://urlhaus.abuse.ch/url/347815/","JayTHL"
-"347814","2020-04-21 19:44:08","http://13pope.com/wrd/order_evoucher.exe","online","malware_download","NanoCore","https://urlhaus.abuse.ch/url/347814/","JayTHL"
+"347814","2020-04-21 19:44:08","http://13pope.com/wrd/order_evoucher.exe","offline","malware_download","NanoCore","https://urlhaus.abuse.ch/url/347814/","JayTHL"
 "347813","2020-04-21 19:31:06","https://spurstogo.com/HG/HB_encrypted_6D9D940.bin","online","malware_download","encrypted,GuLoader payload,NetWire,NetwireRAT,rat","https://urlhaus.abuse.ch/url/347813/","malware_traffic"
 "347812","2020-04-21 19:30:07","https://spurtogo.com/X2020/VISNES.exe","offline","malware_download","exe,GuLoader,NetWire","https://urlhaus.abuse.ch/url/347812/","malware_traffic"
 "347811","2020-04-21 19:22:09","http://212.114.52.128/spc","offline","malware_download","elf","https://urlhaus.abuse.ch/url/347811/","Gandylyan1"
@@ -10384,7 +10609,7 @@
 "347739","2020-04-21 17:26:17","http://teachertoh.com/wp-content/themes/calliope/wp-front.php","offline","malware_download","zloader","https://urlhaus.abuse.ch/url/347739/","p5yb34m"
 "347738","2020-04-21 17:26:12","http://teachertoh.com/wp-content/themes/calliope/wp_data.php","offline","malware_download","zloader","https://urlhaus.abuse.ch/url/347738/","p5yb34m"
 "347737","2020-04-21 17:20:08","http://yompmepuagwsmxeecqtk.com/files/antiamsi.bin","offline","malware_download","bin,zloader","https://urlhaus.abuse.ch/url/347737/","p5yb34m"
-"347736","2020-04-21 17:13:35","http://osheoufhusheoghuesd.ru/m.exe","online","malware_download","exe,phorpiex","https://urlhaus.abuse.ch/url/347736/","zbetcheckin"
+"347736","2020-04-21 17:13:35","http://osheoufhusheoghuesd.ru/m.exe","offline","malware_download","exe,phorpiex","https://urlhaus.abuse.ch/url/347736/","zbetcheckin"
 "347735","2020-04-21 17:09:33","http://tldrbox.top/11.exe","online","malware_download","exe,phorpiex","https://urlhaus.abuse.ch/url/347735/","zbetcheckin"
 "347734","2020-04-21 17:05:14","http://213.139.204.84/x0ox0ox0oxDefault/z0r0.arm","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/347734/","zbetcheckin"
 "347733","2020-04-21 17:05:12","http://213.139.204.84/x0ox0ox0oxDefault/z0r0.sh4","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/347733/","zbetcheckin"
@@ -10453,7 +10678,7 @@
 "347670","2020-04-21 14:25:59","https://zoodbaz.com/wp-content/uploads/2020/04/evolving/39861/39861.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347670/","malware_traffic"
 "347669","2020-04-21 14:25:52","https://zoodbaz.com/wp-content/uploads/2020/04/evolving/0901086/0901086.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347669/","malware_traffic"
 "347668","2020-04-21 14:25:45","https://villette45.com/wp-content/uploads/2020/04/evolving/5329347/5329347.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347668/","malware_traffic"
-"347667","2020-04-21 14:25:42","https://tianzi8.cn/wp-content/plugins/apikey/evolving/8525382.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347667/","malware_traffic"
+"347667","2020-04-21 14:25:42","https://tianzi8.cn/wp-content/plugins/apikey/evolving/8525382.zip","online","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347667/","malware_traffic"
 "347666","2020-04-21 14:25:34","https://tianzi8.cn/wp-content/plugins/apikey/evolving/17951100.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347666/","malware_traffic"
 "347665","2020-04-21 14:25:17","https://themenuz.com/wp-content/uploads/2020/04/evolving/992093.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347665/","malware_traffic"
 "347664","2020-04-21 14:25:12","https://themenuz.com/wp-content/uploads/2020/04/evolving/9073043/9073043.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347664/","malware_traffic"
@@ -10476,9 +10701,9 @@
 "347647","2020-04-21 14:23:52","https://male.profertil.ro/wp-content/uploads/2020/04/evolving/522812015/522812015.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347647/","malware_traffic"
 "347646","2020-04-21 14:23:47","https://lamaisongourmande.live/wp-content/uploads/2020/04/evolving/241093858.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347646/","malware_traffic"
 "347645","2020-04-21 14:23:43","https://lamaisongourmande.live/wp-content/uploads/2020/04/evolving/23128159.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347645/","malware_traffic"
-"347644","2020-04-21 14:23:40","https://ileolaherbalcare.com.ng/wp-content/uploads/2020/04/evolving/301543/301543.zip","online","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347644/","malware_traffic"
-"347643","2020-04-21 14:23:34","https://ileolaherbalcare.com.ng/wp-content/uploads/2020/04/evolving/11044836/11044836.zip","online","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347643/","malware_traffic"
-"347642","2020-04-21 14:23:30","https://ileolaherbalcare.com.ng/wp-content/uploads/2020/04/evolving/10326.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347642/","malware_traffic"
+"347644","2020-04-21 14:23:40","https://ileolaherbalcare.com.ng/wp-content/uploads/2020/04/evolving/301543/301543.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347644/","malware_traffic"
+"347643","2020-04-21 14:23:34","https://ileolaherbalcare.com.ng/wp-content/uploads/2020/04/evolving/11044836/11044836.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347643/","malware_traffic"
+"347642","2020-04-21 14:23:30","https://ileolaherbalcare.com.ng/wp-content/uploads/2020/04/evolving/10326.zip","online","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347642/","malware_traffic"
 "347641","2020-04-21 14:23:24","https://icshongkong.com/wp-content/uploads/2020/04/evolving/712611496.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347641/","malware_traffic"
 "347640","2020-04-21 14:23:16","https://icshongkong.com/wp-content/uploads/2020/04/evolving/31084/31084.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347640/","malware_traffic"
 "347639","2020-04-21 14:23:07","https://icshongkong.com/wp-content/uploads/2020/04/evolving/1034048/1034048.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347639/","malware_traffic"
@@ -10570,7 +10795,7 @@
 "347553","2020-04-21 13:23:08","http://84.38.130.153/johhhn.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/347553/","abuse_ch"
 "347552","2020-04-21 13:23:04","http://quecik.com/j1x/7840100.exe","offline","malware_download","exe,Quakbot","https://urlhaus.abuse.ch/url/347552/","abuse_ch"
 "347551","2020-04-21 13:19:15","http://187.72.59.113:11732/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/347551/","zbetcheckin"
-"347550","2020-04-21 13:19:10","http://27.147.29.52:1302/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/347550/","zbetcheckin"
+"347550","2020-04-21 13:19:10","http://27.147.29.52:1302/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/347550/","zbetcheckin"
 "347549","2020-04-21 13:19:05","http://www.theelectronics4u.com/b/build%20(1)_AovcNLF72.bin","offline","malware_download","encrypted,GuLoader,Loki","https://urlhaus.abuse.ch/url/347549/","abuse_ch"
 "347548","2020-04-21 12:51:08","http://89.116.174.223:1182/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/347548/","geenensp"
 "347547","2020-04-21 12:51:05","http://77.27.54.214:59074/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/347547/","geenensp"
@@ -10659,7 +10884,7 @@
 "347464","2020-04-21 10:34:06","http://51.161.68.186/bins/arm6","offline","malware_download","elf","https://urlhaus.abuse.ch/url/347464/","Gandylyan1"
 "347463","2020-04-21 10:34:03","http://51.161.68.186/bins/arm5","offline","malware_download","elf","https://urlhaus.abuse.ch/url/347463/","Gandylyan1"
 "347462","2020-04-21 10:30:04","http://51.161.68.186/bins/arm","offline","malware_download","elf","https://urlhaus.abuse.ch/url/347462/","Gandylyan1"
-"347461","2020-04-21 10:00:24","http://112.170.165.71:56520/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/347461/","geenensp"
+"347461","2020-04-21 10:00:24","http://112.170.165.71:56520/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/347461/","geenensp"
 "347460","2020-04-21 10:00:19","http://191.13.47.22:58223/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/347460/","geenensp"
 "347459","2020-04-21 10:00:11","http://189.112.131.104:29712/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/347459/","geenensp"
 "347458","2020-04-21 10:00:06","http://14.46.51.53:8136/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/347458/","geenensp"
@@ -10749,7 +10974,7 @@
 "347374","2020-04-21 06:07:48","http://162.212.114.129:38344/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347374/","Gandylyan1"
 "347373","2020-04-21 06:07:44","http://36.32.106.61:37559/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347373/","Gandylyan1"
 "347372","2020-04-21 06:07:35","http://116.114.95.188:50157/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347372/","Gandylyan1"
-"347371","2020-04-21 06:07:25","http://114.239.128.231:50468/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347371/","Gandylyan1"
+"347371","2020-04-21 06:07:25","http://114.239.128.231:50468/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347371/","Gandylyan1"
 "347370","2020-04-21 06:07:05","http://123.11.38.78:38302/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347370/","Gandylyan1"
 "347369","2020-04-21 06:07:01","http://182.112.13.35:52814/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347369/","Gandylyan1"
 "347368","2020-04-21 06:06:58","http://125.44.215.87:48410/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347368/","Gandylyan1"
@@ -10778,7 +11003,7 @@
 "347345","2020-04-21 05:38:20","https://drive.google.com/uc?export=download&id=1SiB925R2TUbc7RRPjKmX3kjwmCz2f-Ml","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/347345/","lovemalware"
 "347344","2020-04-21 05:38:08","https://drive.google.com/uc?export=download&id=1w_leO4lN947HGCOJPbBPE85iL00GEtCg","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/347344/","lovemalware"
 "347343","2020-04-21 05:34:47","https://drive.google.com/uc?export=download&id=17CFIXi7RPeXK75oBO7Mk3QGmAPlO55zk","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/347343/","lovemalware"
-"347342","2020-04-21 05:34:33","https://onedrive.live.com/download?cid=E61E5F3F655316FA&resid=E61E5F3F655316FA%21124&authkey=ADKlC5yRN_vbmt8","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/347342/","lovemalware"
+"347342","2020-04-21 05:34:33","https://onedrive.live.com/download?cid=E61E5F3F655316FA&resid=E61E5F3F655316FA%21124&authkey=ADKlC5yRN_vbmt8","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/347342/","lovemalware"
 "347341","2020-04-21 05:34:29","https://drive.google.com/uc?export=download&id=1yooFvDBcvTE7OAPxhPs_i6iPmilpmZ7x","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/347341/","lovemalware"
 "347340","2020-04-21 05:34:23","https://drive.google.com/uc?export=download&id=1UadIbg7RqsYJcL14h9f3JE5a342wOefi","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/347340/","lovemalware"
 "347339","2020-04-21 05:34:13","https://onedrive.live.com/download?cid=A32AEA2B4355716B&resid=A32AEA2B4355716B%215047&authkey=ABGpmXhJe7B2pEQ","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/347339/","lovemalware"
@@ -10797,7 +11022,7 @@
 "347326","2020-04-21 05:20:42","https://onedrive.live.com/download?cid=0153C2A7092EE91C&resid=153C2A7092EE91C%21111&authkey=AEmrWamaAAIYyjc","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/347326/","lovemalware"
 "347325","2020-04-21 05:20:26","https://drive.google.com/uc?export=download&id=1tlaISNHA9iIifF5GgEHGmOjGc_7rYk78","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/347325/","lovemalware"
 "347324","2020-04-21 05:20:18","http://73.233.67.25:50388/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/347324/","geenensp"
-"347323","2020-04-21 05:20:14","http://112.184.231.90:47888/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/347323/","geenensp"
+"347323","2020-04-21 05:20:14","http://112.184.231.90:47888/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/347323/","geenensp"
 "347322","2020-04-21 05:20:09","http://187.136.92.194:35624/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/347322/","geenensp"
 "347321","2020-04-21 05:19:18","http://211.76.32.143:48650/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/347321/","geenensp"
 "347320","2020-04-21 05:19:14","http://45.229.22.195:42195/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/347320/","geenensp"
@@ -11136,7 +11361,7 @@
 "346983","2020-04-20 17:47:23","http://tianmarket.shop/wp-content/uploads/2020/04/vary/111111.png","offline","malware_download","Qakbot,qbot,Quakbot","https://urlhaus.abuse.ch/url/346983/","notwhickey"
 "346982","2020-04-20 17:47:21","http://trujilloremodelingservicesinc.com/wp-admin/vary/111111.png","offline","malware_download","Qakbot,qbot,Quakbot","https://urlhaus.abuse.ch/url/346982/","notwhickey"
 "346981","2020-04-20 17:47:12","http://177.37.163.174:19501/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/346981/","geenensp"
-"346980","2020-04-20 17:47:05","http://45.163.149.85:30005/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/346980/","geenensp"
+"346980","2020-04-20 17:47:05","http://45.163.149.85:30005/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/346980/","geenensp"
 "346979","2020-04-20 17:31:09","http://187.33.71.68:53365/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/346979/","zbetcheckin"
 "346978","2020-04-20 17:31:05","http://23.252.75.251/21","offline","malware_download","elf","https://urlhaus.abuse.ch/url/346978/","zbetcheckin"
 "346977","2020-04-20 17:22:20","http://104.140.114.108/pbot.i586","offline","malware_download","elf","https://urlhaus.abuse.ch/url/346977/","Gandylyan1"
@@ -11552,7 +11777,7 @@
 "346506","2020-04-20 04:12:26","https://public.dm.files.1drv.com/y4mCql0K-dIL0toLB1vdcPcFecEOMpJTxVgJNGN8tGVuuro2azS5YBrC5eOo7GIwRDLBc8lo1BjBB8k7ZjRZw9zFCyJc5OJKYomCdiU7-56vPB3A_AMxn2lhytS1g0dkIsE67egkzPERdqXFuxNQDSQV8HX5jsom7cPPTLZw76coH2Saa29VqIBvCTIIciwq9UZor78ZswGAtL1fdGMG2wRkzZvHQSAKU44_h3xdg1kmUJ3cDS2pWpxpgfv9igV0XpH","offline","malware_download","None","https://urlhaus.abuse.ch/url/346506/","JayTHL"
 "346505","2020-04-20 04:12:03","https://onedrive.live.com/?authkey=%21AA%5FKAwj7CCSR79c&cid=15647E28D3722AD0&id=15647E28D3722AD0%21259&parId=15647E28D3722AD0%21251&action=locate","offline","malware_download","None","https://urlhaus.abuse.ch/url/346505/","JayTHL"
 "346504","2020-04-20 03:05:05","http://222.74.186.174:47460/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/346504/","Gandylyan1"
-"346503","2020-04-20 03:04:59","http://180.116.224.91:39039/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/346503/","Gandylyan1"
+"346503","2020-04-20 03:04:59","http://180.116.224.91:39039/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/346503/","Gandylyan1"
 "346502","2020-04-20 03:04:54","http://123.10.51.253:51884/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/346502/","Gandylyan1"
 "346501","2020-04-20 03:04:50","http://182.119.97.85:36507/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/346501/","Gandylyan1"
 "346500","2020-04-20 03:04:46","http://222.142.210.174:42860/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/346500/","Gandylyan1"
@@ -12038,7 +12263,7 @@
 "346020","2020-04-19 03:05:11","http://222.105.26.35:42548/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/346020/","Gandylyan1"
 "346019","2020-04-19 03:05:08","http://123.10.150.95:46444/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/346019/","Gandylyan1"
 "346018","2020-04-19 03:04:57","http://42.227.224.213:43147/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/346018/","Gandylyan1"
-"346017","2020-04-19 03:04:49","http://114.234.104.158:57493/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/346017/","Gandylyan1"
+"346017","2020-04-19 03:04:49","http://114.234.104.158:57493/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/346017/","Gandylyan1"
 "346016","2020-04-19 03:04:45","http://176.113.161.120:42166/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/346016/","Gandylyan1"
 "346015","2020-04-19 03:04:42","http://115.58.96.103:46831/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/346015/","Gandylyan1"
 "346014","2020-04-19 03:04:24","http://199.83.206.38:37870/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/346014/","Gandylyan1"
@@ -12084,7 +12309,7 @@
 "345974","2020-04-19 02:32:33","http://185.216.140.87/bins/blxntz.x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/345974/","zbetcheckin"
 "345973","2020-04-19 02:32:31","http://185.216.140.87/bins/blxntz.ppc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/345973/","zbetcheckin"
 "345972","2020-04-19 02:32:29","http://111.42.66.144:38837/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/345972/","Gandylyan1"
-"345971","2020-04-19 02:32:27","http://49.68.54.141:46176/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/345971/","Gandylyan1"
+"345971","2020-04-19 02:32:27","http://49.68.54.141:46176/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/345971/","Gandylyan1"
 "345970","2020-04-19 02:32:23","http://124.230.173.193:37209/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/345970/","Gandylyan1"
 "345969","2020-04-19 02:32:19","http://182.127.4.240:33132/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/345969/","Gandylyan1"
 "345968","2020-04-19 02:32:04","http://117.87.131.228:44635/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/345968/","Gandylyan1"
@@ -15411,7 +15636,7 @@
 "342647","2020-04-17 18:05:55","http://27.41.206.65:58125/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/342647/","Gandylyan1"
 "342646","2020-04-17 18:05:51","http://211.137.225.123:32918/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/342646/","Gandylyan1"
 "342645","2020-04-17 18:05:45","http://36.108.230.249:59939/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/342645/","Gandylyan1"
-"342644","2020-04-17 18:05:41","http://106.110.79.230:37600/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/342644/","Gandylyan1"
+"342644","2020-04-17 18:05:41","http://106.110.79.230:37600/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/342644/","Gandylyan1"
 "342643","2020-04-17 18:05:36","http://182.127.3.232:58604/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/342643/","Gandylyan1"
 "342642","2020-04-17 18:05:32","http://162.212.113.211:54306/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/342642/","Gandylyan1"
 "342641","2020-04-17 18:05:28","http://42.225.202.67:47534/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/342641/","Gandylyan1"
@@ -15572,7 +15797,7 @@
 "342486","2020-04-17 16:14:10","https://pastebin.com/raw/GEYa5yUF","offline","malware_download","None","https://urlhaus.abuse.ch/url/342486/","JayTHL"
 "342485","2020-04-17 16:14:07","https://pastebin.com/raw/UuWMYUT7","offline","malware_download","None","https://urlhaus.abuse.ch/url/342485/","JayTHL"
 "342484","2020-04-17 16:14:04","https://pastebin.com/raw/tngDpGXW","offline","malware_download","None","https://urlhaus.abuse.ch/url/342484/","JayTHL"
-"342483","2020-04-17 16:10:06","https://fairyqueenstore.com/differ/912544/912544.zip","online","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342483/","malware_traffic"
+"342483","2020-04-17 16:10:06","https://fairyqueenstore.com/differ/912544/912544.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342483/","malware_traffic"
 "342482","2020-04-17 16:09:55","http://192.3.251.44/arm7","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/342482/","zbetcheckin"
 "342481","2020-04-17 16:09:53","http://192.3.251.44/x86","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/342481/","zbetcheckin"
 "342480","2020-04-17 16:09:50","https://digivisor.website/differ/628212971/628212971.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342480/","malware_traffic"
@@ -15612,7 +15837,7 @@
 "342446","2020-04-17 16:05:57","https://thepyramids.nl/differ/60636/60636.zip","online","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342446/","malware_traffic"
 "342445","2020-04-17 16:05:52","https://sayiteducation.com/differ/354318294/354318294.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342445/","malware_traffic"
 "342444","2020-04-17 16:05:48","https://halotelco.vip/differ/70955.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342444/","malware_traffic"
-"342443","2020-04-17 16:05:33","https://compesat.com/differ/106172/106172.zip","online","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342443/","malware_traffic"
+"342443","2020-04-17 16:05:33","https://compesat.com/differ/106172/106172.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342443/","malware_traffic"
 "342442","2020-04-17 16:05:19","https://fine.black/differ/49363504/49363504.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342442/","malware_traffic"
 "342441","2020-04-17 16:05:12","https://musearttherapy.com/differ/645441.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342441/","malware_traffic"
 "342440","2020-04-17 16:05:06","https://420hempizone.co/differ/82386.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342440/","malware_traffic"
@@ -15672,14 +15897,14 @@
 "342386","2020-04-17 14:54:09","https://greenlandlion.com/extend/3601775.zip","offline","malware_download","Qakbot,qbot,spx98,zip","https://urlhaus.abuse.ch/url/342386/","malware_traffic"
 "342385","2020-04-17 14:54:03","http://spirtualcenteruk.com/feature/192776271.zip","offline","malware_download","Qakbot,qbot,spx98,zip","https://urlhaus.abuse.ch/url/342385/","malware_traffic"
 "342384","2020-04-17 14:53:41","https://thornadops.com/differ/0528300/0528300.zip","online","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342384/","malware_traffic"
-"342383","2020-04-17 14:53:35","https://thornadops.com/differ/473793/473793.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342383/","malware_traffic"
+"342383","2020-04-17 14:53:35","https://thornadops.com/differ/473793/473793.zip","online","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342383/","malware_traffic"
 "342382","2020-04-17 14:53:27","https://theneews.us/differ/021906/021906.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342382/","malware_traffic"
 "342381","2020-04-17 14:53:18","https://sayiteducation.com/differ/293127445.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342381/","malware_traffic"
 "342380","2020-04-17 14:53:13","https://qualitygolfbags.com/differ/45335.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342380/","malware_traffic"
 "342379","2020-04-17 14:53:02","https://musearttherapy.com/differ/327336/327336.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342379/","malware_traffic"
 "342378","2020-04-17 14:52:50","https://glitchexotika.com/differ/947908.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342378/","malware_traffic"
 "342377","2020-04-17 14:52:43","https://fairyqueenstore.com/differ/2164939.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342377/","malware_traffic"
-"342376","2020-04-17 14:52:31","https://compesat.com/differ/21962/21962.zip","online","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342376/","malware_traffic"
+"342376","2020-04-17 14:52:31","https://compesat.com/differ/21962/21962.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342376/","malware_traffic"
 "342375","2020-04-17 14:52:21","https://bybysunday.com/differ/09997/09997.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342375/","malware_traffic"
 "342374","2020-04-17 14:52:14","https://besthack.co/differ/9710336/9710336.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342374/","malware_traffic"
 "342373","2020-04-17 14:52:09","https://bavlcentral.org/differ/50208/50208.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342373/","malware_traffic"
@@ -16080,7 +16305,7 @@
 "341978","2020-04-17 06:06:29","http://42.235.95.13:60166/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/341978/","Gandylyan1"
 "341977","2020-04-17 06:06:24","http://182.116.89.90:35097/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/341977/","Gandylyan1"
 "341976","2020-04-17 06:06:19","http://125.47.60.138:42577/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/341976/","Gandylyan1"
-"341975","2020-04-17 06:05:56","http://114.239.46.132:40452/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/341975/","Gandylyan1"
+"341975","2020-04-17 06:05:56","http://114.239.46.132:40452/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/341975/","Gandylyan1"
 "341974","2020-04-17 06:05:47","http://103.97.85.171:48660/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/341974/","Gandylyan1"
 "341973","2020-04-17 06:05:43","http://111.42.102.128:34279/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/341973/","Gandylyan1"
 "341972","2020-04-17 06:05:39","http://218.76.30.39:47758/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/341972/","Gandylyan1"
@@ -16198,22 +16423,22 @@
 "341860","2020-04-17 02:10:07","http://208.113.133.130/qvmxvl","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341860/","zbetcheckin"
 "341859","2020-04-17 02:10:04","http://208.113.133.130/ajoomk","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341859/","zbetcheckin"
 "341858","2020-04-17 02:03:36","http://45.95.168.200/snype.arm6","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341858/","zbetcheckin"
-"341857","2020-04-17 02:03:34","http://37.49.230.103/snype.sparc","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341857/","zbetcheckin"
+"341857","2020-04-17 02:03:34","http://37.49.230.103/snype.sparc","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341857/","zbetcheckin"
 "341856","2020-04-17 02:03:31","http://45.148.10.142/SnOoPy.sh","offline","malware_download","shellscript","https://urlhaus.abuse.ch/url/341856/","zbetcheckin"
 "341855","2020-04-17 02:03:29","http://45.95.168.200/snype.sparc","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341855/","zbetcheckin"
 "341854","2020-04-17 02:03:27","http://37.49.230.141/Joker.sh","offline","malware_download","shellscript","https://urlhaus.abuse.ch/url/341854/","zbetcheckin"
-"341853","2020-04-17 02:03:25","http://37.49.230.103/snype.arm5","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341853/","zbetcheckin"
+"341853","2020-04-17 02:03:25","http://37.49.230.103/snype.arm5","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341853/","zbetcheckin"
 "341852","2020-04-17 02:03:23","http://161.35.53.44/SnOoPy.sh","offline","malware_download","shellscript","https://urlhaus.abuse.ch/url/341852/","zbetcheckin"
-"341851","2020-04-17 02:03:20","http://37.49.230.103/snype.ppc","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341851/","zbetcheckin"
+"341851","2020-04-17 02:03:20","http://37.49.230.103/snype.ppc","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341851/","zbetcheckin"
 "341850","2020-04-17 02:03:18","http://192.210.140.199/bins.sh","offline","malware_download","shellscript","https://urlhaus.abuse.ch/url/341850/","zbetcheckin"
 "341849","2020-04-17 02:03:14","http://208.113.133.130/bins.sh","offline","malware_download","shellscript","https://urlhaus.abuse.ch/url/341849/","zbetcheckin"
-"341848","2020-04-17 02:03:11","http://37.49.230.103/snype.mpsl","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341848/","zbetcheckin"
+"341848","2020-04-17 02:03:11","http://37.49.230.103/snype.mpsl","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341848/","zbetcheckin"
 "341847","2020-04-17 02:03:09","http://45.95.168.200/snype.x86","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341847/","zbetcheckin"
 "341846","2020-04-17 02:03:07","http://45.95.168.200/snype.arm5","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341846/","zbetcheckin"
-"341845","2020-04-17 02:03:05","http://37.49.230.103/snype.arm4","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341845/","zbetcheckin"
-"341844","2020-04-17 02:03:03","http://37.49.230.103/snype.mips","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341844/","zbetcheckin"
+"341845","2020-04-17 02:03:05","http://37.49.230.103/snype.arm4","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341845/","zbetcheckin"
+"341844","2020-04-17 02:03:03","http://37.49.230.103/snype.mips","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341844/","zbetcheckin"
 "341843","2020-04-17 02:02:29","https://pastebin.com/raw/WUDaEgQz","offline","malware_download","None","https://urlhaus.abuse.ch/url/341843/","JayTHL"
-"341842","2020-04-17 02:02:22","http://37.49.230.103/snype.arm6","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341842/","zbetcheckin"
+"341842","2020-04-17 02:02:22","http://37.49.230.103/snype.arm6","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341842/","zbetcheckin"
 "341841","2020-04-17 02:02:20","https://pastebin.com/raw/mcEwteyg","offline","malware_download","None","https://urlhaus.abuse.ch/url/341841/","JayTHL"
 "341840","2020-04-17 02:02:13","http://45.95.168.200/snype.mpsl","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341840/","zbetcheckin"
 "341839","2020-04-17 02:02:10","https://pastebin.com/raw/Va6CePfg","offline","malware_download","None","https://urlhaus.abuse.ch/url/341839/","JayTHL"
@@ -16250,9 +16475,9 @@
 "341808","2020-04-17 01:55:06","https://pastebin.com/raw/XLX6hUUi","offline","malware_download","None","https://urlhaus.abuse.ch/url/341808/","JayTHL"
 "341807","2020-04-17 01:54:33","https://pastebin.com/raw/sW6gPppk","offline","malware_download","None","https://urlhaus.abuse.ch/url/341807/","JayTHL"
 "341806","2020-04-17 01:53:03","http://45.95.168.200/snype.ppc","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341806/","zbetcheckin"
-"341805","2020-04-17 01:52:08","http://37.49.230.103/snype.sh","offline","malware_download","shellscript","https://urlhaus.abuse.ch/url/341805/","zbetcheckin"
+"341805","2020-04-17 01:52:08","http://37.49.230.103/snype.sh","online","malware_download","shellscript","https://urlhaus.abuse.ch/url/341805/","zbetcheckin"
 "341804","2020-04-17 01:52:06","http://45.95.168.200/snype.arm4","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341804/","zbetcheckin"
-"341803","2020-04-17 01:52:04","http://37.49.230.103/snype.x86","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341803/","zbetcheckin"
+"341803","2020-04-17 01:52:04","http://37.49.230.103/snype.x86","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341803/","zbetcheckin"
 "341802","2020-04-17 01:51:03","http://45.95.168.200/snype.sh","offline","malware_download","shellscript","https://urlhaus.abuse.ch/url/341802/","zbetcheckin"
 "341801","2020-04-17 01:41:22","https://pastebin.com/raw/he4dtibE","offline","malware_download","None","https://urlhaus.abuse.ch/url/341801/","JayTHL"
 "341800","2020-04-17 01:41:19","https://pastebin.com/raw/RQfBQWDr","offline","malware_download","None","https://urlhaus.abuse.ch/url/341800/","JayTHL"
@@ -16556,7 +16781,7 @@
 "341502","2020-04-16 15:08:56","https://tepatitlan.gob.mx/cs/wp-content/themes/calliope/beads/182838/182838.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341502/","malware_traffic"
 "341501","2020-04-16 15:08:51","https://tepatitlan.gob.mx/cs/wp-content/themes/calliope/beads/023318/023318.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341501/","malware_traffic"
 "341500","2020-04-16 15:08:40","http://daiohs.com.tw/feature/777777.png","offline","malware_download","exe,Qakbot,spx98","https://urlhaus.abuse.ch/url/341500/","lazyactivist192"
-"341499","2020-04-16 15:08:05","http://anamikaindanegas.in/feature/777777.png","online","malware_download","exe,Qakbot,spx98","https://urlhaus.abuse.ch/url/341499/","lazyactivist192"
+"341499","2020-04-16 15:08:05","http://anamikaindanegas.in/feature/777777.png","offline","malware_download","exe,Qakbot,spx98","https://urlhaus.abuse.ch/url/341499/","lazyactivist192"
 "341498","2020-04-16 15:07:58","http://demo.caglificioclerici.com/feature/777777.png","offline","malware_download","exe,Qakbot,spx98","https://urlhaus.abuse.ch/url/341498/","lazyactivist192"
 "341497","2020-04-16 15:07:53","http://automatischer-staubsauger.com/feature/777777.png","offline","malware_download","exe,Qakbot,spx98","https://urlhaus.abuse.ch/url/341497/","lazyactivist192"
 "341496","2020-04-16 15:07:46","http://surecake.com/wp-content/themes/calliope/beads/803050873/803050873.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341496/","malware_traffic"
@@ -16570,7 +16795,7 @@
 "341488","2020-04-16 15:06:32","http://sportwin.com.ua/wp-content/themes/calliope/beads/82612240/82612240.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341488/","malware_traffic"
 "341487","2020-04-16 15:06:28","http://sportwin.com.ua/wp-content/themes/calliope/beads/534397705/534397705.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341487/","malware_traffic"
 "341486","2020-04-16 15:06:24","http://shaoxiaofei.cn/beads/80858358/80858358.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341486/","malware_traffic"
-"341485","2020-04-16 15:05:52","http://shaoxiaofei.cn/beads/53170/53170.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341485/","malware_traffic"
+"341485","2020-04-16 15:05:52","http://shaoxiaofei.cn/beads/53170/53170.zip","online","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341485/","malware_traffic"
 "341484","2020-04-16 15:05:19","http://shaoxiaofei.cn/beads/4487627/4487627.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341484/","malware_traffic"
 "341483","2020-04-16 15:04:02","http://shaoxiaofei.cn/beads/11763.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341483/","malware_traffic"
 "341482","2020-04-16 15:03:54","http://shaoxiaofei.cn/beads/07058857/07058857.zip","online","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341482/","malware_traffic"
@@ -16697,7 +16922,7 @@
 "341361","2020-04-16 09:09:57","http://222.74.186.176:38826/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/341361/","Gandylyan1"
 "341360","2020-04-16 09:09:53","http://172.39.6.0:44547/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/341360/","Gandylyan1"
 "341359","2020-04-16 09:09:21","http://106.111.38.143:39777/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/341359/","Gandylyan1"
-"341358","2020-04-16 09:08:49","http://180.104.195.10:52844/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/341358/","Gandylyan1"
+"341358","2020-04-16 09:08:49","http://180.104.195.10:52844/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/341358/","Gandylyan1"
 "341357","2020-04-16 09:08:43","http://172.36.33.44:55884/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/341357/","Gandylyan1"
 "341356","2020-04-16 09:08:11","http://216.180.117.233:38197/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/341356/","Gandylyan1"
 "341355","2020-04-16 09:08:07","http://162.212.115.77:59893/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/341355/","Gandylyan1"
@@ -16921,7 +17146,7 @@
 "341137","2020-04-16 03:05:59","http://111.42.66.162:33357/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/341137/","Gandylyan1"
 "341136","2020-04-16 03:05:54","http://191.243.187.224:56725/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/341136/","Gandylyan1"
 "341135","2020-04-16 03:05:49","http://176.113.161.138:41741/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/341135/","Gandylyan1"
-"341134","2020-04-16 03:05:46","http://106.110.71.236:49820/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/341134/","Gandylyan1"
+"341134","2020-04-16 03:05:46","http://106.110.71.236:49820/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/341134/","Gandylyan1"
 "341133","2020-04-16 03:05:14","http://162.212.113.69:59243/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/341133/","Gandylyan1"
 "341132","2020-04-16 03:05:06","http://199.83.203.59:51668/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/341132/","Gandylyan1"
 "341131","2020-04-16 03:05:02","http://221.210.211.140:39013/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/341131/","Gandylyan1"
@@ -17214,7 +17439,7 @@
 "340844","2020-04-15 17:08:10","http://vmawt.mlkd.cf/?41504621333686268","offline","malware_download","dll","https://urlhaus.abuse.ch/url/340844/","jstrosch"
 "340843","2020-04-15 17:08:06","http://fjueir.ioiu.cf/?67313650024686113","offline","malware_download","dll","https://urlhaus.abuse.ch/url/340843/","jstrosch"
 "340842","2020-04-15 17:04:03","http://198.98.60.38/xb.sh","offline","malware_download","None","https://urlhaus.abuse.ch/url/340842/","geenensp"
-"340841","2020-04-15 17:03:06","http://180.218.105.80:40561/.i","online","malware_download","None","https://urlhaus.abuse.ch/url/340841/","geenensp"
+"340841","2020-04-15 17:03:06","http://180.218.105.80:40561/.i","offline","malware_download","None","https://urlhaus.abuse.ch/url/340841/","geenensp"
 "340840","2020-04-15 16:46:09","http://flowersck.top/administrator/cache/1c.jpg","offline","malware_download","None","https://urlhaus.abuse.ch/url/340840/","JAMESWT_MHT"
 "340839","2020-04-15 16:10:06","https://cdn.discordapp.com/attachments/696080917852061776/700004926712971364/eadECfGEx_protected.exe","offline","malware_download","AZORult","https://urlhaus.abuse.ch/url/340839/","JayTHL"
 "340838","2020-04-15 15:48:26","http://134.122.122.57/bins/blxntz.x86","offline","malware_download","None","https://urlhaus.abuse.ch/url/340838/","JayTHL"
@@ -17634,8 +17859,8 @@
 "340424","2020-04-14 20:26:48","http://saivilla.xyz/string/44524573.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340424/","malware_traffic"
 "340423","2020-04-14 20:26:39","https://restaurantemexicano.es/string/91554.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340423/","malware_traffic"
 "340422","2020-04-14 20:26:37","https://restaurantemexicano.es/string/0830591/0830591.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340422/","malware_traffic"
-"340421","2020-04-14 20:26:32","http://quehagoencartagena.com/string/804903/804903.zip","online","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340421/","malware_traffic"
-"340420","2020-04-14 20:26:28","http://quehagoencartagena.com/string/075195460/075195460.zip","online","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340420/","malware_traffic"
+"340421","2020-04-14 20:26:32","http://quehagoencartagena.com/string/804903/804903.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340421/","malware_traffic"
+"340420","2020-04-14 20:26:28","http://quehagoencartagena.com/string/075195460/075195460.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340420/","malware_traffic"
 "340419","2020-04-14 20:26:22","http://peternoresson.se/string/8973124.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340419/","malware_traffic"
 "340418","2020-04-14 20:26:11","http://peternoresson.se/string/86444.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340418/","malware_traffic"
 "340417","2020-04-14 20:26:08","http://peternoresson.se/string/6582750.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340417/","malware_traffic"
@@ -17658,7 +17883,7 @@
 "340400","2020-04-14 20:23:50","https://mochandmade.us/string/443327271/443327271.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340400/","malware_traffic"
 "340399","2020-04-14 20:23:42","https://microvpn.info/string/530345404/530345404.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340399/","malware_traffic"
 "340398","2020-04-14 20:23:38","http://melias.se/string/64928487.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340398/","malware_traffic"
-"340397","2020-04-14 20:23:30","https://marocaji.com/string/92174460/92174460.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340397/","malware_traffic"
+"340397","2020-04-14 20:23:30","https://marocaji.com/string/92174460/92174460.zip","online","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340397/","malware_traffic"
 "340396","2020-04-14 20:23:22","https://marketevip.com/string/9651583/9651583.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340396/","malware_traffic"
 "340395","2020-04-14 20:23:15","https://langsirterkini.net/string/134437527/134437527.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340395/","malware_traffic"
 "340394","2020-04-14 20:22:35","http://maluna.com.br/string/9323831.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340394/","malware_traffic"
@@ -17671,7 +17896,7 @@
 "340387","2020-04-14 20:21:40","https://hotel-sangiorgio.com/string/974483/974483.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340387/","malware_traffic"
 "340386","2020-04-14 20:21:35","https://hellomessager.com/string/9336248.zip","online","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340386/","malware_traffic"
 "340385","2020-04-14 20:21:33","https://hellomessager.com/string/67893798.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340385/","malware_traffic"
-"340384","2020-04-14 20:21:30","https://hellomessager.com/string/487434/487434.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340384/","malware_traffic"
+"340384","2020-04-14 20:21:30","https://hellomessager.com/string/487434/487434.zip","online","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340384/","malware_traffic"
 "340383","2020-04-14 20:21:23","https://gsm-laboratory.com/string/2259983.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340383/","malware_traffic"
 "340382","2020-04-14 20:21:18","https://gsm-laboratory.com/string/05907/05907.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340382/","malware_traffic"
 "340381","2020-04-14 20:21:13","https://gsm-laboratory.com/string/009540421.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340381/","malware_traffic"
@@ -17826,9 +18051,9 @@
 "340232","2020-04-14 14:52:05","http://199.83.205.25:60246/Mozi.m","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/340232/","zbetcheckin"
 "340231","2020-04-14 14:43:12","http://d.teamworx.ph/1839/20/279.png","offline","malware_download","exe,Qakbot,spx96","https://urlhaus.abuse.ch/url/340231/","lazyactivist192"
 "340230","2020-04-14 14:43:05","http://unik-evenements.fr/string/444444.png","offline","malware_download","exe,Qakbot,spx96","https://urlhaus.abuse.ch/url/340230/","lazyactivist192"
-"340229","2020-04-14 14:37:13","http://leukkado.be/string/444444.png","online","malware_download","exe,Qakbot,Quakbot,spx96","https://urlhaus.abuse.ch/url/340229/","lazyactivist192"
+"340229","2020-04-14 14:37:13","http://leukkado.be/string/444444.png","offline","malware_download","exe,Qakbot,Quakbot,spx96","https://urlhaus.abuse.ch/url/340229/","lazyactivist192"
 "340228","2020-04-14 14:37:11","http://millionsawesomeproducts.com/string/444444.png","offline","malware_download","exe,Qakbot,spx96","https://urlhaus.abuse.ch/url/340228/","lazyactivist192"
-"340227","2020-04-14 14:37:08","http://funpartyrent.com/string/444444.png","offline","malware_download","exe,Qakbot,Quakbot,spx96","https://urlhaus.abuse.ch/url/340227/","lazyactivist192"
+"340227","2020-04-14 14:37:08","http://funpartyrent.com/string/444444.png","online","malware_download","exe,Qakbot,Quakbot,spx96","https://urlhaus.abuse.ch/url/340227/","lazyactivist192"
 "340226","2020-04-14 14:37:04","http://common-factor.nl/string/444444.png","offline","malware_download","exe,Qakbot,Quakbot,spx96","https://urlhaus.abuse.ch/url/340226/","lazyactivist192"
 "340224","2020-04-14 14:33:35","https://emamdouh1949.me/temp/JBPOWNH.txt","offline","malware_download","AZORult,exe","https://urlhaus.abuse.ch/url/340224/","abuse_ch"
 "340223","2020-04-14 14:23:39","http://otanityre.in/dj/dj.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/340223/","abuse_ch"
@@ -17930,7 +18155,7 @@
 "340127","2020-04-14 09:04:41","http://115.56.113.207:60688/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/340127/","Gandylyan1"
 "340126","2020-04-14 09:04:28","http://111.42.66.52:56849/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/340126/","Gandylyan1"
 "340125","2020-04-14 09:03:56","http://218.31.0.57:45394/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/340125/","Gandylyan1"
-"340124","2020-04-14 09:03:43","http://106.111.41.140:33347/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/340124/","Gandylyan1"
+"340124","2020-04-14 09:03:43","http://106.111.41.140:33347/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/340124/","Gandylyan1"
 "340123","2020-04-14 09:03:39","http://42.233.74.200:33419/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/340123/","Gandylyan1"
 "340122","2020-04-14 09:03:36","http://62.16.36.99:50375/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/340122/","Gandylyan1"
 "340121","2020-04-14 09:03:04","http://123.11.37.61:38302/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/340121/","Gandylyan1"
@@ -18587,7 +18812,7 @@
 "339469","2020-04-13 12:04:18","http://182.127.146.6:43874/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/339469/","Gandylyan1"
 "339468","2020-04-13 12:04:15","http://110.154.208.247:55512/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/339468/","Gandylyan1"
 "339467","2020-04-13 12:04:11","http://199.83.200.212:42327/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/339467/","Gandylyan1"
-"339466","2020-04-13 12:04:06","http://180.124.6.47:33111/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/339466/","Gandylyan1"
+"339466","2020-04-13 12:04:06","http://180.124.6.47:33111/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/339466/","Gandylyan1"
 "339465","2020-04-13 10:49:05","https://z.zz.ht/GNpZM.txt","offline","malware_download","AZORult,exe","https://urlhaus.abuse.ch/url/339465/","abuse_ch"
 "339464","2020-04-13 10:35:07","http://fentlix.com/n5/5016022.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/339464/","abuse_ch"
 "339463","2020-04-13 10:18:08","https://1podcast.best/ru53332/Cobra+Driver+Pack+Solution+Fresh+2020+ISO+Latest+Torrent+Download-RTMD-APU5lF7nlgAA6RoCAEExGQASALZjIbsA.exe","offline","malware_download","glupteba,Locky","https://urlhaus.abuse.ch/url/339463/","JAMESWT_MHT"
@@ -18645,7 +18870,7 @@
 "339411","2020-04-13 09:04:04","http://219.155.231.194:35228/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/339411/","Gandylyan1"
 "339410","2020-04-13 09:03:58","http://222.139.64.122:36989/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/339410/","Gandylyan1"
 "339409","2020-04-13 09:03:55","http://171.94.32.176:36440/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/339409/","Gandylyan1"
-"339408","2020-04-13 09:03:50","http://114.229.18.229:53476/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/339408/","Gandylyan1"
+"339408","2020-04-13 09:03:50","http://114.229.18.229:53476/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/339408/","Gandylyan1"
 "339407","2020-04-13 09:03:45","http://42.230.207.98:47090/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/339407/","Gandylyan1"
 "339406","2020-04-13 09:03:41","http://42.231.239.192:38526/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/339406/","Gandylyan1"
 "339405","2020-04-13 09:03:39","http://162.212.114.179:50269/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/339405/","Gandylyan1"
@@ -19002,7 +19227,7 @@
 "339054","2020-04-13 03:04:48","http://89.148.193.238:34278/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/339054/","Gandylyan1"
 "339053","2020-04-13 03:04:45","http://39.77.151.155:48300/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/339053/","Gandylyan1"
 "339052","2020-04-13 03:04:42","http://172.39.49.115:54231/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/339052/","Gandylyan1"
-"339051","2020-04-13 03:04:10","http://49.82.252.63:39835/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/339051/","Gandylyan1"
+"339051","2020-04-13 03:04:10","http://49.82.252.63:39835/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/339051/","Gandylyan1"
 "339050","2020-04-13 03:04:05","http://162.212.112.248:60406/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/339050/","Gandylyan1"
 "339049","2020-04-13 00:04:07","http://222.74.186.186:55998/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/339049/","Gandylyan1"
 "339048","2020-04-13 00:04:03","http://162.212.113.210:54734/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/339048/","Gandylyan1"
@@ -19371,7 +19596,7 @@
 "338684","2020-04-12 15:03:27","http://199.83.207.153:50427/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/338684/","Gandylyan1"
 "338683","2020-04-12 15:03:23","http://219.155.175.80:51355/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/338683/","Gandylyan1"
 "338682","2020-04-12 15:03:19","http://111.43.223.55:52948/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/338682/","Gandylyan1"
-"338681","2020-04-12 15:03:14","http://121.231.100.43:55686/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/338681/","Gandylyan1"
+"338681","2020-04-12 15:03:14","http://121.231.100.43:55686/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/338681/","Gandylyan1"
 "338680","2020-04-12 15:03:09","http://216.180.117.230:48405/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/338680/","Gandylyan1"
 "338679","2020-04-12 15:03:04","http://173.15.162.151:1812/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/338679/","Gandylyan1"
 "338678","2020-04-12 14:45:06","http://180.67.246.69:51420/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/338678/","zbetcheckin"
@@ -19799,7 +20024,7 @@
 "338256","2020-04-11 06:54:35","http://194.180.224.113/telnet/arm7","online","malware_download","elf","https://urlhaus.abuse.ch/url/338256/","hypoweb"
 "338255","2020-04-11 06:54:32","http://194.180.224.113/telnet/arm6","online","malware_download","elf","https://urlhaus.abuse.ch/url/338255/","hypoweb"
 "338254","2020-04-11 06:54:29","http://194.180.224.113/telnet/arm5","online","malware_download","elf","https://urlhaus.abuse.ch/url/338254/","hypoweb"
-"338253","2020-04-11 06:54:27","http://194.180.224.113/telnet/arm","online","malware_download","elf","https://urlhaus.abuse.ch/url/338253/","hypoweb"
+"338253","2020-04-11 06:54:27","http://194.180.224.113/telnet/arm","offline","malware_download","elf","https://urlhaus.abuse.ch/url/338253/","hypoweb"
 "338252","2020-04-11 06:54:25","http://194.180.224.113/telnet/mpsl","online","malware_download","elf","https://urlhaus.abuse.ch/url/338252/","hypoweb"
 "338251","2020-04-11 06:54:22","http://188.212.100.2/d/xd.sh4","offline","malware_download","elf","https://urlhaus.abuse.ch/url/338251/","hypoweb"
 "338250","2020-04-11 06:54:19","http://188.212.100.2/d/xd.ppc","offline","malware_download","elf","https://urlhaus.abuse.ch/url/338250/","hypoweb"
@@ -19877,7 +20102,7 @@
 "338178","2020-04-11 03:03:37","http://172.36.5.27:51877/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/338178/","Gandylyan1"
 "338177","2020-04-11 03:03:05","http://162.212.113.31:36295/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/338177/","Gandylyan1"
 "338176","2020-04-11 02:56:05","http://111.42.66.48:58492/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/338176/","zbetcheckin"
-"338175","2020-04-11 02:27:08","http://80.210.28.73:3160/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/338175/","zbetcheckin"
+"338175","2020-04-11 02:27:08","http://80.210.28.73:3160/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/338175/","zbetcheckin"
 "338174","2020-04-11 02:27:05","http://93.176.185.223:17860/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/338174/","zbetcheckin"
 "338173","2020-04-11 02:09:05","http://42.239.143.245:48676/Mozi.m+-O+-","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/338173/","zbetcheckin"
 "338172","2020-04-11 00:15:10","http://167.99.189.132/armv4l","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/338172/","zbetcheckin"
@@ -19993,7 +20218,7 @@
 "338062","2020-04-10 22:11:07","http://62.171.183.29/bins/UnHAnaAW.m68k","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/338062/","zbetcheckin"
 "338061","2020-04-10 22:11:05","http://62.171.183.29/bins/UnHAnaAW.mips","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/338061/","zbetcheckin"
 "338060","2020-04-10 22:11:03","http://23.95.0.119/x86","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/338060/","zbetcheckin"
-"338059","2020-04-10 21:46:09","https://drive.google.com/u/0/uc?id=17MK_rc41hpFJXpVYtF8tkeWaczBfoDTK&export=download","online","malware_download","remcos","https://urlhaus.abuse.ch/url/338059/","James_inthe_box"
+"338059","2020-04-10 21:46:09","https://drive.google.com/u/0/uc?id=17MK_rc41hpFJXpVYtF8tkeWaczBfoDTK&export=download","offline","malware_download","remcos","https://urlhaus.abuse.ch/url/338059/","James_inthe_box"
 "338058","2020-04-10 21:06:12","http://111.43.223.151:57905/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/338058/","Gandylyan1"
 "338057","2020-04-10 21:06:08","http://49.89.193.196:39943/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/338057/","Gandylyan1"
 "338056","2020-04-10 21:06:04","http://123.12.74.147:54030/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/338056/","Gandylyan1"
@@ -20027,7 +20252,7 @@
 "338028","2020-04-10 20:51:02","http://sylvaclouds.eu/uzmod3/uzmod3.exe","offline","malware_download","Formbook","https://urlhaus.abuse.ch/url/338028/","JayTHL"
 "338027","2020-04-10 19:57:05","http://185.172.110.241/x0ox0ox0oxDefault/z0r0.arc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/338027/","zbetcheckin"
 "338026","2020-04-10 19:57:03","http://185.172.110.241/x0ox0ox0oxDefault/z0r0.arm5","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/338026/","zbetcheckin"
-"338025","2020-04-10 19:54:03","http://185.172.110.241/x0ox0ox0oxDefault/z0r0.i686","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/338025/","zbetcheckin"
+"338025","2020-04-10 19:54:03","http://185.172.110.241/x0ox0ox0oxDefault/z0r0.i686","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/338025/","zbetcheckin"
 "338024","2020-04-10 19:46:05","http://185.172.110.241/jaws","offline","malware_download","shellscript","https://urlhaus.abuse.ch/url/338024/","zbetcheckin"
 "338023","2020-04-10 19:10:22","http://107.173.222.153/i686","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/338023/","zbetcheckin"
 "338022","2020-04-10 19:10:20","http://107.173.222.153/FkSgbins.sh","offline","malware_download","shellscript","https://urlhaus.abuse.ch/url/338022/","zbetcheckin"
@@ -20114,10 +20339,10 @@
 "337941","2020-04-10 14:04:16","http://shawigroup.com/dmndfkle.exe","offline","malware_download","exe,Trickbot","https://urlhaus.abuse.ch/url/337941/","abuse_ch"
 "337940","2020-04-10 14:01:33","http://194.87.238.60/MASAD/BUILDE.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/337940/","abuse_ch"
 "337939","2020-04-10 14:01:16","https://metalacerogroup.xyz/putty/GHCGGH.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/337939/","abuse_ch"
-"337938","2020-04-10 14:00:10","http://aurumboy.com/file1.exe","online","malware_download","AveMariaRAT,exe","https://urlhaus.abuse.ch/url/337938/","abuse_ch"
-"337937","2020-04-10 14:00:04","http://aurumboy.com/file2.exe","online","malware_download","AZORult,exe","https://urlhaus.abuse.ch/url/337937/","abuse_ch"
+"337938","2020-04-10 14:00:10","http://aurumboy.com/file1.exe","offline","malware_download","AveMariaRAT,exe","https://urlhaus.abuse.ch/url/337938/","abuse_ch"
+"337937","2020-04-10 14:00:04","http://aurumboy.com/file2.exe","offline","malware_download","AZORult,exe","https://urlhaus.abuse.ch/url/337937/","abuse_ch"
 "337936","2020-04-10 13:59:57","http://aurumboy.com/file3.exe","offline","malware_download","AZORult,exe","https://urlhaus.abuse.ch/url/337936/","abuse_ch"
-"337935","2020-04-10 13:56:09","http://aurumboy.com/file4.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/337935/","abuse_ch"
+"337935","2020-04-10 13:56:09","http://aurumboy.com/file4.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/337935/","abuse_ch"
 "337934","2020-04-10 13:52:32","https://drive.google.com/uc?export=download&id=1lIsY1gd_dpCgLGFezFY1-KSuwimKO2vb","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/337934/","abuse_ch"
 "337933","2020-04-10 13:52:27","https://drive.google.com/uc?export=download&id=1IeK_60LjcKne4QP43bVtRZ0e01ibyQm-","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/337933/","abuse_ch"
 "337932","2020-04-10 13:52:22","https://drive.google.com/uc?export=download&id=1qzs3Lsl8KcSkw35e9Zc8ZMLwzzoTUNAM","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/337932/","abuse_ch"
@@ -20608,16 +20833,16 @@
 "337447","2020-04-09 17:06:05","https://nextime.online/wp-content/uploads/2020/04/extend/17379/17379.zip","offline","malware_download","doc,qbot","https://urlhaus.abuse.ch/url/337447/","p5yb34m"
 "337446","2020-04-09 16:56:09","https://onedrive.live.com/download?cid=2F947402293C14C1&resid=2F947402293C14C1%21115&authkey=AHqD1dMQjmGKDuM","offline","malware_download","encrypted,Formbook,GuLoader","https://urlhaus.abuse.ch/url/337446/","abuse_ch"
 "337445","2020-04-09 16:56:07","https://drive.google.com/uc?export=download&id=1N-1AGKYL3EQU3bTgirFjLQIZ2LLCafd0","offline","malware_download","encrypted,GuLoader,Loki","https://urlhaus.abuse.ch/url/337445/","abuse_ch"
-"337444","2020-04-09 16:55:32","http://185.172.110.241/x0ox0ox0oxDefault/z0r0.arm","online","malware_download","None","https://urlhaus.abuse.ch/url/337444/","JayTHL"
+"337444","2020-04-09 16:55:32","http://185.172.110.241/x0ox0ox0oxDefault/z0r0.arm","offline","malware_download","None","https://urlhaus.abuse.ch/url/337444/","JayTHL"
 "337443","2020-04-09 16:55:30","http://185.172.110.241/x0ox0ox0oxDefault/z0r0.arm6","offline","malware_download","None","https://urlhaus.abuse.ch/url/337443/","JayTHL"
 "337442","2020-04-09 16:55:28","http://185.172.110.241/x0ox0ox0oxDefault/z0r0.arm7","offline","malware_download","None","https://urlhaus.abuse.ch/url/337442/","JayTHL"
-"337441","2020-04-09 16:55:27","http://185.172.110.241/x0ox0ox0oxDefault/z0r0.m68k","online","malware_download","None","https://urlhaus.abuse.ch/url/337441/","JayTHL"
+"337441","2020-04-09 16:55:27","http://185.172.110.241/x0ox0ox0oxDefault/z0r0.m68k","offline","malware_download","None","https://urlhaus.abuse.ch/url/337441/","JayTHL"
 "337440","2020-04-09 16:55:25","http://185.172.110.241/x0ox0ox0oxDefault/z0r0.mips","offline","malware_download","None","https://urlhaus.abuse.ch/url/337440/","JayTHL"
 "337439","2020-04-09 16:55:23","http://185.172.110.241/x0ox0ox0oxDefault/z0r0.mpsl","offline","malware_download","None","https://urlhaus.abuse.ch/url/337439/","JayTHL"
 "337438","2020-04-09 16:55:21","http://185.172.110.241/x0ox0ox0oxDefault/z0r0.ppc","offline","malware_download","None","https://urlhaus.abuse.ch/url/337438/","JayTHL"
 "337437","2020-04-09 16:55:19","http://185.172.110.241/x0ox0ox0oxDefault/z0r0.sh4","offline","malware_download","None","https://urlhaus.abuse.ch/url/337437/","JayTHL"
-"337436","2020-04-09 16:55:17","http://185.172.110.241/x0ox0ox0oxDefault/z0r0.spc","online","malware_download","None","https://urlhaus.abuse.ch/url/337436/","JayTHL"
-"337435","2020-04-09 16:55:15","http://185.172.110.241/x0ox0ox0oxDefault/z0r0.x86","online","malware_download","None","https://urlhaus.abuse.ch/url/337435/","JayTHL"
+"337436","2020-04-09 16:55:17","http://185.172.110.241/x0ox0ox0oxDefault/z0r0.spc","offline","malware_download","None","https://urlhaus.abuse.ch/url/337436/","JayTHL"
+"337435","2020-04-09 16:55:15","http://185.172.110.241/x0ox0ox0oxDefault/z0r0.x86","offline","malware_download","None","https://urlhaus.abuse.ch/url/337435/","JayTHL"
 "337434","2020-04-09 16:55:07","https://greentec-automation.com/wp-cran.php","offline","malware_download","exe","https://urlhaus.abuse.ch/url/337434/","p5yb34m"
 "337433","2020-04-09 16:55:03","https://narensyndicate.com/wp-cran.php","offline","malware_download","exe","https://urlhaus.abuse.ch/url/337433/","p5yb34m"
 "337432","2020-04-09 16:41:09","http://kacper-formela.pl/wp-smart.php","offline","malware_download","exe","https://urlhaus.abuse.ch/url/337432/","p5yb34m"
@@ -20948,7 +21173,7 @@
 "337105","2020-04-09 00:05:47","http://211.137.225.43:53892/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/337105/","Gandylyan1"
 "337104","2020-04-09 00:05:42","http://180.104.58.173:33357/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/337104/","Gandylyan1"
 "337103","2020-04-09 00:05:35","http://115.49.107.112:45675/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/337103/","Gandylyan1"
-"337102","2020-04-09 00:05:32","http://106.110.69.24:53449/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/337102/","Gandylyan1"
+"337102","2020-04-09 00:05:32","http://106.110.69.24:53449/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/337102/","Gandylyan1"
 "337101","2020-04-09 00:05:28","http://199.83.203.108:41265/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/337101/","Gandylyan1"
 "337100","2020-04-09 00:05:23","http://111.42.102.70:60901/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/337100/","Gandylyan1"
 "337099","2020-04-09 00:05:21","http://172.36.57.41:40223/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/337099/","Gandylyan1"
@@ -20968,7 +21193,7 @@
 "337085","2020-04-08 22:41:24","http://107.158.154.78/armv5l","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/337085/","zbetcheckin"
 "337084","2020-04-08 22:41:22","http://107.158.154.78/mips","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/337084/","zbetcheckin"
 "337083","2020-04-08 22:41:19","http://107.158.154.78/yoyobins.sh","offline","malware_download","shellscript","https://urlhaus.abuse.ch/url/337083/","zbetcheckin"
-"337082","2020-04-08 22:41:17","http://45.221.78.38:40636/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/337082/","zbetcheckin"
+"337082","2020-04-08 22:41:17","http://45.221.78.38:40636/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/337082/","zbetcheckin"
 "337081","2020-04-08 22:41:10","http://107.158.154.78/armv6l","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/337081/","zbetcheckin"
 "337080","2020-04-08 22:41:06","http://107.158.154.78/powerpc","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/337080/","zbetcheckin"
 "337079","2020-04-08 22:41:04","http://107.158.154.78/i686","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/337079/","zbetcheckin"
@@ -21045,13 +21270,13 @@
 "337008","2020-04-08 19:35:08","http://178.128.225.245/i686","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/337008/","zbetcheckin"
 "337007","2020-04-08 19:35:06","http://178.128.225.245/sparc","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/337007/","zbetcheckin"
 "337006","2020-04-08 19:35:04","http://178.128.225.245/mips","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/337006/","zbetcheckin"
-"337005","2020-04-08 19:32:28","http://medicacademic.com/aza/jonny.exe","online","malware_download","RevengeRAT","https://urlhaus.abuse.ch/url/337005/","JayTHL"
-"337004","2020-04-08 19:32:23","http://medicacademic.com/aza/gxx.exe","online","malware_download","njRAT","https://urlhaus.abuse.ch/url/337004/","JayTHL"
-"337003","2020-04-08 19:32:21","http://medicacademic.com/aza/cvc.exe","online","malware_download","RevengeRAT","https://urlhaus.abuse.ch/url/337003/","JayTHL"
-"337002","2020-04-08 19:32:18","http://medicacademic.com/aza/569.exe","online","malware_download","RevengeRAT","https://urlhaus.abuse.ch/url/337002/","JayTHL"
-"337001","2020-04-08 19:32:14","http://medicacademic.com/aza/415.exe","online","malware_download","RevengeRAT","https://urlhaus.abuse.ch/url/337001/","JayTHL"
-"337000","2020-04-08 19:32:07","http://medicacademic.com/aza/123.exe","online","malware_download","njRAT","https://urlhaus.abuse.ch/url/337000/","JayTHL"
-"336999","2020-04-08 19:32:04","http://medicacademic.com/aza/jhon.exe","online","malware_download","njRAT","https://urlhaus.abuse.ch/url/336999/","JayTHL"
+"337005","2020-04-08 19:32:28","http://medicacademic.com/aza/jonny.exe","offline","malware_download","RevengeRAT","https://urlhaus.abuse.ch/url/337005/","JayTHL"
+"337004","2020-04-08 19:32:23","http://medicacademic.com/aza/gxx.exe","offline","malware_download","njRAT","https://urlhaus.abuse.ch/url/337004/","JayTHL"
+"337003","2020-04-08 19:32:21","http://medicacademic.com/aza/cvc.exe","offline","malware_download","RevengeRAT","https://urlhaus.abuse.ch/url/337003/","JayTHL"
+"337002","2020-04-08 19:32:18","http://medicacademic.com/aza/569.exe","offline","malware_download","RevengeRAT","https://urlhaus.abuse.ch/url/337002/","JayTHL"
+"337001","2020-04-08 19:32:14","http://medicacademic.com/aza/415.exe","offline","malware_download","RevengeRAT","https://urlhaus.abuse.ch/url/337001/","JayTHL"
+"337000","2020-04-08 19:32:07","http://medicacademic.com/aza/123.exe","offline","malware_download","njRAT","https://urlhaus.abuse.ch/url/337000/","JayTHL"
+"336999","2020-04-08 19:32:04","http://medicacademic.com/aza/jhon.exe","offline","malware_download","njRAT","https://urlhaus.abuse.ch/url/336999/","JayTHL"
 "336998","2020-04-08 19:31:29","http://178.128.225.245/mipsel","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/336998/","zbetcheckin"
 "336997","2020-04-08 19:31:26","http://178.128.225.245/i586","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/336997/","zbetcheckin"
 "336996","2020-04-08 19:31:23","http://178.128.225.245/EkSgbins.sh","offline","malware_download","shellscript","https://urlhaus.abuse.ch/url/336996/","zbetcheckin"
@@ -21361,7 +21586,7 @@
 "336692","2020-04-08 09:04:56","http://115.48.51.147:50127/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/336692/","Gandylyan1"
 "336691","2020-04-08 09:04:51","http://111.43.223.125:44702/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/336691/","Gandylyan1"
 "336690","2020-04-08 09:04:46","http://223.10.34.8:46310/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/336690/","Gandylyan1"
-"336689","2020-04-08 09:04:42","http://49.84.125.254:46958/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/336689/","Gandylyan1"
+"336689","2020-04-08 09:04:42","http://49.84.125.254:46958/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/336689/","Gandylyan1"
 "336688","2020-04-08 09:04:37","http://36.107.28.239:46990/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/336688/","Gandylyan1"
 "336687","2020-04-08 09:04:33","http://221.15.11.53:48053/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/336687/","Gandylyan1"
 "336686","2020-04-08 09:04:30","http://110.154.176.82:48107/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/336686/","Gandylyan1"
@@ -21421,7 +21646,7 @@
 "336632","2020-04-08 06:06:08","http://162.212.113.99:43200/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/336632/","Gandylyan1"
 "336631","2020-04-08 06:06:04","http://masson.prodigyprinting.com/datacollectionservice.php3","offline","malware_download","exe,Qakbot","https://urlhaus.abuse.ch/url/336631/","lazyactivist192"
 "336630","2020-04-08 06:05:53","http://unistore.heatherling.com/datacollectionservice.php3","offline","malware_download","exe,Qakbot","https://urlhaus.abuse.ch/url/336630/","lazyactivist192"
-"336629","2020-04-08 06:05:30","http://ebook.w3wvg.com/datacollectionservice.php3","offline","malware_download","exe,Qakbot","https://urlhaus.abuse.ch/url/336629/","lazyactivist192"
+"336629","2020-04-08 06:05:30","http://ebook.w3wvg.com/datacollectionservice.php3","online","malware_download","exe,Qakbot","https://urlhaus.abuse.ch/url/336629/","lazyactivist192"
 "336628","2020-04-08 06:05:13","http://www.clinicamariademolina.com/SWIFT_ES21430042283_27032020.jar","online","malware_download","Adwind","https://urlhaus.abuse.ch/url/336628/","j00dan"
 "336627","2020-04-08 06:05:09","http://45.139.236.86/kremlin.vbs","offline","malware_download","None","https://urlhaus.abuse.ch/url/336627/","benkow_"
 "336626","2020-04-08 06:05:07","http://182.115.215.108:57294/Mozi.m","offline","malware_download","elf,gafgyt,Mozi","https://urlhaus.abuse.ch/url/336626/","07ac0n"
@@ -21701,7 +21926,7 @@
 "336352","2020-04-08 02:50:05","http://209.141.52.28/bins.sh","offline","malware_download","shellscript","https://urlhaus.abuse.ch/url/336352/","zbetcheckin"
 "336351","2020-04-08 01:34:12","http://155.138.217.118/sh4","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/336351/","zbetcheckin"
 "336350","2020-04-08 01:34:08","http://155.138.217.118/armv6l","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/336350/","zbetcheckin"
-"336349","2020-04-08 01:34:06","http://46.39.247.65:7361/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/336349/","zbetcheckin"
+"336349","2020-04-08 01:34:06","http://46.39.247.65:7361/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/336349/","zbetcheckin"
 "336348","2020-04-08 01:30:28","http://155.138.217.118/sparc","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/336348/","zbetcheckin"
 "336347","2020-04-08 01:30:25","http://37.49.226.176/fbot.arm7","offline","malware_download","elf","https://urlhaus.abuse.ch/url/336347/","zbetcheckin"
 "336346","2020-04-08 01:30:23","http://104.40.17.31/Demon.arm4","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/336346/","zbetcheckin"
@@ -21882,9 +22107,9 @@
 "336171","2020-04-07 14:19:10","https://drive.google.com/uc?export=download&id=1MBvIbdBL0wdCJBGhakF0D3JQps2cTVId","offline","malware_download","Downloader.Pony,encrypted,GuLoader","https://urlhaus.abuse.ch/url/336171/","abuse_ch"
 "336170","2020-04-07 14:16:00","http://robotrade.com.vn/wp-content/images/views/YtOA46S5guGQy9L.exe","offline","malware_download","HawkEye","https://urlhaus.abuse.ch/url/336170/","RobbieWhite98"
 "336169","2020-04-07 14:15:53","http://robotrade.com.vn/wp-content/images/views/itsRL2XbtQKrNnQ.exe","offline","malware_download","HawkEye","https://urlhaus.abuse.ch/url/336169/","RobbieWhite98"
-"336168","2020-04-07 14:15:47","http://modcloudserver.eu/arinze/arinze.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/336168/","0xFrost"
+"336168","2020-04-07 14:15:47","http://modcloudserver.eu/arinze/arinze.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/336168/","0xFrost"
 "336167","2020-04-07 14:15:43","http://modcloudserver.eu/donstan/stanz.exe","offline","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/336167/","RobbieWhite98"
-"336166","2020-04-07 14:15:19","http://renovanorte.com/Preview.exe","online","malware_download","None","https://urlhaus.abuse.ch/url/336166/","anonymous"
+"336166","2020-04-07 14:15:19","http://renovanorte.com/Preview.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/336166/","anonymous"
 "336165","2020-04-07 14:15:15","http://eroblog.best/1.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/336165/","RobbieWhite98"
 "336164","2020-04-07 14:15:11","http://posqit.net/0/80177.exe","offline","malware_download","exe,Loki,lokibot","https://urlhaus.abuse.ch/url/336164/","RobbieWhite98"
 "336163","2020-04-07 14:15:07","https://www.vodafone5g.info/Vodafone5G.apk","offline","malware_download","apk ,Cerberus","https://urlhaus.abuse.ch/url/336163/","RobbieWhite98"
@@ -21964,7 +22189,7 @@
 "336089","2020-04-07 09:06:16","http://182.127.113.205:44137/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/336089/","Gandylyan1"
 "336088","2020-04-07 09:06:12","http://162.212.114.7:51936/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/336088/","Gandylyan1"
 "336087","2020-04-07 09:06:08","http://123.97.150.111:49237/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/336087/","Gandylyan1"
-"336086","2020-04-07 09:06:03","http://114.236.152.230:42447/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/336086/","Gandylyan1"
+"336086","2020-04-07 09:06:03","http://114.236.152.230:42447/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/336086/","Gandylyan1"
 "336085","2020-04-07 09:05:58","http://61.241.170.194:33235/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/336085/","Gandylyan1"
 "336084","2020-04-07 09:05:46","http://77.43.198.224:34278/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/336084/","Gandylyan1"
 "336083","2020-04-07 09:05:40","http://27.11.213.191:51874/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/336083/","Gandylyan1"
@@ -22022,7 +22247,7 @@
 "336031","2020-04-07 06:03:11","http://110.179.13.146:53044/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/336031/","Gandylyan1"
 "336030","2020-04-07 06:03:06","http://111.43.223.112:48012/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/336030/","Gandylyan1"
 "336029","2020-04-07 06:03:03","http://113.65.7.140:38755/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/336029/","Gandylyan1"
-"336028","2020-04-07 05:54:10","http://modcloudserver.eu/djfilez/djfilez.exe","online","malware_download","AgentTesla,exe,GuLoader","https://urlhaus.abuse.ch/url/336028/","Jouliok"
+"336028","2020-04-07 05:54:10","http://modcloudserver.eu/djfilez/djfilez.exe","offline","malware_download","AgentTesla,exe,GuLoader","https://urlhaus.abuse.ch/url/336028/","Jouliok"
 "336027","2020-04-07 05:54:04","http://barrielajueste.duckdns.org/projeto?W334KLMAT0BB1X98VCK3C8DZIL56M/Security_WhatsAppWe","offline","malware_download","MetaMorfo","https://urlhaus.abuse.ch/url/336027/","1ZRR4H"
 "336026","2020-04-07 05:53:25","http://19ce033f.ngrok.io/sh4","offline","malware_download","elf","https://urlhaus.abuse.ch/url/336026/","hypoweb"
 "336025","2020-04-07 05:53:23","http://19ce033f.ngrok.io/i686","offline","malware_download","elf","https://urlhaus.abuse.ch/url/336025/","hypoweb"
@@ -22539,7 +22764,7 @@
 "335513","2020-04-06 03:05:01","http://111.42.89.137:58481/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/335513/","Gandylyan1"
 "335512","2020-04-06 03:04:57","http://124.67.89.238:35002/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/335512/","Gandylyan1"
 "335511","2020-04-06 03:04:52","http://42.230.203.221:46130/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/335511/","Gandylyan1"
-"335510","2020-04-06 03:04:49","http://114.226.234.153:39439/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/335510/","Gandylyan1"
+"335510","2020-04-06 03:04:49","http://114.226.234.153:39439/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/335510/","Gandylyan1"
 "335509","2020-04-06 03:04:44","http://36.35.160.232:45088/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/335509/","Gandylyan1"
 "335508","2020-04-06 03:04:40","http://42.227.240.108:44678/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/335508/","Gandylyan1"
 "335507","2020-04-06 03:04:34","http://123.10.132.61:55562/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/335507/","Gandylyan1"
@@ -22583,7 +22808,7 @@
 "335469","2020-04-06 03:00:10","http://155.94.131.150/bins/blxntz.arm6","offline","malware_download","None","https://urlhaus.abuse.ch/url/335469/","JayTHL"
 "335468","2020-04-06 03:00:08","http://155.94.131.150/bins/blxntz.arm5","offline","malware_download","None","https://urlhaus.abuse.ch/url/335468/","JayTHL"
 "335467","2020-04-06 03:00:05","http://155.94.131.150/bins/blxntz.arm","offline","malware_download","None","https://urlhaus.abuse.ch/url/335467/","JayTHL"
-"335466","2020-04-06 02:10:06","http://14.33.86.236:63421/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/335466/","zbetcheckin"
+"335466","2020-04-06 02:10:06","http://14.33.86.236:63421/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/335466/","zbetcheckin"
 "335465","2020-04-06 00:05:27","http://221.210.211.29:41172/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/335465/","Gandylyan1"
 "335464","2020-04-06 00:05:21","http://31.146.124.61:54190/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/335464/","Gandylyan1"
 "335463","2020-04-06 00:04:50","http://162.212.114.65:51834/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/335463/","Gandylyan1"
@@ -22881,7 +23106,7 @@
 "335171","2020-04-05 09:05:32","http://116.114.95.64:43487/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/335171/","Gandylyan1"
 "335170","2020-04-05 09:05:29","http://125.40.18.146:43577/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/335170/","Gandylyan1"
 "335169","2020-04-05 09:05:25","http://110.18.194.228:57224/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/335169/","Gandylyan1"
-"335168","2020-04-05 09:05:21","http://49.68.235.19:34850/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/335168/","Gandylyan1"
+"335168","2020-04-05 09:05:21","http://49.68.235.19:34850/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/335168/","Gandylyan1"
 "335167","2020-04-05 09:05:14","http://111.42.66.24:36050/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/335167/","Gandylyan1"
 "335166","2020-04-05 09:05:12","http://58.243.123.217:49914/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/335166/","Gandylyan1"
 "335165","2020-04-05 09:05:08","http://182.127.29.218:53347/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/335165/","Gandylyan1"
@@ -22896,7 +23121,7 @@
 "335156","2020-04-05 07:47:04","https://onedrive.live.com/download?cid=505BE76830F4DC4C&resid=505BE76830F4DC4C%21382&authkey=AMVPi6SFLWG72ao","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/335156/","abuse_ch"
 "335155","2020-04-05 07:46:10","https://onedrive.live.com/download?cid=8191351450372B91&resid=8191351450372B91%21288&authkey=AJhDPfJmz4mSrPM","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/335155/","abuse_ch"
 "335154","2020-04-05 07:46:08","https://drive.google.com/uc?export=download&id=155YWM4qqf1J3p8efRYQDQMU3sZXpX7V6","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/335154/","abuse_ch"
-"335153","2020-04-05 07:32:05","http://maringareservas.com.br/dony.jpg","online","malware_download","Encoded,njRAT,rat","https://urlhaus.abuse.ch/url/335153/","abuse_ch"
+"335153","2020-04-05 07:32:05","http://maringareservas.com.br/dony.jpg","offline","malware_download","Encoded,njRAT,rat","https://urlhaus.abuse.ch/url/335153/","abuse_ch"
 "335152","2020-04-05 07:27:05","https://docs.google.com/uc?id=12yy_E3aTtAWOPqYdrXPvgj92EqjkVV1n&export=download","offline","malware_download","encrypted,GuLoader,NetWire,rat","https://urlhaus.abuse.ch/url/335152/","abuse_ch"
 "335151","2020-04-05 07:25:03","http://castmart.ga/~zadmin/icloud/bill_encrypted_9743D3F.bin","offline","malware_download","encrypted,Loki","https://urlhaus.abuse.ch/url/335151/","abuse_ch"
 "335150","2020-04-05 06:52:04","http://42.237.26.135:57611/Mozi.m+-O+-","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/335150/","zbetcheckin"
@@ -23183,7 +23408,7 @@
 "334869","2020-04-04 15:05:38","http://111.42.66.8:34003/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/334869/","Gandylyan1"
 "334868","2020-04-04 15:05:35","http://111.42.102.143:60633/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/334868/","Gandylyan1"
 "334867","2020-04-04 15:05:31","http://182.114.253.199:47273/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/334867/","Gandylyan1"
-"334866","2020-04-04 15:05:26","http://121.233.117.174:38325/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/334866/","Gandylyan1"
+"334866","2020-04-04 15:05:26","http://121.233.117.174:38325/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/334866/","Gandylyan1"
 "334865","2020-04-04 15:05:22","http://112.27.88.109:34980/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/334865/","Gandylyan1"
 "334864","2020-04-04 15:05:19","http://45.161.255.44:46815/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/334864/","Gandylyan1"
 "334863","2020-04-04 15:05:15","http://121.226.238.117:49829/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/334863/","Gandylyan1"
@@ -23669,7 +23894,7 @@
 "334383","2020-04-03 13:13:14","http://castmart.ga/~zadmin/icloud/em_encrypted_8B5BEAF.bin","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/334383/","abuse_ch"
 "334382","2020-04-03 13:13:11","https://www.bullionexperts.com/60days_encrypted_C1D4B4F.bin","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/334382/","abuse_ch"
 "334381","2020-04-03 13:13:08","https://drive.google.com/u/0/uc?id=1J2uULKdAUtafKrTH6VlS05iuPX3SRcVP&export=download","offline","malware_download","encrypted,GuLoader,RemcosRAT","https://urlhaus.abuse.ch/url/334381/","abuse_ch"
-"334380","2020-04-03 13:11:03","http://ucto-id.cz/binr.image","online","malware_download","exe,Formbook","https://urlhaus.abuse.ch/url/334380/","zbetcheckin"
+"334380","2020-04-03 13:11:03","http://ucto-id.cz/binr.image","offline","malware_download","exe,Formbook","https://urlhaus.abuse.ch/url/334380/","zbetcheckin"
 "334379","2020-04-03 12:51:35","https://onedrive.live.com/download?cid=FB607A99940C799A&resid=FB607A99940C799A%21167&authkey=ADU96AfwHMgRXi4","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/334379/","abuse_ch"
 "334378","2020-04-03 12:51:32","http://dakrimcmdk.ch/omarch_encrypted_1FCAFA0.bin","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/334378/","abuse_ch"
 "334377","2020-04-03 12:51:29","https://drive.google.com/uc?export=download&id=11SLRJiP9Zs-e4a9ePUzNJeM9JDaLXeMR","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/334377/","abuse_ch"
@@ -23732,7 +23957,7 @@
 "334320","2020-04-03 09:34:08","http://37.49.226.102/bins/MiraiVariant.x86","offline","malware_download","elf","https://urlhaus.abuse.ch/url/334320/","Gandylyan1"
 "334319","2020-04-03 09:34:05","http://37.49.226.102/bins/MiraiVariant.mpsl","offline","malware_download","elf","https://urlhaus.abuse.ch/url/334319/","Gandylyan1"
 "334318","2020-04-03 09:34:02","http://37.49.226.102/bins/MiraiVariant.arm6","offline","malware_download","elf","https://urlhaus.abuse.ch/url/334318/","Gandylyan1"
-"334317","2020-04-03 09:30:10","http://backlinksale.com/don/code/Attack.jpg","online","malware_download","remcos","https://urlhaus.abuse.ch/url/334317/","gorimpthon"
+"334317","2020-04-03 09:30:10","http://backlinksale.com/don/code/Attack.jpg","offline","malware_download","remcos","https://urlhaus.abuse.ch/url/334317/","gorimpthon"
 "334316","2020-04-03 09:25:08","http://www.imt.co.in/yyyyyyy.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/334316/","vxvault"
 "334315","2020-04-03 09:11:26","http://157.245.139.174/armv4l","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/334315/","zbetcheckin"
 "334314","2020-04-03 09:11:24","http://157.245.139.174/i586","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/334314/","zbetcheckin"
@@ -23991,7 +24216,7 @@
 "334061","2020-04-02 18:03:13","http://180.124.13.12:42279/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/334061/","Gandylyan1"
 "334060","2020-04-02 18:03:05","http://183.215.188.50:56562/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/334060/","Gandylyan1"
 "334059","2020-04-02 17:40:11","https://eetownvulgar.xyz/3/ssf.dll","offline","malware_download","dll,zloader","https://urlhaus.abuse.ch/url/334059/","abuse_ch"
-"334058","2020-04-02 17:35:21","http://93.102.193.254:51142/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/334058/","zbetcheckin"
+"334058","2020-04-02 17:35:21","http://93.102.193.254:51142/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/334058/","zbetcheckin"
 "334057","2020-04-02 17:31:08","http://frogistik99.com/9548.exe","offline","malware_download","Dridex,exe","https://urlhaus.abuse.ch/url/334057/","abuse_ch"
 "334056","2020-04-02 17:26:09","https://drive.google.com/uc?export=download&id=1tAsOF062xStYM8PM-UBwDYZqC-zU1jXJ","offline","malware_download","encrypted,GuLoader,RemcosRAT","https://urlhaus.abuse.ch/url/334056/","abuse_ch"
 "334055","2020-04-02 16:59:11","http://office-updates-indexes.com/max.bin","offline","malware_download","None","https://urlhaus.abuse.ch/url/334055/","JayTHL"
@@ -27286,7 +27511,7 @@
 "330752","2020-03-27 06:42:29","https://supervisedvisitsllc.com/vla_encrypted_6D99100.bin","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/330752/","abuse_ch"
 "330751","2020-03-27 06:42:25","http://doha-media.com//ldr_3341780230_karantino.xyz.exe","offline","malware_download","exe,IcedID","https://urlhaus.abuse.ch/url/330751/","jstrosch"
 "330750","2020-03-27 06:42:21","http://hotdsk.com/staple/444444.png","offline","malware_download"," Qbot,Qakbot,Quakbot","https://urlhaus.abuse.ch/url/330750/","anonymous"
-"330749","2020-03-27 06:42:18","http://share.dmca.gripe/umGPHqvEPj2uIGdt.doc","online","malware_download","exe","https://urlhaus.abuse.ch/url/330749/","jstrosch"
+"330749","2020-03-27 06:42:18","http://share.dmca.gripe/umGPHqvEPj2uIGdt.doc","offline","malware_download","exe","https://urlhaus.abuse.ch/url/330749/","jstrosch"
 "330748","2020-03-27 06:42:06","https://halykhome.com/re/files/covidMappia_v1.0.3.apk","offline","malware_download","android,apk ,COVID","https://urlhaus.abuse.ch/url/330748/","DoberGroup"
 "330747","2020-03-27 06:41:36","https://drive.google.com/uc?export=download&id=1y5UM5xwWTFnyEaWVAwwfF9pihuNEqtNA","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/330747/","abuse_ch"
 "330746","2020-03-27 06:41:29","https://drive.google.com/uc?export=download&id=1sQA_CevfG7Bm-p0MMJTejGShKIwoOTAt","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/330746/","abuse_ch"
@@ -28031,7 +28256,7 @@
 "330007","2020-03-25 20:18:12","http://mwrc.ca/a/me_encrypted_3F1DDE0.bin","offline","malware_download","None","https://urlhaus.abuse.ch/url/330007/","JayTHL"
 "330006","2020-03-25 20:18:08","http://mwrc.ca/a/Stigmaticalque.exe","offline","malware_download","GuLoader","https://urlhaus.abuse.ch/url/330006/","JayTHL"
 "330005","2020-03-25 20:18:06","http://mwrc.ca/a/SAVINESNONSI.exe","offline","malware_download","GuLoader","https://urlhaus.abuse.ch/url/330005/","JayTHL"
-"330004","2020-03-25 20:16:09","https://share.dmca.gripe/vPh5kV34np1hCODm.doc","online","malware_download","AZORult,exe","https://urlhaus.abuse.ch/url/330004/","zbetcheckin"
+"330004","2020-03-25 20:16:09","https://share.dmca.gripe/vPh5kV34np1hCODm.doc","offline","malware_download","AZORult,exe","https://urlhaus.abuse.ch/url/330004/","zbetcheckin"
 "330003","2020-03-25 19:49:03","https://pastebin.com/raw/1URH290U","offline","malware_download","Encoded,exe,njRAT","https://urlhaus.abuse.ch/url/330003/","viql"
 "330002","2020-03-25 19:38:04","https://pastebin.com/raw/sPECbGga","offline","malware_download","Encoded,exe,Sodinokibi","https://urlhaus.abuse.ch/url/330002/","viql"
 "330001","2020-03-25 19:29:04","https://pastebin.com/raw/xDqfwtJZ","offline","malware_download","None","https://urlhaus.abuse.ch/url/330001/","JayTHL"
@@ -29111,7 +29336,7 @@
 "328924","2020-03-23 18:05:08","http://42.231.69.127:54527/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/328924/","Gandylyan1"
 "328923","2020-03-23 18:05:03","http://211.137.225.70:44870/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/328923/","Gandylyan1"
 "328922","2020-03-23 18:05:00","http://42.230.120.130:45678/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/328922/","Gandylyan1"
-"328921","2020-03-23 18:04:56","http://31.146.124.188:40397/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/328921/","Gandylyan1"
+"328921","2020-03-23 18:04:56","http://31.146.124.188:40397/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/328921/","Gandylyan1"
 "328920","2020-03-23 18:04:54","http://175.8.61.132:56853/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/328920/","Gandylyan1"
 "328919","2020-03-23 18:04:48","http://182.127.123.195:55835/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/328919/","Gandylyan1"
 "328918","2020-03-23 18:04:44","http://223.199.248.20:51133/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/328918/","Gandylyan1"
@@ -29571,7 +29796,7 @@
 "328464","2020-03-23 02:08:03","http://31.184.198.160/bins/suckukinjereeeettttttt.x86","offline","malware_download","elf,mirai,upx","https://urlhaus.abuse.ch/url/328464/","0xrb"
 "328463","2020-03-23 02:07:03","http://195.231.3.18/bins/kowai.x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/328463/","0xrb"
 "328462","2020-03-23 02:04:05","http://212.133.243.104:54458/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/328462/","zbetcheckin"
-"328461","2020-03-23 01:21:10","http://180.177.104.65:1711/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/328461/","zbetcheckin"
+"328461","2020-03-23 01:21:10","http://180.177.104.65:1711/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/328461/","zbetcheckin"
 "328460","2020-03-23 00:29:05","http://46.177.245.204:37341/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/328460/","zbetcheckin"
 "328459","2020-03-23 00:04:34","http://211.137.225.83:45825/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/328459/","Gandylyan1"
 "328458","2020-03-23 00:04:30","http://114.228.61.181:47827/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/328458/","Gandylyan1"
@@ -29715,7 +29940,7 @@
 "328320","2020-03-22 15:04:31","http://115.59.22.220:56467/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/328320/","Gandylyan1"
 "328319","2020-03-22 15:04:24","http://110.179.31.44:58071/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/328319/","Gandylyan1"
 "328318","2020-03-22 15:04:19","http://115.49.79.131:51481/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/328318/","Gandylyan1"
-"328317","2020-03-22 15:04:15","http://222.185.161.165:47113/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/328317/","Gandylyan1"
+"328317","2020-03-22 15:04:15","http://222.185.161.165:47113/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/328317/","Gandylyan1"
 "328316","2020-03-22 14:58:13","http://121.162.174.59:40481/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/328316/","zbetcheckin"
 "328315","2020-03-22 13:43:05","https://pastebin.com/raw/585eHqKL","offline","malware_download","Encoded,exe,RevengeRAT","https://urlhaus.abuse.ch/url/328315/","viql"
 "328314","2020-03-22 13:42:04","https://pastebin.com/raw/eNcKbQUF","offline","malware_download","None","https://urlhaus.abuse.ch/url/328314/","JayTHL"
@@ -30171,7 +30396,7 @@
 "327864","2020-03-20 21:59:32","http://161.35.13.45/AB4g5/Josho.arm6","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/327864/","zbetcheckin"
 "327863","2020-03-20 21:53:03","https://pastebin.com/raw/zT7HpjeT","offline","malware_download","Encoded,exe,njRAT","https://urlhaus.abuse.ch/url/327863/","viql"
 "327862","2020-03-20 21:47:02","http://37.49.226.138/luoqxbocmkxnexy/tbox.x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/327862/","zbetcheckin"
-"327861","2020-03-20 21:36:14","http://121.159.208.28:21363/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/327861/","zbetcheckin"
+"327861","2020-03-20 21:36:14","http://121.159.208.28:21363/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/327861/","zbetcheckin"
 "327860","2020-03-20 21:36:09","http://175.201.20.132:17327/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/327860/","zbetcheckin"
 "327859","2020-03-20 21:06:21","http://111.42.102.78:58801/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/327859/","Gandylyan1"
 "327858","2020-03-20 21:06:18","http://110.18.194.20:44800/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/327858/","Gandylyan1"
@@ -30216,7 +30441,7 @@
 "327819","2020-03-20 20:12:27","https://drive.google.com/uc?export=download&id=1WXba3aoRms0M-l57k8edc8vT6AZCSbL_","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/327819/","abuse_ch"
 "327818","2020-03-20 20:12:16","https://drive.google.com/uc?export=download&id=1hWBRWksG8o8X06HARnMORYSeOAe86Lie","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/327818/","abuse_ch"
 "327817","2020-03-20 20:12:08","https://onedrive.live.com/download?cid=8026693BB607A044&resid=8026693BB607A044%21177&authkey=APT0GTjr3xyKjJo","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/327817/","abuse_ch"
-"327816","2020-03-20 20:12:05","http://ophtalmiccenter.com/wp-content/uploads/cloud/Chy_Host_encrypted_C2808DF.bin","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/327816/","abuse_ch"
+"327816","2020-03-20 20:12:05","http://ophtalmiccenter.com/wp-content/uploads/cloud/Chy_Host_encrypted_C2808DF.bin","online","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/327816/","abuse_ch"
 "327815","2020-03-20 19:20:38","http://159.65.224.56/bins/Tsunami.x86","offline","malware_download","elf","https://urlhaus.abuse.ch/url/327815/","0xrb"
 "327814","2020-03-20 19:20:06","http://45.84.196.21/SBIDIOT/x86","offline","malware_download","elf","https://urlhaus.abuse.ch/url/327814/","0xrb"
 "327813","2020-03-20 19:20:04","http://161.35.13.45/AB4g5/Josho.x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/327813/","0xrb"
@@ -31934,7 +32159,7 @@
 "326093","2020-03-17 18:03:04","http://45.79.110.132/admin201506/uploadApkFile/rt/20161125/lookupalldata2.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/326093/","zbetcheckin"
 "326092","2020-03-17 17:58:05","http://211.105.171.108:8097/.i","offline","malware_download","elf","https://urlhaus.abuse.ch/url/326092/","zbetcheckin"
 "326091","2020-03-17 17:43:34","http://typrer.com/qrpt.exe","offline","malware_download","Dridex,exe","https://urlhaus.abuse.ch/url/326091/","anonymous"
-"326090","2020-03-17 16:53:21","http://175.211.16.150:42907/.i","online","malware_download","elf","https://urlhaus.abuse.ch/url/326090/","zbetcheckin"
+"326090","2020-03-17 16:53:21","http://175.211.16.150:42907/.i","offline","malware_download","elf","https://urlhaus.abuse.ch/url/326090/","zbetcheckin"
 "326089","2020-03-17 16:39:13","https://pastebin.com/raw/av0gsDC5","offline","malware_download","meterpreter","https://urlhaus.abuse.ch/url/326089/","viql"
 "326088","2020-03-17 16:09:34","https://pastebin.com/raw/j5q8b6w8","offline","malware_download","meterpreter","https://urlhaus.abuse.ch/url/326088/","viql"
 "326087","2020-03-17 15:50:52","http://125.65.46.241:8080/chongfu.sh","offline","malware_download","None","https://urlhaus.abuse.ch/url/326087/","anonymous"
@@ -32434,7 +32659,7 @@
 "325592","2020-03-16 10:43:12","http://5.45.164.142:13507/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/325592/","zbetcheckin"
 "325591","2020-03-16 10:43:07","http://211.216.116.40:6702/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/325591/","zbetcheckin"
 "325590","2020-03-16 10:00:15","http://bakery365sawamura.website/soul.exe","offline","malware_download","exe,Gozi,ursnif","https://urlhaus.abuse.ch/url/325590/","abuse_ch"
-"325589","2020-03-16 09:55:16","https://drive.google.com/uc?id=1eRTPmoUTpVVU19aONDr-yo0-RNkG5l07&export=download","online","malware_download","Gozi,js,password:7777,ursnif,zip","https://urlhaus.abuse.ch/url/325589/","abuse_ch"
+"325589","2020-03-16 09:55:16","https://drive.google.com/uc?id=1eRTPmoUTpVVU19aONDr-yo0-RNkG5l07&export=download","offline","malware_download","Gozi,js,password:7777,ursnif,zip","https://urlhaus.abuse.ch/url/325589/","abuse_ch"
 "325588","2020-03-16 09:41:03","http://185.163.45.101/bins/blxntz.arm5","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/325588/","zbetcheckin"
 "325587","2020-03-16 09:38:09","https://drive.google.com/uc?export=download&id=1DM4l_xFJc_yzE8nKFl01OojkrNl4kwpO","offline","malware_download","encrypted,GuLoader,Loki","https://urlhaus.abuse.ch/url/325587/","abuse_ch"
 "325586","2020-03-16 09:35:36","http://185.163.45.101/bins/blxntz.sh4","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/325586/","zbetcheckin"
@@ -32450,7 +32675,7 @@
 "325576","2020-03-16 09:31:05","http://185.163.45.101/bins/blxntz.x86","offline","malware_download","elf","https://urlhaus.abuse.ch/url/325576/","Gandylyan1"
 "325575","2020-03-16 09:30:03","https://185.163.45.101/bins/blxntz.x86","offline","malware_download","elf","https://urlhaus.abuse.ch/url/325575/","Gandylyan1"
 "325574","2020-03-16 09:24:03","http://185.163.45.101/blxntz.sh","offline","malware_download","shellscript","https://urlhaus.abuse.ch/url/325574/","zbetcheckin"
-"325573","2020-03-16 09:18:11","http://14.37.6.148:36561/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/325573/","zbetcheckin"
+"325573","2020-03-16 09:18:11","http://14.37.6.148:36561/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/325573/","zbetcheckin"
 "325572","2020-03-16 09:18:06","http://121.150.77.164:18441/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/325572/","zbetcheckin"
 "325571","2020-03-16 09:17:05","http://203.128.90.222:6402/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/325571/","zbetcheckin"
 "325570","2020-03-16 09:07:13","http://172.39.19.201:55114/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/325570/","Gandylyan1"
@@ -32485,7 +32710,7 @@
 "325541","2020-03-16 08:35:09","https://drive.google.com/uc?export=download&id=12DkmpDcou-H4IO3G-GQ_RsqycMmjR6so","offline","malware_download","encrypted,GuLoader,rat,RemcosRAT","https://urlhaus.abuse.ch/url/325541/","abuse_ch"
 "325540","2020-03-16 08:34:06","https://confidenceforbid.com/EFT_000343_MILTZ.jar","offline","malware_download","jar,Qealler,stealer","https://urlhaus.abuse.ch/url/325540/","Jouliok"
 "325539","2020-03-16 08:32:11","http://116.98.89.44:4138/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/325539/","zbetcheckin"
-"325538","2020-03-16 08:32:06","http://95.243.30.86:50496/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/325538/","zbetcheckin"
+"325538","2020-03-16 08:32:06","http://95.243.30.86:50496/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/325538/","zbetcheckin"
 "325537","2020-03-16 08:02:04","http://castmart.ga/~zadmin/icloud/apsbe_encrypted_F0929AF.bin","offline","malware_download","encrypted,GuLoader,Neurevt","https://urlhaus.abuse.ch/url/325537/","abuse_ch"
 "325536","2020-03-16 08:00:13","http://ntamachlning-my.com/milguy/host_encrypted_7CF61F0.bin","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/325536/","abuse_ch"
 "325535","2020-03-16 07:59:38","http://neuplastlcs.com/mil/unvalidnitri.exe","offline","malware_download","exe,Formbook,opendir","https://urlhaus.abuse.ch/url/325535/","abuse_ch"
@@ -34780,7 +35005,7 @@
 "323235","2020-03-10 00:05:35","http://42.224.27.55:41139/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/323235/","Gandylyan1"
 "323234","2020-03-10 00:05:31","http://36.105.35.44:34752/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/323234/","Gandylyan1"
 "323233","2020-03-10 00:05:23","http://172.36.44.68:53498/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/323233/","Gandylyan1"
-"323232","2020-03-10 00:04:51","http://121.231.164.108:39129/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/323232/","Gandylyan1"
+"323232","2020-03-10 00:04:51","http://121.231.164.108:39129/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/323232/","Gandylyan1"
 "323231","2020-03-10 00:04:42","http://222.139.15.210:38440/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/323231/","Gandylyan1"
 "323230","2020-03-10 00:04:10","http://182.127.41.219:53811/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/323230/","Gandylyan1"
 "323229","2020-03-10 00:04:04","http://222.141.93.38:59317/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/323229/","Gandylyan1"
@@ -35583,7 +35808,7 @@
 "322430","2020-03-07 13:23:15","http://92.63.197.190/4","offline","malware_download","phorpiex","https://urlhaus.abuse.ch/url/322430/","0xCARNAGE"
 "322429","2020-03-07 13:23:14","http://92.63.197.190/3","offline","malware_download","phorpiex","https://urlhaus.abuse.ch/url/322429/","0xCARNAGE"
 "322428","2020-03-07 13:23:04","http://92.63.197.190/2","offline","malware_download","phorpiex","https://urlhaus.abuse.ch/url/322428/","0xCARNAGE"
-"322427","2020-03-07 13:22:21","http://tldrbox.top/3","online","malware_download","phorpiex","https://urlhaus.abuse.ch/url/322427/","0xCARNAGE"
+"322427","2020-03-07 13:22:21","http://tldrbox.top/3","offline","malware_download","phorpiex","https://urlhaus.abuse.ch/url/322427/","0xCARNAGE"
 "322426","2020-03-07 13:22:06","http://tldrbox.top/2","online","malware_download","phorpiex","https://urlhaus.abuse.ch/url/322426/","0xCARNAGE"
 "322425","2020-03-07 12:13:04","https://pastebin.com/raw/N9GyPZFj","offline","malware_download","Encoded,exe,njRAT","https://urlhaus.abuse.ch/url/322425/","viql"
 "322424","2020-03-07 12:04:23","http://103.91.17.137:35856/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/322424/","Gandylyan1"
@@ -36283,7 +36508,7 @@
 "321730","2020-03-05 08:46:15","http://phoenixweb.in/ogam.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/321730/","vxvault"
 "321729","2020-03-05 08:42:04","http://badgesforbullies.org/js/grunt2.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/321729/","zbetcheckin"
 "321728","2020-03-05 08:36:16","http://badgesforbullies.org/js/JuicyPotato.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/321728/","zbetcheckin"
-"321727","2020-03-05 08:36:12","http://badgesforbullies.org/js/beaconx64.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/321727/","zbetcheckin"
+"321727","2020-03-05 08:36:12","http://badgesforbullies.org/js/beaconx64.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/321727/","zbetcheckin"
 "321726","2020-03-05 08:36:09","https://pastebin.com/raw/35nbCQz6","offline","malware_download","AsyncRAT,Encoded,exe","https://urlhaus.abuse.ch/url/321726/","viql"
 "321725","2020-03-05 08:36:07","http://jload06.xyz/download.php?file=2.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/321725/","zbetcheckin"
 "321724","2020-03-05 08:36:04","http://badgesforbullies.org/js/art.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/321724/","zbetcheckin"
@@ -39823,7 +40048,7 @@
 "318169","2020-02-24 10:04:26","http://222.74.186.136:37019/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/318169/","Gandylyan1"
 "318168","2020-02-24 10:04:20","http://123.10.152.183:39922/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/318168/","Gandylyan1"
 "318167","2020-02-24 10:04:13","http://1.246.223.15:3094/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/318167/","Gandylyan1"
-"318166","2020-02-24 10:04:09","http://37.232.98.103:42282/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/318166/","Gandylyan1"
+"318166","2020-02-24 10:04:09","http://37.232.98.103:42282/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/318166/","Gandylyan1"
 "318165","2020-02-24 10:04:06","http://180.104.58.247:51741/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/318165/","Gandylyan1"
 "318164","2020-02-24 10:01:15","http://185.174.101.103/lk.a","offline","malware_download","elf","https://urlhaus.abuse.ch/url/318164/","Gandylyan1"
 "318163","2020-02-24 10:01:12","http://185.174.101.103/ts.gz","offline","malware_download","elf","https://urlhaus.abuse.ch/url/318163/","Gandylyan1"
@@ -41238,7 +41463,7 @@
 "316739","2020-02-20 22:03:12","http://222.74.186.132:51465/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/316739/","Gandylyan1"
 "316738","2020-02-20 22:03:08","http://1.246.223.116:4382/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/316738/","Gandylyan1"
 "316737","2020-02-20 22:03:04","http://113.26.94.117:33156/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/316737/","Gandylyan1"
-"316736","2020-02-20 22:02:04","http://94.41.0.174:32011/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/316736/","zbetcheckin"
+"316736","2020-02-20 22:02:04","http://94.41.0.174:32011/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/316736/","zbetcheckin"
 "316735","2020-02-20 21:49:03","https://pastebin.com/raw/4iYDsLKy","offline","malware_download","Encoded,exe,njRAT","https://urlhaus.abuse.ch/url/316735/","viql"
 "316734","2020-02-20 21:12:03","https://pastebin.com/raw/9Jw6zzYy","offline","malware_download","Encoded,exe,njRAT","https://urlhaus.abuse.ch/url/316734/","viql"
 "316733","2020-02-20 21:01:05","https://pastebin.com/raw/BJU79pEm","offline","malware_download","None","https://urlhaus.abuse.ch/url/316733/","JayTHL"
@@ -44626,7 +44851,7 @@
 "313330","2020-02-12 09:38:03","http://92.63.197.190/b.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/313330/","zbetcheckin"
 "313329","2020-02-12 09:33:06","http://23.249.164.109/office/invoice_11346.doc","offline","malware_download","RTF","https://urlhaus.abuse.ch/url/313329/","zbetcheckin"
 "313328","2020-02-12 09:33:04","http://92.63.197.190/11.exe","offline","malware_download","CoinMiner,exe,phorpiex","https://urlhaus.abuse.ch/url/313328/","zbetcheckin"
-"313327","2020-02-12 09:18:06","http://42.115.86.142:30999/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/313327/","zbetcheckin"
+"313327","2020-02-12 09:18:06","http://42.115.86.142:30999/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/313327/","zbetcheckin"
 "313326","2020-02-12 09:08:09","http://slot0.manews-relax.com/BraveIoT/spc","offline","malware_download","elf","https://urlhaus.abuse.ch/url/313326/","Gandylyan1"
 "313325","2020-02-12 09:08:07","http://slot0.manews-relax.com/BraveIoT/sh4","offline","malware_download","elf","https://urlhaus.abuse.ch/url/313325/","Gandylyan1"
 "313324","2020-02-12 09:08:05","http://slot0.manews-relax.com/BraveIoT/ppc","offline","malware_download","elf","https://urlhaus.abuse.ch/url/313324/","Gandylyan1"
@@ -44864,7 +45089,7 @@
 "313092","2020-02-11 16:29:05","https://pastebin.com/raw/P6b5bwTN","offline","malware_download","None","https://urlhaus.abuse.ch/url/313092/","JayTHL"
 "313091","2020-02-11 16:24:08","http://chnfsub2manglobalbusinessexytwosndy.duckdns.org/chfrnd2doc/regasm.exe","offline","malware_download","Formbook","https://urlhaus.abuse.ch/url/313091/","JAMESWT_MHT"
 "313090","2020-02-11 16:18:03","http://cermiamakmur.com/ii/remcosFIRE22_encrypted_25226C0.bin","offline","malware_download","encrypted,rat,RemcosRAT","https://urlhaus.abuse.ch/url/313090/","abuse_ch"
-"313089","2020-02-11 16:09:05","http://59.4.104.15:11453/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/313089/","zbetcheckin"
+"313089","2020-02-11 16:09:05","http://59.4.104.15:11453/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/313089/","zbetcheckin"
 "313088","2020-02-11 16:06:04","http://223.93.171.204:56473/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/313088/","Gandylyan1"
 "313087","2020-02-11 16:05:18","http://111.43.223.117:60325/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/313087/","Gandylyan1"
 "313086","2020-02-11 16:05:13","http://172.39.63.73:45399/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/313086/","Gandylyan1"
@@ -47289,7 +47514,7 @@
 "310660","2020-02-07 03:53:37","https://fementerprise.tech/wp-includes/abierto-recurso/756759-y6uuwVnbMrR-756759-y6uuwVnbMrR/9812933-2yN3sseb0nso/","offline","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/310660/","Cryptolaemus1"
 "310659","2020-02-07 03:53:34","http://www.ozzellabuildingsolutions.com.au/plugins/comun_disco/052fs2_kkp27fnahzm9_052fs2_kkp27fnahzm9/BchoH52bz_Nam84cz2i/","offline","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/310659/","Cryptolaemus1"
 "310658","2020-02-07 03:53:24","http://rekspirit.ru/wp-admin/css/colors/light/privado_disco/5946464_YSaSQs2_5946464_YSaSQs2/53742314_9gBeY76uEAnEYUA/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/310658/","Cryptolaemus1"
-"310657","2020-02-07 03:53:19","http://knightsbridgeenergy.com.ng/comun-recurso/84395329468-Q4tOEnVxsH-84395329468-Q4tOEnVxsH/0347272798-bCVZyi/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/310657/","Cryptolaemus1"
+"310657","2020-02-07 03:53:19","http://knightsbridgeenergy.com.ng/comun-recurso/84395329468-Q4tOEnVxsH-84395329468-Q4tOEnVxsH/0347272798-bCVZyi/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/310657/","Cryptolaemus1"
 "310656","2020-02-07 03:53:09","http://futurepath.fi/wp-content/abierto_recurso/Qju3SUpIkX_CGa8uO3oJ4e_Qju3SUpIkX_CGa8uO3oJ4e/k7dtI_dwNmJ1noa7kw/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/310656/","Cryptolaemus1"
 "310655","2020-02-07 03:53:06","http://dvsystem.com.vn/wp-content/cache/mYzzl9k0-40HmXXzZZg-matriz/96548035-MaAbOBJMp9-96548035-MaAbOBJMp9/6ufep-7u0uwu6/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/310655/","Cryptolaemus1"
 "310654","2020-02-07 03:21:04","http://carluxshop.com/wp-admin/report/b37z8i/qeqp87e44355311958481mtoljpxbil5z3xtg/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/310654/","spamhaus"
@@ -47318,7 +47543,7 @@
 "310631","2020-02-07 03:00:05","http://college-doc.ir/wp-admin/LLC/y94co7760477184947dqekjpua7xpz/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/310631/","Cryptolaemus1"
 "310630","2020-02-07 02:56:54","http://cp.zgkw.cn/calendar/attachments/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/310630/","spamhaus"
 "310629","2020-02-07 02:51:05","http://creationsbyannmarie.com/attachments/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/310629/","Cryptolaemus1"
-"310628","2020-02-07 02:47:08","http://cuacuonsieure.com/wp-content/LLC/r3zpuxa/zr8ru43550195958703319ix4o4vhvrohkkkx/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/310628/","spamhaus"
+"310628","2020-02-07 02:47:08","http://cuacuonsieure.com/wp-content/LLC/r3zpuxa/zr8ru43550195958703319ix4o4vhvrohkkkx/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/310628/","spamhaus"
 "310627","2020-02-07 02:42:04","http://daclim.ro/generator/LLC/s9mats2/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/310627/","spamhaus"
 "310626","2020-02-07 02:36:34","http://davidestates.in/wp-admin/paclm/okbagz5/0868530018558rk1jpjt8l13m06ew/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/310626/","Cryptolaemus1"
 "310625","2020-02-07 02:31:35","http://dayananda.sigma.websitestore.in/wp-includes/paclm/tvg36611/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/310625/","Cryptolaemus1"
@@ -48058,7 +48283,7 @@
 "309887","2020-02-06 09:04:51","http://182.127.184.218:37989/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/309887/","Gandylyan1"
 "309886","2020-02-06 09:04:48","http://113.25.43.71:47216/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/309886/","Gandylyan1"
 "309885","2020-02-06 09:04:44","http://123.10.25.39:52851/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/309885/","Gandylyan1"
-"309884","2020-02-06 09:04:39","http://186.73.188.132:59038/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/309884/","Gandylyan1"
+"309884","2020-02-06 09:04:39","http://186.73.188.132:59038/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/309884/","Gandylyan1"
 "309883","2020-02-06 09:04:16","http://49.70.10.213:53701/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/309883/","Gandylyan1"
 "309882","2020-02-06 09:04:12","http://111.42.66.151:51987/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/309882/","Gandylyan1"
 "309881","2020-02-06 09:04:08","http://111.43.223.97:58420/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/309881/","Gandylyan1"
@@ -48121,7 +48346,7 @@
 "309824","2020-02-06 07:13:36","http://91.208.184.160/gang.ppc","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/309824/","zbetcheckin"
 "309823","2020-02-06 07:13:22","http://91.208.184.160/gang.x86","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/309823/","zbetcheckin"
 "309822","2020-02-06 07:09:16","http://91.208.184.160/gang.mpsl","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/309822/","zbetcheckin"
-"309821","2020-02-06 07:08:20","http://knightsbridgeenergy.com.ng/comun-recurso//84395329468-Q4tOEnVxsH-84395329468-Q4tOEnVxsH/0347272798-bCVZyi/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/309821/","Cryptolaemus1"
+"309821","2020-02-06 07:08:20","http://knightsbridgeenergy.com.ng/comun-recurso//84395329468-Q4tOEnVxsH-84395329468-Q4tOEnVxsH/0347272798-bCVZyi/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/309821/","Cryptolaemus1"
 "309820","2020-02-06 07:08:12","http://123.4.212.93:45267/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/309820/","Gandylyan1"
 "309819","2020-02-06 07:08:09","http://117.207.220.205:51610/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/309819/","Gandylyan1"
 "309818","2020-02-06 07:08:06","http://172.36.12.114:45785/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/309818/","Gandylyan1"
@@ -48864,7 +49089,7 @@
 "309081","2020-02-05 13:48:53","https://icapture.app/wp-content/plugins/4990376224-NWbCrLLaQQ-zona/mg1fh-e5chqdawr20y60n-mg1fh-e5chqdawr20y60n/oTG7ZSRKi-mw631nv","offline","malware_download","None","https://urlhaus.abuse.ch/url/309081/","Cryptolaemus1"
 "309080","2020-02-05 13:48:12","http://navltas.me/jppp_2ED4.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/309080/","vxvault"
 "309079","2020-02-05 13:48:07","http://navltas.me/PI%20020520.exe","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/309079/","vxvault"
-"309078","2020-02-05 13:44:13","https://thevision.ro/dist/paclm/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/309078/","spamhaus"
+"309078","2020-02-05 13:44:13","https://thevision.ro/dist/paclm/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/309078/","spamhaus"
 "309077","2020-02-05 13:44:08","https://onubikkhon.com/wp-admin/404044821106-kY7xjPzw9A2a-section/9kQmSnn-kNlJNiRjwOa-profile/23942123298117-b0ffrHACxaD/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/309077/","Cryptolaemus1"
 "309076","2020-02-05 13:40:11","https://ukamoxil-amoxicillin.com/wp-admin/lm/2rrp524748272532011095ogmngj2jtgtkmygd78j/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/309076/","Cryptolaemus1"
 "309075","2020-02-05 13:39:36","https://goncosart.co.id/wp-admin/private_section/oSSg9Ww_FPkjMGSuxGOH3_600764_pWghSN7BoYZRr6b/rw6954xb3gn_vx4v67w/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/309075/","Cryptolaemus1"
@@ -50762,7 +50987,7 @@
 "307173","2020-02-03 20:53:35","https://tiendasaludbanmedica.cl/2m7z/available-lX2zCLw-ssrlPKfP/HJhtO3G6i-89LiL9Dw7k-space/mjrsfxk8tv-9LG0HKIwf0/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/307173/","Cryptolaemus1"
 "307172","2020-02-03 20:47:08","https://myenglishisgood.net.in/hindi/browse/5tnadmh/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/307172/","spamhaus"
 "307171","2020-02-03 20:45:09","http://www.siyinjichangjia.com/wp-content/available_zone/additional_forum/uDVid_MJ6tc9cIHe2G21/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/307171/","Cryptolaemus1"
-"307170","2020-02-03 20:39:05","http://angthong.nfe.go.th/am/private_array/zwsctt_levl8my_area/5ukq3ind_5ws73t9x/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/307170/","Cryptolaemus1"
+"307170","2020-02-03 20:39:05","http://angthong.nfe.go.th/am/private_array/zwsctt_levl8my_area/5ukq3ind_5ws73t9x/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/307170/","Cryptolaemus1"
 "307169","2020-02-03 20:37:06","https://a1college.ca/zxu/LLC/z4bkd37elwat/n54298321496833aoy5a94xw/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/307169/","spamhaus"
 "307168","2020-02-03 20:32:05","https://www.openhouseinteriorsinc.com/wp-content/report/ng7bfjc26lq8/6lb0760628180850189yvnlb1ukvimgy0w/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/307168/","spamhaus"
 "307167","2020-02-03 20:30:04","http://stayfitphysio.ca/wp-content/plugins/personal_array/guarded_warehouse/9829773100387_PvtS0j8g5bhmyx/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/307167/","Cryptolaemus1"
@@ -53652,7 +53877,7 @@
 "304272","2020-01-31 19:18:05","http://barreirofreddy.tv/bsms/LLC/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/304272/","Cryptolaemus1"
 "304271","2020-01-31 19:17:05","https://rendaprevi.com.br/wp-content/available-array/close-profile/H7BpTUOO-5aGrrNHvi8/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/304271/","Cryptolaemus1"
 "304270","2020-01-31 19:14:06","https://pastebin.com/raw/DYYxwYHC","offline","malware_download","None","https://urlhaus.abuse.ch/url/304270/","JayTHL"
-"304269","2020-01-31 19:14:04","http://ashoakacharya.com/wp-content/available-module/verifiable-e39tbx5u-gadx7z/l9of3-950uyx69t7z/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/304269/","spamhaus"
+"304269","2020-01-31 19:14:04","http://ashoakacharya.com/wp-content/available-module/verifiable-e39tbx5u-gadx7z/l9of3-950uyx69t7z/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/304269/","spamhaus"
 "304268","2020-01-31 19:08:06","http://rcsic.technocloudtech.com/jnzor/lm/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/304268/","spamhaus"
 "304267","2020-01-31 19:08:04","http://algomatreeservices.com/wp-includes/protected-module/interior-area/t5yiafe7uxhxi4-uuy27t734zzt9/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/304267/","Cryptolaemus1"
 "304266","2020-01-31 19:07:05","http://66.38.88.162:38607/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/304266/","Gandylyan1"
@@ -54848,7 +55073,7 @@
 "303070","2020-01-30 16:48:08","https://vhealthmed.com/opencart/28370310369884761/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/303070/","Cryptolaemus1"
 "303069","2020-01-30 16:47:03","http://tembred.com/komnat/closed-array/security-gyh6o8DR91-5zHqNa4VN/683844041-5T1iRn7QGZ10/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/303069/","Cryptolaemus1"
 "303068","2020-01-30 16:44:50","http://dannier.me/wp-includes/Document/c8g254415977-95-jw7dbm7dwzstqq6f/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/303068/","Cryptolaemus1"
-"303067","2020-01-30 16:43:25","http://angthong.nfe.go.th/am/closed_disk/close_space/yY1jly_oif138Kc569/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/303067/","Cryptolaemus1"
+"303067","2020-01-30 16:43:25","http://angthong.nfe.go.th/am/closed_disk/close_space/yY1jly_oif138Kc569/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/303067/","Cryptolaemus1"
 "303066","2020-01-30 16:42:51","http://asbeautyclinic.com.ar/87/136/e0db2eq-4y5-611/","offline","malware_download","doc,emotet,epoch3,heodo","https://urlhaus.abuse.ch/url/303066/","Cryptolaemus1"
 "303065","2020-01-30 16:38:36","https://lpmmedikomfeb.unud.ac.id/wp-content/lm/bh76002052-60134699-ffrqvlz7p63p6hsu05w/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/303065/","Cryptolaemus1"
 "303064","2020-01-30 16:37:34","https://myenglishisgood.net.in/hindi/personal_gfjsn1tdf1awf2_4my2jsnwtw7md/interior_area/TeoI4w6u_klzd9Moj/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/303064/","Cryptolaemus1"
@@ -55241,7 +55466,7 @@
 "302675","2020-01-30 10:24:34","http://216.221.205.40:34458/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/302675/","Gandylyan1"
 "302674","2020-01-30 10:24:29","http://173.242.138.63:54481/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/302674/","Gandylyan1"
 "302673","2020-01-30 10:24:26","http://115.56.112.11:59508/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/302673/","Gandylyan1"
-"302672","2020-01-30 10:24:20","http://1.246.223.61:3900/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/302672/","Gandylyan1"
+"302672","2020-01-30 10:24:20","http://1.246.223.61:3900/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/302672/","Gandylyan1"
 "302671","2020-01-30 10:24:15","https://mcma1.com/peace.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/302671/","gorimpthon"
 "302669","2020-01-30 10:23:43","http://www.raqmiyat.com/man1.exe","offline","malware_download","Trickbot","https://urlhaus.abuse.ch/url/302669/","JAMESWT_MHT"
 "302668","2020-01-30 10:23:33","https://pastebin.com/raw/7gwia02n","offline","malware_download","None","https://urlhaus.abuse.ch/url/302668/","JayTHL"
@@ -56949,7 +57174,7 @@
 "300957","2020-01-29 08:04:53","http://172.36.0.52:48177/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/300957/","Gandylyan1"
 "300956","2020-01-29 08:04:22","http://123.11.8.167:38053/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/300956/","Gandylyan1"
 "300955","2020-01-29 08:04:19","http://31.146.124.194:50652/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/300955/","Gandylyan1"
-"300954","2020-01-29 08:01:05","http://beta.pterosol.com/common_aussf02vcqd9_x3p0wzygn2pvc1r/verified_portal/84540780_yK99NiKqyF5zI4/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/300954/","Cryptolaemus1"
+"300954","2020-01-29 08:01:05","http://beta.pterosol.com/common_aussf02vcqd9_x3p0wzygn2pvc1r/verified_portal/84540780_yK99NiKqyF5zI4/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/300954/","Cryptolaemus1"
 "300953","2020-01-29 07:58:03","http://www.lakshmichowkusa.com/cgi-bin/THC8OZH70/pjp7l8mxep/hb1560149624004-054-1lv8tyk1g23fhufwp/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/300953/","spamhaus"
 "300952","2020-01-29 07:56:06","https://doc-04-a0-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/o36gjjvur75oi9cc5dva7sj0hjd2vdeo/1580277600000/16414305884720871114/*/1gA6umqRt1cAc8wkbDxEen43vlovcn4Dx?e=download","offline","malware_download","encrypted,rat","https://urlhaus.abuse.ch/url/300952/","abuse_ch"
 "300951","2020-01-29 07:56:04","http://laylalanemusic.com/US/c9f-eix-14/","offline","malware_download","doc,emotet,epoch3,heodo","https://urlhaus.abuse.ch/url/300951/","spamhaus"
@@ -57151,7 +57376,7 @@
 "300755","2020-01-29 04:04:05","http://182.124.193.235:60015/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/300755/","Gandylyan1"
 "300754","2020-01-29 04:03:11","http://kypa.or.ke/cgi-bin/attachments/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/300754/","spamhaus"
 "300753","2020-01-29 03:59:05","http://libertyaviationusa.com/wp-content/personal_resource/verified_warehouse/OASZ1E4qBG_9HKqJs4s9x3bu/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/300753/","Cryptolaemus1"
-"300752","2020-01-29 03:58:08","http://ngoaingu.garage.com.vn/__MACOSX/paclm/rroqu96s9zxh/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/300752/","spamhaus"
+"300752","2020-01-29 03:58:08","http://ngoaingu.garage.com.vn/__MACOSX/paclm/rroqu96s9zxh/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/300752/","spamhaus"
 "300751","2020-01-29 03:56:08","http://saiftec-001-site16.htempurl.com/87/5uabj8-9z139-59/","offline","malware_download","doc,emotet,epoch3,GandCrab,heodo","https://urlhaus.abuse.ch/url/300751/","Cryptolaemus1"
 "300750","2020-01-29 03:54:53","https://cnc.ase.md/wp-admin/protected-sector/interior-forum/hNisJ-ah5qmHnctfI0gz/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/300750/","Cryptolaemus1"
 "300749","2020-01-29 03:54:18","http://tdagprinter-dtg.com/wp-content/plugins/really-simple-ssl/testssl/serverhttpxforwardedsslon/parts_service/zarhe019p/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/300749/","Cryptolaemus1"
@@ -57773,7 +57998,7 @@
 "300132","2020-01-28 16:39:39","http://finlandwayoflearning.in/wp-content/private-cpMS-QH3UeoraeBTu/interior-profile/kwzn74jhu-x7zwxwwyss/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/300132/","Cryptolaemus1"
 "300131","2020-01-28 16:39:34","http://projectqishu.com/bins/DEMONS.arm","offline","malware_download","elf","https://urlhaus.abuse.ch/url/300131/","Gandylyan1"
 "300130","2020-01-28 16:39:03","http://projectqishu.com/bins/DEMONS.mips","offline","malware_download","elf","https://urlhaus.abuse.ch/url/300130/","Gandylyan1"
-"300129","2020-01-28 16:34:10","http://angthong.nfe.go.th/am/balance/cdbqdn8/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/300129/","spamhaus"
+"300129","2020-01-28 16:34:10","http://angthong.nfe.go.th/am/balance/cdbqdn8/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/300129/","spamhaus"
 "300128","2020-01-28 16:33:07","http://projectqishu.com/bins/DEMONS.x86","offline","malware_download","elf","https://urlhaus.abuse.ch/url/300128/","Gandylyan1"
 "300127","2020-01-28 16:31:04","http://blog.kpourkarite.com/et0a/closed_module/individual_area/e5jao2h58_z67y5u/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/300127/","Cryptolaemus1"
 "300126","2020-01-28 16:27:11","https://myenglishisgood.net.in/hindi/payment/65k8603-1536624-kjmk8eepzdf79/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/300126/","spamhaus"
@@ -62066,7 +62291,7 @@
 "295826","2020-01-23 11:00:06","http://kic.ac.th/wp/Documentation/j3wg3ay/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/295826/","spamhaus"
 "295825","2020-01-23 10:57:07","http://windowsdefenderserversecuresofficeiq.duckdns.org/bi/vbs.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/295825/","oppimaniac"
 "295824","2020-01-23 10:57:04","http://ghedamanhhung.com/wp-admin/ss-dbxhv-18/","offline","malware_download","doc,emotet,epoch3,heodo","https://urlhaus.abuse.ch/url/295824/","spamhaus"
-"295823","2020-01-23 10:56:09","http://kamisecurity.com.my/wp-includes/sites/wsbidzb7/p9d0em-344124211-886538-79yn3ay3-wpk1/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/295823/","spamhaus"
+"295823","2020-01-23 10:56:09","http://kamisecurity.com.my/wp-includes/sites/wsbidzb7/p9d0em-344124211-886538-79yn3ay3-wpk1/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/295823/","spamhaus"
 "295822","2020-01-23 10:51:05","http://kitk.tj/wp-admin/Scan/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/295822/","spamhaus"
 "295821","2020-01-23 10:48:14","http://gsx.life/wp-includes/9jsd-lb2-09/","offline","malware_download","doc,emotet,epoch3,heodo","https://urlhaus.abuse.ch/url/295821/","spamhaus"
 "295820","2020-01-23 10:46:10","http://machocean.in/wp-includes/Overview/0eofim/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/295820/","spamhaus"
@@ -62707,7 +62932,7 @@
 "295185","2020-01-22 20:54:33","https://augustaflame.com/xqwlsa/ZSALf/","offline","malware_download","doc,emotet,epoch3,heodo","https://urlhaus.abuse.ch/url/295185/","spamhaus"
 "295184","2020-01-22 20:53:36","http://kensingtonhotelsuites.com/wp-content/docs/vb8uc-6571-600489738-4q00s1uww-tyfpzop9a/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/295184/","spamhaus"
 "295183","2020-01-22 20:48:05","http://idthomes.com/wp-admin/public/rfypv-2519224284-829788259-652naz-q0gvwgfnk/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/295183/","spamhaus"
-"295182","2020-01-22 20:43:19","http://125.26.165.244/am/Document/g844z-388740042-66290-jr8uc0m-r3g8dj012/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/295182/","spamhaus"
+"295182","2020-01-22 20:43:19","http://125.26.165.244/am/Document/g844z-388740042-66290-jr8uc0m-r3g8dj012/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/295182/","spamhaus"
 "295181","2020-01-22 20:38:11","http://cassoulet.barons.fr/cgi-bin/DOC/fc7rn9uqidg/x56c3a-6104813-790248395-4w4o-mzj8qhhc8as/","offline","malware_download","doc,emotet,epoch2,heodo,word2007","https://urlhaus.abuse.ch/url/295181/","Cryptolaemus1"
 "295180","2020-01-22 20:38:03","http://206.189.78.192/wp-admin/docs/lx4s3moxx0/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/295180/","spamhaus"
 "295179","2020-01-22 20:37:43","https://epzsz.com/honpawk24jdsa/protected_section/close_area/qBVmHV_1fhgyG7d3HM/","offline","malware_download","doc,emotet,epoch1,heodo,word2007","https://urlhaus.abuse.ch/url/295179/","Cryptolaemus1"
@@ -63681,7 +63906,7 @@
 "294208","2020-01-21 22:58:07","http://www.oasineldeserto.info/mio/BwRux1dn/","offline","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/294208/","Cryptolaemus1"
 "294207","2020-01-21 22:58:03","http://ux2.ir/wp-includes/OCT/7yxxw18/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/294207/","Cryptolaemus1"
 "294206","2020-01-21 22:57:04","http://sqzin.cindydonovan.com/wp-admin/closed_ZSteLV_XBTN4RsOnk/interior_area/Tw8eQv7er_1uzzrvGI/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/294206/","Cryptolaemus1"
-"294205","2020-01-21 22:54:15","http://hqsistemas.com.ar/cgi-bin/Overview/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/294205/","Cryptolaemus1"
+"294205","2020-01-21 22:54:15","http://hqsistemas.com.ar/cgi-bin/Overview/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/294205/","Cryptolaemus1"
 "294204","2020-01-21 22:52:19","http://bh8.ir/stats/as-ark5a-41557/","offline","malware_download","doc,emotet,epoch3,heodo","https://urlhaus.abuse.ch/url/294204/","Cryptolaemus1"
 "294203","2020-01-21 22:49:23","http://huayishi.cn/wp-includes/browse/m93i-906661-624639024-n37nz2exlf-46ics/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/294203/","Cryptolaemus1"
 "294202","2020-01-21 22:47:03","http://ative.nl/EGR/available-section/open-forum/610574165-gfpBz1Y/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/294202/","Cryptolaemus1"
@@ -63726,7 +63951,7 @@
 "294163","2020-01-21 22:03:05","http://blog.kpourkarite.com/et0a/47313599376-QCAXBF6B0EC-sector/1897221752-82JspRSEh5-area/98k84o7oukxwkp-258z9uuuxw34/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/294163/","Cryptolaemus1"
 "294162","2020-01-21 22:02:04","http://baakcafe.com/wp-content/rUpQYz/","offline","malware_download","doc,emotet,epoch3,heodo","https://urlhaus.abuse.ch/url/294162/","Cryptolaemus1"
 "294161","2020-01-21 22:01:11","http://tzptyz.com/mjgy2/Scan/l-61804950-99-g3q32rh-n6kgse/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/294161/","spamhaus"
-"294160","2020-01-21 21:58:05","http://angthong.nfe.go.th/am/common-module/individual-profile/NCRWEZVn-HHnqtlrHmv6/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/294160/","Cryptolaemus1"
+"294160","2020-01-21 21:58:05","http://angthong.nfe.go.th/am/common-module/individual-profile/NCRWEZVn-HHnqtlrHmv6/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/294160/","Cryptolaemus1"
 "294159","2020-01-21 21:56:05","http://jester.com.au/Scripts/Widgets/eTrac/y6bg-4091763-042402675-tae3v67hc-q2nid3mqzk/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/294159/","spamhaus"
 "294158","2020-01-21 21:53:07","http://sanritsudeco.com/calendar/3ay_dety8s_disk/external_warehouse/dKjMJ_Lm5wg8qd5fwp0/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/294158/","Cryptolaemus1"
 "294157","2020-01-21 21:52:05","https://membros.rendaprevi.com.br/wp-content/gocyf-e08e-6559/","offline","malware_download","doc,emotet,epoch3,heodo","https://urlhaus.abuse.ch/url/294157/","Cryptolaemus1"
@@ -64571,7 +64796,7 @@
 "293315","2020-01-21 07:37:07","http://trafs.in/wp-includes/Reporting/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/293315/","spamhaus"
 "293314","2020-01-21 07:33:03","http://www.budmax.top/eivhd/Scan/c-694684-7494019-t64gyo-2lkjd/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/293314/","spamhaus"
 "293313","2020-01-21 07:32:05","https://doc-14-9k-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/mkf31qmdj1lelbvlfcendr1sekl7nas5/1579586400000/12638006848781078751/*/1QvrOUmiDNqsbe4ssdXU_XQQKqVrCbWje?e=download","offline","malware_download","encrypted","https://urlhaus.abuse.ch/url/293313/","abuse_ch"
-"293312","2020-01-21 07:28:06","http://beta.pterosol.com/IyKHVY/","offline","malware_download","doc,emotet,epoch3,heodo","https://urlhaus.abuse.ch/url/293312/","Cryptolaemus1"
+"293312","2020-01-21 07:28:06","http://beta.pterosol.com/IyKHVY/","online","malware_download","doc,emotet,epoch3,heodo","https://urlhaus.abuse.ch/url/293312/","Cryptolaemus1"
 "293311","2020-01-21 07:27:04","http://softlinke.com/cgi-bin/public/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/293311/","spamhaus"
 "293310","2020-01-21 07:22:06","https://elektrik51.ru/wp-admin/balance/yv3yw4xvt5/j6zl275-50509843-124284-ti7mu358i-4o3rqvd/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/293310/","Cryptolaemus1"
 "293309","2020-01-21 07:19:08","http://www.0931tangfc.com/images/TWF/","offline","malware_download","doc,emotet,epoch3,heodo","https://urlhaus.abuse.ch/url/293309/","Cryptolaemus1"
@@ -65277,7 +65502,7 @@
 "292609","2020-01-20 11:47:10","http://med-shop24.ru/wp-content/Overview/bmywhlnv5n14/zwl3x-36408409-1862-1j5z23j24lo-sx1s/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/292609/","spamhaus"
 "292608","2020-01-20 11:47:07","http://ncronline.in/wp-content/LoVmwBvD/","offline","malware_download","doc,emotet,epoch3,heodo","https://urlhaus.abuse.ch/url/292608/","spamhaus"
 "292607","2020-01-20 11:42:03","http://neweast-tr.net/wordpress/sites/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/292607/","spamhaus"
-"292606","2020-01-20 11:39:08","http://ngoaingu.garage.com.vn/wp-includes/hoc-k27-6256/","online","malware_download","doc,emotet,epoch3,heodo","https://urlhaus.abuse.ch/url/292606/","spamhaus"
+"292606","2020-01-20 11:39:08","http://ngoaingu.garage.com.vn/wp-includes/hoc-k27-6256/","offline","malware_download","doc,emotet,epoch3,heodo","https://urlhaus.abuse.ch/url/292606/","spamhaus"
 "292605","2020-01-20 11:38:08","http://news.ursinus.edu/aspnet_client/Reporting/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/292605/","spamhaus"
 "292604","2020-01-20 11:33:10","https://isri.ac.ir/cgi-bin/payment/6nbv3f/y-278276430-6057093-zngh-i1vtlscxu/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/292604/","Cryptolaemus1"
 "292603","2020-01-20 11:28:03","http://dev.g5plus.net/thallo/nfkDPIdg/","offline","malware_download","doc,emotet,epoch3,heodo","https://urlhaus.abuse.ch/url/292603/","Cryptolaemus1"
@@ -67516,7 +67741,7 @@
 "290356","2020-01-16 21:22:06","http://dragonsknot.com/cgi-bin/open-disk/ehw32di-wuxfzo6tn-q72nHFUFhC-blyC8TzWovgG/b9GGFiThVD-Mpm7Lv3djNIz/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/290356/","Cryptolaemus1"
 "290355","2020-01-16 21:18:04","http://yojersey.ru/system/INC/seqrxy-483627-0862-3pj61ohg-4dxokenie/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/290355/","Cryptolaemus1"
 "290354","2020-01-16 21:14:15","http://futurepath.fi/wp-content/multifunctional_resource/external_space/1mzb5jtap8cw6z3_654w82w3zv0zt/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/290354/","Cryptolaemus1"
-"290353","2020-01-16 21:14:13","http://angthong.nfe.go.th/am/parts_service/nz1a5qf-27237-4768-wlq3g4oemt-58pq/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/290353/","spamhaus"
+"290353","2020-01-16 21:14:13","http://angthong.nfe.go.th/am/parts_service/nz1a5qf-27237-4768-wlq3g4oemt-58pq/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/290353/","spamhaus"
 "290352","2020-01-16 21:14:06","https://unity.revistamundonerd.com.br/wp-admin/iPaskn/","offline","malware_download","doc,emotet,epoch3,heodo","https://urlhaus.abuse.ch/url/290352/","spamhaus"
 "290351","2020-01-16 21:08:04","http://xn--zelokul-80a.com/wp-admin/83092392960/i-9850791-877481847-lnq52kes81q-vwps6mv/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/290351/","spamhaus"
 "290350","2020-01-16 21:06:03","http://kvartura.vn.ua/wp-content/7OIPsQLiZ-JijJHKqqOunkd7-module/special-portal/h7fhr6eyp4y-yvtt0379/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/290350/","Cryptolaemus1"
@@ -67760,7 +67985,7 @@
 "290111","2020-01-16 15:37:03","http://econsultio.com/gstore/closed_section/test_warehouse/824070_IEHq1zxXZM/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/290111/","Cryptolaemus1"
 "290110","2020-01-16 15:33:15","http://www.tigersbytribals.com/wp-admin/report/kv7kqr/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/290110/","spamhaus"
 "290109","2020-01-16 15:33:11","http://www.wxet.cn/wp-content/5pvz-h9wqj-77075/","offline","malware_download","doc,emotet,epoch3,heodo","https://urlhaus.abuse.ch/url/290109/","spamhaus"
-"290108","2020-01-16 15:32:03","https://www.innovation4crisis.org/wp-admin/closed-732298038222-v9cnM8fuBXI1/guarded-space/VYVlK-j0f5n67haklsh/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/290108/","Cryptolaemus1"
+"290108","2020-01-16 15:32:03","https://www.innovation4crisis.org/wp-admin/closed-732298038222-v9cnM8fuBXI1/guarded-space/VYVlK-j0f5n67haklsh/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/290108/","Cryptolaemus1"
 "290107","2020-01-16 15:31:27","http://demo.artesfide.com/cgi-bin/SXllAKyx9u/","offline","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/290107/","Cryptolaemus1"
 "290106","2020-01-16 15:31:21","http://panvelpropertyproject.com/calendar/7g6f/7g6f/","offline","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/290106/","Cryptolaemus1"
 "290105","2020-01-16 15:31:17","http://niuconstruction.net/toolsl/k7NjE10245/","offline","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/290105/","Cryptolaemus1"
@@ -69195,9 +69420,9 @@
 "288652","2020-01-15 00:32:04","http://rongoamagic.com/ntaqcb/closed_zone/special_mc2ncsm2fllk1_xu3aooamk9qt0e/6vor8fav1zlu05l_tz545v/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/288652/","Cryptolaemus1"
 "288651","2020-01-15 00:31:03","http://www.qq546871516.com/wp-includes/INC/4293oalcf/gok-1854-40528-489l2-q300/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/288651/","spamhaus"
 "288650","2020-01-15 00:27:09","https://indopixel.id/public/zvz1qxoqo/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/288650/","spamhaus"
-"288649","2020-01-15 00:23:04","http://125.26.165.244/am/attachments/f9zkd30/k1g-6834-9292-pxnxd5s-chhapms4d/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/288649/","spamhaus"
+"288649","2020-01-15 00:23:04","http://125.26.165.244/am/attachments/f9zkd30/k1g-6834-9292-pxnxd5s-chhapms4d/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/288649/","spamhaus"
 "288648","2020-01-15 00:20:03","http://13.127.108.199/qbix/balance/d0h70shi/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/288648/","spamhaus"
-"288646","2020-01-15 00:18:05","http://125.26.165.244/am/protected-module/verifiable-space/zjwb43i8n4nof-xy3uy4vs0xu8s/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/288646/","Cryptolaemus1"
+"288646","2020-01-15 00:18:05","http://125.26.165.244/am/protected-module/verifiable-space/zjwb43i8n4nof-xy3uy4vs0xu8s/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/288646/","Cryptolaemus1"
 "288645","2020-01-15 00:16:05","http://163.13.182.105/31/attachments/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/288645/","spamhaus"
 "288644","2020-01-15 00:06:04","http://thefinancialworld.com/wp-content/plugins/arzxror/closed_3177800254_5KVdBzoaFeHbI8zx/nWplb_Zw3XRODfaU_area/dw76s9l22tcz_9y","offline","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/288644/","Cryptolaemus1"
 "288643","2020-01-15 00:04:43","http://171.109.56.173:57450/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/288643/","Gandylyan1"
@@ -69779,7 +70004,7 @@
 "288058","2020-01-14 14:17:09","http://gitep.ucpel.edu.br/wp-content/common-module/guarded-4TRJ-A0K24dlsW1zwcJ/CoWg9-0lpswxaHGbMc5/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/288058/","Cryptolaemus1"
 "288057","2020-01-14 14:15:07","http://opacriandoarte.com.br/wp-includes/zydjt6pxoua8/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/288057/","spamhaus"
 "288056","2020-01-14 14:13:08","http://robotrade.com.vn/wp-content/images/mailz/mnik.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/288056/","zbetcheckin"
-"288055","2020-01-14 14:12:08","https://www.agsir.com/wp-content/private-module/verified-193249456-Ryct6SDQD26/ubcbcrf53sfsrp-3uu4z3u63u075/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/288055/","Cryptolaemus1"
+"288055","2020-01-14 14:12:08","https://www.agsir.com/wp-content/private-module/verified-193249456-Ryct6SDQD26/ubcbcrf53sfsrp-3uu4z3u63u075/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/288055/","Cryptolaemus1"
 "288054","2020-01-14 14:08:07","https://www.xhcmnews.com/calendar/swift/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/288054/","spamhaus"
 "288053","2020-01-14 14:07:08","http://game91.net/2r32h/protected-710283-m35AnhUaMrQ/external-tMGY-6PpjjIxVJU3O1/u9tQ5WhJfI4o-0bboGH0G7/","offline","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/288053/","Cryptolaemus1"
 "288052","2020-01-14 14:06:09","http://172.36.47.35:40969/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/288052/","Gandylyan1"
@@ -73992,7 +74217,7 @@
 "283789","2020-01-07 14:04:06","http://180.118.255.125:37372/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/283789/","Gandylyan1"
 "283788","2020-01-07 13:42:35","https://pastebin.com/raw/FUmPxLse","offline","malware_download","None","https://urlhaus.abuse.ch/url/283788/","JayTHL"
 "283787","2020-01-07 13:29:09","https://bitbucket.org/discovercircle/2020/downloads/setup_c.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/283787/","abuse_ch"
-"283786","2020-01-07 13:23:42","http://www.87du.vip/svchast.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/283786/","Marco_Ramilli"
+"283786","2020-01-07 13:23:42","http://www.87du.vip/svchast.exe","online","malware_download","None","https://urlhaus.abuse.ch/url/283786/","Marco_Ramilli"
 "283785","2020-01-07 13:03:21","http://59.95.39.36:44856/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/283785/","Gandylyan1"
 "283784","2020-01-07 13:03:19","http://111.42.66.42:40159/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/283784/","Gandylyan1"
 "283783","2020-01-07 13:03:15","http://175.214.73.136:58263/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/283783/","Gandylyan1"
@@ -74250,7 +74475,7 @@
 "283526","2020-01-06 19:23:04","https://storage.googleapis.com/portalnfeletronica/NFeletronica03012020.zip","offline","malware_download","Banload,zip","https://urlhaus.abuse.ch/url/283526/","abuse_ch"
 "283525","2020-01-06 19:05:43","http://116.114.95.52:34143/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/283525/","Gandylyan1"
 "283524","2020-01-06 19:05:40","http://121.233.0.200:48493/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/283524/","Gandylyan1"
-"283523","2020-01-06 19:05:37","http://176.113.161.87:45399/Mozi.m","online","malware_download","elf","https://urlhaus.abuse.ch/url/283523/","Gandylyan1"
+"283523","2020-01-06 19:05:37","http://176.113.161.87:45399/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/283523/","Gandylyan1"
 "283522","2020-01-06 19:05:35","http://222.74.186.176:44479/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/283522/","Gandylyan1"
 "283521","2020-01-06 19:05:31","http://171.95.23.229:38602/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/283521/","Gandylyan1"
 "283520","2020-01-06 19:05:28","http://177.67.163.176:41394/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/283520/","Gandylyan1"
@@ -76627,7 +76852,7 @@
 "281138","2019-12-30 11:37:21","http://31.146.124.37:56823/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/281138/","Gandylyan1"
 "281137","2019-12-30 11:37:19","http://211.137.225.87:51974/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/281137/","Gandylyan1"
 "281136","2019-12-30 11:37:16","http://61.2.177.142:48483/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/281136/","Gandylyan1"
-"281135","2019-12-30 11:37:13","http://176.113.161.136:55692/Mozi.m","online","malware_download","elf","https://urlhaus.abuse.ch/url/281135/","Gandylyan1"
+"281135","2019-12-30 11:37:13","http://176.113.161.136:55692/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/281135/","Gandylyan1"
 "281134","2019-12-30 11:37:11","http://172.36.15.248:41189/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/281134/","Gandylyan1"
 "281133","2019-12-30 11:36:40","http://176.113.161.87:55702/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/281133/","Gandylyan1"
 "281132","2019-12-30 11:36:38","http://111.43.223.156:44555/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/281132/","Gandylyan1"
@@ -76692,8 +76917,8 @@
 "281073","2019-12-30 11:25:12","http://116.114.95.232:34700/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/281073/","Gandylyan1"
 "281072","2019-12-30 11:25:09","http://111.40.111.192:44826/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/281072/","Gandylyan1"
 "281071","2019-12-30 10:38:03","https://pastebin.com/raw/MuKE1H7z","offline","malware_download","None","https://urlhaus.abuse.ch/url/281071/","JayTHL"
-"281070","2019-12-30 09:51:16","http://download.xp666.com/xzqswf/AppConSer.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/281070/","zbetcheckin"
-"281069","2019-12-30 09:45:09","http://download.xp666.com/xzqswf/iniser.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/281069/","zbetcheckin"
+"281070","2019-12-30 09:51:16","http://download.xp666.com/xzqswf/AppConSer.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/281070/","zbetcheckin"
+"281069","2019-12-30 09:45:09","http://download.xp666.com/xzqswf/iniser.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/281069/","zbetcheckin"
 "281068","2019-12-30 05:36:08","http://66.85.173.6/image/TIN_X86.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/281068/","zbetcheckin"
 "281067","2019-12-30 05:28:05","http://66.85.173.6/image/updatefile.exe","offline","malware_download","exe,Trickbot","https://urlhaus.abuse.ch/url/281067/","zbetcheckin"
 "281066","2019-12-30 01:11:22","http://114.239.135.42:48551/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/281066/","Gandylyan1"
@@ -77427,7 +77652,7 @@
 "280338","2019-12-28 12:15:07","http://120.69.58.14:58299/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/280338/","Gandylyan1"
 "280337","2019-12-28 12:14:57","http://160.174.252.1:41764/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/280337/","Gandylyan1"
 "280336","2019-12-28 12:14:25","http://218.21.171.246:51099/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/280336/","Gandylyan1"
-"280335","2019-12-28 12:14:23","http://1.246.222.134:1879/Mozi.m","online","malware_download","elf","https://urlhaus.abuse.ch/url/280335/","Gandylyan1"
+"280335","2019-12-28 12:14:23","http://1.246.222.134:1879/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/280335/","Gandylyan1"
 "280334","2019-12-28 12:14:19","http://139.203.147.75:47469/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/280334/","Gandylyan1"
 "280333","2019-12-28 12:14:15","http://42.239.103.93:60530/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/280333/","Gandylyan1"
 "280332","2019-12-28 12:14:12","http://175.214.73.161:56316/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/280332/","Gandylyan1"
@@ -77550,7 +77775,7 @@
 "280214","2019-12-27 16:32:37","https://pastebin.com/raw/vV7sFQWP","offline","malware_download","None","https://urlhaus.abuse.ch/url/280214/","JayTHL"
 "280213","2019-12-27 16:31:56","https://pastebin.com/raw/hDBga4sM","offline","malware_download","None","https://urlhaus.abuse.ch/url/280213/","JayTHL"
 "280212","2019-12-27 16:15:20","https://pastebin.com/raw/fKD6JMxr","offline","malware_download","CobaltStrike,powershell","https://urlhaus.abuse.ch/url/280212/","abuse_ch"
-"280211","2019-12-27 15:14:06","http://myonlinepokiesblog.com/license.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/280211/","abuse_ch"
+"280211","2019-12-27 15:14:06","http://myonlinepokiesblog.com/license.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/280211/","abuse_ch"
 "280210","2019-12-27 15:13:03","http://centre-de-conduite-roannais.com/wp-content/uploads/2019/12/last/444444.png","offline","malware_download","exe,geofenced,qbot,Quakbot,USA","https://urlhaus.abuse.ch/url/280210/","anonymous"
 "280209","2019-12-27 15:12:15","https://re365.com/wp-content/uploads/2019/12/last/85944289/85944289.zip","offline","malware_download","geofenced,qbot,USA,vbs,zip","https://urlhaus.abuse.ch/url/280209/","anonymous"
 "280208","2019-12-27 15:12:07","https://re365.com/wp-content/uploads/2019/12/last/00021920.zip","offline","malware_download","geofenced,qbot,USA,vbs,zip","https://urlhaus.abuse.ch/url/280208/","anonymous"
@@ -78500,25 +78725,25 @@
 "279263","2019-12-26 23:33:53","https://dev.sebpo.net/aiim/Scan79064.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279263/","anonymous"
 "279262","2019-12-26 23:33:50","https://dev.sebpo.net/aiim/Scan794626.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279262/","anonymous"
 "279261","2019-12-26 23:33:47","https://dev.sebpo.net/aiim/Scan787778.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279261/","anonymous"
-"279260","2019-12-26 23:33:44","http://visagepk.com/Scan620141.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279260/","anonymous"
-"279259","2019-12-26 23:33:41","http://ultimatelamborghiniexperience.com/Scan519714.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279259/","anonymous"
-"279258","2019-12-26 23:33:39","http://ultimatelamborghiniexperience.com/Scan516977.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279258/","anonymous"
+"279260","2019-12-26 23:33:44","http://visagepk.com/Scan620141.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279260/","anonymous"
+"279259","2019-12-26 23:33:41","http://ultimatelamborghiniexperience.com/Scan519714.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279259/","anonymous"
+"279258","2019-12-26 23:33:39","http://ultimatelamborghiniexperience.com/Scan516977.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279258/","anonymous"
 "279257","2019-12-26 23:33:38","http://ultimatelamborghiniexperience.com/Scan514529.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279257/","anonymous"
 "279256","2019-12-26 23:33:35","http://www.zoeydeutchweb.com/Scan719307.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279256/","anonymous"
-"279255","2019-12-26 23:33:33","http://www.zoeydeutchweb.com/Scan693492.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279255/","anonymous"
-"279254","2019-12-26 23:33:32","http://www.zoeydeutchweb.com/Scan681933.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279254/","anonymous"
+"279255","2019-12-26 23:33:33","http://www.zoeydeutchweb.com/Scan693492.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279255/","anonymous"
+"279254","2019-12-26 23:33:32","http://www.zoeydeutchweb.com/Scan681933.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279254/","anonymous"
 "279253","2019-12-26 23:33:30","http://www.wbkmt.com/Scan568515.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279253/","anonymous"
 "279252","2019-12-26 23:33:28","http://www.wbkmt.com/Scan567495.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279252/","anonymous"
 "279251","2019-12-26 23:33:26","http://www.wbkmt.com/Scan544303.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279251/","anonymous"
 "279250","2019-12-26 23:33:24","http://www.voyantvision.net/Scan674251.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279250/","anonymous"
 "279249","2019-12-26 23:33:21","http://www.voyantvision.net/Scan647166.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279249/","anonymous"
 "279248","2019-12-26 23:33:18","http://www.vasoccernews.com/Scan53937.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279248/","anonymous"
-"279247","2019-12-26 23:33:17","http://www.vasoccernews.com/Scan538882.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279247/","anonymous"
-"279246","2019-12-26 23:33:15","http://www.vasoccernews.com/Scan537263.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279246/","anonymous"
-"279245","2019-12-26 23:33:13","http://www.urgentmessage.org/Scan618358.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279245/","anonymous"
+"279247","2019-12-26 23:33:17","http://www.vasoccernews.com/Scan538882.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279247/","anonymous"
+"279246","2019-12-26 23:33:15","http://www.vasoccernews.com/Scan537263.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279246/","anonymous"
+"279245","2019-12-26 23:33:13","http://www.urgentmessage.org/Scan618358.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279245/","anonymous"
 "279244","2019-12-26 23:33:11","http://www.urgentmessage.org/Scan592993.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279244/","anonymous"
 "279243","2019-12-26 23:33:08","http://www.ultimatepointsstore.com/Scan582389.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279243/","anonymous"
-"279242","2019-12-26 23:33:06","http://www.ultimatepointsstore.com/Scan580348.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279242/","anonymous"
+"279242","2019-12-26 23:33:06","http://www.ultimatepointsstore.com/Scan580348.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279242/","anonymous"
 "279241","2019-12-26 23:33:05","http://www.ultimatepointsstore.com/Scan570071.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279241/","anonymous"
 "279240","2019-12-26 23:33:02","http://www.louisbenton.com/Scan178377.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279240/","anonymous"
 "279239","2019-12-26 23:33:00","http://www.louisbenton.com/Scan175069.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279239/","anonymous"
@@ -78528,17 +78753,17 @@
 "279235","2019-12-26 23:32:43","http://www.lebedyn.info/Scan422674.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279235/","anonymous"
 "279234","2019-12-26 23:32:41","http://www.lebedyn.info/Scan425768.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279234/","anonymous"
 "279233","2019-12-26 23:32:39","http://www.lebedyn.info/Scan425026.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279233/","anonymous"
-"279232","2019-12-26 23:32:37","http://www.intoxicated-twilight.com/Scan272806.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279232/","anonymous"
+"279232","2019-12-26 23:32:37","http://www.intoxicated-twilight.com/Scan272806.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279232/","anonymous"
 "279231","2019-12-26 23:32:35","http://www.intoxicated-twilight.com/Scan253297.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279231/","anonymous"
 "279230","2019-12-26 23:32:33","http://www.ibr-mag.com/Scan343596.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279230/","anonymous"
 "279229","2019-12-26 23:32:31","http://www.ibr-mag.com/Scan341615.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279229/","anonymous"
 "279228","2019-12-26 23:32:28","http://www.ibr-mag.com/Scan340880.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279228/","anonymous"
-"279227","2019-12-26 23:32:25","http://www.hdxa.net/Scan151567.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279227/","anonymous"
+"279227","2019-12-26 23:32:25","http://www.hdxa.net/Scan151567.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279227/","anonymous"
 "279226","2019-12-26 23:32:14","http://www.hatcityblues.com/Scan304154.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279226/","anonymous"
 "279225","2019-12-26 23:32:11","http://www.hatcityblues.com/Scan296093.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279225/","anonymous"
 "279224","2019-12-26 23:32:07","http://www.halcat.com/Scan186323.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279224/","anonymous"
 "279223","2019-12-26 23:32:05","http://www.halcat.com/Scan181058.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279223/","anonymous"
-"279222","2019-12-26 23:32:03","http://www.hyvat-olutravintolat.fi/Scan243857.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279222/","anonymous"
+"279222","2019-12-26 23:32:03","http://www.hyvat-olutravintolat.fi/Scan243857.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279222/","anonymous"
 "279221","2019-12-26 23:31:45","http://www.hyvat-olutravintolat.fi/Scan235829.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279221/","anonymous"
 "279220","2019-12-26 23:31:43","http://www.hyvat-olutravintolat.fi/Scan214369.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279220/","anonymous"
 "279219","2019-12-26 23:31:41","http://www.cftamiami.com/Scan86489.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279219/","anonymous"
@@ -78552,7 +78777,7 @@
 "279211","2019-12-26 23:31:22","http://www.meconservationschool.org/Scan451086.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279211/","anonymous"
 "279210","2019-12-26 23:31:20","http://www.meconservationschool.org/Scan449322.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279210/","anonymous"
 "279209","2019-12-26 23:31:18","http://www.meconservationschool.org/Scan447509.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279209/","anonymous"
-"279208","2019-12-26 23:31:16","http://www.malin-akerman.net/Scan410104.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279208/","anonymous"
+"279208","2019-12-26 23:31:16","http://www.malin-akerman.net/Scan410104.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279208/","anonymous"
 "279207","2019-12-26 23:31:14","http://www.malin-akerman.net/Scan400950.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279207/","anonymous"
 "279206","2019-12-26 23:31:12","http://www.myyttilukukansasta.fi/Scan531081.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279206/","anonymous"
 "279205","2019-12-26 23:31:09","http://www.myyttilukukansasta.fi/Scan523335.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279205/","anonymous"
@@ -78564,18 +78789,18 @@
 "279199","2019-12-26 23:30:46","http://soflocoolers.com/Scan826440.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279199/","anonymous"
 "279198","2019-12-26 23:30:43","http://myhood.cl/Scan505329.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279198/","anonymous"
 "279197","2019-12-26 23:30:40","http://myhood.cl/Scan495082.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279197/","anonymous"
-"279196","2019-12-26 23:30:37","http://mediamatkat.fi/Scan470798.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279196/","anonymous"
+"279196","2019-12-26 23:30:37","http://mediamatkat.fi/Scan470798.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279196/","anonymous"
 "279195","2019-12-26 23:30:32","http://mediamatkat.fi/Scan468654.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279195/","anonymous"
 "279194","2019-12-26 23:30:29","http://mediamatkat.fi/Scan457405.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279194/","anonymous"
 "279193","2019-12-26 23:30:26","http://lobstermentours.com/Scan37712.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279193/","anonymous"
 "279192","2019-12-26 23:30:23","http://lobstermentours.com/Scan363358.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279192/","anonymous"
 "279191","2019-12-26 23:30:19","http://jyv.fi/Scan320062.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279191/","anonymous"
-"279190","2019-12-26 23:30:16","http://jyv.fi/Scan315318.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279190/","anonymous"
-"279189","2019-12-26 23:30:13","http://jyv.fi/Scan312111.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279189/","anonymous"
+"279190","2019-12-26 23:30:16","http://jyv.fi/Scan315318.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279190/","anonymous"
+"279189","2019-12-26 23:30:13","http://jyv.fi/Scan312111.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279189/","anonymous"
 "279188","2019-12-26 23:30:10","http://jarilindholm.com/Scan340839.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279188/","anonymous"
 "279187","2019-12-26 23:30:01","http://jarilindholm.com/Scan326716.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279187/","anonymous"
 "279186","2019-12-26 23:29:57","http://in-sect.com/Scan287519.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279186/","anonymous"
-"279185","2019-12-26 23:29:54","http://in-sect.com/Scan280219.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279185/","anonymous"
+"279185","2019-12-26 23:29:54","http://in-sect.com/Scan280219.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279185/","anonymous"
 "279184","2019-12-26 23:29:50","http://in-sect.com/Scan272899.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279184/","anonymous"
 "279183","2019-12-26 23:29:44","http://helterskelterbooks.com/Scan166889.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279183/","anonymous"
 "279182","2019-12-26 23:29:41","http://helterskelterbooks.com/Scan166538.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279182/","anonymous"
@@ -81299,7 +81524,7 @@
 "276153","2019-12-23 19:26:17","http://rockupdate3.top/eupanda.exe","offline","malware_download","ArkeiStealer","https://urlhaus.abuse.ch/url/276153/","Marco_Ramilli"
 "276152","2019-12-23 19:26:13","http://myneva.net/eupanda.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/276152/","Marco_Ramilli"
 "276151","2019-12-23 19:26:02","http://185.216.35.21/shell3/uz1wI.php","offline","malware_download","Trickbot","https://urlhaus.abuse.ch/url/276151/","James_inthe_box"
-"276150","2019-12-23 18:06:29","https://fmjstorage.com/LTCOB.KET","online","malware_download","exe,IcedID","https://urlhaus.abuse.ch/url/276150/","anonymous"
+"276150","2019-12-23 18:06:29","https://fmjstorage.com/LTCOB.KET","offline","malware_download","exe,IcedID","https://urlhaus.abuse.ch/url/276150/","anonymous"
 "276149","2019-12-23 18:06:26","http://yvd765.com/wp-includes/sodium_compat/src/Core32/1223/scheldule_9752.doc","offline","malware_download","doc,IcedID","https://urlhaus.abuse.ch/url/276149/","anonymous"
 "276148","2019-12-23 18:06:23","http://yvd765.com/wp-includes/sodium_compat/src/Core32/1223/payment_receipt_4567.doc","offline","malware_download","doc,IcedID","https://urlhaus.abuse.ch/url/276148/","anonymous"
 "276147","2019-12-23 18:06:19","http://yvd765.com/wp-includes/sodium_compat/src/Core32/1223/order_1539.doc","offline","malware_download","doc,IcedID","https://urlhaus.abuse.ch/url/276147/","anonymous"
@@ -81584,7 +81809,7 @@
 "275868","2019-12-23 16:04:28","http://111.43.223.78:42366/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/275868/","Gandylyan1"
 "275867","2019-12-23 15:34:56","http://36.105.9.138:41101/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/275867/","Gandylyan1"
 "275866","2019-12-23 15:34:51","http://172.36.25.250:40347/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/275866/","Gandylyan1"
-"275865","2019-12-23 15:34:19","http://1.246.222.228:2200/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/275865/","Gandylyan1"
+"275865","2019-12-23 15:34:19","http://1.246.222.228:2200/Mozi.m","online","malware_download","elf","https://urlhaus.abuse.ch/url/275865/","Gandylyan1"
 "275864","2019-12-23 15:34:15","http://59.96.86.40:59397/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/275864/","Gandylyan1"
 "275863","2019-12-23 15:34:10","http://120.199.0.43:55031/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/275863/","Gandylyan1"
 "275862","2019-12-23 15:34:04","http://115.63.56.236:40986/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/275862/","Gandylyan1"
@@ -81762,7 +81987,7 @@
 "275689","2019-12-23 11:25:15","http://cg.qlizzie.net/fox6login/download/foxfz.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/275689/","zbetcheckin"
 "275688","2019-12-23 11:20:05","https://pastebin.com/raw/L7Ltyg84","offline","malware_download","None","https://urlhaus.abuse.ch/url/275688/","JayTHL"
 "275687","2019-12-23 11:20:03","https://pastebin.com/raw/CcDGGF0n","offline","malware_download","None","https://urlhaus.abuse.ch/url/275687/","JayTHL"
-"275686","2019-12-23 11:19:11","http://gx-10012947.file.myqcloud.com/001my6.9.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/275686/","zbetcheckin"
+"275686","2019-12-23 11:19:11","http://gx-10012947.file.myqcloud.com/001my6.9.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/275686/","zbetcheckin"
 "275685","2019-12-23 09:32:04","http://d.23shentu.org/go/f.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/275685/","zbetcheckin"
 "275684","2019-12-23 09:07:05","https://wordlepuzzles.com/advising/additionally.eml","offline","malware_download","AUS,geofenced,Gozi,headersfenced,NZL,Sectigo,signed","https://urlhaus.abuse.ch/url/275684/","anonymous"
 "275683","2019-12-23 08:46:03","http://7secondsfilmproposal.com/lt/lt.exe","offline","malware_download","exe,NanoCore,rat","https://urlhaus.abuse.ch/url/275683/","abuse_ch"
@@ -88222,7 +88447,7 @@
 "269160","2019-12-15 07:10:03","http://nakshatrajoshi.com/wp-includes/SMFxQ/","offline","malware_download","doc,emotet,epoch3,heodo","https://urlhaus.abuse.ch/url/269160/","zbetcheckin"
 "269159","2019-12-15 07:06:05","https://wpteam.win/wp-content/common-section/lbdc-or3wujqrmmw6w-815643143-xd9nEzySECOp/a60g-s7t364utw12zyu/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/269159/","zbetcheckin"
 "269158","2019-12-15 06:59:04","http://carlosmartins.ca/webrep.ca/multifunctional-zone/open-forum/0670039-I1cdn/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/269158/","zbetcheckin"
-"269157","2019-12-15 06:29:03","http://5.198.241.29:45695/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/269157/","zbetcheckin"
+"269157","2019-12-15 06:29:03","http://5.198.241.29:45695/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/269157/","zbetcheckin"
 "269156","2019-12-15 06:25:04","http://1.9.181.154:10129/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/269156/","zbetcheckin"
 "269155","2019-12-15 02:34:03","http://167.172.245.82/xdllservicesd320493/fx19123k43.m68k","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/269155/","zbetcheckin"
 "269154","2019-12-15 02:30:21","http://167.172.245.82/xdllservicesd320493/fx19123k43.arm6","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/269154/","zbetcheckin"
@@ -93410,7 +93635,7 @@
 "263703","2019-12-05 17:36:25","http://178.62.31.59/bins/UnHAnaAW.mpsl","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/263703/","zbetcheckin"
 "263702","2019-12-05 17:36:23","http://178.62.31.59/bins/UnHAnaAW.spc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/263702/","zbetcheckin"
 "263701","2019-12-05 17:36:21","http://201.103.67.26:7712/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/263701/","zbetcheckin"
-"263700","2019-12-05 17:36:16","http://180.176.211.171:52373/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/263700/","zbetcheckin"
+"263700","2019-12-05 17:36:16","http://180.176.211.171:52373/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/263700/","zbetcheckin"
 "263699","2019-12-05 17:36:10","http://178.62.31.59/bins/UnHAnaAW.arm7","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/263699/","zbetcheckin"
 "263698","2019-12-05 17:36:08","http://178.62.31.59/bins/UnHAnaAW.x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/263698/","zbetcheckin"
 "263697","2019-12-05 17:36:06","http://178.62.31.59/bins/UnHAnaAW.m68k","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/263697/","zbetcheckin"
@@ -97680,7 +97905,7 @@
 "259131","2019-11-26 19:09:21","https://drive.google.com/file/d/1ZWg_CuTJ6BpcG-CBMNXItNY3sbcJbjBw","offline","malware_download","BrushaLoader,POL,pptx","https://urlhaus.abuse.ch/url/259131/","anonymous"
 "259130","2019-11-26 19:09:19","https://drive.google.com/file/d/1ZWBDMXrPCoIsgvYhMTmu4adGBIupLIGe","offline","malware_download","BrushaLoader,POL,pptx","https://urlhaus.abuse.ch/url/259130/","anonymous"
 "259129","2019-11-26 19:09:16","https://drive.google.com/file/d/1ZPPhxu0E1eEbYo90SJYk0oWxkKTNN9Ob","offline","malware_download","BrushaLoader,POL,pptx","https://urlhaus.abuse.ch/url/259129/","anonymous"
-"259128","2019-11-26 19:09:13","https://drive.google.com/file/d/1ZMLxU2euibP6ElBffRDd3lGs9Yyc2Q44","offline","malware_download","BrushaLoader,POL,pptx","https://urlhaus.abuse.ch/url/259128/","anonymous"
+"259128","2019-11-26 19:09:13","https://drive.google.com/file/d/1ZMLxU2euibP6ElBffRDd3lGs9Yyc2Q44","online","malware_download","BrushaLoader,POL,pptx","https://urlhaus.abuse.ch/url/259128/","anonymous"
 "259127","2019-11-26 19:09:10","https://drive.google.com/file/d/1ZINZxXtyYmhTclUmczm32kUQoRc53650","offline","malware_download","BrushaLoader,POL,pptx","https://urlhaus.abuse.ch/url/259127/","anonymous"
 "259126","2019-11-26 19:09:07","https://drive.google.com/file/d/1ZHtvDRpum_GB2pP9kBatl8YydXDioTVf","offline","malware_download","BrushaLoader,POL,pptx","https://urlhaus.abuse.ch/url/259126/","anonymous"
 "259125","2019-11-26 19:09:04","https://drive.google.com/file/d/1ZDX-1BEAlK0POnAI-4UMxKUObH62xmFu","offline","malware_download","BrushaLoader,POL,pptx","https://urlhaus.abuse.ch/url/259125/","anonymous"
@@ -109268,7 +109493,7 @@
 "246874","2019-10-21 05:20:22","http://107.160.244.6/zehir/z3hir.ppc","offline","malware_download","elf","https://urlhaus.abuse.ch/url/246874/","zbetcheckin"
 "246873","2019-10-21 05:20:19","http://95.216.136.4/razor/r4z0r.mips","offline","malware_download","elf","https://urlhaus.abuse.ch/url/246873/","zbetcheckin"
 "246872","2019-10-21 05:20:17","http://95.216.136.4/razor/r4z0r.arm5","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/246872/","zbetcheckin"
-"246871","2019-10-21 05:20:15","http://145.255.26.115:25869/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/246871/","zbetcheckin"
+"246871","2019-10-21 05:20:15","http://145.255.26.115:25869/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/246871/","zbetcheckin"
 "246870","2019-10-21 05:20:13","http://95.216.136.4/razor/r4z0r.sh4","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/246870/","zbetcheckin"
 "246869","2019-10-21 05:20:11","http://95.216.136.4/razor/r4z0r.ppc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/246869/","zbetcheckin"
 "246868","2019-10-21 05:20:09","http://95.216.136.4/razor/r4z0r.arm7","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/246868/","zbetcheckin"
@@ -109841,7 +110066,7 @@
 "246228","2019-10-18 06:14:13","http://alwetengroup.com/xls/papi01x.exe","offline","malware_download","exe,Formbook","https://urlhaus.abuse.ch/url/246228/","zbetcheckin"
 "246227","2019-10-18 06:14:09","http://alwetengroup.com/xls/papxiz.exe","offline","malware_download","exe,Formbook","https://urlhaus.abuse.ch/url/246227/","zbetcheckin"
 "246226","2019-10-18 06:14:04","http://138.68.15.227/njcrypt.exe","offline","malware_download","exe,njRAT","https://urlhaus.abuse.ch/url/246226/","abuse_ch"
-"246225","2019-10-18 06:10:12","http://download.zjsyawqj.cn/jjbq/appupdui/v1.0.9.20/appupdui_01.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/246225/","zbetcheckin"
+"246225","2019-10-18 06:10:12","http://download.zjsyawqj.cn/jjbq/appupdui/v1.0.9.20/appupdui_01.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/246225/","zbetcheckin"
 "246224","2019-10-18 06:10:07","http://fky.dfg45dfg45.best/ScarupnpLogon.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/246224/","abuse_ch"
 "246223","2019-10-18 05:44:05","http://garbage-barabage.tech/amix","offline","malware_download","ArkeiStealer,AZORult,DiamondFox,exe,HawkEye,RaccoonStealer","https://urlhaus.abuse.ch/url/246223/","abuse_ch"
 "246222","2019-10-18 05:41:09","http://decodes.in/test/contents/riss.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/246222/","abuse_ch"
@@ -111153,7 +111378,7 @@
 "244800","2019-10-15 03:11:13","http://51.77.225.113/miori.arm","offline","malware_download","elf","https://urlhaus.abuse.ch/url/244800/","zbetcheckin"
 "244799","2019-10-15 03:11:11","http://51.77.225.113/miori.m68k","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/244799/","zbetcheckin"
 "244797","2019-10-15 03:11:04","http://138.197.216.193/zehir/z3hir.arm","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/244797/","zbetcheckin"
-"244796","2019-10-15 03:05:34","http://download.ktkt.com/setupKtkt_V1.5.8.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/244796/","zbetcheckin"
+"244796","2019-10-15 03:05:34","http://download.ktkt.com/setupKtkt_V1.5.8.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/244796/","zbetcheckin"
 "244795","2019-10-15 02:55:06","http://gessuae.ae/wp-includes/images/smilies/sal.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/244795/","zbetcheckin"
 "244794","2019-10-15 02:51:31","http://gessuae.ae/wp-includes/images/smilies/oo.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/244794/","zbetcheckin"
 "244793","2019-10-15 02:51:14","http://tour.nicestore.co.kr/wp-content/kCEtESh/","offline","malware_download","emotet,epoch3,exe,heodo","https://urlhaus.abuse.ch/url/244793/","Cryptolaemus1"
@@ -111280,7 +111505,7 @@
 "244671","2019-10-14 15:57:20","https://www.paigeplacements.co.uk/wp-admin/fxZIEjGhIqiNFewKdta/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/244671/","Cryptolaemus1"
 "244670","2019-10-14 15:57:14","http://studology.com/zli/mpBanLFRPNom/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/244670/","Cryptolaemus1"
 "244669","2019-10-14 15:57:08","http://www.picogram.co.kr/fo/wp-content/6p50vmcpqc4rbmlx3axg7gbixvotx9v7h0/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/244669/","Cryptolaemus1"
-"244668","2019-10-14 15:51:20","http://s.kk30.com/win2003baiduwangpan-KB2868626-x86-CHS.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/244668/","zbetcheckin"
+"244668","2019-10-14 15:51:20","http://s.kk30.com/win2003baiduwangpan-KB2868626-x86-CHS.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/244668/","zbetcheckin"
 "244667","2019-10-14 15:31:45","https://kore.lk/wp-includes/EgvhkmnRVU/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/244667/","Cryptolaemus1"
 "244666","2019-10-14 15:31:41","http://deepaktech.xyz/wp-admin/owv2o9utn5ybr2w021v42hr/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/244666/","Cryptolaemus1"
 "244665","2019-10-14 15:31:38","https://jeevandeepayurveda.com/wp-content/fjp09eio1v6fzk1uoc/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/244665/","Cryptolaemus1"
@@ -111337,7 +111562,7 @@
 "244614","2019-10-14 15:23:28","http://beansmedia.com/zeus16/wp-includes/tubaw5y35/","offline","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/244614/","abuse_ch"
 "244613","2019-10-14 15:23:06","http://andrewsiceloff.com/wp-admin/cj2d0009/","offline","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/244613/","abuse_ch"
 "244612","2019-10-14 14:28:02","http://thefuturesgame.biz/nmawxpl?hkb=124809","offline","malware_download","downloader,geofenced,ITA,ursnif,vbs","https://urlhaus.abuse.ch/url/244612/","JAMESWT_MHT"
-"244608","2019-10-14 14:21:10","http://180.177.242.73:56526/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/244608/","zbetcheckin"
+"244608","2019-10-14 14:21:10","http://180.177.242.73:56526/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/244608/","zbetcheckin"
 "244607","2019-10-14 12:41:22","http://www.gessuae.ae/wp-includes/fonts/ww.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/244607/","zbetcheckin"
 "244606","2019-10-14 12:41:16","http://www.gessuae.ae/wp-includes/fonts/jiz.jpg","offline","malware_download","exe,Phoenix","https://urlhaus.abuse.ch/url/244606/","zbetcheckin"
 "244605","2019-10-14 12:41:09","http://www.gessuae.ae/wp-includes/fonts/min.jpg","offline","malware_download","exe,Phoenix","https://urlhaus.abuse.ch/url/244605/","zbetcheckin"
@@ -113127,7 +113352,7 @@
 "242769","2019-10-10 10:49:16","http://58.136.129.184:55530/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242769/","Petras_Simeon"
 "242768","2019-10-10 10:49:04","http://45.232.152.232:8190/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242768/","Petras_Simeon"
 "242767","2019-10-10 10:48:57","http://37.254.93.104:52119/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242767/","Petras_Simeon"
-"242766","2019-10-10 10:48:52","http://36.67.152.161:46302/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/242766/","Petras_Simeon"
+"242766","2019-10-10 10:48:52","http://36.67.152.161:46302/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242766/","Petras_Simeon"
 "242765","2019-10-10 10:48:44","http://201.43.42.246:59550/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242765/","Petras_Simeon"
 "242764","2019-10-10 10:48:38","http://201.26.120.51:15906/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242764/","Petras_Simeon"
 "242763","2019-10-10 10:48:31","http://200.69.74.28:9881/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/242763/","Petras_Simeon"
@@ -113585,7 +113810,7 @@
 "242291","2019-10-09 19:52:10","http://187.35.13.175:33316/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242291/","Petras_Simeon"
 "242290","2019-10-09 19:51:27","http://177.130.46.26:46105/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242290/","Petras_Simeon"
 "242289","2019-10-09 19:51:20","http://177.102.127.154:2313/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242289/","Petras_Simeon"
-"242288","2019-10-09 19:51:13","http://163.47.145.202:30616/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/242288/","Petras_Simeon"
+"242288","2019-10-09 19:51:13","http://163.47.145.202:30616/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242288/","Petras_Simeon"
 "242287","2019-10-09 19:51:07","http://143.255.1.198:20164/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242287/","Petras_Simeon"
 "242286","2019-10-09 19:50:55","http://130.43.124.213:36441/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242286/","Petras_Simeon"
 "242285","2019-10-09 19:50:48","http://128.65.152.225:16647/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242285/","Petras_Simeon"
@@ -113750,7 +113975,7 @@
 "242126","2019-10-09 17:27:13","http://177.94.161.115:53168/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242126/","Petras_Simeon"
 "242125","2019-10-09 17:27:06","http://168.195.228.246:11783/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242125/","Petras_Simeon"
 "242124","2019-10-09 17:26:16","http://103.253.181.74:29308/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242124/","Petras_Simeon"
-"242123","2019-10-09 17:26:10","http://103.247.217.147:43057/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/242123/","Petras_Simeon"
+"242123","2019-10-09 17:26:10","http://103.247.217.147:43057/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242123/","Petras_Simeon"
 "242122","2019-10-09 17:26:05","http://103.135.38.175:18897/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242122/","Petras_Simeon"
 "242121","2019-10-09 17:09:09","http://167.71.64.141/yfbg/out-1369462999.hta","offline","malware_download","None","https://urlhaus.abuse.ch/url/242121/","JayTHL"
 "242120","2019-10-09 17:09:07","http://167.71.64.141/yfbg/out-834610808.hta","offline","malware_download","None","https://urlhaus.abuse.ch/url/242120/","JayTHL"
@@ -114600,7 +114825,7 @@
 "241275","2019-10-08 18:56:57","http://49.0.41.126:24161/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/241275/","Petras_Simeon"
 "241274","2019-10-08 18:56:51","http://46.147.200.240:27317/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/241274/","Petras_Simeon"
 "241273","2019-10-08 18:56:47","http://41.86.251.38:26706/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/241273/","Petras_Simeon"
-"241272","2019-10-08 18:56:42","http://41.76.157.2:2217/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/241272/","Petras_Simeon"
+"241272","2019-10-08 18:56:42","http://41.76.157.2:2217/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/241272/","Petras_Simeon"
 "241271","2019-10-08 18:56:35","http://37.6.63.16:23049/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/241271/","Petras_Simeon"
 "241270","2019-10-08 18:56:29","http://217.17.38.191:9331/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/241270/","Petras_Simeon"
 "241269","2019-10-08 18:56:23","http://203.80.171.138:12064/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/241269/","Petras_Simeon"
@@ -115064,7 +115289,7 @@
 "240809","2019-10-07 09:57:31","http://92.8.204.13:36307/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240809/","Petras_Simeon"
 "240808","2019-10-07 09:57:25","http://92.38.122.218:46781/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240808/","Petras_Simeon"
 "240807","2019-10-07 09:57:17","http://92.242.221.118:36790/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240807/","Petras_Simeon"
-"240806","2019-10-07 09:57:11","http://91.196.36.84:13091/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240806/","Petras_Simeon"
+"240806","2019-10-07 09:57:11","http://91.196.36.84:13091/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/240806/","Petras_Simeon"
 "240805","2019-10-07 09:57:01","http://89.174.10.107:35443/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240805/","Petras_Simeon"
 "240804","2019-10-07 09:56:57","http://85.97.206.161:25268/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240804/","Petras_Simeon"
 "240803","2019-10-07 09:56:53","http://85.108.63.13:58595/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240803/","Petras_Simeon"
@@ -115470,7 +115695,7 @@
 "240397","2019-10-07 05:23:25","http://91.200.126.16:1066/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240397/","Petras_Simeon"
 "240396","2019-10-07 05:23:21","http://91.187.103.32:19834/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/240396/","Petras_Simeon"
 "240395","2019-10-07 05:23:16","http://91.115.78.111:41837/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240395/","Petras_Simeon"
-"240394","2019-10-07 05:23:12","http://89.46.237.89:17859/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240394/","Petras_Simeon"
+"240394","2019-10-07 05:23:12","http://89.46.237.89:17859/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/240394/","Petras_Simeon"
 "240393","2019-10-07 05:23:05","http://89.40.85.166:34370/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/240393/","Petras_Simeon"
 "240392","2019-10-07 05:22:37","http://89.36.97.221:1345/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240392/","Petras_Simeon"
 "240391","2019-10-07 05:22:31","http://89.36.55.165:17807/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240391/","Petras_Simeon"
@@ -115573,7 +115798,7 @@
 "240294","2019-10-07 05:09:03","http://45.165.15.252:34331/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240294/","Petras_Simeon"
 "240293","2019-10-07 05:08:52","http://45.132.200.12:17567/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240293/","Petras_Simeon"
 "240292","2019-10-07 05:08:42","http://45.115.254.154:14279/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240292/","Petras_Simeon"
-"240291","2019-10-07 05:08:35","http://45.115.253.82:3755/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240291/","Petras_Simeon"
+"240291","2019-10-07 05:08:35","http://45.115.253.82:3755/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/240291/","Petras_Simeon"
 "240290","2019-10-07 05:08:24","http://45.114.68.156:60077/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/240290/","Petras_Simeon"
 "240289","2019-10-07 05:08:11","http://45.114.182.82:47052/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240289/","Petras_Simeon"
 "240288","2019-10-07 05:07:35","http://43.248.24.244:12208/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240288/","Petras_Simeon"
@@ -115598,7 +115823,7 @@
 "240269","2019-10-07 05:04:02","http://37.29.67.145:1604/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/240269/","Petras_Simeon"
 "240268","2019-10-07 05:03:48","http://37.255.70.202:41800/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240268/","Petras_Simeon"
 "240267","2019-10-07 05:03:31","http://37.255.10.49:56538/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240267/","Petras_Simeon"
-"240266","2019-10-07 05:03:17","http://37.235.162.131:43810/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240266/","Petras_Simeon"
+"240266","2019-10-07 05:03:17","http://37.235.162.131:43810/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/240266/","Petras_Simeon"
 "240265","2019-10-07 05:03:06","http://37.17.21.242:39911/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/240265/","Petras_Simeon"
 "240264","2019-10-07 05:02:58","http://36.91.90.171:62797/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/240264/","Petras_Simeon"
 "240263","2019-10-07 05:02:41","http://36.89.218.3:18614/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240263/","Petras_Simeon"
@@ -115828,7 +116053,7 @@
 "240039","2019-10-07 04:24:41","http://178.210.129.150:10910/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240039/","Petras_Simeon"
 "240038","2019-10-07 04:24:36","http://178.165.122.141:17685/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/240038/","Petras_Simeon"
 "240037","2019-10-07 04:24:33","http://178.156.64.52:63080/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240037/","Petras_Simeon"
-"240036","2019-10-07 04:24:29","http://178.151.143.2:21623/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/240036/","Petras_Simeon"
+"240036","2019-10-07 04:24:29","http://178.151.143.2:21623/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240036/","Petras_Simeon"
 "240035","2019-10-07 04:24:23","http://178.150.54.4:36982/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240035/","Petras_Simeon"
 "240034","2019-10-07 04:24:19","http://178.136.195.90:37020/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/240034/","Petras_Simeon"
 "240033","2019-10-07 04:24:13","http://177.95.76.97:38821/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240033/","Petras_Simeon"
@@ -115898,7 +116123,7 @@
 "239969","2019-10-07 04:16:06","http://125.164.158.75:2605/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239969/","Petras_Simeon"
 "239968","2019-10-07 04:15:59","http://103.204.70.58:52349/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239968/","Petras_Simeon"
 "239967","2019-10-07 04:15:47","http://149.140.107.240:9108/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239967/","Petras_Simeon"
-"239966","2019-10-07 04:15:43","http://147.91.212.250:51808/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/239966/","Petras_Simeon"
+"239966","2019-10-07 04:15:43","http://147.91.212.250:51808/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239966/","Petras_Simeon"
 "239965","2019-10-07 04:15:20","http://144.139.171.97:2402/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239965/","Petras_Simeon"
 "239964","2019-10-07 04:15:13","http://144.136.155.166:62352/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/239964/","Petras_Simeon"
 "239963","2019-10-07 04:15:08","http://141.237.118.95:23275/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239963/","Petras_Simeon"
@@ -115916,7 +116141,7 @@
 "239951","2019-10-07 04:13:35","http://12.132.247.91:1601/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239951/","Petras_Simeon"
 "239950","2019-10-07 04:13:30","http://119.15.92.126:49862/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239950/","Petras_Simeon"
 "239949","2019-10-07 04:13:24","http://113.11.95.254:54720/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/239949/","Petras_Simeon"
-"239948","2019-10-07 04:13:17","http://109.95.15.210:54462/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239948/","Petras_Simeon"
+"239948","2019-10-07 04:13:17","http://109.95.15.210:54462/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/239948/","Petras_Simeon"
 "239947","2019-10-07 04:13:13","http://109.94.117.17:46660/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239947/","Petras_Simeon"
 "239946","2019-10-07 04:13:05","http://109.94.113.209:36119/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239946/","Petras_Simeon"
 "239945","2019-10-07 04:13:00","http://109.72.192.218:37460/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239945/","Petras_Simeon"
@@ -116284,7 +116509,7 @@
 "239583","2019-10-06 11:08:38","http://premiermontessori.ca/wp-content/ZHNVCGIC/","offline","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/239583/","Cryptolaemus1"
 "239582","2019-10-06 11:08:36","http://109.94.117.198:12786/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239582/","Petras_Simeon"
 "239581","2019-10-06 11:08:32","http://105.216.26.180:11626/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239581/","Petras_Simeon"
-"239580","2019-10-06 11:08:27","http://103.77.157.11:24132/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239580/","Petras_Simeon"
+"239580","2019-10-06 11:08:27","http://103.77.157.11:24132/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/239580/","Petras_Simeon"
 "239579","2019-10-06 11:08:21","http://103.123.246.203:50644/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239579/","Petras_Simeon"
 "239578","2019-10-06 11:08:07","http://102.129.18.158:11812/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239578/","Petras_Simeon"
 "239576","2019-10-06 09:51:20","http://104.248.205.226/realtek.sh","offline","malware_download","elf","https://urlhaus.abuse.ch/url/239576/","Petras_Simeon"
@@ -116330,7 +116555,7 @@
 "239536","2019-10-06 09:19:08","http://177.102.91.195:52354/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239536/","Petras_Simeon"
 "239535","2019-10-06 09:19:01","http://151.235.251.80:18188/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239535/","Petras_Simeon"
 "239534","2019-10-06 09:18:56","http://131.221.193.9:65058/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239534/","Petras_Simeon"
-"239533","2019-10-06 09:18:51","http://125.209.71.6:33831/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/239533/","Petras_Simeon"
+"239533","2019-10-06 09:18:51","http://125.209.71.6:33831/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239533/","Petras_Simeon"
 "239532","2019-10-06 09:18:45","http://125.162.65.174:19450/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239532/","Petras_Simeon"
 "239531","2019-10-06 09:18:40","http://124.248.184.246:9798/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239531/","Petras_Simeon"
 "239530","2019-10-06 09:18:35","http://111.67.75.186:48899/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239530/","Petras_Simeon"
@@ -116637,7 +116862,7 @@
 "239229","2019-10-06 07:21:04","http://31.148.120.121:30286/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/239229/","Petras_Simeon"
 "239228","2019-10-06 07:20:59","http://24.135.239.98:22456/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/239228/","Petras_Simeon"
 "239227","2019-10-06 07:20:55","http://203.115.102.243:16200/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/239227/","Petras_Simeon"
-"239226","2019-10-06 07:20:51","http://202.79.46.30:57770/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/239226/","Petras_Simeon"
+"239226","2019-10-06 07:20:51","http://202.79.46.30:57770/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/239226/","Petras_Simeon"
 "239225","2019-10-06 07:20:46","http://202.159.123.66:19084/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/239225/","Petras_Simeon"
 "239224","2019-10-06 07:20:41","http://201.27.56.103:17301/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/239224/","Petras_Simeon"
 "239223","2019-10-06 07:20:09","http://201.1.15.166:14014/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/239223/","Petras_Simeon"
@@ -116695,7 +116920,7 @@
 "239171","2019-10-06 07:13:01","http://198.98.48.74:8001/arm/bash","offline","malware_download","elf","https://urlhaus.abuse.ch/url/239171/","Petras_Simeon"
 "239170","2019-10-06 07:12:14","http://198.98.48.74:8001/x86/bash","offline","malware_download","elf","https://urlhaus.abuse.ch/url/239170/","Petras_Simeon"
 "239169","2019-10-06 07:11:07","http://81.140.15.43:58628/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/239169/","Petras_Simeon"
-"239168","2019-10-06 07:11:00","http://31.13.23.180:44800/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/239168/","Petras_Simeon"
+"239168","2019-10-06 07:11:00","http://31.13.23.180:44800/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/239168/","Petras_Simeon"
 "239167","2019-10-06 07:10:55","http://2.179.36.85:16870/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/239167/","Petras_Simeon"
 "239166","2019-10-06 07:10:15","http://95.9.96.110:39563/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/239166/","Petras_Simeon"
 "239165","2019-10-06 07:10:00","http://95.8.138.173:14321/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/239165/","Petras_Simeon"
@@ -116827,7 +117052,7 @@
 "239038","2019-10-06 06:54:13","http://41.230.88.187:31739/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/239038/","Petras_Simeon"
 "239037","2019-10-06 06:53:40","http://41.217.218.138:28414/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/239037/","Petras_Simeon"
 "239036","2019-10-06 06:53:29","http://41.190.57.239:13175/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/239036/","Petras_Simeon"
-"239035","2019-10-06 06:53:27","http://41.165.130.43:22624/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/239035/","Petras_Simeon"
+"239035","2019-10-06 06:53:27","http://41.165.130.43:22624/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/239035/","Petras_Simeon"
 "239034","2019-10-06 06:53:12","http://41.100.148.239:23776/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/239034/","Petras_Simeon"
 "239033","2019-10-06 06:53:02","http://39.40.211.98:63548/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/239033/","Petras_Simeon"
 "239032","2019-10-06 06:52:56","http://37.6.63.10:58338/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/239032/","Petras_Simeon"
@@ -116899,7 +117124,7 @@
 "238962","2019-10-06 06:40:49","http://200.217.148.218:8035/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238962/","Petras_Simeon"
 "238961","2019-10-06 06:40:44","http://197.248.228.74:53368/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238961/","Petras_Simeon"
 "238960","2019-10-06 06:40:39","http://197.232.21.221:47690/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238960/","Petras_Simeon"
-"238959","2019-10-06 06:40:32","http://197.210.214.11:17968/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238959/","Petras_Simeon"
+"238959","2019-10-06 06:40:32","http://197.210.214.11:17968/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238959/","Petras_Simeon"
 "238958","2019-10-06 06:40:26","http://197.155.66.202:9910/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238958/","Petras_Simeon"
 "238957","2019-10-06 06:40:23","http://197.155.107.236:54503/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238957/","Petras_Simeon"
 "238956","2019-10-06 06:40:15","http://196.32.111.9:32877/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238956/","Petras_Simeon"
@@ -116961,7 +117186,7 @@
 "238900","2019-10-06 06:32:48","http://185.131.112.122:33156/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238900/","Petras_Simeon"
 "238899","2019-10-06 06:32:42","http://185.122.184.241:45561/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238899/","Petras_Simeon"
 "238898","2019-10-06 06:32:27","http://185.104.114.55:43433/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238898/","Petras_Simeon"
-"238897","2019-10-06 06:32:23","http://183.87.255.182:54046/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238897/","Petras_Simeon"
+"238897","2019-10-06 06:32:23","http://183.87.255.182:54046/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238897/","Petras_Simeon"
 "238896","2019-10-06 06:32:16","http://182.184.72.173:19621/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238896/","Petras_Simeon"
 "238895","2019-10-06 06:32:11","http://182.160.108.122:3643/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238895/","Petras_Simeon"
 "238894","2019-10-06 06:32:05","http://182.113.103.14:35773/i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238894/","Petras_Simeon"
@@ -116994,7 +117219,7 @@
 "238867","2019-10-06 06:28:37","http://177.68.222.246:14345/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238867/","Petras_Simeon"
 "238866","2019-10-06 06:28:05","http://177.67.8.54:34870/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238866/","Petras_Simeon"
 "238865","2019-10-06 06:28:00","http://177.67.8.11:22617/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238865/","Petras_Simeon"
-"238864","2019-10-06 06:27:54","http://177.54.82.154:59430/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238864/","Petras_Simeon"
+"238864","2019-10-06 06:27:54","http://177.54.82.154:59430/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238864/","Petras_Simeon"
 "238863","2019-10-06 06:27:48","http://177.45.163.105:46615/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238863/","Petras_Simeon"
 "238862","2019-10-06 06:27:42","http://177.38.1.181:42638/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238862/","Petras_Simeon"
 "238861","2019-10-06 06:27:00","http://177.205.139.62:27092/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238861/","Petras_Simeon"
@@ -117566,7 +117791,7 @@
 "238262","2019-10-05 12:02:27","http://103.99.189.244:47926/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238262/","Petras_Simeon"
 "238261","2019-10-05 12:02:22","http://103.233.122.177:19458/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238261/","Petras_Simeon"
 "238260","2019-10-05 12:02:17","http://103.109.179.206:60402/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238260/","Petras_Simeon"
-"238259","2019-10-05 12:02:12","http://102.68.153.66:12603/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238259/","Petras_Simeon"
+"238259","2019-10-05 12:02:12","http://102.68.153.66:12603/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238259/","Petras_Simeon"
 "238258","2019-10-05 11:37:09","http://3.15.158.164:81/mpsl","offline","malware_download","elf","https://urlhaus.abuse.ch/url/238258/","Petras_Simeon"
 "238257","2019-10-05 11:37:07","http://3.15.158.164:81/mips","offline","malware_download","elf","https://urlhaus.abuse.ch/url/238257/","Petras_Simeon"
 "238256","2019-10-05 11:37:05","http://3.15.158.164:81/arm7","offline","malware_download","elf","https://urlhaus.abuse.ch/url/238256/","Petras_Simeon"
@@ -117574,7 +117799,7 @@
 "238254","2019-10-05 11:24:37","http://94.183.121.231:63860/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238254/","Petras_Simeon"
 "238253","2019-10-05 11:24:31","http://94.139.114.94:49582/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238253/","Petras_Simeon"
 "238252","2019-10-05 11:24:27","http://88.248.12.178:11439/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238252/","Petras_Simeon"
-"238251","2019-10-05 11:24:22","http://88.220.80.210:36956/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238251/","Petras_Simeon"
+"238251","2019-10-05 11:24:22","http://88.220.80.210:36956/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238251/","Petras_Simeon"
 "238250","2019-10-05 11:24:18","http://80.41.55.178:19885/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238250/","Petras_Simeon"
 "238249","2019-10-05 11:24:13","http://45.228.254.71:51204/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238249/","Petras_Simeon"
 "238248","2019-10-05 11:24:09","http://45.175.115.37:23557/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238248/","Petras_Simeon"
@@ -117670,7 +117895,7 @@
 "238158","2019-10-05 10:45:07","http://190.221.35.122:47504/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238158/","Petras_Simeon"
 "238157","2019-10-05 10:44:59","http://190.141.205.6:31056/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238157/","Petras_Simeon"
 "238156","2019-10-05 10:44:50","http://189.68.12.90:53546/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238156/","Petras_Simeon"
-"238155","2019-10-05 10:44:42","http://189.45.44.86:5745/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238155/","Petras_Simeon"
+"238155","2019-10-05 10:44:42","http://189.45.44.86:5745/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238155/","Petras_Simeon"
 "238154","2019-10-05 10:44:36","http://189.0.32.217:12736/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238154/","Petras_Simeon"
 "238153","2019-10-05 10:44:27","http://188.75.240.200:2062/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238153/","Petras_Simeon"
 "238152","2019-10-05 10:44:22","http://188.158.144.127:50712/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238152/","Petras_Simeon"
@@ -117698,7 +117923,7 @@
 "238130","2019-10-05 10:40:38","http://115.134.0.22:63433/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238130/","Petras_Simeon"
 "238129","2019-10-05 10:40:33","http://114.47.112.134:61005/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238129/","Petras_Simeon"
 "238128","2019-10-05 10:40:26","http://1.1.226.93:61093/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238128/","Petras_Simeon"
-"238127","2019-10-05 10:40:21","http://109.248.58.238:50004/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238127/","Petras_Simeon"
+"238127","2019-10-05 10:40:21","http://109.248.58.238:50004/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238127/","Petras_Simeon"
 "238126","2019-10-05 10:40:17","http://103.73.183.53:44671/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238126/","Petras_Simeon"
 "238125","2019-10-05 10:40:12","http://103.209.176.85:54764/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238125/","Petras_Simeon"
 "238124","2019-10-05 10:40:07","http://103.124.173.72:13616/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238124/","Petras_Simeon"
@@ -117955,7 +118180,7 @@
 "237873","2019-10-05 07:40:49","http://109.1.183.254:61200/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/237873/","Petras_Simeon"
 "237872","2019-10-05 07:40:43","http://105.225.22.122:33227/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/237872/","Petras_Simeon"
 "237871","2019-10-05 07:40:36","http://103.90.204.135:34370/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/237871/","Petras_Simeon"
-"237870","2019-10-05 07:40:30","http://103.234.226.133:20102/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/237870/","Petras_Simeon"
+"237870","2019-10-05 07:40:30","http://103.234.226.133:20102/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/237870/","Petras_Simeon"
 "237869","2019-10-05 07:40:23","http://103.23.133.187:31459/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/237869/","Petras_Simeon"
 "237868","2019-10-05 07:40:17","http://103.199.115.14:40870/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/237868/","Petras_Simeon"
 "237867","2019-10-05 07:40:12","http://103.73.182.55:30817/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/237867/","Petras_Simeon"
@@ -121905,7 +122130,7 @@
 "233818","2019-09-20 17:43:03","https://onedrive.live.com/download?cid=2F996A2F28356A49&resid=2F996A2F28356A49%21134&authkey=ABrC7U5UvhNrXII","offline","malware_download","exe,lokibot,zip","https://urlhaus.abuse.ch/url/233818/","ps66uk"
 "233817","2019-09-20 17:42:06","https://projectolynx.com/wp-content/LkzjfWzYa/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/233817/","zbetcheckin"
 "233815","2019-09-20 17:10:11","http://43.241.130.13:57842/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/233815/","zbetcheckin"
-"233814","2019-09-20 17:06:09","http://118.233.39.9:30431/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/233814/","zbetcheckin"
+"233814","2019-09-20 17:06:09","http://118.233.39.9:30431/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/233814/","zbetcheckin"
 "233813","2019-09-20 17:05:46","https://billabeda.ga/wp-admin/9fxcs-j89d8yyz-445687465/","offline","malware_download","emotet,epoch3,heodo","https://urlhaus.abuse.ch/url/233813/","Cryptolaemus1"
 "233812","2019-09-20 17:05:43","http://blog.lalalalala.club/bhx/y18ta-kk6t55-2894/","offline","malware_download","emotet,epoch3,exe,heodo","https://urlhaus.abuse.ch/url/233812/","Cryptolaemus1"
 "233811","2019-09-20 17:05:03","http://modello.co.il/wp-admin/uz70aboo-hq1fe01m-894/","offline","malware_download","emotet,epoch3","https://urlhaus.abuse.ch/url/233811/","Cryptolaemus1"
@@ -122618,7 +122843,7 @@
 "233063","2019-09-19 07:45:29","http://lucky-goto-6358.boyfriend.jp/mack/cccc.exe","offline","malware_download","exe,NanoCore","https://urlhaus.abuse.ch/url/233063/","abuse_ch"
 "233062","2019-09-19 07:44:15","http://195.231.9.118/bins/yakuza.sh4","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/233062/","zbetcheckin"
 "233061","2019-09-19 07:44:13","http://195.231.9.118/bins/yakuza.arm7","offline","malware_download","elf","https://urlhaus.abuse.ch/url/233061/","zbetcheckin"
-"233060","2019-09-19 07:44:10","http://61.56.182.218:11549/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/233060/","zbetcheckin"
+"233060","2019-09-19 07:44:10","http://61.56.182.218:11549/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/233060/","zbetcheckin"
 "233059","2019-09-19 07:44:05","http://107.174.221.192/lmaoWTF/loligang.arm7","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/233059/","zbetcheckin"
 "233058","2019-09-19 07:41:55","http://healthknowledge.my/wp-includes/gi7jeaol4m_0cke1q0y-76/","offline","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/233058/","anonymous"
 "233057","2019-09-19 07:41:39","https://pramodkumarsingh.000webhostapp.com/wp-admin/0pjq_uogqj57h1-5118704290/","offline","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/233057/","anonymous"
@@ -125229,7 +125454,7 @@
 "230346","2019-09-10 20:20:06","http://23.82.185.164/bins/Hilix.m68k","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/230346/","zbetcheckin"
 "230345","2019-09-10 20:20:04","http://23.82.185.164/bins/Hilix.arm6","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/230345/","zbetcheckin"
 "230344","2019-09-10 20:15:21","http://185.244.25.60/bins/owari.sh4","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/230344/","zbetcheckin"
-"230343","2019-09-10 20:15:19","http://218.159.238.10:46093/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/230343/","zbetcheckin"
+"230343","2019-09-10 20:15:19","http://218.159.238.10:46093/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/230343/","zbetcheckin"
 "230342","2019-09-10 20:15:15","http://192.200.195.199/mi3307","offline","malware_download","elf","https://urlhaus.abuse.ch/url/230342/","zbetcheckin"
 "230341","2019-09-10 20:15:10","http://185.244.25.60/bins/owari.spc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/230341/","zbetcheckin"
 "230340","2019-09-10 20:15:09","http://185.244.25.60/bins/owari.mpsl","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/230340/","zbetcheckin"
@@ -128386,7 +128611,7 @@
 "227138","2019-08-26 16:25:08","http://66.23.231.122/bins/sora.arm","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/227138/","zbetcheckin"
 "227137","2019-08-26 16:25:06","http://66.23.231.122/bins/sora.x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/227137/","zbetcheckin"
 "227136","2019-08-26 16:25:03","http://66.23.231.122/bins/sora.mips","offline","malware_download","elf","https://urlhaus.abuse.ch/url/227136/","zbetcheckin"
-"227135","2019-08-26 16:17:07","http://download.zjsyawqj.cn/jjbq/appupdui/v1.0.8.22/appupdui_01.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/227135/","zbetcheckin"
+"227135","2019-08-26 16:17:07","http://download.zjsyawqj.cn/jjbq/appupdui/v1.0.8.22/appupdui_01.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/227135/","zbetcheckin"
 "227134","2019-08-26 16:03:04","http://spbmultimedia.ru/wp-content/languages/plugins/1c.jpg","offline","malware_download","exe,Troldesh","https://urlhaus.abuse.ch/url/227134/","zbetcheckin"
 "227133","2019-08-26 15:59:03","http://saintboho.com/wp-admin/css/colors/blue/1c.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/227133/","zbetcheckin"
 "227132","2019-08-26 15:55:03","http://bigtext.club/app/collectchromefingerprint.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/227132/","zbetcheckin"
@@ -129166,7 +129391,7 @@
 "226345","2019-08-23 11:36:06","http://zlayla20.com/qtra/ttqr.php?l=lpop3.j12","offline","malware_download","CAN,exe,geofenced,Gozi,USA","https://urlhaus.abuse.ch/url/226345/","anonymous"
 "226344","2019-08-23 11:36:05","http://zlayla20.com/qtra/ttqr.php?l=lpop1.j12","offline","malware_download","CAN,exe,geofenced,Gozi,USA","https://urlhaus.abuse.ch/url/226344/","anonymous"
 "226343","2019-08-23 11:36:03","http://zlayla20.com/qtra/ttqr.php?l=lpop2.j12","offline","malware_download","CAN,exe,geofenced,Gozi,USA","https://urlhaus.abuse.ch/url/226343/","anonymous"
-"226342","2019-08-23 11:07:32","http://185.172.110.214/mipsel","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/226342/","zbetcheckin"
+"226342","2019-08-23 11:07:32","http://185.172.110.214/mipsel","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/226342/","zbetcheckin"
 "226341","2019-08-23 10:54:02","http://185.172.110.237//mipsel","offline","malware_download","elf","https://urlhaus.abuse.ch/url/226341/","Gandylyan1"
 "226340","2019-08-23 10:09:05","http://skleprowerowy.bike/bin/1c.jpg","offline","malware_download","None","https://urlhaus.abuse.ch/url/226340/","JAMESWT_MHT"
 "226339","2019-08-23 10:09:03","https://studiomonforte.com/.tmb/1c.jpg","offline","malware_download","None","https://urlhaus.abuse.ch/url/226339/","JAMESWT_MHT"
@@ -130841,7 +131066,7 @@
 "224611","2019-08-14 12:55:34","http://shiina.mashiro.ml/ppc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/224611/","0xrb"
 "224610","2019-08-14 12:54:41","http://shiina.mashiro.ml/x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/224610/","0xrb"
 "224609","2019-08-14 12:53:29","http://shiina.mashiro.ml/spc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/224609/","0xrb"
-"224608","2019-08-14 12:50:12","http://31639.xc.mieseng.com/xiaz/excel2007@605015_81617.exe","online","malware_download","None","https://urlhaus.abuse.ch/url/224608/","crdflabs"
+"224608","2019-08-14 12:50:12","http://31639.xc.mieseng.com/xiaz/excel2007@605015_81617.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/224608/","crdflabs"
 "224606","2019-08-14 12:48:10","http://47.92.55.239/s/w3wp.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/224606/","crdflabs"
 "224605","2019-08-14 12:48:04","http://mvvnellore.in/css/css.exe","offline","malware_download","PredatorStealer","https://urlhaus.abuse.ch/url/224605/","crdflabs"
 "224604","2019-08-14 12:21:05","http://fomoportugal.com/yaya.exe","offline","malware_download","AveMariaRAT,exe,NanoCore","https://urlhaus.abuse.ch/url/224604/","oppimaniac"
@@ -133816,7 +134041,7 @@
 "221612","2019-08-02 00:58:09","http://download.pdf00.cn/pdfreader/mini/v1.0.7.16/mini_01.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/221612/","zbetcheckin"
 "221611","2019-08-02 00:53:10","http://download.pdf00.cn/pdfreader/tips/v1.0.7.24/tips_01.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/221611/","zbetcheckin"
 "221610","2019-08-02 00:21:03","http://185.244.25.235/YOURAFAGGOT101/Reddit.x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/221610/","zbetcheckin"
-"221609","2019-08-02 00:13:05","http://download.pdf00.cn/pdfreader/fmt/v1.0.7.16/fmt_01.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/221609/","zbetcheckin"
+"221609","2019-08-02 00:13:05","http://download.pdf00.cn/pdfreader/fmt/v1.0.7.16/fmt_01.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/221609/","zbetcheckin"
 "221608","2019-08-01 23:52:06","http://onholyland.com/LUC/PPC.exe","offline","malware_download","exe,NanoCore","https://urlhaus.abuse.ch/url/221608/","zbetcheckin"
 "221606","2019-08-01 23:44:05","http://42.51.194.10:81/svcyr.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/221606/","zbetcheckin"
 "221605","2019-08-01 22:54:11","http://85.204.116.203/win2.png","offline","malware_download","exe,Trickbot","https://urlhaus.abuse.ch/url/221605/","malware_traffic"
@@ -133837,7 +134062,7 @@
 "221590","2019-08-01 15:26:09","http://fkd.derpcity.ru//f/udevd","online","malware_download","elf","https://urlhaus.abuse.ch/url/221590/","Gandylyan1"
 "221589","2019-08-01 15:26:08","http://fkd.derpcity.ru//f/tty6","online","malware_download","elf","https://urlhaus.abuse.ch/url/221589/","Gandylyan1"
 "221588","2019-08-01 15:26:07","http://fkd.derpcity.ru//f/tty5","online","malware_download","elf","https://urlhaus.abuse.ch/url/221588/","Gandylyan1"
-"221587","2019-08-01 15:26:05","http://fkd.derpcity.ru//f/tty4","offline","malware_download","elf","https://urlhaus.abuse.ch/url/221587/","Gandylyan1"
+"221587","2019-08-01 15:26:05","http://fkd.derpcity.ru//f/tty4","online","malware_download","elf","https://urlhaus.abuse.ch/url/221587/","Gandylyan1"
 "221586","2019-08-01 15:26:04","http://fkd.derpcity.ru//f/tty1","online","malware_download","elf","https://urlhaus.abuse.ch/url/221586/","Gandylyan1"
 "221585","2019-08-01 15:26:03","http://fkd.derpcity.ru//f/tty0","online","malware_download","elf","https://urlhaus.abuse.ch/url/221585/","Gandylyan1"
 "221584","2019-08-01 14:04:03","http://23.249.163.110/SON.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/221584/","zbetcheckin"
@@ -135181,7 +135406,7 @@
 "220208","2019-07-27 09:28:04","http://192.236.208.238/lmaoWTF/loligang.arm5","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/220208/","hypoweb"
 "220207","2019-07-27 09:28:03","http://192.236.208.238/lmaoWTF/loligang.arm","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/220207/","hypoweb"
 "220206","2019-07-27 08:43:05","http://nxtfdata.xyz/cl.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/220206/","zbetcheckin"
-"220205","2019-07-27 08:07:41","http://download.pdf00.cn/kszip/news/v1.0.7.16/news_01.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/220205/","zbetcheckin"
+"220205","2019-07-27 08:07:41","http://download.pdf00.cn/kszip/news/v1.0.7.16/news_01.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/220205/","zbetcheckin"
 "220204","2019-07-27 07:57:06","http://66.23.233.179/AB4g5/Josho.mips","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/220204/","zbetcheckin"
 "220203","2019-07-27 07:57:04","http://66.23.233.179/AB4g5/Josho.x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/220203/","zbetcheckin"
 "220202","2019-07-27 07:56:11","http://66.23.233.179/AB4g5/Josho.arm6","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/220202/","zbetcheckin"
@@ -136742,7 +136967,7 @@
 "218576","2019-07-21 01:00:03","https://uc8bc069718834d3c0732b4e0b38.dl.dropboxusercontent.com/cd/0/get/AlF7CJYRNdl1PGGjLIqkQvcGr_4jLTwx1sOROerx-TlEkRYSABaoIhc5QmhU3i7E0ljX0_b2komhADovCOpzt52_xO20KuoVXOITrQCwpjOoXg/file?dl=1","offline","malware_download","RTF","https://urlhaus.abuse.ch/url/218576/","zbetcheckin"
 "218575","2019-07-21 00:48:09","http://neocity1.free.fr/animation_programme/jeux/Anti-stress.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/218575/","zbetcheckin"
 "218574","2019-07-21 00:48:03","http://www.amega.sk/servis/downloader.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/218574/","zbetcheckin"
-"218573","2019-07-21 00:44:15","http://dlist.iqilie.com/pack/allroundpadsetup-4680.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/218573/","zbetcheckin"
+"218573","2019-07-21 00:44:15","http://dlist.iqilie.com/pack/allroundpadsetup-4680.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/218573/","zbetcheckin"
 "218572","2019-07-21 00:44:04","http://www.dropbox.com/s/xvwpved7njc7r96/order.doc?dl=1","offline","malware_download","RTF","https://urlhaus.abuse.ch/url/218572/","zbetcheckin"
 "218571","2019-07-21 00:23:12","http://142.11.210.200/Demon.sparc","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/218571/","zbetcheckin"
 "218570","2019-07-21 00:23:09","http://142.11.210.200/Demon.arm4","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/218570/","zbetcheckin"
@@ -137667,7 +137892,7 @@
 "217619","2019-07-17 23:56:05","http://lectual.net/jj/jj.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/217619/","zbetcheckin"
 "217617","2019-07-17 20:59:05","http://stingersrestaurant.com/wp-admin/js/firefox.bin","offline","malware_download","Dridex,Dridex-loader","https://urlhaus.abuse.ch/url/217617/","James_inthe_box"
 "217616","2019-07-17 20:25:15","http://kimotokisen.com/m/put.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/217616/","zbetcheckin"
-"217615","2019-07-17 20:17:07","http://download.ktkt.com/setupktpro_v1.1.8.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/217615/","zbetcheckin"
+"217615","2019-07-17 20:17:07","http://download.ktkt.com/setupktpro_v1.1.8.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/217615/","zbetcheckin"
 "217614","2019-07-17 20:05:08","http://4wereareyou.icu/us/2.exe","offline","malware_download","exe,racoon","https://urlhaus.abuse.ch/url/217614/","cocaman"
 "217613","2019-07-17 20:05:04","http://4wereareyou.icu/us/1.exe","offline","malware_download","AZORult,exe","https://urlhaus.abuse.ch/url/217613/","cocaman"
 "217611","2019-07-17 20:04:05","http://4wereareyou.icu/us/loader.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/217611/","cocaman"
@@ -137703,7 +137928,7 @@
 "217578","2019-07-17 11:56:04","http://shmajik.gq/cutt.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/217578/","zbetcheckin"
 "217577","2019-07-17 11:56:03","http://shmajik.gq/brt.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/217577/","zbetcheckin"
 "217576","2019-07-17 11:43:06","http://onholyland.com/JUN/JOJ.exe","offline","malware_download","exe,NanoCore","https://urlhaus.abuse.ch/url/217576/","zbetcheckin"
-"217575","2019-07-17 11:35:40","http://202.107.233.41:81/FUZHU/WWSGV0.1.EXE","online","malware_download","exe","https://urlhaus.abuse.ch/url/217575/","zbetcheckin"
+"217575","2019-07-17 11:35:40","http://202.107.233.41:81/FUZHU/WWSGV0.1.EXE","offline","malware_download","exe","https://urlhaus.abuse.ch/url/217575/","zbetcheckin"
 "217574","2019-07-17 11:07:03","http://shmajik.gq/powerad.jpg","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/217574/","abuse_ch"
 "217573","2019-07-17 10:52:06","http://autosyan.com/dj/dj.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/217573/","zbetcheckin"
 "217572","2019-07-17 10:47:04","http://danmaxexpress.com/ssl/ssl.exe","offline","malware_download","exe,RemcosRAT","https://urlhaus.abuse.ch/url/217572/","zbetcheckin"
@@ -141215,7 +141440,7 @@
 "213970","2019-07-05 09:13:24","http://empowwwer.com/templates/rt_myriad/admin/presets/1c.jpg","offline","malware_download","exe,Troldesh","https://urlhaus.abuse.ch/url/213970/","zbetcheckin"
 "213969","2019-07-05 09:13:16","http://websiteprivacypolicy.org/includes/database/mysql/1c.jpg","offline","malware_download","exe,Troldesh","https://urlhaus.abuse.ch/url/213969/","zbetcheckin"
 "213968","2019-07-05 09:13:08","http://fusion105.com/wp-content/themes/goodnews47/builder/js_composer/assets/bootstrap/css/1c.jpg","offline","malware_download","exe,Troldesh","https://urlhaus.abuse.ch/url/213968/","zbetcheckin"
-"213967","2019-07-05 09:13:03","http://kupaliskohs.sk/wp-content/themes/kupaliskohs/styles/1c.jpg","online","malware_download","exe,Troldesh","https://urlhaus.abuse.ch/url/213967/","zbetcheckin"
+"213967","2019-07-05 09:13:03","http://kupaliskohs.sk/wp-content/themes/kupaliskohs/styles/1c.jpg","offline","malware_download","exe,Troldesh","https://urlhaus.abuse.ch/url/213967/","zbetcheckin"
 "213966","2019-07-05 09:09:08","http://christen.dybenko.net/_wp-admin/css/1c.jpg","offline","malware_download","exe,Troldesh","https://urlhaus.abuse.ch/url/213966/","zbetcheckin"
 "213965","2019-07-05 09:09:06","http://unaniherbalist.com/new/1c.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/213965/","zbetcheckin"
 "213964","2019-07-05 09:09:05","http://crowdercabinets.com/templates/beez3/html/com_contact/categories/1c.jpg","offline","malware_download","exe,Troldesh","https://urlhaus.abuse.ch/url/213964/","zbetcheckin"
@@ -142355,7 +142580,7 @@
 "212819","2019-06-30 12:33:10","http://ksjdgfksdjf.ru/a2nw2ds34sdsdfgs_signed.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/212819/","zbetcheckin"
 "212818","2019-06-30 12:33:05","http://fdghfghdfghjhgjkgfgjh23.ru/rdfs34df32sdf.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/212818/","zbetcheckin"
 "212817","2019-06-30 12:29:25","http://ksjdgfksdjf.ru/windis324vd_signed.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/212817/","zbetcheckin"
-"212816","2019-06-30 12:29:16","http://dlist.iqilie.com/pack/allroundpadsetup-4678.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/212816/","zbetcheckin"
+"212816","2019-06-30 12:29:16","http://dlist.iqilie.com/pack/allroundpadsetup-4678.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/212816/","zbetcheckin"
 "212815","2019-06-30 12:29:12","http://dlist.iqilie.com/pack/AllRoundPadPack-4667.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/212815/","zbetcheckin"
 "212814","2019-06-30 12:29:07","http://fdsfddfgdfgdf.ru/windis324dfg345.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/212814/","zbetcheckin"
 "212813","2019-06-30 12:25:15","http://fdghfghdfghjhgjkgfgjh23.ru/rnw2ds34sdsdfgs_signed.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/212813/","zbetcheckin"
@@ -144614,7 +144839,7 @@
 "210544","2019-06-20 04:18:04","http://134.209.112.30:80/bins/hoho.x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/210544/","zbetcheckin"
 "210543","2019-06-20 04:18:04","http://78.128.114.66:80/zehir/z3hir.arm","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/210543/","zbetcheckin"
 "210542","2019-06-20 04:18:03","http://78.128.114.66/zehir/z3hir.arm7","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/210542/","zbetcheckin"
-"210541","2019-06-20 04:10:49","http://indonesias.me:9998/64.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/210541/","zbetcheckin"
+"210541","2019-06-20 04:10:49","http://indonesias.me:9998/64.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/210541/","zbetcheckin"
 "210540","2019-06-20 04:10:05","http://203.95.192.84:9998/32.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/210540/","zbetcheckin"
 "210539","2019-06-20 04:06:02","http://connetquotlibrary.org/services/copy-print-and-fax/wireless-printing/connetquot-library-wifi-printer.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/210539/","zbetcheckin"
 "210538","2019-06-20 03:24:03","http://78.128.114.66:80/zehir/z3hir.x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/210538/","zbetcheckin"
@@ -150088,7 +150313,7 @@
 "205052","2019-05-31 13:50:11","http://emacsoft.com/wp-content/Document/eGMTPjbSuEYBdrlFEIWLcFVARyFx/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/205052/","spamhaus"
 "205051","2019-05-31 13:42:06","http://viacomercial.com/mcc/Pages/scrmv1hnzwbg_83uqjsdcsh-420052296/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/205051/","spamhaus"
 "205050","2019-05-31 13:36:03","http://alya-international.com/wp-admin/zBTpEfnVpAuYpVwHsIjxNhnBTS/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/205050/","spamhaus"
-"205049","2019-05-31 13:32:13","http://ziliao.yunkaodian.com/all/ykdtest.exe","online","malware_download","exe,GandCrab","https://urlhaus.abuse.ch/url/205049/","zbetcheckin"
+"205049","2019-05-31 13:32:13","http://ziliao.yunkaodian.com/all/ykdtest.exe","offline","malware_download","exe,GandCrab","https://urlhaus.abuse.ch/url/205049/","zbetcheckin"
 "205048","2019-05-31 13:32:09","http://fullmoon.co.jp/wp-content/lm/RudddNZosVkYVAsOEgUKCw/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/205048/","spamhaus"
 "205047","2019-05-31 13:22:05","http://rubiz.smartsho.ir/wp-includes/sites/eUbvKLQYIuVdSZj/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/205047/","spamhaus"
 "205046","2019-05-31 13:16:04","http://elres.sk/tmp/install_51bb98598b536/mod_flexi_customcode_UNZIP_1st/1c.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/205046/","zbetcheckin"
@@ -151438,7 +151663,7 @@
 "203697","2019-05-29 22:55:03","http://softhotel.com/cgi-bin/hsKPeXHFNs/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/203697/","spamhaus"
 "203696","2019-05-29 22:54:02","http://sneezy.be/files/lm/trlnuyp6txuxkahdf140m_b2ofh0v-1283763430810/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/203696/","spamhaus"
 "203695","2019-05-29 22:46:02","http://snippen.de/301/sites/ICmlFyqgGCmcBnjoVnpOGzHE/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/203695/","spamhaus"
-"203694","2019-05-29 22:43:40","http://download.ktkt.com/setupKtkt_V2.0.6.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/203694/","zbetcheckin"
+"203694","2019-05-29 22:43:40","http://download.ktkt.com/setupKtkt_V2.0.6.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/203694/","zbetcheckin"
 "203693","2019-05-29 22:40:03","http://solutions4brands.com/CREATion_files/INC/ka96r6o5ysrymdmfs9r_kplh9-4260408219/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/203693/","Cryptolaemus1"
 "203692","2019-05-29 22:38:03","http://softem.de/TSV_1861_Mainburg/Pages/IhTNCxjEfBayZzNzqUKWY/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/203692/","spamhaus"
 "203691","2019-05-29 22:34:06","http://dreamtrips.icu/dreamtrips_us1.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/203691/","zbetcheckin"
@@ -151452,7 +151677,7 @@
 "203683","2019-05-29 22:19:03","http://spideronfire.com/css/esp/lhtbsyThX/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/203683/","Cryptolaemus1"
 "203682","2019-05-29 22:17:12","http://www.whgaty.com/gs.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/203682/","zbetcheckin"
 "203681","2019-05-29 22:16:02","http://spiritofbeauty.de/AGBs/FILE/KZQzKdKpSJJQRiBAepUIdJlD/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/203681/","spamhaus"
-"203680","2019-05-29 22:12:37","http://download.ktkt.com/setupKtPro_V1.0.4.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/203680/","zbetcheckin"
+"203680","2019-05-29 22:12:37","http://download.ktkt.com/setupKtPro_V1.0.4.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/203680/","zbetcheckin"
 "203679","2019-05-29 22:12:11","http://tncnet.com/images/yh050r_w6ser-9083/","offline","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/203679/","Cryptolaemus1"
 "203678","2019-05-29 22:12:08","http://tittgen.eu/iXOWCOaq/","offline","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/203678/","Cryptolaemus1"
 "203677","2019-05-29 22:12:08","https://tecnocrimp.com/administrator/KkGEhGES/","offline","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/203677/","Cryptolaemus1"
@@ -158762,7 +158987,7 @@
 "196335","2019-05-14 18:35:04","http://68.183.226.1/bins/hoho.sh4","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/196335/","zbetcheckin"
 "196334","2019-05-14 18:35:03","http://68.183.226.1/bins/hoho.ppc","offline","malware_download","elf","https://urlhaus.abuse.ch/url/196334/","zbetcheckin"
 "196333","2019-05-14 18:27:06","http://download.weihuyun.cn/201802091011281128.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/196333/","zbetcheckin"
-"196332","2019-05-14 18:13:09","http://dl.kuaile-u.com/nb/haitunjsq_nb002.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/196332/","zbetcheckin"
+"196332","2019-05-14 18:13:09","http://dl.kuaile-u.com/nb/haitunjsq_nb002.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/196332/","zbetcheckin"
 "196331","2019-05-14 18:08:04","http://kassohome.com.tr/th/thm.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/196331/","zbetcheckin"
 "196330","2019-05-14 18:07:25","http://down.icafe8.com/old_version/Update_6.5.5.8.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/196330/","zbetcheckin"
 "196329","2019-05-14 17:59:09","https://acgis.me/wp-admin/rx09d8g1r4t_1ttn4g56-11387282?/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/196329/","Cryptolaemus1"
@@ -159135,7 +159360,7 @@
 "195956","2019-05-14 06:54:32","http://71.79.146.82:58050/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/195956/","UrBogan"
 "195955","2019-05-14 06:54:27","http://82.149.115.54:21385/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/195955/","UrBogan"
 "195954","2019-05-14 06:54:24","http://77.111.134.188:57656/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/195954/","UrBogan"
-"195953","2019-05-14 06:54:20","http://93.119.236.72:52879/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/195953/","UrBogan"
+"195953","2019-05-14 06:54:20","http://93.119.236.72:52879/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/195953/","UrBogan"
 "195952","2019-05-14 06:54:15","http://119.48.46.210:24851/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/195952/","UrBogan"
 "195951","2019-05-14 06:54:10","http://83.128.254.173:44919/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/195951/","UrBogan"
 "195950","2019-05-14 06:54:08","http://121.180.253.95:49334/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/195950/","UrBogan"
@@ -165275,7 +165500,7 @@
 "189710","2019-05-02 19:18:06","http://fitnessdenofficial.com/wp-content/verif.accounts.docs.com/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/189710/","Cryptolaemus1"
 "189709","2019-05-02 19:18:05","http://emersonprojects.com.au/wp-content/mndp3n5ia73am8h1_y58xx-933473224457830/","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/189709/","spamhaus"
 "189708","2019-05-02 19:14:10","http://danxehoichongnong.com/wp-content/secure.myaccount.docs.net/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/189708/","Cryptolaemus1"
-"189707","2019-05-02 19:14:06","http://elokshinproperty.co.za/jtau/paclm/8ouar200imvhee4iy_f85p9l0e-62227938/","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/189707/","spamhaus"
+"189707","2019-05-02 19:14:06","http://elokshinproperty.co.za/jtau/paclm/8ouar200imvhee4iy_f85p9l0e-62227938/","online","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/189707/","spamhaus"
 "189706","2019-05-02 19:13:55","https://docs.google.com/uc?id=1thLpek5rPVL3fiitK2Za0xyvk6YjxJ7H","offline","malware_download","exe,Gozi,zip","https://urlhaus.abuse.ch/url/189706/","anonymous"
 "189705","2019-05-02 19:13:53","https://docs.google.com/uc?id=1d8Vovpa5svIHhs7BT1gm2svcbjn1DO4m","offline","malware_download","exe,Gozi,zip","https://urlhaus.abuse.ch/url/189705/","anonymous"
 "189704","2019-05-02 19:13:51","https://docs.google.com/uc?id=1Jt4vlN5pyJDrBJW76zAGTbBGbJuOqR43","offline","malware_download","exe,Gozi,zip","https://urlhaus.abuse.ch/url/189704/","anonymous"
@@ -168669,7 +168894,7 @@
 "186285","2019-04-27 20:54:04","http://tapchicaythuoc.com/cgi-bin/sec.myaccount.send.biz","offline","malware_download","doc","https://urlhaus.abuse.ch/url/186285/","zbetcheckin"
 "186284","2019-04-27 20:51:05","http://tappapp.co.za/cgi-bin/verif.myacc.docs.net/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/186284/","zbetcheckin"
 "186283","2019-04-27 20:50:06","http://188.166.51.96/bins/onryo.arm7","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/186283/","zbetcheckin"
-"186282","2019-04-27 20:50:06","http://dl.1003b.56a.com/pub/1003b/Patch/Patch_Data/Patch_0.3300/1003b.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/186282/","zbetcheckin"
+"186282","2019-04-27 20:50:06","http://dl.1003b.56a.com/pub/1003b/Patch/Patch_Data/Patch_0.3300/1003b.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/186282/","zbetcheckin"
 "186281","2019-04-27 20:43:03","http://chii.vtivalves.us/pic/CHI.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/186281/","zbetcheckin"
 "186280","2019-04-27 20:43:02","http://188.166.51.96/bins/onryo.mips","offline","malware_download","elf","https://urlhaus.abuse.ch/url/186280/","zbetcheckin"
 "186279","2019-04-27 20:39:04","http://188.166.51.96/bins/onryo.m68k","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/186279/","zbetcheckin"
@@ -168709,7 +168934,7 @@
 "186245","2019-04-27 18:07:07","http://194.156.120.5/H20.i686","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/186245/","zbetcheckin"
 "186244","2019-04-27 18:07:06","http://194.156.120.5/H20.mpsl","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/186244/","zbetcheckin"
 "186243","2019-04-27 18:07:04","http://188.166.51.96:80/Nazi/Nazi.arm","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/186243/","zbetcheckin"
-"186242","2019-04-27 17:18:22","http://gx-10012947.file.myqcloud.com/001my7.0.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/186242/","zbetcheckin"
+"186242","2019-04-27 17:18:22","http://gx-10012947.file.myqcloud.com/001my7.0.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/186242/","zbetcheckin"
 "186241","2019-04-27 17:06:19","http://139.59.74.176/zehir/z3hir.sh4","offline","malware_download","elf,mirai,upx","https://urlhaus.abuse.ch/url/186241/","0xrb"
 "186240","2019-04-27 17:06:16","http://139.59.74.176/zehir/z3hir.m68k","offline","malware_download","elf,mirai,upx","https://urlhaus.abuse.ch/url/186240/","0xrb"
 "186239","2019-04-27 17:06:14","http://139.59.74.176/zehir/z3hir.ppc","offline","malware_download","elf,mirai,upx","https://urlhaus.abuse.ch/url/186239/","0xrb"
@@ -169236,7 +169461,7 @@
 "185716","2019-04-26 19:22:06","https://mackprints.com/clean.exe","offline","malware_download","exe,Formbook","https://urlhaus.abuse.ch/url/185716/","zbetcheckin"
 "185715","2019-04-26 19:20:05","http://mywebnerd.com/moodle/XEcYR-UXE2Bb0IBkAUuyE_jTYXuGRd-70q/","offline","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/185715/","Cryptolaemus1"
 "185714","2019-04-26 19:20:04","http://todomuta.com/tm/INC/jXQ6wZkLswqp/","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/185714/","spamhaus"
-"185713","2019-04-26 19:17:06","http://xiaoma-10021647.file.myqcloud.com/qrtb.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/185713/","zbetcheckin"
+"185713","2019-04-26 19:17:06","http://xiaoma-10021647.file.myqcloud.com/qrtb.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/185713/","zbetcheckin"
 "185712","2019-04-26 19:16:08","http://heke.net/images/grbZW-zBzuxgmP6whmiz_GMJxbDwu-ay/","offline","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/185712/","Cryptolaemus1"
 "185711","2019-04-26 19:16:06","http://tohkatsukumiai.or.jp/img/INC/XPm3QwY1C0W/","offline","malware_download","None","https://urlhaus.abuse.ch/url/185711/","spamhaus"
 "185710","2019-04-26 19:08:04","http://hermagi.ir/wp-includes/tvhIv-9wayRECj2S3bI9_paHMqLmlH-fN/","offline","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/185710/","Cryptolaemus1"
@@ -171884,7 +172109,7 @@
 "183031","2019-04-23 15:03:08","http://www.lafoulee.com/calendar/ai9tx-pyen5zi-tdmaf/","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/183031/","spamhaus"
 "183030","2019-04-23 15:02:16","https://pureprotea.com/ynibgkd65jf/IjpU-jPXjRcx2PfQ9tT_NhYiukhD-ZP3/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/183030/","Cryptolaemus1"
 "183029","2019-04-23 15:02:05","http://www.lecombava.com/wp-content/FILE/PRs3CWUiT/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/183029/","Cryptolaemus1"
-"183028","2019-04-23 15:01:14","http://dl.iqilie.com/znsrf/180814/QianYueSetup-4534.exe","offline","malware_download","BlackShades,exe","https://urlhaus.abuse.ch/url/183028/","zbetcheckin"
+"183028","2019-04-23 15:01:14","http://dl.iqilie.com/znsrf/180814/QianYueSetup-4534.exe","online","malware_download","BlackShades,exe","https://urlhaus.abuse.ch/url/183028/","zbetcheckin"
 "183027","2019-04-23 14:59:06","http://hmjanealamhs.edu.bd/cgi-bin/uXHn-pGwIfHqUsigbTA_psXmtoirs-iWq/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/183027/","Cryptolaemus1"
 "183026","2019-04-23 14:58:15","https://lcced.com.ve/images/FILE/RQmoqv2qet/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/183026/","Cryptolaemus1"
 "183025","2019-04-23 14:57:03","https://www.eigenheim4life.de/s/p89km6e-q1l97-beryri/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/183025/","Cryptolaemus1"
@@ -172955,9 +173180,9 @@
 "181956","2019-04-22 11:43:06","http://bostonseafarms.com/images/aous-d4NxSsxmPBUT3S_HntmDnUf-5G9/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/181956/","Cryptolaemus1"
 "181955","2019-04-22 11:31:05","http://rinconadarolandovera.com/calendar/yRZq-KweOFhLnjD4HNq_PTxZUdHJH-irr/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/181955/","Cryptolaemus1"
 "181954","2019-04-22 11:27:04","http://imagine8ni.com/wp-includes/QIci-VZ818adl76JzBJ_CKFvQlZx-wCt/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/181954/","Cryptolaemus1"
-"181953","2019-04-22 11:23:08","http://pat4.jetos.com/w2008.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/181953/","zbetcheckin"
+"181953","2019-04-22 11:23:08","http://pat4.jetos.com/w2008.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/181953/","zbetcheckin"
 "181952","2019-04-22 11:23:06","http://jbmshows.com/wp-includes/HiGnw-MvrFN1wKvkPrZWv_wqPLQoTtd-sp/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/181952/","Cryptolaemus1"
-"181951","2019-04-22 11:19:04","http://pat4.jetos.com/pxp.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/181951/","zbetcheckin"
+"181951","2019-04-22 11:19:04","http://pat4.jetos.com/pxp.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/181951/","zbetcheckin"
 "181950","2019-04-22 11:19:03","http://jointhegoodcampaign.com/XgzxR-s10yqIJNY7O7Qn_iuuplDxh-U6w/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/181950/","Cryptolaemus1"
 "181949","2019-04-22 11:16:03","http://zagruz.dnset.com/DEDKO.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/181949/","zbetcheckin"
 "181948","2019-04-22 11:08:20","http://speed.myz.info/arp.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/181948/","zbetcheckin"
@@ -180527,7 +180752,7 @@
 "174374","2019-04-10 03:17:27","http://kmgusa.net/a2test.com/scan/messages/sec/en_EN/04-2019/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/174374/","Cryptolaemus1"
 "174373","2019-04-10 03:17:25","http://jonaenterprises.com/images/inc/legal/question/En_en/2019-04/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/174373/","Cryptolaemus1"
 "174372","2019-04-10 03:17:23","http://dreamsmattress.in/wp-content/uploads/US/support/sec/EN_en/2019-04/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/174372/","Cryptolaemus1"
-"174371","2019-04-10 03:17:20","http://colourcreative.co.za/wp-content/security/service/ios/en_EN/201904/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/174371/","Cryptolaemus1"
+"174371","2019-04-10 03:17:20","http://colourcreative.co.za/wp-content/security/service/ios/en_EN/201904/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/174371/","Cryptolaemus1"
 "174370","2019-04-10 03:17:18","http://bility.com.br/agencia/US/legal/question/EN/2019-04/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/174370/","Cryptolaemus1"
 "174369","2019-04-10 03:17:13","http://bigbrushmedia.com/doc/messages/question/En/04-2019/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/174369/","Cryptolaemus1"
 "174368","2019-04-10 03:17:12","http://ansolutions.com.pk/US/legal/secure/EN/2019-04/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/174368/","Cryptolaemus1"
@@ -183442,7 +183667,7 @@
 "171428","2019-04-04 14:28:04","http://www.primaybordon.com/wordpress/wp-content/themes/sketch/ssm.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/171428/","zbetcheckin"
 "171427","2019-04-04 14:28:03","http://www.primaybordon.com/wordpress/wp-content/themes/sketch/sms.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/171427/","zbetcheckin"
 "171426","2019-04-04 14:23:20","http://pwss.proactionfluids.net/api?gyutsw","offline","malware_download","AUT,exe,geofenced,gootkit","https://urlhaus.abuse.ch/url/171426/","anonymous"
-"171425","2019-04-04 14:23:14","http://granportale.com.br/img/cryptedkalu.exe","offline","malware_download","exe,Pony","https://urlhaus.abuse.ch/url/171425/","zbetcheckin"
+"171425","2019-04-04 14:23:14","http://granportale.com.br/img/cryptedkalu.exe","online","malware_download","exe,Pony","https://urlhaus.abuse.ch/url/171425/","zbetcheckin"
 "171424","2019-04-04 13:39:03","http://hii4keenan.com/2poef1/j.php?l=typk11.fgs","offline","malware_download","Gozi","https://urlhaus.abuse.ch/url/171424/","FullM3talPacket"
 "171423","2019-04-04 13:28:05","https://uc55b654465941f1cff5b379179d.dl.dropboxusercontent.com/cd/0/get/AeYFGAHCxRLobyWIYJymMIq-8udRKMT_3qOStPHpBkGIJPa-O3lVz4Ggf5OwElKWLJDabMCIGjSGdna88S3j_hbW-_ZVy4SaE2VelBLOjrDINQ/file?dl=1","offline","malware_download","msi","https://urlhaus.abuse.ch/url/171423/","zbetcheckin"
 "171422","2019-04-04 13:17:23","http://bayboratek.com/28032019yedek/Kk6Y/","offline","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/171422/","Cryptolaemus1"
@@ -183451,7 +183676,7 @@
 "171419","2019-04-04 13:17:12","http://ersanenglish.com/backup/un/","offline","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/171419/","Cryptolaemus1"
 "171418","2019-04-04 13:17:05","http://adilabtech.com/newweb/O8T/","offline","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/171418/","Cryptolaemus1"
 "171417","2019-04-04 13:15:17","http://granportale.com.br/imagens/3TEGDLnbc1q.jpg","offline","malware_download","AZORult,exe","https://urlhaus.abuse.ch/url/171417/","zbetcheckin"
-"171416","2019-04-04 13:15:10","http://granportale.com.br/imagens/KAL37EYHD1.jpg","online","malware_download","exe,Pony","https://urlhaus.abuse.ch/url/171416/","zbetcheckin"
+"171416","2019-04-04 13:15:10","http://granportale.com.br/imagens/KAL37EYHD1.jpg","offline","malware_download","exe,Pony","https://urlhaus.abuse.ch/url/171416/","zbetcheckin"
 "171415","2019-04-04 12:57:06","http://granportale.com.br/imagens/CLINRTDFFG342EWS.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/171415/","zbetcheckin"
 "171414","2019-04-04 12:46:33","http://charlesremcos.duckdns.org/dd.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/171414/","zbetcheckin"
 "171413","2019-04-04 12:46:09","http://automatrix2.com/css/t45kl23j432lh432432kjh665htrhtrnf32.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/171413/","zbetcheckin"
@@ -190565,7 +190790,7 @@
 "163868","2019-03-22 06:05:06","http://46.101.156.58:80/gaybub/miori.arm5","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/163868/","zbetcheckin"
 "163867","2019-03-22 06:05:04","http://46.101.156.58:80/gaybub/miori.arm7","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/163867/","zbetcheckin"
 "163866","2019-03-22 06:03:32","http://www.twinplaza.jp/library/use/Photo.scr","offline","malware_download","None","https://urlhaus.abuse.ch/url/163866/","papa_anniekey"
-"163865","2019-03-22 05:52:06","http://s14b.91danji.com/20151215/%E9%87%91%E5%AD%97%E5%A1%94%E6%96%B9%E5%9D%97.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/163865/","zbetcheckin"
+"163865","2019-03-22 05:52:06","http://s14b.91danji.com/20151215/%E9%87%91%E5%AD%97%E5%A1%94%E6%96%B9%E5%9D%97.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/163865/","zbetcheckin"
 "163864","2019-03-22 05:48:02","https://electromada.com/bbl.jpg","offline","malware_download","exe,Formbook","https://urlhaus.abuse.ch/url/163864/","cocaman"
 "163862","2019-03-22 05:42:15","http://206.189.30.147/bins/sbot.arm5","offline","malware_download","elf","https://urlhaus.abuse.ch/url/163862/","Gandylyan1"
 "163861","2019-03-22 05:42:15","http://206.189.30.147/bins/sbot.mpsl","offline","malware_download","elf","https://urlhaus.abuse.ch/url/163861/","Gandylyan1"
@@ -190597,12 +190822,12 @@
 "163835","2019-03-22 05:16:03","http://turismolenzarote.com/accounting/documents/download.php?file=ODQ3Mjk5NjI2OF9fX19lbGV3dWwuZXhl","offline","malware_download","exe","https://urlhaus.abuse.ch/url/163835/","zbetcheckin"
 "163834","2019-03-22 05:08:08","http://declic-prospection.com/installation_declic.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/163834/","zbetcheckin"
 "163833","2019-03-22 05:08:02","http://turismolenzarote.com/accounting/documents/download.php?file=NDg0ODU5MDQyNl9fX19zY2FuczM0LnBuZw==","offline","malware_download","exe","https://urlhaus.abuse.ch/url/163833/","zbetcheckin"
-"163832","2019-03-22 05:03:14","http://s14b.groundyun.cn/20151218/%E5%B0%8F%E9%B8%A1%E5%85%A5%E4%BE%B5%E8%80%853.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/163832/","zbetcheckin"
+"163832","2019-03-22 05:03:14","http://s14b.groundyun.cn/20151218/%E5%B0%8F%E9%B8%A1%E5%85%A5%E4%BE%B5%E8%80%853.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/163832/","zbetcheckin"
 "163831","2019-03-22 05:02:43","http://rrbmexico.com/license.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/163831/","zbetcheckin"
 "163830","2019-03-22 04:51:04","https://www.drivingwitharrow.com/wp-content/plugins/w8KF86/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/163830/","Cryptolaemus1"
 "163829","2019-03-22 04:49:06","http://www.winkniga.ru/installw.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/163829/","zbetcheckin"
-"163828","2019-03-22 04:40:28","http://s14b.91danji.com/20151218/%E5%B0%8F%E9%B8%A1%E5%85%A5%E4%BE%B5%E8%80%853.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/163828/","zbetcheckin"
-"163827","2019-03-22 04:24:44","http://s14b.91danji.com/20151220/%E5%8C%97%E6%96%97%E7%A5%9E%E6%8B%B3%E4%B8%96%E7%BA%AA%E6%9C%AB%E6%95%91%E4%B8%96%E4%B8%BB%E4%BC%A0%E8%AF%B4.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/163827/","zbetcheckin"
+"163828","2019-03-22 04:40:28","http://s14b.91danji.com/20151218/%E5%B0%8F%E9%B8%A1%E5%85%A5%E4%BE%B5%E8%80%853.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/163828/","zbetcheckin"
+"163827","2019-03-22 04:24:44","http://s14b.91danji.com/20151220/%E5%8C%97%E6%96%97%E7%A5%9E%E6%8B%B3%E4%B8%96%E7%BA%AA%E6%9C%AB%E6%95%91%E4%B8%96%E4%B8%BB%E4%BC%A0%E8%AF%B4.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/163827/","zbetcheckin"
 "163826","2019-03-22 03:53:18","http://ahsantiago.pt/templates/beez3/images/personal/rTRhOOmU4duXOXr.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/163826/","zbetcheckin"
 "163825","2019-03-22 03:47:11","http://turismolenzarote.com/accounting/documents/download.php?file=NjU0NDM3NjE4M19fX19pd2VjZXR1LmV4ZQ==","offline","malware_download","exe","https://urlhaus.abuse.ch/url/163825/","zbetcheckin"
 "163824","2019-03-22 03:26:08","http://fileloader.netx.host/ktr/227.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/163824/","zbetcheckin"
@@ -190612,7 +190837,7 @@
 "163820","2019-03-22 03:10:06","http://107.172.41.9/pftp","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/163820/","zbetcheckin"
 "163819","2019-03-22 03:10:05","http://145.239.222.222/armv7l","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/163819/","zbetcheckin"
 "163818","2019-03-22 03:10:03","http://104.248.23.140/tenshiarm6","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/163818/","zbetcheckin"
-"163817","2019-03-22 03:08:23","http://s14b.91danji.com/20160101/%E7%9C%9F%E5%AE%9E%E8%B0%8E%E8%A8%80%E4%B8%96%E7%95%8C%E7%89%88.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/163817/","zbetcheckin"
+"163817","2019-03-22 03:08:23","http://s14b.91danji.com/20160101/%E7%9C%9F%E5%AE%9E%E8%B0%8E%E8%A8%80%E4%B8%96%E7%95%8C%E7%89%88.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/163817/","zbetcheckin"
 "163815","2019-03-22 02:52:25","http://104.248.23.140/tenshim68k","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/163815/","zbetcheckin"
 "163813","2019-03-22 02:50:05","http://104.248.23.140/tenshii686","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/163813/","zbetcheckin"
 "163814","2019-03-22 02:50:05","http://104.248.23.140/tenshix86","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/163814/","zbetcheckin"
@@ -191028,7 +191253,7 @@
 "163398","2019-03-21 11:10:14","http://dinobacciotti.com.br/2eqt/vdm8-uyuyv-dfiwnrk/","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/163398/","spamhaus"
 "163397","2019-03-21 11:10:09","http://docecreativo.com/ykex-n27cn-ywfdxyg/","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/163397/","spamhaus"
 "163396","2019-03-21 11:10:06","http://ciadostapetes.com.br/logssite/xrw2-c640ec-wwdjul/","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/163396/","spamhaus"
-"163395","2019-03-21 11:09:40","http://g.7230.com/pcv/xzys_dnb_jf.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/163395/","zbetcheckin"
+"163395","2019-03-21 11:09:40","http://g.7230.com/pcv/xzys_dnb_jf.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/163395/","zbetcheckin"
 "163394","2019-03-21 10:59:17","http://dingesgang.com/wp-admin/uhgv-jsyr0r-kotcqw/","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/163394/","spamhaus"
 "163393","2019-03-21 10:59:16","http://dirproperties.com/cgi-bin/tewyf-1q3nn-pxjtnaug/","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/163393/","spamhaus"
 "163392","2019-03-21 10:59:14","http://colbydix.com/mailer/ayzmf-bcwjgtl-dqojfyz/","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/163392/","spamhaus"
@@ -201459,7 +201684,7 @@
 "152916","2019-03-06 02:57:09","http://59.17.151.194:38709/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/152916/","zbetcheckin"
 "152915","2019-03-06 02:57:06","http://41.38.184.252:60422/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/152915/","zbetcheckin"
 "152914","2019-03-06 02:57:03","http://46.27.18.158:30604/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/152914/","zbetcheckin"
-"152913","2019-03-06 02:13:28","http://dl2.soft-lenta.ru/L21pc2NlbGxhbmVvdXMvUG9ydGFibGVfU29mdC9tYWdpY2lzby5leGU%3D/MTUzNTQzNTYxMQ%3D%3D","online","malware_download","exe","https://urlhaus.abuse.ch/url/152913/","zbetcheckin"
+"152913","2019-03-06 02:13:28","http://dl2.soft-lenta.ru/L21pc2NlbGxhbmVvdXMvUG9ydGFibGVfU29mdC9tYWdpY2lzby5leGU%3D/MTUzNTQzNTYxMQ%3D%3D","offline","malware_download","exe","https://urlhaus.abuse.ch/url/152913/","zbetcheckin"
 "152912","2019-03-06 02:09:04","http://essensualsnepal.com/wp-admin/includes/Swift_BancoPopula_pedido0047221.jar","offline","malware_download","zip","https://urlhaus.abuse.ch/url/152912/","zbetcheckin"
 "152911","2019-03-06 01:49:46","http://ingchuang.com/YMITC/sendincverif/service/ios/en_EN/032019/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/152911/","Cryptolaemus1"
 "152910","2019-03-06 01:49:32","http://hsoft.ir/2UmJPdYAct_LIK/sendinc/messages/secure/en_EN/032019/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/152910/","Cryptolaemus1"
@@ -208983,7 +209208,7 @@
 "145166","2019-02-25 06:30:05","http://gweboffice.co.uk/admin1@office3.doc","offline","malware_download","doc","https://urlhaus.abuse.ch/url/145166/","abuse_ch"
 "145165","2019-02-25 06:27:02","http://77.73.70.115/dkfjb/ke1.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/145165/","zbetcheckin"
 "145164","2019-02-25 06:26:03","http://baycityfence.com/BUBA-PO.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/145164/","abuse_ch"
-"145163","2019-02-25 06:13:07","http://down.tgjkbx.cn/openlink/xzq1.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/145163/","zbetcheckin"
+"145163","2019-02-25 06:13:07","http://down.tgjkbx.cn/openlink/xzq1.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/145163/","zbetcheckin"
 "145161","2019-02-25 06:01:57","http://80.211.172.75/armv5l","offline","malware_download","elf,gafgyt","https://urlhaus.abuse.ch/url/145161/","0xrb"
 "145162","2019-02-25 06:01:57","http://80.211.172.75/powerpc-440fp","offline","malware_download","elf,gafgyt","https://urlhaus.abuse.ch/url/145162/","0xrb"
 "145160","2019-02-25 06:01:54","http://80.211.172.75/armv4l","offline","malware_download","elf,gafgyt","https://urlhaus.abuse.ch/url/145160/","0xrb"
@@ -212298,7 +212523,7 @@
 "141706","2019-02-21 10:44:10","http://files.anjian.com/forum/201307/24/194027tt7gtjutf89fjpfj.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/141706/","zbetcheckin"
 "141705","2019-02-21 10:44:03","http://b.top4top.net/p_1113zezwp1.jpg","offline","malware_download","exe,njRAT","https://urlhaus.abuse.ch/url/141705/","zbetcheckin"
 "141704","2019-02-21 10:44:03","http://kamagra4uk.com/tadmin/mor/nmor.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/141704/","zbetcheckin"
-"141703","2019-02-21 10:43:07","http://granportale.com.br/img/prince.jpg","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/141703/","zbetcheckin"
+"141703","2019-02-21 10:43:07","http://granportale.com.br/img/prince.jpg","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/141703/","zbetcheckin"
 "141702","2019-02-21 10:41:02","http://34.229.7.66/Februar2019/DAHDDBMJW2146584/","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/141702/","spamhaus"
 "141701","2019-02-21 10:39:08","http://185.120.58.196/leag.bin","offline","malware_download","ArkeiStealer,exe,stealer,Vidar","https://urlhaus.abuse.ch/url/141701/","anonymous"
 "141700","2019-02-21 10:37:08","http://ngkidshop.com/DE/CWIRDUAYAA0892717/","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/141700/","spamhaus"
@@ -213667,7 +213892,7 @@
 "140334","2019-02-20 02:59:05","http://152.249.231.35:6929/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/140334/","zbetcheckin"
 "140333","2019-02-20 02:58:09","http://189.113.32.35:10708/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/140333/","zbetcheckin"
 "140332","2019-02-20 02:58:06","http://157.230.208.195:80/x86","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/140332/","zbetcheckin"
-"140331","2019-02-20 02:58:05","http://181.49.241.50:32292/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/140331/","zbetcheckin"
+"140331","2019-02-20 02:58:05","http://181.49.241.50:32292/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/140331/","zbetcheckin"
 "140330","2019-02-20 02:56:03","http://162.216.156.173/rebirth.arm5","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/140330/","zbetcheckin"
 "140329","2019-02-20 02:56:02","http://157.230.49.203/bins/xova.m68k","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/140329/","zbetcheckin"
 "140328","2019-02-20 02:55:05","http://162.216.156.173/ffrebirth.arm6","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/140328/","zbetcheckin"
@@ -213683,7 +213908,7 @@
 "140318","2019-02-20 02:22:02","http://chuthapdobg.org.vn/tmp/Invoice/hgjz-zS1_rC-tl3","offline","malware_download","doc","https://urlhaus.abuse.ch/url/140318/","zbetcheckin"
 "140317","2019-02-20 02:21:10","http://yrsmartshoppy.com/t.exe","offline","malware_download","exe,GandCrab","https://urlhaus.abuse.ch/url/140317/","zbetcheckin"
 "140316","2019-02-20 02:21:06","http://139.99.186.18/xml/akin.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/140316/","zbetcheckin"
-"140315","2019-02-20 02:15:08","http://static.topxgun.com/1465810383951_443.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/140315/","zbetcheckin"
+"140315","2019-02-20 02:15:08","http://static.topxgun.com/1465810383951_443.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/140315/","zbetcheckin"
 "140314","2019-02-20 02:13:05","http://kamagra4uk.com/sa/jo/jeo.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/140314/","zbetcheckin"
 "140313","2019-02-20 02:13:04","http://oliveiraejesus.com.br/js/p.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/140313/","zbetcheckin"
 "140312","2019-02-20 02:06:07","http://nondollarreport.com/wp-content/cache/jboy.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/140312/","zbetcheckin"
@@ -214532,7 +214757,7 @@
 "139468","2019-02-19 11:38:09","http://u1.innerpeer.com/znabc.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/139468/","zbetcheckin"
 "139467","2019-02-19 11:33:15","http://u1.innerpeer.com/18839dwyycr.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/139467/","zbetcheckin"
 "139466","2019-02-19 11:33:11","http://u1.innerpeer.com/hithidev5.8.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/139466/","zbetcheckin"
-"139465","2019-02-19 11:29:41","http://wap.dosame.com/ZP/%E7%96%AB%E8%8B%97%E6%8E%A5%E7%A7%8D%E6%97%B6%E9%97%B4%E8%A1%A8.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/139465/","zbetcheckin"
+"139465","2019-02-19 11:29:41","http://wap.dosame.com/ZP/%E7%96%AB%E8%8B%97%E6%8E%A5%E7%A7%8D%E6%97%B6%E9%97%B4%E8%A1%A8.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/139465/","zbetcheckin"
 "139464","2019-02-19 11:29:21","http://sshousingnproperties.com/US_us/company/Copy_Invoice/xhucL-T8_LalYYnEtA-83U","offline","malware_download","doc","https://urlhaus.abuse.ch/url/139464/","zbetcheckin"
 "139463","2019-02-19 11:29:19","http://u1.innerpeer.com/hd2006.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/139463/","zbetcheckin"
 "139462","2019-02-19 10:59:05","https://uc8fb68898141d8cb72ce7c39957.dl.dropboxusercontent.com/cd/0/get/AbrRtcBdmETSlnfhPRv7V0u8hayzj2SAsabHGG3y5l6n4lWlZIpyHNfok086LZ54NLAuKsM4eoY-t8IQAx7ZyOuf_41mEtWDAKDmJ2Whjc8HVw/file?dl=1#","offline","malware_download","ace,exe","https://urlhaus.abuse.ch/url/139462/","oppimaniac"
@@ -218806,7 +219031,7 @@
 "135193","2019-02-18 21:13:04","https://agilife.pl/Februar2019/OTFLSOJ5769126/Rechnungskorrektur/Rechnungsanschrift/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/135193/","Cryptolaemus1"
 "135192","2019-02-18 20:54:13","http://missionautosalesinc.com/secure.myaccount.resourses.com/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/135192/","Cryptolaemus1"
 "135191","2019-02-18 20:45:07","http://dverliga.ru/En_us/corporation/Invoice_Notice/DVahQ-cLr_Gqhq-OlY","offline","malware_download","doc","https://urlhaus.abuse.ch/url/135191/","zbetcheckin"
-"135190","2019-02-18 20:44:14","http://d3.99ddd.com/down/cicillk1.9.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/135190/","zbetcheckin"
+"135190","2019-02-18 20:44:14","http://d3.99ddd.com/down/cicillk1.9.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/135190/","zbetcheckin"
 "135189","2019-02-18 20:37:02","http://weiweinote.com/US/New_invoice/yiURQ-1c_K-Gop","offline","malware_download","doc","https://urlhaus.abuse.ch/url/135189/","zbetcheckin"
 "135188","2019-02-18 20:15:04","https://109.169.89.4/doc/doc.exe","offline","malware_download","Formbook","https://urlhaus.abuse.ch/url/135188/","JRoosen"
 "135187","2019-02-18 20:09:08","http://supdate.mediaweb.co.kr/download/pica/client/data/uninstall_1.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/135187/","zbetcheckin"
@@ -242257,7 +242482,7 @@
 "111422","2019-01-27 14:43:03","http://cnm.idc3389.top/download.exe","offline","malware_download","EBDP","https://urlhaus.abuse.ch/url/111422/","anonymous"
 "111421","2019-01-27 14:42:08","http://ca.monerov8.com:443/321.exe","offline","malware_download","CoinMiner,EBDP,Redosdru","https://urlhaus.abuse.ch/url/111421/","anonymous"
 "111420","2019-01-27 14:39:16","http://dnn.alibuf.com:7723/dsc12.exe","online","malware_download","CoinMiner,EBDP","https://urlhaus.abuse.ch/url/111420/","anonymous"
-"111419","2019-01-27 14:39:07","http://dnn.alibuf.com:7723/dsc.exe","online","malware_download","CoinMiner,EBDP","https://urlhaus.abuse.ch/url/111419/","anonymous"
+"111419","2019-01-27 14:39:07","http://dnn.alibuf.com:7723/dsc.exe","offline","malware_download","CoinMiner,EBDP","https://urlhaus.abuse.ch/url/111419/","anonymous"
 "111418","2019-01-27 14:38:14","http://t.honker.info:8/madk.exe","online","malware_download","CoinMiner,EBDP","https://urlhaus.abuse.ch/url/111418/","anonymous"
 "111417","2019-01-27 14:38:06","http://t.honker.info:8/445.exe","online","malware_download","CoinMiner,EBDP","https://urlhaus.abuse.ch/url/111417/","anonymous"
 "111416","2019-01-27 14:30:03","http://80.211.110.193/AB4g5/Josho.mips","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/111416/","zbetcheckin"
@@ -242793,7 +243018,7 @@
 "110825","2019-01-26 15:54:06","http://142.93.211.141/kira1/kirai.mips","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/110825/","0xrb"
 "110824","2019-01-26 15:54:04","http://142.93.211.141/kira1/kirai.m68k","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/110824/","0xrb"
 "110823","2019-01-26 15:54:03","http://142.93.211.141/kira1/kirai.arm7","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/110823/","0xrb"
-"110822","2019-01-26 15:50:06","http://www.newxing.com/d6c9a8a921847/prjfire.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/110822/","zbetcheckin"
+"110822","2019-01-26 15:50:06","http://www.newxing.com/d6c9a8a921847/prjfire.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/110822/","zbetcheckin"
 "110821","2019-01-26 15:13:06","http://imoustapha.me/N.exe","offline","malware_download","exe,NetWire","https://urlhaus.abuse.ch/url/110821/","zbetcheckin"
 "110820","2019-01-26 14:30:05","http://rarejewelry.net/.well-known/acme-challenge/mxr.pdf","offline","malware_download","exe,Troldesh","https://urlhaus.abuse.ch/url/110820/","lovemalware"
 "110819","2019-01-26 13:42:05","http://171.38.147.237:17462/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/110819/","zbetcheckin"
@@ -242836,7 +243061,7 @@
 "110782","2019-01-26 09:49:23","http://103.100.209.198/SQLIOSIM.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/110782/","abuse_ch"
 "110781","2019-01-26 09:24:03","http://193.238.47.118/blog/files/2501_2019-01-25_20-32.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/110781/","zbetcheckin"
 "110780","2019-01-26 08:38:11","http://dosame.com/update/update_2008_8_14.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/110780/","zbetcheckin"
-"110779","2019-01-26 08:09:15","http://dosame.com/down/cjss.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/110779/","zbetcheckin"
+"110779","2019-01-26 08:09:15","http://dosame.com/down/cjss.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/110779/","zbetcheckin"
 "110778","2019-01-26 07:43:06","http://www.realinterview.in/bins/infinity.sh","offline","malware_download","None","https://urlhaus.abuse.ch/url/110778/","anonymous"
 "110777","2019-01-26 07:42:03","http://editocom.info/UUrM-psOAi_T-13g/PaymentStatus/EN_en/Invoice-Number-88846/","offline","malware_download","None","https://urlhaus.abuse.ch/url/110777/","JayTHL"
 "110776","2019-01-26 07:42:02","http://185.244.25.194/bins/honchoz.x86","offline","malware_download","None","https://urlhaus.abuse.ch/url/110776/","bjornruberg"
@@ -247411,7 +247636,7 @@
 "106047","2019-01-20 09:40:42","http://rosalos.ug/xxx/39.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/106047/","abuse_ch"
 "106046","2019-01-20 09:37:03","https://pomf.pyonpyon.moe/ggesuy.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/106046/","abuse_ch"
 "106045","2019-01-20 09:30:07","http://d1exe.com/daqqcD87Y6.exe","offline","malware_download","exe,GandCrab,Ransomware,Ransomware.GandCrab","https://urlhaus.abuse.ch/url/106045/","de_aviation"
-"106044","2019-01-20 08:58:29","http://down.pdflist.cqhbkjzx.com/SetupJSGsPDF_4416.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/106044/","zbetcheckin"
+"106044","2019-01-20 08:58:29","http://down.pdflist.cqhbkjzx.com/SetupJSGsPDF_4416.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/106044/","zbetcheckin"
 "106043","2019-01-20 08:45:05","http://cf.uuu9.com/pifu/tubiao/mianbao.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/106043/","zbetcheckin"
 "106042","2019-01-20 08:36:10","http://dk5gckyelnxjl.cloudfront.net/c5.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/106042/","zbetcheckin"
 "106041","2019-01-20 08:10:34","http://177.18.10.8:3243/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/106041/","zbetcheckin"
@@ -247419,10 +247644,10 @@
 "106039","2019-01-20 08:02:14","http://pcr1.pc6.com/rm/fixvidio.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/106039/","zbetcheckin"
 "106038","2019-01-20 08:00:13","http://station.brinkleyspubs.com/wp-includes/rssp.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/106038/","zbetcheckin"
 "106037","2019-01-20 08:00:11","http://config.wwmhdq.com/bug/jkpic/JikePicUpFile.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/106037/","zbetcheckin"
-"106036","2019-01-20 06:11:48","http://kimyen.net/upload/CTCKeoxe2.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/106036/","zbetcheckin"
+"106036","2019-01-20 06:11:48","http://kimyen.net/upload/CTCKeoxe2.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/106036/","zbetcheckin"
 "106035","2019-01-20 05:26:31","http://sgm.pc6.com/xiao/llk00.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/106035/","zbetcheckin"
 "106034","2019-01-20 05:26:18","http://sgm.pc6.com/xiao4/kongjiangbing_65337.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/106034/","zbetcheckin"
-"106033","2019-01-20 05:20:09","http://config.wwmhdq.com/bug/jkpic/sub/GeekPicMPage.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/106033/","zbetcheckin"
+"106033","2019-01-20 05:20:09","http://config.wwmhdq.com/bug/jkpic/sub/GeekPicMPage.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/106033/","zbetcheckin"
 "106032","2019-01-20 05:03:09","http://cu.dodonew.com/dodonew1137/donewk.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/106032/","zbetcheckin"
 "106031","2019-01-20 04:52:23","http://sgm.pc6.com/xiao5/AlphaBallSetup.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/106031/","zbetcheckin"
 "106030","2019-01-20 04:43:10","http://sgm.pc6.com/xiao1/Flashxiuxian.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/106030/","zbetcheckin"
@@ -247445,25 +247670,25 @@
 "106012","2019-01-19 23:30:07","http://d2.udashi.com/soft/29691/ICOshengchengqi.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/106012/","zbetcheckin"
 "106011","2019-01-19 23:24:19","http://d2.udashi.com/soft/27957/dqeswds1.0.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/106011/","zbetcheckin"
 "106009","2019-01-19 23:07:05","http://listmyfloor.com/file.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/106009/","zbetcheckin"
-"106008","2019-01-19 22:27:06","http://cdn-10049480.file.myqcloud.com/qcoin/qcoin135.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/106008/","zbetcheckin"
+"106008","2019-01-19 22:27:06","http://cdn-10049480.file.myqcloud.com/qcoin/qcoin135.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/106008/","zbetcheckin"
 "106007","2019-01-19 22:24:35","http://220.135.8.93:1543/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/106007/","zbetcheckin"
 "106006","2019-01-19 22:20:06","http://cdn-10049480.file.myqcloud.com/qcoin/qcoin128.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/106006/","zbetcheckin"
 "106005","2019-01-19 22:19:59","http://121.41.0.159/mjsoft/Config/llctk/LLCTK.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/106005/","zbetcheckin"
-"106003","2019-01-19 22:08:06","http://cdn-10049480.file.myqcloud.com/qcoin/qcoin133.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/106003/","zbetcheckin"
-"106002","2019-01-19 22:05:07","http://cdn-10049480.file.myqcloud.com/jd/jd156.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/106002/","zbetcheckin"
+"106003","2019-01-19 22:08:06","http://cdn-10049480.file.myqcloud.com/qcoin/qcoin133.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/106003/","zbetcheckin"
+"106002","2019-01-19 22:05:07","http://cdn-10049480.file.myqcloud.com/jd/jd156.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/106002/","zbetcheckin"
 "106000","2019-01-19 21:55:08","http://cdn-10049480.file.myqcloud.com/qcoin/qcoin130.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/106000/","zbetcheckin"
 "105999","2019-01-19 21:43:05","http://cdn-10049480.file.myqcloud.com/qcoin/qcoin142.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/105999/","zbetcheckin"
 "105998","2019-01-19 21:43:03","http://cdn-10049480.file.myqcloud.com/jd/jd124.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/105998/","zbetcheckin"
 "105997","2019-01-19 21:42:06","http://cdn-10049480.file.myqcloud.com/qcoin/qcoin141.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/105997/","zbetcheckin"
-"105996","2019-01-19 21:32:05","http://cdn-10049480.file.myqcloud.com/jd/jd127.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/105996/","zbetcheckin"
+"105996","2019-01-19 21:32:05","http://cdn-10049480.file.myqcloud.com/jd/jd127.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/105996/","zbetcheckin"
 "105994","2019-01-19 21:31:03","http://cdn-10049480.file.myqcloud.com/qcoin/qcoin146.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/105994/","zbetcheckin"
 "105993","2019-01-19 21:29:10","http://ah.download.cycore.cn/rrt/32287da69c40a12819fe3874d0b63e66/73728155/684642c35e6d9fa859d961031ed2f626.doc","offline","malware_download","doc","https://urlhaus.abuse.ch/url/105993/","zbetcheckin"
 "105992","2019-01-19 21:29:07","http://cdn-10049480.file.myqcloud.com/jd/jd145.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/105992/","zbetcheckin"
-"105991","2019-01-19 21:29:06","http://cdn-10049480.file.myqcloud.com/qcoin/qcoin140.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/105991/","zbetcheckin"
+"105991","2019-01-19 21:29:06","http://cdn-10049480.file.myqcloud.com/qcoin/qcoin140.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/105991/","zbetcheckin"
 "105990","2019-01-19 21:21:19","http://clarabellebaby.com/wp-content/themes/wpex-pytheas/functions/meta/gallery-metabox/sserv.jpg","offline","malware_download","exe,Troldesh","https://urlhaus.abuse.ch/url/105990/","zbetcheckin"
-"105989","2019-01-19 21:13:05","http://cdn-10049480.file.myqcloud.com/qcoin/qcoin131.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/105989/","zbetcheckin"
+"105989","2019-01-19 21:13:05","http://cdn-10049480.file.myqcloud.com/qcoin/qcoin131.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/105989/","zbetcheckin"
 "105988","2019-01-19 21:10:07","http://cdn-10049480.file.myqcloud.com/jd/jd144.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/105988/","zbetcheckin"
-"105987","2019-01-19 21:05:05","http://cdn-10049480.file.myqcloud.com/jd/jd138.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/105987/","zbetcheckin"
+"105987","2019-01-19 21:05:05","http://cdn-10049480.file.myqcloud.com/jd/jd138.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/105987/","zbetcheckin"
 "105985","2019-01-19 20:56:16","http://cdn-10049480.file.myqcloud.com/jd/jd136.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/105985/","zbetcheckin"
 "105984","2019-01-19 20:56:15","http://www-bsac.eecs.berkeley.edu/~pister/245/fa99/hw/hw1/EE2451.doc","offline","malware_download","None","https://urlhaus.abuse.ch/url/105984/","JayTHL"
 "105983","2019-01-19 20:55:34","http://104.248.197.246/bins/furasshu.x86","offline","malware_download","None","https://urlhaus.abuse.ch/url/105983/","bjornruberg"
@@ -247471,7 +247696,7 @@
 "105980","2019-01-19 20:55:03","http://193.148.69.33/bins/telnet.mips","offline","malware_download","elf","https://urlhaus.abuse.ch/url/105980/","Gandylyan1"
 "105981","2019-01-19 20:55:03","http://193.148.69.33/bins/telnet.mpsl","offline","malware_download","elf","https://urlhaus.abuse.ch/url/105981/","Gandylyan1"
 "105979","2019-01-19 20:55:02","http://193.148.69.33/bins/telnet.arm","offline","malware_download","elf","https://urlhaus.abuse.ch/url/105979/","Gandylyan1"
-"105977","2019-01-19 20:30:14","http://files.fqapps.com/hl3.3.8.0.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/105977/","zbetcheckin"
+"105977","2019-01-19 20:30:14","http://files.fqapps.com/hl3.3.8.0.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/105977/","zbetcheckin"
 "105976","2019-01-19 20:20:07","http://cdn-10049480.file.myqcloud.com/qcoin/qcoin139.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/105976/","zbetcheckin"
 "105975","2019-01-19 20:20:05","http://cdn-10049480.file.myqcloud.com/jd/jd137.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/105975/","zbetcheckin"
 "105973","2019-01-19 19:44:06","http://89.165.4.105:60255/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/105973/","zbetcheckin"
@@ -247480,7 +247705,7 @@
 "105969","2019-01-19 19:26:09","http://brainchildmultimediagroup.com/Podcast/sserv.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/105969/","zbetcheckin"
 "105968","2019-01-19 19:11:13","http://nexusdental.com.mx/.well-known/acme-challenge/ssj.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/105968/","zbetcheckin"
 "105967","2019-01-19 19:10:22","http://clinicasleven.com.mx/wp-content/languages/plugins/ssj.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/105967/","zbetcheckin"
-"105966","2019-01-19 19:10:09","http://cdn-10049480.file.myqcloud.com/qcoin/qcoin138.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/105966/","zbetcheckin"
+"105966","2019-01-19 19:10:09","http://cdn-10049480.file.myqcloud.com/qcoin/qcoin138.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/105966/","zbetcheckin"
 "105965","2019-01-19 18:23:06","http://www.aysemanay.com/cob93.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/105965/","zbetcheckin"
 "105964","2019-01-19 18:01:02","http://iloveyoupizdec2.info/payload.exe","offline","malware_download","AZORult,exe","https://urlhaus.abuse.ch/url/105964/","zbetcheckin"
 "105963","2019-01-19 17:51:02","http://kristinka2.life/payload.exe","offline","malware_download","AZORult,exe","https://urlhaus.abuse.ch/url/105963/","zbetcheckin"
@@ -253218,7 +253443,7 @@
 "100107","2018-12-28 06:08:04","http://o24o.ru/interes.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/100107/","zbetcheckin"
 "100106","2018-12-28 06:08:03","http://o24o.ru/dg.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/100106/","zbetcheckin"
 "100105","2018-12-28 05:54:05","http://o24o.ru/bies.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/100105/","zbetcheckin"
-"100104","2018-12-28 05:53:10","http://p2.lingpao8.com/Dragoon/20150218_L.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/100104/","zbetcheckin"
+"100104","2018-12-28 05:53:10","http://p2.lingpao8.com/Dragoon/20150218_L.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/100104/","zbetcheckin"
 "100103","2018-12-28 05:32:03","https://uploadexe.com/uploads/5c0eea9d8b1caunimat.exe","offline","malware_download","exe,ImminentRAT","https://urlhaus.abuse.ch/url/100103/","zbetcheckin"
 "100102","2018-12-28 05:28:03","https://uploadexe.com/uploads/5c130869bde72mshta.exe","offline","malware_download","exe,ImminentRAT","https://urlhaus.abuse.ch/url/100102/","zbetcheckin"
 "100101","2018-12-28 05:27:03","http://upload-exe.me/lT3CWbUKQj.exe","offline","malware_download","AZORult,exe","https://urlhaus.abuse.ch/url/100101/","zbetcheckin"
@@ -253784,8 +254009,8 @@
 "99524","2018-12-25 04:00:04","http://tendep.com/hinhanh/thuvienanh/sad.exe","offline","malware_download","exe,njRAT","https://urlhaus.abuse.ch/url/99524/","zbetcheckin"
 "99523","2018-12-25 03:58:10","http://tendep.com/hinhanh/rosinject.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/99523/","zbetcheckin"
 "99522","2018-12-25 03:42:04","http://tendep.com/hinhanh/payload.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/99522/","zbetcheckin"
-"99521","2018-12-25 03:39:32","http://mv360.net/MV360_ACTIVEX_2.5.2.EXE","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/99521/","zbetcheckin"
-"99518","2018-12-25 03:16:28","http://mv360.net/mv360_activex.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/99518/","zbetcheckin"
+"99521","2018-12-25 03:39:32","http://mv360.net/MV360_ACTIVEX_2.5.2.EXE","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/99521/","zbetcheckin"
+"99518","2018-12-25 03:16:28","http://mv360.net/mv360_activex.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/99518/","zbetcheckin"
 "99517","2018-12-25 03:06:04","http://81.133.236.83:13241/.i","offline","malware_download","elf","https://urlhaus.abuse.ch/url/99517/","zbetcheckin"
 "99516","2018-12-25 02:46:04","http://inscribesignage.com/wp-admin/js/mt.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/99516/","zbetcheckin"
 "99515","2018-12-25 02:45:05","http://inscribesignage.com/wp-admin/images/upload.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/99515/","zbetcheckin"
@@ -256305,12 +256530,12 @@
 "96926","2018-12-18 07:29:03","http://68.183.208.152/AB4g5/Josho.sh4","offline","malware_download","elf","https://urlhaus.abuse.ch/url/96926/","zbetcheckin"
 "96924","2018-12-18 07:22:04","https://amsi.co.za/zzmyc/3AA.exe","offline","malware_download","exe,Loki,lokibot","https://urlhaus.abuse.ch/url/96924/","dvk01uk"
 "96923","2018-12-18 07:17:08","http://mso.services/GlennInternational/PurchaseOrder/PO_141218G.doc","offline","malware_download","doc,Loki,threadkit","https://urlhaus.abuse.ch/url/96923/","anonymous"
-"96922","2018-12-18 07:15:19","http://bd19.52lishi.com/bd49786.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/96922/","zbetcheckin"
-"96921","2018-12-18 07:14:20","http://bd19.52lishi.com/bd12836.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/96921/","zbetcheckin"
-"96920","2018-12-18 07:13:21","http://bd19.52lishi.com/bd67489.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/96920/","zbetcheckin"
-"96919","2018-12-18 07:12:08","http://bd19.52lishi.com/bd49020.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/96919/","zbetcheckin"
+"96922","2018-12-18 07:15:19","http://bd19.52lishi.com/bd49786.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/96922/","zbetcheckin"
+"96921","2018-12-18 07:14:20","http://bd19.52lishi.com/bd12836.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/96921/","zbetcheckin"
+"96920","2018-12-18 07:13:21","http://bd19.52lishi.com/bd67489.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/96920/","zbetcheckin"
+"96919","2018-12-18 07:12:08","http://bd19.52lishi.com/bd49020.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/96919/","zbetcheckin"
 "96918","2018-12-18 06:56:04","http://68.183.208.152/AB4g5/Josho.x86","offline","malware_download","elf","https://urlhaus.abuse.ch/url/96918/","zbetcheckin"
-"96916","2018-12-18 06:54:06","http://bd19.52lishi.com/bd71150.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/96916/","zbetcheckin"
+"96916","2018-12-18 06:54:06","http://bd19.52lishi.com/bd71150.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/96916/","zbetcheckin"
 "96915","2018-12-18 06:44:25","http://klmconcretesoil.com.au/plugins/content/loadmodule/TDS%20Challan.zip","offline","malware_download","Kutaki,zipped-exe","https://urlhaus.abuse.ch/url/96915/","anonymous"
 "96914","2018-12-18 06:44:18","http://klmconcretesoil.com.au/plugins/content/joomla/TDS%20Challan.zip","offline","malware_download","Kutaki,zipped-exe","https://urlhaus.abuse.ch/url/96914/","anonymous"
 "96913","2018-12-18 06:44:09","http://jpdecor.in/verification/images/Tax%20Payment%20Challan.zip","offline","malware_download","Kutaki,zipped-exe","https://urlhaus.abuse.ch/url/96913/","anonymous"
@@ -257748,7 +257973,7 @@
 "95434","2018-12-14 23:01:09","http://www.reparaties-ipad.nl/vxXg-U9xPLQZ3m2ioweb_nlMNOlgI-JoD/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/95434/","Cryptolaemus1"
 "95432","2018-12-14 23:01:08","http://sk.news-front.info/quIiD-Rn48S9zj7KZkkl_fUUDQlNz-pg/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/95432/","Cryptolaemus1"
 "95431","2018-12-14 23:01:07","http://movil-sales.ru/jePAx-6mz3uC25K1r5bLW_XzzoCLQxR-Gx/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/95431/","Cryptolaemus1"
-"95430","2018-12-14 23:01:06","http://gd2.greenxf.com:8099/DOWNCAIJI/5/@GREENXFB2P.RAR","online","malware_download","rar","https://urlhaus.abuse.ch/url/95430/","zbetcheckin"
+"95430","2018-12-14 23:01:06","http://gd2.greenxf.com:8099/DOWNCAIJI/5/@GREENXFB2P.RAR","offline","malware_download","rar","https://urlhaus.abuse.ch/url/95430/","zbetcheckin"
 "95429","2018-12-14 23:00:02","http://35.242.233.97/PhVw-B4imOOgsVwgNuKk_BJfLDKbr-GI/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/95429/","Cryptolaemus1"
 "95428","2018-12-14 22:49:36","http://xn----etbbfqobtix.xn--p1ai/IsSD-lXzcQ7FPQ9LkmJ2_PzKTjKmG-xx/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/95428/","Cryptolaemus1"
 "95427","2018-12-14 22:49:35","http://www.tintafinarestaurante.com/GGZg-3gG1i6jYjWpWB6f_pJvUskrqu-LpE/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/95427/","Cryptolaemus1"
@@ -258186,7 +258411,7 @@
 "94992","2018-12-14 10:41:05","http://nismotek.com/SharatSinha/css/sserv.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/94992/","zbetcheckin"
 "94991","2018-12-14 10:41:02","http://newreport.info/wp-content/themes/twentyseventeen/assets/css/sserv.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/94991/","zbetcheckin"
 "94990","2018-12-14 10:31:07","http://ajosdiegopozo.com/OJhNz-1KuIKUyPnJNp7n_NGyDRsGQM-8d/BIZ/Commercial/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/94990/","Cryptolaemus1"
-"94989","2018-12-14 10:25:05","http://a.xiazai163.com/DOWN/RUOKUAIDAMA_ITMOP.COM.ZIP","online","malware_download","zip","https://urlhaus.abuse.ch/url/94989/","zbetcheckin"
+"94989","2018-12-14 10:25:05","http://a.xiazai163.com/DOWN/RUOKUAIDAMA_ITMOP.COM.ZIP","offline","malware_download","zip","https://urlhaus.abuse.ch/url/94989/","zbetcheckin"
 "94987","2018-12-14 10:24:07","http://2.187.39.208:40551/.i","offline","malware_download","elf","https://urlhaus.abuse.ch/url/94987/","zbetcheckin"
 "94988","2018-12-14 10:24:07","http://51.254.84.55/updater.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/94988/","zbetcheckin"
 "94986","2018-12-14 10:24:03","http://93.41.182.249:12228/.i","offline","malware_download","elf","https://urlhaus.abuse.ch/url/94986/","zbetcheckin"
@@ -258322,7 +258547,7 @@
 "94856","2018-12-14 05:48:02","http://spth.virii.lu/monad.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/94856/","zbetcheckin"
 "94855","2018-12-14 05:47:11","http://ini.egkj.com/soft/58wangwei/musicclub.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/94855/","zbetcheckin"
 "94854","2018-12-14 05:47:10","http://s.51shijuan.com/cz09/51cz200908105172se.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/94854/","zbetcheckin"
-"94853","2018-12-14 05:47:05","http://ini.egkj.com/soft/58wangwei/merlin.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/94853/","zbetcheckin"
+"94853","2018-12-14 05:47:05","http://ini.egkj.com/soft/58wangwei/merlin.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/94853/","zbetcheckin"
 "94852","2018-12-14 05:46:07","http://teamfluegel.com/WU_Receipt01.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/94852/","zbetcheckin"
 "94851","2018-12-14 05:46:04","https://sites.google.com/a/cvcatholic.org/middle-school-reading/home/participation-discussion-rubric/participation:discussionrubric.doc","offline","malware_download","doc","https://urlhaus.abuse.ch/url/94851/","zbetcheckin"
 "94850","2018-12-14 05:46:03","http://www.itwss.com/wp-content/themes/sydney/bolu.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/94850/","zbetcheckin"
@@ -261113,7 +261338,7 @@
 "91893","2018-12-09 00:07:04","http://201.171.168.78:43570/.i","offline","malware_download","elf","https://urlhaus.abuse.ch/url/91893/","zbetcheckin"
 "91892","2018-12-08 23:09:09","http://59.127.97.26:16322/.i","offline","malware_download","elf","https://urlhaus.abuse.ch/url/91892/","zbetcheckin"
 "91891","2018-12-08 23:09:05","http://63.245.122.93:29703/.i","offline","malware_download","elf","https://urlhaus.abuse.ch/url/91891/","zbetcheckin"
-"91890","2018-12-08 22:50:05","http://d9.99ddd.com/pc/o3tools.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/91890/","zbetcheckin"
+"91890","2018-12-08 22:50:05","http://d9.99ddd.com/pc/o3tools.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/91890/","zbetcheckin"
 "91889","2018-12-08 20:50:03","http://demositedsv.zzz.com.ua/Update/update_launcher.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/91889/","zbetcheckin"
 "91888","2018-12-08 20:15:11","http://anthrohub.org/wp/wp-includes/herre.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/91888/","zbetcheckin"
 "91887","2018-12-08 20:15:06","http://anthrohub.org/wp/realme.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/91887/","zbetcheckin"
@@ -263942,7 +264167,7 @@
 "89037","2018-12-05 00:12:07","http://iberias.ge/PFGbVX0Nl","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/89037/","Cryptolaemus1"
 "89036","2018-12-05 00:12:05","http://fortifi.com/bECoyZ4dr","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/89036/","Cryptolaemus1"
 "89035","2018-12-05 00:12:03","http://kosses.nl/s7U7gvF","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/89035/","Cryptolaemus1"
-"89034","2018-12-04 23:21:13","http://tcy.198424.com/SUIJICHOUQIANCX.ZIP","online","malware_download","zip","https://urlhaus.abuse.ch/url/89034/","zbetcheckin"
+"89034","2018-12-04 23:21:13","http://tcy.198424.com/SUIJICHOUQIANCX.ZIP","offline","malware_download","zip","https://urlhaus.abuse.ch/url/89034/","zbetcheckin"
 "89033","2018-12-04 23:21:09","http://46.17.47.73/vodity.mips","offline","malware_download","elf","https://urlhaus.abuse.ch/url/89033/","zbetcheckin"
 "89032","2018-12-04 22:46:09","http://websitedesigngarden.com/k7Xp","offline","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/89032/","Cryptolaemus1"
 "89031","2018-12-04 22:46:06","http://itbparnamirim.org/fj","offline","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/89031/","Cryptolaemus1"
@@ -264522,7 +264747,7 @@
 "88452","2018-12-04 00:33:05","http://tom-steed.com/pYP5mhsWm/SEP/PrivateBanking","offline","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/88452/","Cryptolaemus1"
 "88451","2018-12-04 00:33:05","http://venusnevele.be/LLC/En/Outstanding-Invoices","offline","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/88451/","Cryptolaemus1"
 "88450","2018-12-04 00:33:03","http://adsmith.in/9zPcEumvy1","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/88450/","Cryptolaemus1"
-"88449","2018-12-04 00:30:14","http://tcy.198424.com/FOLDERENCRYPTORPJ.ZIP","online","malware_download","zip","https://urlhaus.abuse.ch/url/88449/","zbetcheckin"
+"88449","2018-12-04 00:30:14","http://tcy.198424.com/FOLDERENCRYPTORPJ.ZIP","offline","malware_download","zip","https://urlhaus.abuse.ch/url/88449/","zbetcheckin"
 "88448","2018-12-04 00:19:03","http://carminewarren.com/AwanSite/newsletter/En/Invoices-Overdue","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/88448/","zbetcheckin"
 "88447","2018-12-03 23:52:06","https://a.doko.moe/tkencn.jpg","offline","malware_download","exe,lokibot","https://urlhaus.abuse.ch/url/88447/","malware_traffic"
 "88446","2018-12-03 23:24:06","http://laparomag.ru/9113BKSMFTUQ/identity/Commercial","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/88446/","zbetcheckin"
@@ -264850,7 +265075,7 @@
 "88103","2018-12-03 03:47:09","http://protoblues.com/cloudnet.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/88103/","zbetcheckin"
 "88102","2018-12-03 03:25:19","http://58.218.66.90:6677/love","offline","malware_download","elf","https://urlhaus.abuse.ch/url/88102/","zbetcheckin"
 "88101","2018-12-03 03:09:02","http://blog.gothicangelclothing.co.uk/Fuji.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/88101/","zbetcheckin"
-"88100","2018-12-03 02:55:08","http://p1.lingpao8.com/App/20160119.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/88100/","zbetcheckin"
+"88100","2018-12-03 02:55:08","http://p1.lingpao8.com/App/20160119.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/88100/","zbetcheckin"
 "88099","2018-12-03 02:33:02","http://142.93.243.137/bins/hoho.m68k","offline","malware_download","elf","https://urlhaus.abuse.ch/url/88099/","zbetcheckin"
 "88098","2018-12-03 02:31:04","http://142.93.163.62/x86","offline","malware_download","elf","https://urlhaus.abuse.ch/url/88098/","zbetcheckin"
 "88097","2018-12-03 02:31:03","http://142.93.243.137/bins/hoho.mips","offline","malware_download","elf","https://urlhaus.abuse.ch/url/88097/","zbetcheckin"
@@ -264863,10 +265088,10 @@
 "88090","2018-12-03 02:28:05","http://142.93.163.62/armv6l","offline","malware_download","elf","https://urlhaus.abuse.ch/url/88090/","zbetcheckin"
 "88089","2018-12-03 02:28:04","http://142.93.243.137/bins/hoho.ppc","offline","malware_download","elf","https://urlhaus.abuse.ch/url/88089/","zbetcheckin"
 "88088","2018-12-03 02:28:03","http://142.93.243.137/bins/hoho.arm","offline","malware_download","elf","https://urlhaus.abuse.ch/url/88088/","zbetcheckin"
-"88087","2018-12-03 02:18:31","http://tcy.198424.com/ZDZWMMSDW.ZIP","online","malware_download","zip","https://urlhaus.abuse.ch/url/88087/","zbetcheckin"
+"88087","2018-12-03 02:18:31","http://tcy.198424.com/ZDZWMMSDW.ZIP","offline","malware_download","zip","https://urlhaus.abuse.ch/url/88087/","zbetcheckin"
 "88086","2018-12-03 02:17:35","http://tcy.198424.com/CFXCBSFYJWSBMDGJ.ZIP","offline","malware_download","zip","https://urlhaus.abuse.ch/url/88086/","zbetcheckin"
 "88085","2018-12-03 02:17:04","http://205.209.176.202:2018/999","offline","malware_download","elf","https://urlhaus.abuse.ch/url/88085/","zbetcheckin"
-"88084","2018-12-03 02:10:09","http://tcy.198424.com/FYP2PZZSSQ.ZIP","online","malware_download","zip","https://urlhaus.abuse.ch/url/88084/","zbetcheckin"
+"88084","2018-12-03 02:10:09","http://tcy.198424.com/FYP2PZZSSQ.ZIP","offline","malware_download","zip","https://urlhaus.abuse.ch/url/88084/","zbetcheckin"
 "88083","2018-12-03 02:09:06","http://owwwc.com/mm/BX.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/88083/","zbetcheckin"
 "88082","2018-12-03 01:54:04","http://sad-kurbatovo.nubex.ru/resources/doc-5571-file-block_files_5571-5572.file/name","offline","malware_download","exe","https://urlhaus.abuse.ch/url/88082/","zbetcheckin"
 "88081","2018-12-03 01:44:08","http://art.nfile.net/files/art.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/88081/","zbetcheckin"
@@ -265998,7 +266223,7 @@
 "86951","2018-11-29 14:17:01","http://tccrennes.fr/n7KoD5DB5W","offline","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/86951/","Cryptolaemus1"
 "86950","2018-11-29 14:17:00","http://reflectionpress.com/mm7GGS7ie","offline","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/86950/","Cryptolaemus1"
 "86949","2018-11-29 14:16:58","http://rabinovicionline.com/GWBhWrqx0","offline","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/86949/","Cryptolaemus1"
-"86948","2018-11-29 14:16:55","http://tcy.198424.com/GTQQKJSSCQQ.ZIP","online","malware_download","zip","https://urlhaus.abuse.ch/url/86948/","zbetcheckin"
+"86948","2018-11-29 14:16:55","http://tcy.198424.com/GTQQKJSSCQQ.ZIP","offline","malware_download","zip","https://urlhaus.abuse.ch/url/86948/","zbetcheckin"
 "86947","2018-11-29 14:14:04","http://sjpowersolution.com/wp-content/themes/store/languages/sserv.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/86947/","zbetcheckin"
 "86946","2018-11-29 14:11:12","http://shannonmolloy.com/En/CyberMonday2018","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/86946/","Cryptolaemus1"
 "86945","2018-11-29 14:11:10","http://siteme.com/En/Clients_CM_Coupons","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/86945/","Cryptolaemus1"
@@ -267239,7 +267464,7 @@
 "85695","2018-11-27 12:50:04","http://heirloomsindia.net/paki/pp.exe","offline","malware_download","exe,NanoCore","https://urlhaus.abuse.ch/url/85695/","dvk01uk"
 "85696","2018-11-27 12:50:04","http://heirloomsindia.net/sjj/cj.exe","offline","malware_download","AgentTesla,exe,nonocore","https://urlhaus.abuse.ch/url/85696/","dvk01uk"
 "85694","2018-11-27 12:49:03","https://a.doko.moe/hoasum.jpg","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/85694/","oppimaniac"
-"85693","2018-11-27 12:30:03","http://ohe.ie/cp/icon.png","offline","malware_download","base64,powershell","https://urlhaus.abuse.ch/url/85693/","anonymous"
+"85693","2018-11-27 12:30:03","http://ohe.ie/cp/icon.png","online","malware_download","base64,powershell","https://urlhaus.abuse.ch/url/85693/","anonymous"
 "85690","2018-11-27 12:14:04","http://egyptecotours.comAaw5tZ","offline","malware_download","emotet,epoch2,exe","https://urlhaus.abuse.ch/url/85690/","Cryptolaemus1"
 "85689","2018-11-27 12:14:04","http://secretariaextension.unt.edu.arwp-content/00002/l24wo4I","offline","malware_download","emotet,epoch2,exe","https://urlhaus.abuse.ch/url/85689/","Cryptolaemus1"
 "85688","2018-11-27 12:14:01","http://nowley-rus.ruadministrator/cache/tguHgQZ","offline","malware_download","emotet,epoch2,exe","https://urlhaus.abuse.ch/url/85688/","Cryptolaemus1"
@@ -270920,7 +271145,7 @@
 "81943","2018-11-18 16:48:04","http://rucop.ru/java.dat","offline","malware_download","exe","https://urlhaus.abuse.ch/url/81943/","de_aviation"
 "81942","2018-11-18 16:46:01","http://92.63.197.48/m/o.exe","offline","malware_download","exe,GandCrab,Ransomware,Ransomware.GandCrab","https://urlhaus.abuse.ch/url/81942/","de_aviation"
 "81941","2018-11-18 16:45:03","http://kharkiv.biz.ua/hPpD/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/81941/","abuse_ch"
-"81940","2018-11-18 15:48:03","http://88.249.120.216:48942/.i","online","malware_download","elf","https://urlhaus.abuse.ch/url/81940/","zbetcheckin"
+"81940","2018-11-18 15:48:03","http://88.249.120.216:48942/.i","offline","malware_download","elf","https://urlhaus.abuse.ch/url/81940/","zbetcheckin"
 "81939","2018-11-18 14:38:03","https://sairetail.com/wp/","offline","malware_download","None","https://urlhaus.abuse.ch/url/81939/","c_APT_ure"
 "81938","2018-11-18 14:22:03","http://5.79.106.222/bins/hoho.ppc","offline","malware_download","elf","https://urlhaus.abuse.ch/url/81938/","zbetcheckin"
 "81937","2018-11-18 14:22:02","http://5.79.106.222/bins/hoho.mips","offline","malware_download","elf","https://urlhaus.abuse.ch/url/81937/","zbetcheckin"
@@ -285753,13 +285978,13 @@
 "66808","2018-10-11 15:36:02","http://185.244.25.200/bins/gemini.m68k","offline","malware_download","elf","https://urlhaus.abuse.ch/url/66808/","zbetcheckin"
 "66807","2018-10-11 15:26:03","http://payesh-co.com/po.doc","offline","malware_download","RTF","https://urlhaus.abuse.ch/url/66807/","zbetcheckin"
 "66806","2018-10-11 15:18:07","http://dx1.qqtn.com/qq/qqdlq.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/66806/","zbetcheckin"
-"66805","2018-10-11 15:15:06","http://dx1.qqtn.com/qq/ddz.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/66805/","zbetcheckin"
+"66805","2018-10-11 15:15:06","http://dx1.qqtn.com/qq/ddz.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/66805/","zbetcheckin"
 "66803","2018-10-11 15:05:07","http://dx1.qqtn.com/qq/csoldl.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/66803/","zbetcheckin"
 "66802","2018-10-11 14:58:02","http://cascinadellemele.it/uCpTB/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/66802/","abuse_ch"
 "66801","2018-10-11 14:57:03","http://sfbotvinnik.icu/folua/dwrite.exe","offline","malware_download","exe,Smoke Loader","https://urlhaus.abuse.ch/url/66801/","abuse_ch"
 "66800","2018-10-11 14:56:07","http://dx1.qqtn.com/qq/qqpetnurse.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/66800/","zbetcheckin"
-"66799","2018-10-11 14:47:08","http://dx1.qqtn.com/qq/kjzb.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/66799/","zbetcheckin"
-"66798","2018-10-11 14:39:09","http://dx1.qqtn.com/qq/qqmfkp.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/66798/","zbetcheckin"
+"66799","2018-10-11 14:47:08","http://dx1.qqtn.com/qq/kjzb.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/66799/","zbetcheckin"
+"66798","2018-10-11 14:39:09","http://dx1.qqtn.com/qq/qqmfkp.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/66798/","zbetcheckin"
 "66796","2018-10-11 14:27:02","http://185.244.25.200/bins/gemini.arm","offline","malware_download","elf","https://urlhaus.abuse.ch/url/66796/","zbetcheckin"
 "66795","2018-10-11 14:22:04","http://stroysfera.com.ua/93-78520502289-7208613143877289106.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/66795/","zbetcheckin"
 "66794","2018-10-11 14:17:32","http://pondokarsitek.com/wp-content/themes/west/page-templates/inform.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/66794/","lam_esrever"
@@ -285771,7 +285996,7 @@
 "66788","2018-10-11 13:28:14","http://octap.igg.biz/1/brown1.msi","offline","malware_download","msi","https://urlhaus.abuse.ch/url/66788/","zbetcheckin"
 "66787","2018-10-11 13:28:08","http://mandala.mn/update/rasenga.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/66787/","zbetcheckin"
 "66786","2018-10-11 13:16:08","http://patch3.99ddd.com/2013/ALI213-MortalKKe+8Tr-LinGon.v1.0.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/66786/","zbetcheckin"
-"66785","2018-10-11 13:07:08","http://patch3.99ddd.com/newpatch4/ra2trn5.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/66785/","zbetcheckin"
+"66785","2018-10-11 13:07:08","http://patch3.99ddd.com/newpatch4/ra2trn5.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/66785/","zbetcheckin"
 "66784","2018-10-11 12:58:04","http://medipedics.com/ponygrace/Panel/chucksboy.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/66784/","cocaman"
 "66783","2018-10-11 12:38:02","https://d.coka.la/NWp40R.jpg","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/66783/","zbetcheckin"
 "66782","2018-10-11 12:07:02","http://memeconi.com/TNT/index.php?l=anti2.tkn","offline","malware_download","ursnif","https://urlhaus.abuse.ch/url/66782/","seikenDEV"
@@ -286144,20 +286369,20 @@
 "66395","2018-10-10 01:51:03","http://94.177.233.199/Demon.arm4","offline","malware_download","elf","https://urlhaus.abuse.ch/url/66395/","zbetcheckin"
 "66394","2018-10-10 01:39:03","http://ecuadortrust.org.uk/images/two/jon001.exe","offline","malware_download","exe,NetWire","https://urlhaus.abuse.ch/url/66394/","zbetcheckin"
 "66393","2018-10-10 01:38:03","http://ecuadortrust.org.uk/images/two/saguy.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/66393/","zbetcheckin"
-"66392","2018-10-10 00:51:03","http://dx2.qqtn.com/qq/XXHZW2.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/66392/","zbetcheckin"
+"66392","2018-10-10 00:51:03","http://dx2.qqtn.com/qq/XXHZW2.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/66392/","zbetcheckin"
 "66391","2018-10-10 00:50:12","http://dx2.qqtn.com/QQ/llkxuser.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/66391/","zbetcheckin"
 "66390","2018-10-10 00:50:10","http://gallery.mailchimp.com/e5e323f8390ddd27a48e175ca/files/Factura_Crezcamos.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/66390/","zbetcheckin"
-"66389","2018-10-10 00:50:07","http://dx2.qqtn.com/QQ/QQPetNurse3.01_Beta1.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/66389/","zbetcheckin"
+"66389","2018-10-10 00:50:07","http://dx2.qqtn.com/QQ/QQPetNurse3.01_Beta1.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/66389/","zbetcheckin"
 "66388","2018-10-10 00:45:04","https://gallery.mailchimp.com/30bdf0edb8faf4fb164f8c865/files/WBINBOUNDS.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/66388/","zbetcheckin"
 "66387","2018-10-10 00:38:03","http://gallery.mailchimp.com/5182e3ac85debb9b3b14915a4/files/Swift_Copy.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/66387/","zbetcheckin"
 "66386","2018-10-10 00:37:07","http://dx2.qqtn.com/QQ/olaQQddz1.37.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/66386/","zbetcheckin"
-"66385","2018-10-10 00:37:04","http://dx2.qqtn.com/QQ2/xxjpq.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/66385/","zbetcheckin"
-"66384","2018-10-10 00:37:03","http://dx2.qqtn.com/qq2/jywgxrj.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/66384/","zbetcheckin"
+"66385","2018-10-10 00:37:04","http://dx2.qqtn.com/QQ2/xxjpq.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/66385/","zbetcheckin"
+"66384","2018-10-10 00:37:03","http://dx2.qqtn.com/qq2/jywgxrj.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/66384/","zbetcheckin"
 "66383","2018-10-10 00:36:07","http://gallery.mailchimp.com/8fda4e1d3758c37f74f3de96d/files/inv0ice_0019936.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/66383/","zbetcheckin"
-"66382","2018-10-10 00:36:05","http://dx2.qqtn.com/qq3/bdjpq.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/66382/","zbetcheckin"
+"66382","2018-10-10 00:36:05","http://dx2.qqtn.com/qq3/bdjpq.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/66382/","zbetcheckin"
 "66381","2018-10-10 00:29:10","http://198.1.188.107/ys808e","offline","malware_download","elf","https://urlhaus.abuse.ch/url/66381/","zbetcheckin"
-"66380","2018-10-10 00:29:08","http://dx2.qqtn.com/qq3/qqlogins.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/66380/","zbetcheckin"
-"66379","2018-10-10 00:29:06","http://dx2.qqtn.com/qq3/x5lydt.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/66379/","zbetcheckin"
+"66380","2018-10-10 00:29:08","http://dx2.qqtn.com/qq3/qqlogins.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/66380/","zbetcheckin"
+"66379","2018-10-10 00:29:06","http://dx2.qqtn.com/qq3/x5lydt.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/66379/","zbetcheckin"
 "66378","2018-10-10 00:28:07","http://dx2.qqtn.com/qq/qq4ddz1.10.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/66378/","zbetcheckin"
 "66377","2018-10-09 23:40:04","https://luckswatch.com/manageaccount/159AL42425-order-status-fulfilled","offline","malware_download","lnk,sLoad,zip","https://urlhaus.abuse.ch/url/66377/","ps66uk"
 "66376","2018-10-09 23:40:03","https://peoplewithai.com/manageaccount/09D2I543-order-status-fulfilled","offline","malware_download","lnk,sLoad,zip","https://urlhaus.abuse.ch/url/66376/","ps66uk"
@@ -286176,7 +286401,7 @@
 "66363","2018-10-09 20:01:06","http://toshioco.com/doc/WIZ.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/66363/","zbetcheckin"
 "66362","2018-10-09 19:55:03","https://oohrdg.by.files.1drv.com/y4mZDL-iW1ATb_5qP8sh7ES7NpyccZvqZHry3LC3St09_q_hEstXReFPyPlHsNx_Fs4kLcFsDeOVjhpBpwUbTHsekv5mbsslVN_K6u4rCHcdQh3obDsPyDeP3bWQfz7WRSt8KlihgrkGmnGNQKcjlmHvRicNb6RTtYHB71qUXVkL6mGAB3-HikMVdW2UKW6CgzBdZcYMH5RNxjoahr_1HAfvQ/DHL%20TRACKING%20REF.scr?download&psid=1","offline","malware_download","exe,NanoCore","https://urlhaus.abuse.ch/url/66362/","zbetcheckin"
 "66361","2018-10-09 19:52:31","http://geolegno.eu/9722653CVAPKJIT/PAYMENT/Business","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/66361/","JayTHL"
-"66360","2018-10-09 19:42:11","http://dx2.qqtn.com/qq/qqangel.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/66360/","zbetcheckin"
+"66360","2018-10-09 19:42:11","http://dx2.qqtn.com/qq/qqangel.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/66360/","zbetcheckin"
 "66359","2018-10-09 19:42:03","http://23.249.161.109/chf/agnt.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/66359/","zbetcheckin"
 "66358","2018-10-09 18:45:03","https://uc5b7b21c37968941e15f53c6c93.dl.dropboxusercontent.com/cd/0/get/ASk5k-lxl6XDzNY8iP8YHtpqx6wXfSOwugyXWql_qNFfmMBsl1kfMDkh1BOloPMNyzAPmln_3kW-7a2WfpGzvCgDDdHGhN92ikkMROYmfuwCnAvD3ZoBcDZHzdqLzawVYBwCLirGgJg5vL35jJlnLdkZ7xrGWGLKM5qwBsUENoQ_s9HWDRSxyv17hd6ROmBUQ3E/file?dl=1","offline","malware_download","zip","https://urlhaus.abuse.ch/url/66358/","zbetcheckin"
 "66357","2018-10-09 18:22:02","http://readyteam.org/29c.msi","offline","malware_download","msi","https://urlhaus.abuse.ch/url/66357/","zbetcheckin"
@@ -288826,7 +289051,7 @@
 "63677","2018-10-02 15:44:04","http://us.cdn.persiangig.com/dl/b0HEoI/test.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/63677/","zbetcheckin"
 "63676","2018-10-02 15:44:03","http://beyondedu.in/En_us/Transaction_details/10_18/","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/63676/","zbetcheckin"
 "63675","2018-10-02 15:36:10","http://bd18.52lishi.com/bd65146.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/63675/","zbetcheckin"
-"63674","2018-10-02 15:34:15","http://bd12.52lishi.com/bd64813.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/63674/","zbetcheckin"
+"63674","2018-10-02 15:34:15","http://bd12.52lishi.com/bd64813.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/63674/","zbetcheckin"
 "63673","2018-10-02 15:22:45","http://thewagelaws.com","offline","malware_download","None","https://urlhaus.abuse.ch/url/63673/","JayTHL"
 "63672","2018-10-02 15:22:39","http://thesecuritieslaws.com","offline","malware_download","None","https://urlhaus.abuse.ch/url/63672/","JayTHL"
 "63671","2018-10-02 15:22:35","http://theretaliationlaws.com","offline","malware_download","None","https://urlhaus.abuse.ch/url/63671/","JayTHL"
@@ -288841,7 +289066,7 @@
 "63662","2018-10-02 15:22:09","http://ehotemnoty.beget.tech/louder/s.exe","offline","malware_download","downloader,exe,Themida","https://urlhaus.abuse.ch/url/63662/","MJRooter"
 "63661","2018-10-02 15:22:06","http://ehotemnoty.beget.tech/louder/r.exe","offline","malware_download","backdoor,exe,Themida,xiclog","https://urlhaus.abuse.ch/url/63661/","MJRooter"
 "63660","2018-10-02 15:22:04","http://localhm6.beget.tech/AU3.exe","offline","malware_download","exe,MoksSteal,spy,stealer","https://urlhaus.abuse.ch/url/63660/","MJRooter"
-"63659","2018-10-02 15:18:08","http://bd18.52lishi.com/bd70305.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/63659/","zbetcheckin"
+"63659","2018-10-02 15:18:08","http://bd18.52lishi.com/bd70305.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/63659/","zbetcheckin"
 "63658","2018-10-02 15:14:15","http://bd12.52lishi.com/bd53544.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/63658/","zbetcheckin"
 "63657","2018-10-02 14:53:37","http://thediscriminationlaws.com","offline","malware_download","None","https://urlhaus.abuse.ch/url/63657/","JayTHL"
 "63656","2018-10-02 14:53:32","http://www.tpoa-indonesia.org/wp-content/plugins/wpgform/3","offline","malware_download","None","https://urlhaus.abuse.ch/url/63656/","JayTHL"
@@ -288894,14 +289119,14 @@
 "63609","2018-10-02 14:20:07","http://77190.prohoster.biz/Fuhacksgameijctr.exe","offline","malware_download","CoinMiner,exe,W64","https://urlhaus.abuse.ch/url/63609/","MJRooter"
 "63608","2018-10-02 14:20:06","http://77190.prohoster.biz/Fuhackssafebanprtct.exe","offline","malware_download","exe,spyware,Themida","https://urlhaus.abuse.ch/url/63608/","MJRooter"
 "63607","2018-10-02 14:20:03","http://very.ruvmp.ru/77777.exe","offline","malware_download","ArkeiStealer,Dapato,dropper,exe","https://urlhaus.abuse.ch/url/63607/","MJRooter"
-"63606","2018-10-02 14:06:09","http://bd11.52lishi.com/bd75837.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/63606/","zbetcheckin"
+"63606","2018-10-02 14:06:09","http://bd11.52lishi.com/bd75837.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/63606/","zbetcheckin"
 "63605","2018-10-02 14:06:03","http://darnellsim.us/doc/WIZZY.exe","offline","malware_download","exe,HawkEye","https://urlhaus.abuse.ch/url/63605/","zbetcheckin"
 "63604","2018-10-02 14:01:08","http://cosmictone.com.au/lHyBcgn/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/63604/","abuse_ch"
 "63603","2018-10-02 14:01:06","http://www.expressarsetelagoas.com.br/8tr1wP/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/63603/","abuse_ch"
 "63602","2018-10-02 14:01:03","http://www.acilisbalon.com/zDLorjW/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/63602/","abuse_ch"
 "63601","2018-10-02 14:01:02","http://jany.be/UsCX/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/63601/","abuse_ch"
 "63600","2018-10-02 13:58:07","http://bd11.52lishi.com/bd55878.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/63600/","zbetcheckin"
-"63599","2018-10-02 13:57:05","http://bd11.52lishi.com/bd11536.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/63599/","zbetcheckin"
+"63599","2018-10-02 13:57:05","http://bd11.52lishi.com/bd11536.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/63599/","zbetcheckin"
 "63598","2018-10-02 13:45:03","http://anonupload.net/uploads/poipkgde/WindowsFormsApp1.exe","offline","malware_download","exe,ImminentRAT","https://urlhaus.abuse.ch/url/63598/","cocaman"
 "63597","2018-10-02 13:04:03","http://23.94.53.164/e5rnad8bjk.exe","offline","malware_download","exe,Gozi","https://urlhaus.abuse.ch/url/63597/","zbetcheckin"
 "63596","2018-10-02 12:19:12","http://ptpjm.co.id/updd/ggp.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/63596/","zbetcheckin"
@@ -293408,7 +293633,7 @@
 "58996","2018-09-22 07:51:06","http://51.68.120.61/real.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/58996/","zbetcheckin"
 "58995","2018-09-22 07:50:03","http://habarimoto24.com/34147LUV/ACH/Business/","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/58995/","zbetcheckin"
 "58994","2018-09-22 07:49:06","http://focuscapitalcorp.com/3151500668.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/58994/","zbetcheckin"
-"58993","2018-09-22 07:42:08","http://dw.58wangdun.com/sf5/testrgcom.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/58993/","zbetcheckin"
+"58993","2018-09-22 07:42:08","http://dw.58wangdun.com/sf5/testrgcom.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/58993/","zbetcheckin"
 "58992","2018-09-22 06:50:08","http://dongybavi.com/wp-includes/FILE/US/Open-invoices","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/58992/","zbetcheckin"
 "58991","2018-09-22 06:26:06","http://millenniumusic.com/1461739.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/58991/","zbetcheckin"
 "58990","2018-09-22 06:24:06","http://zeanhxxjotpqfeu.usa.cc/ex.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/58990/","zbetcheckin"
@@ -329868,7 +330093,7 @@
 "21883","2018-06-21 04:54:06","http://gps.50webs.com/result","offline","malware_download","None","https://urlhaus.abuse.ch/url/21883/","p5yb34m"
 "21882","2018-06-21 04:54:03","http://depomedikal.com/8734gf3hf","offline","malware_download","None","https://urlhaus.abuse.ch/url/21882/","p5yb34m"
 "21881","2018-06-21 04:53:06","http://gatorusa.com/3fecdfv","offline","malware_download","None","https://urlhaus.abuse.ch/url/21881/","p5yb34m"
-"21880","2018-06-21 04:53:04","http://ghislain.dartois.pagesperso-orange.fr/iy53v0","online","malware_download","None","https://urlhaus.abuse.ch/url/21880/","p5yb34m"
+"21880","2018-06-21 04:53:04","http://ghislain.dartois.pagesperso-orange.fr/iy53v0","offline","malware_download","None","https://urlhaus.abuse.ch/url/21880/","p5yb34m"
 "21879","2018-06-21 04:53:02","http://firephonesex.com/bxuobuam","offline","malware_download","None","https://urlhaus.abuse.ch/url/21879/","p5yb34m"
 "21878","2018-06-21 04:49:03","http://visite-grece.com/st1yof","offline","malware_download","None","https://urlhaus.abuse.ch/url/21878/","p5yb34m"
 "21877","2018-06-21 04:48:25","http://202.63.105.86/AjIOoP/","offline","malware_download","None","https://urlhaus.abuse.ch/url/21877/","p5yb34m"
@@ -330385,7 +330610,7 @@
 "21355","2018-06-20 06:02:47","http://ca.hashnice.org:443/123.exe","offline","malware_download","exe,Redosdru","https://urlhaus.abuse.ch/url/21355/","anonymous"
 "21354","2018-06-20 06:02:38","http://118.184.31.215/gg.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/21354/","anonymous"
 "21353","2018-06-20 06:00:36","http://da.alibuf.com:3/mado.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/21353/","anonymous"
-"21352","2018-06-20 06:00:29","http://da.alibuf.com:3/445.exe","online","malware_download","CoinMiner,exe","https://urlhaus.abuse.ch/url/21352/","anonymous"
+"21352","2018-06-20 06:00:29","http://da.alibuf.com:3/445.exe","offline","malware_download","CoinMiner,exe","https://urlhaus.abuse.ch/url/21352/","anonymous"
 "21351","2018-06-20 05:55:05","http://104.223.213.141/mi3307","offline","malware_download","elf","https://urlhaus.abuse.ch/url/21351/","anonymous"
 "21350","2018-06-20 05:50:09","http://60.250.99.131:9998/liux","offline","malware_download","CoinMiner,elf,xmrig","https://urlhaus.abuse.ch/url/21350/","anonymous"
 "21349","2018-06-20 05:48:48","http://60.250.99.131:9998/services","offline","malware_download","bash","https://urlhaus.abuse.ch/url/21349/","anonymous"
@@ -334555,7 +334780,7 @@
 "17069","2018-06-11 04:45:10","http://23.249.161.109/wrd/mamez.exe","offline","malware_download","exe,Formbook,Pony","https://urlhaus.abuse.ch/url/17069/","lovemalware"
 "17068","2018-06-11 04:45:08","http://inova-tech.net/x1/m.exe","offline","malware_download","exe,Pony","https://urlhaus.abuse.ch/url/17068/","lovemalware"
 "17067","2018-06-11 04:45:04","http://betaqq.ru/cl.exe","offline","malware_download","exe,Pony","https://urlhaus.abuse.ch/url/17067/","lovemalware"
-"17066","2018-06-10 22:45:08","http://221.226.86.151/group1/M01/05/3D/CsRgBlsPuU-AR033AA7SAMhUHuA993.doc","online","malware_download","doc,downloader","https://urlhaus.abuse.ch/url/17066/","lovemalware"
+"17066","2018-06-10 22:45:08","http://221.226.86.151/group1/M01/05/3D/CsRgBlsPuU-AR033AA7SAMhUHuA993.doc","offline","malware_download","doc,downloader","https://urlhaus.abuse.ch/url/17066/","lovemalware"
 "17065","2018-06-10 19:07:17","http://80.211.185.189:80/AB4g5/Josho.x86","offline","malware_download","None","https://urlhaus.abuse.ch/url/17065/","bjornruberg"
 "17064","2018-06-10 16:46:08","http://gabsten.dedicated.co.za/sites/default/files/11/bnv.exe","offline","malware_download","exe,HawkEye,Pony","https://urlhaus.abuse.ch/url/17064/","lovemalware"
 "17063","2018-06-10 16:46:04","http://mail.yellowstone-club.org/dl/facture_431977465.doc","offline","malware_download","doc,downloader","https://urlhaus.abuse.ch/url/17063/","lovemalware"
@@ -345763,7 +345988,7 @@
 "1491","2018-03-29 14:42:52","http://cosmeticoslindas.com/Mar-20-01-58-05/Quantum-View/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/1491/","abuse_ch"
 "1490","2018-03-29 14:42:48","http://coolsculptingbeforeafter.com/PayPal-US/Corporation/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/1490/","abuse_ch"
 "1489","2018-03-29 14:42:45","http://clients.steadfast.digital/QQV-206648272849/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/1489/","abuse_ch"
-"1488","2018-03-29 14:42:44","http://cista-dobra-voda.com/WIRE-FORM/PK-4143542213772/","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/1488/","abuse_ch"
+"1488","2018-03-29 14:42:44","http://cista-dobra-voda.com/WIRE-FORM/PK-4143542213772/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/1488/","abuse_ch"
 "1487","2018-03-29 14:42:23","http://chungcuirisgardenmydinh.info/WIRE-FORM/QCQ-44937/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/1487/","abuse_ch"
 "1486","2018-03-29 14:42:05","http://chovaytienmatdanang.info/WIRE-FORM/CUB-89915244/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/1486/","abuse_ch"
 "1485","2018-03-29 14:41:45","http://chdagent.com/PayPal-US/INFO/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/1485/","abuse_ch"
diff --git a/urlhaus-filter-bind-online.conf b/urlhaus-filter-bind-online.conf
index 6d3c69aa..a1296540 100644
--- a/urlhaus-filter-bind-online.conf
+++ b/urlhaus-filter-bind-online.conf
@@ -1,17 +1,13 @@
 # Title: abuse.ch URLhaus Malicious Domains BIND Blocklist
-# Updated: Tue, 05 May 2020 00:09:52 UTC
+# Updated: Tue, 05 May 2020 12:09:42 UTC
 # Repo: https://gitlab.com/curben/urlhaus-filter
 # License: https://creativecommons.org/publicdomain/zero/1.0/
 # Source: https://urlhaus.abuse.ch/api/
 zone "13pope.com" { type master; notify no; file "null.zone.file"; };
 zone "150.co.il" { type master; notify no; file "null.zone.file"; };
-zone "2.indexsinas.me" { type master; notify no; file "null.zone.file"; };
 zone "2000kumdo.com" { type master; notify no; file "null.zone.file"; };
 zone "21robo.com" { type master; notify no; file "null.zone.file"; };
 zone "224001.selcdn.ru" { type master; notify no; file "null.zone.file"; };
-zone "3.zhzy999.net" { type master; notify no; file "null.zone.file"; };
-zone "3.zhzy999.net3.zhzy999.net" { type master; notify no; file "null.zone.file"; };
-zone "31639.xc.mieseng.com" { type master; notify no; file "null.zone.file"; };
 zone "3mandatesmedia.com" { type master; notify no; file "null.zone.file"; };
 zone "3ypackaging.com" { type master; notify no; file "null.zone.file"; };
 zone "402musicfest.com" { type master; notify no; file "null.zone.file"; };
@@ -19,8 +15,10 @@ zone "49parallel.ca" { type master; notify no; file "null.zone.file"; };
 zone "786suncity.com" { type master; notify no; file "null.zone.file"; };
 zone "8133msc.com" { type master; notify no; file "null.zone.file"; };
 zone "8200msc.com" { type master; notify no; file "null.zone.file"; };
+zone "87du.vip" { type master; notify no; file "null.zone.file"; };
 zone "887sconline.com" { type master; notify no; file "null.zone.file"; };
 zone "88mscco.com" { type master; notify no; file "null.zone.file"; };
+zone "SnackFreebie.com" { type master; notify no; file "null.zone.file"; };
 zone "a-reality.co.uk" { type master; notify no; file "null.zone.file"; };
 zone "aaasolution.co.th" { type master; notify no; file "null.zone.file"; };
 zone "aaload05.top" { type master; notify no; file "null.zone.file"; };
@@ -28,11 +26,11 @@ zone "accessyouraudience.com" { type master; notify no; file "null.zone.file"; }
 zone "acdesignhub.com" { type master; notify no; file "null.zone.file"; };
 zone "acteon.com.ar" { type master; notify no; file "null.zone.file"; };
 zone "activecost.com.au" { type master; notify no; file "null.zone.file"; };
+zone "adamtcarruthers.com" { type master; notify no; file "null.zone.file"; };
 zone "adnquocte.com" { type master; notify no; file "null.zone.file"; };
 zone "aelogica.com" { type master; notify no; file "null.zone.file"; };
 zone "agiandsam.com" { type master; notify no; file "null.zone.file"; };
 zone "agipasesores.com" { type master; notify no; file "null.zone.file"; };
-zone "agsir.com" { type master; notify no; file "null.zone.file"; };
 zone "aite.me" { type master; notify no; file "null.zone.file"; };
 zone "ajibolarilwan.com" { type master; notify no; file "null.zone.file"; };
 zone "al-wahd.com" { type master; notify no; file "null.zone.file"; };
@@ -43,20 +41,19 @@ zone "alexbase.com" { type master; notify no; file "null.zone.file"; };
 zone "alexwacker.com" { type master; notify no; file "null.zone.file"; };
 zone "algorithmshargh.com" { type master; notify no; file "null.zone.file"; };
 zone "allloveseries.com" { type master; notify no; file "null.zone.file"; };
-zone "alnahrainfilminstitute.com" { type master; notify no; file "null.zone.file"; };
 zone "alohasoftware.net" { type master; notify no; file "null.zone.file"; };
 zone "alphaconsumer.net" { type master; notify no; file "null.zone.file"; };
 zone "am-concepts.ca" { type master; notify no; file "null.zone.file"; };
 zone "amd.alibuf.com" { type master; notify no; file "null.zone.file"; };
+zone "amedeoscognamiglio.329263.com" { type master; notify no; file "null.zone.file"; };
 zone "amemarine.co.th" { type master; notify no; file "null.zone.file"; };
 zone "americanrange.com" { type master; notify no; file "null.zone.file"; };
 zone "anadolutatili.com" { type master; notify no; file "null.zone.file"; };
-zone "anamikaindanegas.in" { type master; notify no; file "null.zone.file"; };
 zone "andreelapeyre.com" { type master; notify no; file "null.zone.file"; };
 zone "andremaraisbeleggings.co.za" { type master; notify no; file "null.zone.file"; };
 zone "angiathinh.com" { type master; notify no; file "null.zone.file"; };
+zone "angthong.nfe.go.th" { type master; notify no; file "null.zone.file"; };
 zone "ansarihospital.in" { type master; notify no; file "null.zone.file"; };
-zone "anuragsharma.co.in" { type master; notify no; file "null.zone.file"; };
 zone "anvietpro.com" { type master; notify no; file "null.zone.file"; };
 zone "anysbergbiltong.co.za" { type master; notify no; file "null.zone.file"; };
 zone "aoujlift.ir" { type master; notify no; file "null.zone.file"; };
@@ -64,12 +61,12 @@ zone "apartdelpinar.com.ar" { type master; notify no; file "null.zone.file"; };
 zone "apoolcondo.com" { type master; notify no; file "null.zone.file"; };
 zone "apware.co.kr" { type master; notify no; file "null.zone.file"; };
 zone "archiv.bg" { type master; notify no; file "null.zone.file"; };
-zone "arcticprospectus.com" { type master; notify no; file "null.zone.file"; };
 zone "areac-agr.com" { type master; notify no; file "null.zone.file"; };
 zone "aresorganics.com" { type master; notify no; file "null.zone.file"; };
+zone "arowanafishforsale.com" { type master; notify no; file "null.zone.file"; };
 zone "ascentive.com" { type master; notify no; file "null.zone.file"; };
-zone "ashoakacharya.com" { type master; notify no; file "null.zone.file"; };
 zone "askarindo.or.id" { type master; notify no; file "null.zone.file"; };
+zone "askmufti.org" { type master; notify no; file "null.zone.file"; };
 zone "atfile.com" { type master; notify no; file "null.zone.file"; };
 zone "atomlines.com" { type master; notify no; file "null.zone.file"; };
 zone "attach.66rpg.com" { type master; notify no; file "null.zone.file"; };
@@ -83,29 +80,29 @@ zone "aznetsolutions.com" { type master; notify no; file "null.zone.file"; };
 zone "azureautomation.co.uk" { type master; notify no; file "null.zone.file"; };
 zone "azzd.co.kr" { type master; notify no; file "null.zone.file"; };
 zone "babaroadways.in" { type master; notify no; file "null.zone.file"; };
-zone "backlinksale.com" { type master; notify no; file "null.zone.file"; };
-zone "badgesforbullies.org" { type master; notify no; file "null.zone.file"; };
 zone "bamakobleach.free.fr" { type master; notify no; file "null.zone.file"; };
 zone "bangkok-orchids.com" { type master; notify no; file "null.zone.file"; };
 zone "banzaimonkey.com" { type master; notify no; file "null.zone.file"; };
 zone "bapo.granudan.cn" { type master; notify no; file "null.zone.file"; };
+zone "baritaco.com" { type master; notify no; file "null.zone.file"; };
 zone "baybars.xyz" { type master; notify no; file "null.zone.file"; };
 zone "bbs.sunwy.org" { type master; notify no; file "null.zone.file"; };
 zone "bbs1.marisfrolg.com" { type master; notify no; file "null.zone.file"; };
 zone "bd11.52lishi.com" { type master; notify no; file "null.zone.file"; };
 zone "bd12.52lishi.com" { type master; notify no; file "null.zone.file"; };
 zone "bd18.52lishi.com" { type master; notify no; file "null.zone.file"; };
-zone "bd19.52lishi.com" { type master; notify no; file "null.zone.file"; };
 zone "beibei.xx007.cc" { type master; notify no; file "null.zone.file"; };
 zone "bepgroup.com.hk" { type master; notify no; file "null.zone.file"; };
 zone "besserblok-ufa.ru" { type master; notify no; file "null.zone.file"; };
 zone "besttasimacilik.com.tr" { type master; notify no; file "null.zone.file"; };
+zone "beta.pterosol.com" { type master; notify no; file "null.zone.file"; };
 zone "bflow.security-portal.cz" { type master; notify no; file "null.zone.file"; };
 zone "bigdealist.com" { type master; notify no; file "null.zone.file"; };
 zone "bildeboks.no" { type master; notify no; file "null.zone.file"; };
 zone "bilim-pavlodar.gov.kz" { type master; notify no; file "null.zone.file"; };
 zone "billieellish.org" { type master; notify no; file "null.zone.file"; };
 zone "bingxiong.vip" { type master; notify no; file "null.zone.file"; };
+zone "bistlearn.ir" { type master; notify no; file "null.zone.file"; };
 zone "bjkumdo.com" { type master; notify no; file "null.zone.file"; };
 zone "blog.241optical.com" { type master; notify no; file "null.zone.file"; };
 zone "blog.hanxe.com" { type master; notify no; file "null.zone.file"; };
@@ -118,9 +115,11 @@ zone "brbs.customer.netspace.net.au" { type master; notify no; file "null.zone.f
 zone "brewmethods.com" { type master; notify no; file "null.zone.file"; };
 zone "btlocum.pl" { type master; notify no; file "null.zone.file"; };
 zone "bugansavings.com" { type master; notify no; file "null.zone.file"; };
+zone "bxbx28.cn" { type master; notify no; file "null.zone.file"; };
 zone "byqkdy.com" { type master; notify no; file "null.zone.file"; };
 zone "c.vvvvvvvvv.ga" { type master; notify no; file "null.zone.file"; };
 zone "cameli.vn" { type master; notify no; file "null.zone.file"; };
+zone "campana20gb.com" { type master; notify no; file "null.zone.file"; };
 zone "canaan.io" { type master; notify no; file "null.zone.file"; };
 zone "canmivback.biz" { type master; notify no; file "null.zone.file"; };
 zone "caravella.com.br" { type master; notify no; file "null.zone.file"; };
@@ -128,6 +127,7 @@ zone "cassovia.sk" { type master; notify no; file "null.zone.file"; };
 zone "castmart.ga" { type master; notify no; file "null.zone.file"; };
 zone "cbk.m.dodo52.com" { type master; notify no; file "null.zone.file"; };
 zone "ccnn.xiaomier.cn" { type master; notify no; file "null.zone.file"; };
+zone "cdn-10049480.file.myqcloud.com" { type master; notify no; file "null.zone.file"; };
 zone "cdn.truelife.vn" { type master; notify no; file "null.zone.file"; };
 zone "cdn.xiaoduoai.com" { type master; notify no; file "null.zone.file"; };
 zone "cdnus.laboratoryconecpttoday.com" { type master; notify no; file "null.zone.file"; };
@@ -148,17 +148,17 @@ zone "chipmarkets.com" { type master; notify no; file "null.zone.file"; };
 zone "chiptune.com" { type master; notify no; file "null.zone.file"; };
 zone "chj.m.dodo52.com" { type master; notify no; file "null.zone.file"; };
 zone "chuckweiss.com" { type master; notify no; file "null.zone.file"; };
-zone "cista-dobra-voda.com" { type master; notify no; file "null.zone.file"; };
 zone "clareiamente.clareiamente.com" { type master; notify no; file "null.zone.file"; };
 zone "clearwaterriveroutfitting.com" { type master; notify no; file "null.zone.file"; };
 zone "client.yaap.co.uk" { type master; notify no; file "null.zone.file"; };
 zone "clinicamariademolina.com" { type master; notify no; file "null.zone.file"; };
 zone "cloud-server-updater2.co.za" { type master; notify no; file "null.zone.file"; };
-zone "compesat.com" { type master; notify no; file "null.zone.file"; };
+zone "colourcreative.co.za" { type master; notify no; file "null.zone.file"; };
 zone "complan.hu" { type master; notify no; file "null.zone.file"; };
 zone "complanbt.hu" { type master; notify no; file "null.zone.file"; };
 zone "comtechadsl.com" { type master; notify no; file "null.zone.file"; };
 zone "config.kuaisousou.top" { type master; notify no; file "null.zone.file"; };
+zone "config.wwmhdq.com" { type master; notify no; file "null.zone.file"; };
 zone "consultingcy.com" { type master; notify no; file "null.zone.file"; };
 zone "counciloflight.bravepages.com" { type master; notify no; file "null.zone.file"; };
 zone "cqjcc.org" { type master; notify no; file "null.zone.file"; };
@@ -166,12 +166,9 @@ zone "crittersbythebay.com" { type master; notify no; file "null.zone.file"; };
 zone "cryline.net" { type master; notify no; file "null.zone.file"; };
 zone "csnserver.com" { type master; notify no; file "null.zone.file"; };
 zone "csw.hu" { type master; notify no; file "null.zone.file"; };
-zone "cuacuonsieure.com" { type master; notify no; file "null.zone.file"; };
 zone "cvc.com.pl" { type master; notify no; file "null.zone.file"; };
 zone "cyclomove.com" { type master; notify no; file "null.zone.file"; };
 zone "czsl.91756.cn" { type master; notify no; file "null.zone.file"; };
-zone "d3.99ddd.com" { type master; notify no; file "null.zone.file"; };
-zone "d9.99ddd.com" { type master; notify no; file "null.zone.file"; };
 zone "da.alibuf.com" { type master; notify no; file "null.zone.file"; };
 zone "daithanhphung.com" { type master; notify no; file "null.zone.file"; };
 zone "danielbastos.com" { type master; notify no; file "null.zone.file"; };
@@ -195,10 +192,10 @@ zone "dev1.xicom.us" { type master; notify no; file "null.zone.file"; };
 zone "dev5.mypagevn.com" { type master; notify no; file "null.zone.file"; };
 zone "dezcom.com" { type master; notify no; file "null.zone.file"; };
 zone "dfcf.91756.cn" { type master; notify no; file "null.zone.file"; };
-zone "dfd.zhzy999.net" { type master; notify no; file "null.zone.file"; };
 zone "dfzm.91756.cn" { type master; notify no; file "null.zone.file"; };
 zone "dgecolesdepolice.bf" { type master; notify no; file "null.zone.file"; };
 zone "dgnj.cn" { type master; notify no; file "null.zone.file"; };
+zone "dhlservices.duckdns.org" { type master; notify no; file "null.zone.file"; };
 zone "diazavendano.cl" { type master; notify no; file "null.zone.file"; };
 zone "dichvuvesinhcongnghiep.top" { type master; notify no; file "null.zone.file"; };
 zone "dienmaycu.vn" { type master; notify no; file "null.zone.file"; };
@@ -210,26 +207,25 @@ zone "ditec.com.my" { type master; notify no; file "null.zone.file"; };
 zone "divinevacations.in" { type master; notify no; file "null.zone.file"; };
 zone "dkw-engineering.net" { type master; notify no; file "null.zone.file"; };
 zone "dl-gameplayer.dmm.com" { type master; notify no; file "null.zone.file"; };
-zone "dl.1003b.56a.com" { type master; notify no; file "null.zone.file"; };
 zone "dl.198424.com" { type master; notify no; file "null.zone.file"; };
 zone "dl.dzqzd.com" { type master; notify no; file "null.zone.file"; };
-zone "dl.kuaile-u.com" { type master; notify no; file "null.zone.file"; };
-zone "dl2.soft-lenta.ru" { type master; notify no; file "null.zone.file"; };
+zone "dl.iqilie.com" { type master; notify no; file "null.zone.file"; };
 zone "dlist.iqilie.com" { type master; notify no; file "null.zone.file"; };
 zone "dmresor.se" { type master; notify no; file "null.zone.file"; };
 zone "dnn.alibuf.com" { type master; notify no; file "null.zone.file"; };
 zone "dns.alibuf.com" { type master; notify no; file "null.zone.file"; };
 zone "dodsonimaging.com" { type master; notify no; file "null.zone.file"; };
 zone "don.viameventos.com.br" { type master; notify no; file "null.zone.file"; };
+zone "dongiln.co" { type master; notify no; file "null.zone.file"; };
 zone "donmago.com" { type master; notify no; file "null.zone.file"; };
 zone "donoffermaster.best" { type master; notify no; file "null.zone.file"; };
 zone "doostansocks.ir" { type master; notify no; file "null.zone.file"; };
 zone "doransky.info" { type master; notify no; file "null.zone.file"; };
-zone "dosame.com" { type master; notify no; file "null.zone.file"; };
 zone "down.ancamera.co.kr" { type master; notify no; file "null.zone.file"; };
 zone "down.gogominer.com" { type master; notify no; file "null.zone.file"; };
 zone "down.haote.com" { type master; notify no; file "null.zone.file"; };
 zone "down.pcclear.com" { type master; notify no; file "null.zone.file"; };
+zone "down.pdflist.cqhbkjzx.com" { type master; notify no; file "null.zone.file"; };
 zone "down.startools.co.kr" { type master; notify no; file "null.zone.file"; };
 zone "down.tgjkbx.cn" { type master; notify no; file "null.zone.file"; };
 zone "down.upzxt.com" { type master; notify no; file "null.zone.file"; };
@@ -251,14 +247,12 @@ zone "dpeasesummithilltoppers.pbworks.com" { type master; notify no; file "null.
 zone "dr080.com" { type master; notify no; file "null.zone.file"; };
 zone "dralpaslan.com" { type master; notify no; file "null.zone.file"; };
 zone "dreamfile.club" { type master; notify no; file "null.zone.file"; };
-zone "drivolani.us" { type master; notify no; file "null.zone.file"; };
 zone "drools-moved.46999.n3.nabble.com" { type master; notify no; file "null.zone.file"; };
 zone "druzim.freewww.biz" { type master; notify no; file "null.zone.file"; };
 zone "dsiun.com" { type master; notify no; file "null.zone.file"; };
 zone "dtsay.xyz" { type master; notify no; file "null.zone.file"; };
 zone "dudulm.com" { type master; notify no; file "null.zone.file"; };
 zone "dusdn.mireene.com" { type master; notify no; file "null.zone.file"; };
-zone "dw.58wangdun.com" { type master; notify no; file "null.zone.file"; };
 zone "dx.qqyewu.com" { type master; notify no; file "null.zone.file"; };
 zone "dx1.qqtn.com" { type master; notify no; file "null.zone.file"; };
 zone "dx2.qqtn.com" { type master; notify no; file "null.zone.file"; };
@@ -267,7 +261,9 @@ zone "dx60.siweidaoxiang.com" { type master; notify no; file "null.zone.file"; }
 zone "dzinestudio87.co.uk" { type master; notify no; file "null.zone.file"; };
 zone "e.dangeana.com" { type master; notify no; file "null.zone.file"; };
 zone "easydown.workday360.cn" { type master; notify no; file "null.zone.file"; };
+zone "ebook.w3wvg.com" { type master; notify no; file "null.zone.file"; };
 zone "edicolanazionale.it" { type master; notify no; file "null.zone.file"; };
+zone "elokshinproperty.co.za" { type master; notify no; file "null.zone.file"; };
 zone "emir-elbahr.com" { type master; notify no; file "null.zone.file"; };
 zone "enc-tech.com" { type master; notify no; file "null.zone.file"; };
 zone "energisegroup.com" { type master; notify no; file "null.zone.file"; };
@@ -276,21 +272,20 @@ zone "er-bulisguvenligi.com" { type master; notify no; file "null.zone.file"; };
 zone "ermekanik.com" { type master; notify no; file "null.zone.file"; };
 zone "esolvent.pl" { type master; notify no; file "null.zone.file"; };
 zone "esteteam.org" { type master; notify no; file "null.zone.file"; };
+zone "exposvision.com" { type master; notify no; file "null.zone.file"; };
 zone "ezfintechcorp.com" { type master; notify no; file "null.zone.file"; };
 zone "fafhoafouehfuh.su" { type master; notify no; file "null.zone.file"; };
-zone "fairyqueenstore.com" { type master; notify no; file "null.zone.file"; };
 zone "fastsoft.onlinedown.net" { type master; notify no; file "null.zone.file"; };
 zone "fazi.pl" { type master; notify no; file "null.zone.file"; };
-zone "fedsfmr.ru" { type master; notify no; file "null.zone.file"; };
 zone "fenoma.net" { type master; notify no; file "null.zone.file"; };
 zone "ffv322.ru" { type master; notify no; file "null.zone.file"; };
 zone "ffv32223.ru" { type master; notify no; file "null.zone.file"; };
 zone "fidiag.kymco.com" { type master; notify no; file "null.zone.file"; };
+zone "fifa555easy.329263.com" { type master; notify no; file "null.zone.file"; };
 zone "figuig.net" { type master; notify no; file "null.zone.file"; };
 zone "fileco.jobkorea.co.kr" { type master; notify no; file "null.zone.file"; };
 zone "filen3.utengine.co.kr" { type master; notify no; file "null.zone.file"; };
 zone "filen5.utengine.co.kr" { type master; notify no; file "null.zone.file"; };
-zone "files.fqapps.com" { type master; notify no; file "null.zone.file"; };
 zone "files.rakbot.ru" { type master; notify no; file "null.zone.file"; };
 zone "files6.uludagbilisim.com" { type master; notify no; file "null.zone.file"; };
 zone "fishingbigstore.com" { type master; notify no; file "null.zone.file"; };
@@ -298,7 +293,6 @@ zone "fitmanacademy.com" { type master; notify no; file "null.zone.file"; };
 zone "fkd.derpcity.ru" { type master; notify no; file "null.zone.file"; };
 zone "flex.ru" { type master; notify no; file "null.zone.file"; };
 zone "flood-protection.org" { type master; notify no; file "null.zone.file"; };
-zone "fmjstorage.com" { type master; notify no; file "null.zone.file"; };
 zone "fordlamdong.com.vn" { type master; notify no; file "null.zone.file"; };
 zone "foreverprecious.org" { type master; notify no; file "null.zone.file"; };
 zone "foxfennecs.com" { type master; notify no; file "null.zone.file"; };
@@ -307,21 +301,20 @@ zone "fte.m.dodo52.com" { type master; notify no; file "null.zone.file"; };
 zone "ftpcnc-p2sp.pconline.com.cn" { type master; notify no; file "null.zone.file"; };
 zone "ftpftpftp.com" { type master; notify no; file "null.zone.file"; };
 zone "funletters.net" { type master; notify no; file "null.zone.file"; };
+zone "funpartyrent.com" { type master; notify no; file "null.zone.file"; };
 zone "futuregraphics.com.ar" { type master; notify no; file "null.zone.file"; };
-zone "g.7230.com" { type master; notify no; file "null.zone.file"; };
 zone "g0ogle.free.fr" { type master; notify no; file "null.zone.file"; };
+zone "gainsdirectory.com" { type master; notify no; file "null.zone.file"; };
 zone "galuhtea.com" { type master; notify no; file "null.zone.file"; };
 zone "gamee.top" { type master; notify no; file "null.zone.file"; };
+zone "garage.themebuffets.com" { type master; notify no; file "null.zone.file"; };
 zone "garenanow.myvnc.com" { type master; notify no; file "null.zone.file"; };
 zone "garenanow4.myvnc.com" { type master; notify no; file "null.zone.file"; };
 zone "gargiulo.com.ar" { type master; notify no; file "null.zone.file"; };
 zone "gateway-heide.de" { type master; notify no; file "null.zone.file"; };
 zone "gateway.ethlqd.com" { type master; notify no; file "null.zone.file"; };
-zone "gd2.greenxf.com" { type master; notify no; file "null.zone.file"; };
 zone "genesisconstruction.co.za" { type master; notify no; file "null.zone.file"; };
 zone "germistonmiraclecentre.co.za" { type master; notify no; file "null.zone.file"; };
-zone "getfashionmania.com" { type master; notify no; file "null.zone.file"; };
-zone "ghislain.dartois.pagesperso-orange.fr" { type master; notify no; file "null.zone.file"; };
 zone "ghwls44.gabia.io" { type master; notify no; file "null.zone.file"; };
 zone "gimscompany.com" { type master; notify no; file "null.zone.file"; };
 zone "glitzygal.net" { type master; notify no; file "null.zone.file"; };
@@ -331,8 +324,6 @@ zone "gnimelf.net" { type master; notify no; file "null.zone.file"; };
 zone "go.xsuad.com" { type master; notify no; file "null.zone.file"; };
 zone "gocanada.vn" { type master; notify no; file "null.zone.file"; };
 zone "google.ghststr.com" { type master; notify no; file "null.zone.file"; };
-zone "gopala.es" { type master; notify no; file "null.zone.file"; };
-zone "gov.kr" { type master; notify no; file "null.zone.file"; };
 zone "govhotel.us" { type master; notify no; file "null.zone.file"; };
 zone "grafchekloder.rebatesrule.net" { type master; notify no; file "null.zone.file"; };
 zone "granportale.com.br" { type master; notify no; file "null.zone.file"; };
@@ -340,7 +331,6 @@ zone "green100.cn" { type master; notify no; file "null.zone.file"; };
 zone "greenfood.sa.com" { type master; notify no; file "null.zone.file"; };
 zone "greenleaveperu.com" { type master; notify no; file "null.zone.file"; };
 zone "gssgroups.com" { type master; notify no; file "null.zone.file"; };
-zone "gx-10012947.file.myqcloud.com" { type master; notify no; file "null.zone.file"; };
 zone "habbotips.free.fr" { type master; notify no; file "null.zone.file"; };
 zone "hagebakken.no" { type master; notify no; file "null.zone.file"; };
 zone "halcat.com" { type master; notify no; file "null.zone.file"; };
@@ -348,7 +338,6 @@ zone "hanaphoto.co.kr" { type master; notify no; file "null.zone.file"; };
 zone "handrush.com" { type master; notify no; file "null.zone.file"; };
 zone "hanoihub.vn" { type master; notify no; file "null.zone.file"; };
 zone "hazel-azure.co.th" { type master; notify no; file "null.zone.file"; };
-zone "hdxa.net" { type master; notify no; file "null.zone.file"; };
 zone "healtina.com" { type master; notify no; file "null.zone.file"; };
 zone "heavenif.co.za" { type master; notify no; file "null.zone.file"; };
 zone "hediyeinternetpaket.com" { type master; notify no; file "null.zone.file"; };
@@ -361,9 +350,7 @@ zone "hoayeuthuong-my.sharepoint.com" { type master; notify no; file "null.zone.
 zone "hostzaa.com" { type master; notify no; file "null.zone.file"; };
 zone "hotart.co.nz" { type master; notify no; file "null.zone.file"; };
 zone "hotel-le-relais-des-moulins.com" { type master; notify no; file "null.zone.file"; };
-zone "hotelbharatpurpalace.com" { type master; notify no; file "null.zone.file"; };
 zone "housewifes.co" { type master; notify no; file "null.zone.file"; };
-zone "hqsistemas.com.ar" { type master; notify no; file "null.zone.file"; };
 zone "hseda.com" { type master; notify no; file "null.zone.file"; };
 zone "hsmwebapp.com" { type master; notify no; file "null.zone.file"; };
 zone "htxl.cn" { type master; notify no; file "null.zone.file"; };
@@ -377,12 +364,12 @@ zone "ideadom.pl" { type master; notify no; file "null.zone.file"; };
 zone "ihpmed.ae" { type master; notify no; file "null.zone.file"; };
 zone "ileolaherbalcare.com.ng" { type master; notify no; file "null.zone.file"; };
 zone "imellda.com" { type master; notify no; file "null.zone.file"; };
+zone "imenizeh.ir" { type master; notify no; file "null.zone.file"; };
 zone "impression-gobelet.com" { type master; notify no; file "null.zone.file"; };
 zone "in-sect.com" { type master; notify no; file "null.zone.file"; };
 zone "inapadvance.com" { type master; notify no; file "null.zone.file"; };
 zone "incrediblepixels.com" { type master; notify no; file "null.zone.file"; };
 zone "incredicole.com" { type master; notify no; file "null.zone.file"; };
-zone "ini.egkj.com" { type master; notify no; file "null.zone.file"; };
 zone "innovation4crisis.org" { type master; notify no; file "null.zone.file"; };
 zone "instanttechnology.com.au" { type master; notify no; file "null.zone.file"; };
 zone "intelicasa.ro" { type master; notify no; file "null.zone.file"; };
@@ -400,6 +387,7 @@ zone "itrigger.cn" { type master; notify no; file "null.zone.file"; };
 zone "itsnixielou.com" { type master; notify no; file "null.zone.file"; };
 zone "ixlonbcc.com" { type master; notify no; file "null.zone.file"; };
 zone "izu.co.jp" { type master; notify no; file "null.zone.file"; };
+zone "jahesa.com" { type master; notify no; file "null.zone.file"; };
 zone "jaincakes.xyz" { type master; notify no; file "null.zone.file"; };
 zone "jamiekaylive.com" { type master; notify no; file "null.zone.file"; };
 zone "jansen-heesch.nl" { type master; notify no; file "null.zone.file"; };
@@ -428,6 +416,7 @@ zone "k3.etfiber.net" { type master; notify no; file "null.zone.file"; };
 zone "kabiru.ru" { type master; notify no; file "null.zone.file"; };
 zone "kachsurf.mylftv.com" { type master; notify no; file "null.zone.file"; };
 zone "kamasu11.cafe24.com" { type master; notify no; file "null.zone.file"; };
+zone "kamisecurity.com.my" { type master; notify no; file "null.zone.file"; };
 zone "kanok.co.th" { type master; notify no; file "null.zone.file"; };
 zone "kar.big-pro.com" { type master; notify no; file "null.zone.file"; };
 zone "karavantekstil.com" { type master; notify no; file "null.zone.file"; };
@@ -435,16 +424,15 @@ zone "kassohome.com.tr" { type master; notify no; file "null.zone.file"; };
 zone "kdsp.co.kr" { type master; notify no; file "null.zone.file"; };
 zone "kejpa.com" { type master; notify no; file "null.zone.file"; };
 zone "kenareh-gostare-aras.ir" { type master; notify no; file "null.zone.file"; };
+zone "kgfs3.329263.com" { type master; notify no; file "null.zone.file"; };
 zone "khunnapap.com" { type master; notify no; file "null.zone.file"; };
 zone "kiencuonghotel.vn" { type master; notify no; file "null.zone.file"; };
 zone "kjbm9.mof.gov.cn" { type master; notify no; file "null.zone.file"; };
 zone "kleinendeli.co.za" { type master; notify no; file "null.zone.file"; };
-zone "knightsbridgeenergy.com.ng" { type master; notify no; file "null.zone.file"; };
 zone "koppemotta.com.br" { type master; notify no; file "null.zone.file"; };
 zone "koralli.if.ua" { type master; notify no; file "null.zone.file"; };
 zone "kqq.kz" { type master; notify no; file "null.zone.file"; };
 zone "kristofferdaniels.com" { type master; notify no; file "null.zone.file"; };
-zone "kupaliskohs.sk" { type master; notify no; file "null.zone.file"; };
 zone "kuznetsov.ca" { type master; notify no; file "null.zone.file"; };
 zone "kwanfromhongkong.com" { type master; notify no; file "null.zone.file"; };
 zone "kwikomfi-lab.com" { type master; notify no; file "null.zone.file"; };
@@ -463,13 +451,14 @@ zone "learningcomputing.org" { type master; notify no; file "null.zone.file"; };
 zone "lebedyn.info" { type master; notify no; file "null.zone.file"; };
 zone "lecafedesartistes.com" { type master; notify no; file "null.zone.file"; };
 zone "lengendryme.com" { type master; notify no; file "null.zone.file"; };
-zone "leukkado.be" { type master; notify no; file "null.zone.file"; };
+zone "lesa.at.true.by" { type master; notify no; file "null.zone.file"; };
 zone "lhbfirst.com" { type master; notify no; file "null.zone.file"; };
 zone "libya-info.com" { type master; notify no; file "null.zone.file"; };
 zone "lifeapt.biz" { type master; notify no; file "null.zone.file"; };
 zone "linx.li" { type master; notify no; file "null.zone.file"; };
 zone "lists.ibiblio.org" { type master; notify no; file "null.zone.file"; };
 zone "lists.mplayerhq.hu" { type master; notify no; file "null.zone.file"; };
+zone "livetrack.in" { type master; notify no; file "null.zone.file"; };
 zone "lodergord.com" { type master; notify no; file "null.zone.file"; };
 zone "log.yundabao.cn" { type master; notify no; file "null.zone.file"; };
 zone "lsyr.net" { type master; notify no; file "null.zone.file"; };
@@ -484,11 +473,10 @@ zone "mackleyn.com" { type master; notify no; file "null.zone.file"; };
 zone "magda.zelentourism.com" { type master; notify no; file "null.zone.file"; };
 zone "makosoft.hu" { type master; notify no; file "null.zone.file"; };
 zone "malin-akerman.net" { type master; notify no; file "null.zone.file"; };
-zone "mangawt.com" { type master; notify no; file "null.zone.file"; };
 zone "margopassadorestylist.com" { type master; notify no; file "null.zone.file"; };
-zone "maringareservas.com.br" { type master; notify no; file "null.zone.file"; };
 zone "marketprice.com.ng" { type master; notify no; file "null.zone.file"; };
 zone "marksidfgs.ug" { type master; notify no; file "null.zone.file"; };
+zone "marocaji.com" { type master; notify no; file "null.zone.file"; };
 zone "matt-e.it" { type master; notify no; file "null.zone.file"; };
 zone "mattayom31.go.th" { type master; notify no; file "null.zone.file"; };
 zone "mazury4x4.pl" { type master; notify no; file "null.zone.file"; };
@@ -496,7 +484,6 @@ zone "mbgrm.com" { type master; notify no; file "null.zone.file"; };
 zone "mecbox.cn" { type master; notify no; file "null.zone.file"; };
 zone "mediamatkat.fi" { type master; notify no; file "null.zone.file"; };
 zone "medianews.ge" { type master; notify no; file "null.zone.file"; };
-zone "medicacademic.com" { type master; notify no; file "null.zone.file"; };
 zone "medreg.uz" { type master; notify no; file "null.zone.file"; };
 zone "meert.org" { type master; notify no; file "null.zone.file"; };
 zone "meeweb.com" { type master; notify no; file "null.zone.file"; };
@@ -507,7 +494,6 @@ zone "metallexs.com" { type master; notify no; file "null.zone.file"; };
 zone "mettaanand.org" { type master; notify no; file "null.zone.file"; };
 zone "mettek.com.tr" { type master; notify no; file "null.zone.file"; };
 zone "mfevr.com" { type master; notify no; file "null.zone.file"; };
-zone "mfpc.org.my" { type master; notify no; file "null.zone.file"; };
 zone "mhkdhotbot.myvnc.com" { type master; notify no; file "null.zone.file"; };
 zone "mhkdhotbot80.myvnc.com" { type master; notify no; file "null.zone.file"; };
 zone "micahproducts.com" { type master; notify no; file "null.zone.file"; };
@@ -516,7 +502,6 @@ zone "mirror.mypage.sk" { type master; notify no; file "null.zone.file"; };
 zone "mis.nbcc.ac.th" { type master; notify no; file "null.zone.file"; };
 zone "misterson.com" { type master; notify no; file "null.zone.file"; };
 zone "mistydeblasiophotography.com" { type master; notify no; file "null.zone.file"; };
-zone "mitonegbh.xyz" { type master; notify no; file "null.zone.file"; };
 zone "mkk09.kr" { type master; notify no; file "null.zone.file"; };
 zone "mkontakt.az" { type master; notify no; file "null.zone.file"; };
 zone "mmc.ru.com" { type master; notify no; file "null.zone.file"; };
@@ -524,6 +509,7 @@ zone "mobiadnews.com" { type master; notify no; file "null.zone.file"; };
 zone "mobilier-modern.ro" { type master; notify no; file "null.zone.file"; };
 zone "modcloudserver.eu" { type master; notify no; file "null.zone.file"; };
 zone "moha-group.com" { type master; notify no; file "null.zone.file"; };
+zone "monmariage.info" { type master; notify no; file "null.zone.file"; };
 zone "moscow11.at" { type master; notify no; file "null.zone.file"; };
 zone "mountveederwines.com" { type master; notify no; file "null.zone.file"; };
 zone "moyo.co.kr" { type master; notify no; file "null.zone.file"; };
@@ -533,16 +519,12 @@ zone "msecurity.ro" { type master; notify no; file "null.zone.file"; };
 zone "mteng.mmj7.com" { type master; notify no; file "null.zone.file"; };
 zone "mtfelektroteknik.com" { type master; notify no; file "null.zone.file"; };
 zone "mueblesjcp.cl" { type master; notify no; file "null.zone.file"; };
-zone "mv360.net" { type master; notify no; file "null.zone.file"; };
 zone "mvb.kz" { type master; notify no; file "null.zone.file"; };
-zone "mvdrepair.com" { type master; notify no; file "null.zone.file"; };
 zone "mxpiqw.am.files.1drv.com" { type master; notify no; file "null.zone.file"; };
-zone "myexpertca.in" { type master; notify no; file "null.zone.file"; };
+zone "mydesign.thinkeraibirds.com" { type master; notify no; file "null.zone.file"; };
 zone "myhood.cl" { type master; notify no; file "null.zone.file"; };
 zone "myo.net.au" { type master; notify no; file "null.zone.file"; };
 zone "myofficeplus.com" { type master; notify no; file "null.zone.file"; };
-zone "myonlinepokiesblog.com" { type master; notify no; file "null.zone.file"; };
-zone "mytex.pe" { type master; notify no; file "null.zone.file"; };
 zone "mytrains.net" { type master; notify no; file "null.zone.file"; };
 zone "mywp.asia" { type master; notify no; file "null.zone.file"; };
 zone "myyttilukukansasta.fi" { type master; notify no; file "null.zone.file"; };
@@ -557,14 +539,12 @@ zone "nebraskacharters.com.au" { type master; notify no; file "null.zone.file";
 zone "nemo.herc.ws" { type master; notify no; file "null.zone.file"; };
 zone "neocity1.free.fr" { type master; notify no; file "null.zone.file"; };
 zone "nerve.untergrund.net" { type master; notify no; file "null.zone.file"; };
-zone "new.tristatehs.com" { type master; notify no; file "null.zone.file"; };
 zone "news.abfakerman.ir" { type master; notify no; file "null.zone.file"; };
 zone "news.omumusic.net" { type master; notify no; file "null.zone.file"; };
 zone "newsun-shop.com" { type master; notify no; file "null.zone.file"; };
 zone "newxing.com" { type master; notify no; file "null.zone.file"; };
 zone "nexity.me" { type master; notify no; file "null.zone.file"; };
 zone "nfbio.com" { type master; notify no; file "null.zone.file"; };
-zone "ngoaingu.garage.com.vn" { type master; notify no; file "null.zone.file"; };
 zone "nofound.000webhostapp.com" { type master; notify no; file "null.zone.file"; };
 zone "norperuinge.com.pe" { type master; notify no; file "null.zone.file"; };
 zone "nprg.ru" { type master; notify no; file "null.zone.file"; };
@@ -574,6 +554,7 @@ zone "oa.fnysw.com" { type master; notify no; file "null.zone.file"; };
 zone "oa.hys.cn" { type master; notify no; file "null.zone.file"; };
 zone "obnova.zzux.com" { type master; notify no; file "null.zone.file"; };
 zone "obseques-conseils.com" { type master; notify no; file "null.zone.file"; };
+zone "ohe.ie" { type master; notify no; file "null.zone.file"; };
 zone "oknoplastik.sk" { type master; notify no; file "null.zone.file"; };
 zone "omega.az" { type master; notify no; file "null.zone.file"; };
 zone "omsk-osma.ru" { type master; notify no; file "null.zone.file"; };
@@ -599,7 +580,6 @@ zone "pack301.bravepages.com" { type master; notify no; file "null.zone.file"; }
 zone "pakdesighee.com" { type master; notify no; file "null.zone.file"; };
 zone "palochusvet.szm.com" { type master; notify no; file "null.zone.file"; };
 zone "partyflix.net" { type master; notify no; file "null.zone.file"; };
-zone "pat4.jetos.com" { type master; notify no; file "null.zone.file"; };
 zone "pat4.qpoe.com" { type master; notify no; file "null.zone.file"; };
 zone "patch2.51lg.com" { type master; notify no; file "null.zone.file"; };
 zone "patch2.99ddd.com" { type master; notify no; file "null.zone.file"; };
@@ -610,6 +590,7 @@ zone "pcginsure.com" { type master; notify no; file "null.zone.file"; };
 zone "pcsoori.com" { type master; notify no; file "null.zone.file"; };
 zone "pedidoslalacteo.com.ar" { type master; notify no; file "null.zone.file"; };
 zone "peterssandmay.com" { type master; notify no; file "null.zone.file"; };
+zone "petromltd.com" { type master; notify no; file "null.zone.file"; };
 zone "ph4s.ru" { type master; notify no; file "null.zone.file"; };
 zone "phamchilong.com" { type master; notify no; file "null.zone.file"; };
 zone "phudieusongma.com" { type master; notify no; file "null.zone.file"; };
@@ -623,7 +604,6 @@ zone "podrska.com.hr" { type master; notify no; file "null.zone.file"; };
 zone "ponto50.com.br" { type master; notify no; file "null.zone.file"; };
 zone "poolbook.ir" { type master; notify no; file "null.zone.file"; };
 zone "ppl.ac.id" { type master; notify no; file "null.zone.file"; };
-zone "prabhuandsons.com" { type master; notify no; file "null.zone.file"; };
 zone "pratapnursery.com" { type master; notify no; file "null.zone.file"; };
 zone "prepaenunsoloexamen.academiagalileoac.com" { type master; notify no; file "null.zone.file"; };
 zone "probost.cz" { type master; notify no; file "null.zone.file"; };
@@ -637,7 +617,6 @@ zone "qmsled.com" { type master; notify no; file "null.zone.file"; };
 zone "qppl.angiang.gov.vn" { type master; notify no; file "null.zone.file"; };
 zone "quantominds.com" { type master; notify no; file "null.zone.file"; };
 zone "quartier-midi.be" { type master; notify no; file "null.zone.file"; };
-zone "quehagoencartagena.com" { type master; notify no; file "null.zone.file"; };
 zone "quickuploader.xyz" { type master; notify no; file "null.zone.file"; };
 zone "raacts.in" { type master; notify no; file "null.zone.file"; };
 zone "raifix.com.br" { type master; notify no; file "null.zone.file"; };
@@ -651,7 +630,6 @@ zone "recommendservices.com" { type master; notify no; file "null.zone.file"; };
 zone "redeemerssports.com" { type master; notify no; file "null.zone.file"; };
 zone "redesoftdownload.info" { type master; notify no; file "null.zone.file"; };
 zone "renimin.mymom.info" { type master; notify no; file "null.zone.file"; };
-zone "renovanorte.com" { type master; notify no; file "null.zone.file"; };
 zone "res.uf1.cn" { type master; notify no; file "null.zone.file"; };
 zone "ret.space" { type master; notify no; file "null.zone.file"; };
 zone "rezaazizi.ir" { type master; notify no; file "null.zone.file"; };
@@ -668,12 +646,11 @@ zone "royalplusmobile.ir" { type master; notify no; file "null.zone.file"; };
 zone "ruisgood.ru" { type master; notify no; file "null.zone.file"; };
 zone "rusch.nu" { type master; notify no; file "null.zone.file"; };
 zone "s.51shijuan.com" { type master; notify no; file "null.zone.file"; };
-zone "s.kk30.com" { type master; notify no; file "null.zone.file"; };
-zone "s14b.91danji.com" { type master; notify no; file "null.zone.file"; };
-zone "s14b.groundyun.cn" { type master; notify no; file "null.zone.file"; };
 zone "sabiupd.compress.to" { type master; notify no; file "null.zone.file"; };
 zone "saboorjaam.ir" { type master; notify no; file "null.zone.file"; };
 zone "sabupda.vizvaz.com" { type master; notify no; file "null.zone.file"; };
+zone "saglikbakanligi-destekportal.org" { type master; notify no; file "null.zone.file"; };
+zone "saglikramazan20bgb.net" { type master; notify no; file "null.zone.file"; };
 zone "sahathaikasetpan.com" { type master; notify no; file "null.zone.file"; };
 zone "salvationbd.com" { type master; notify no; file "null.zone.file"; };
 zone "sandovalgraphics.com" { type master; notify no; file "null.zone.file"; };
@@ -684,7 +661,6 @@ zone "schollaert.eu" { type master; notify no; file "null.zone.file"; };
 zone "sefp-boispro.fr" { type master; notify no; file "null.zone.file"; };
 zone "selekture.com" { type master; notify no; file "null.zone.file"; };
 zone "selvikoyunciftligi.com" { type master; notify no; file "null.zone.file"; };
-zone "sernayconsultores.com" { type master; notify no; file "null.zone.file"; };
 zone "serpentrising.com" { type master; notify no; file "null.zone.file"; };
 zone "servicemhkd.myvnc.com" { type master; notify no; file "null.zone.file"; };
 zone "servicemhkd80.myvnc.com" { type master; notify no; file "null.zone.file"; };
@@ -694,7 +670,6 @@ zone "sgm.pc6.com" { type master; notify no; file "null.zone.file"; };
 zone "shacked.webdepot.co.il" { type master; notify no; file "null.zone.file"; };
 zone "shahtoba.faqserv.com" { type master; notify no; file "null.zone.file"; };
 zone "shaoxiaofei.cn" { type master; notify no; file "null.zone.file"; };
-zone "share.dmca.gripe" { type master; notify no; file "null.zone.file"; };
 zone "sharjahas.com" { type master; notify no; file "null.zone.file"; };
 zone "shembefoundation.com" { type master; notify no; file "null.zone.file"; };
 zone "simlun.com.ar" { type master; notify no; file "null.zone.file"; };
@@ -720,7 +695,6 @@ zone "sophiaskyhotel.vn" { type master; notify no; file "null.zone.file"; };
 zone "sota-france.fr" { type master; notify no; file "null.zone.file"; };
 zone "souldancing.cn" { type master; notify no; file "null.zone.file"; };
 zone "souq-aljwalat.com" { type master; notify no; file "null.zone.file"; };
-zone "spdtextile.com" { type master; notify no; file "null.zone.file"; };
 zone "speed.myz.info" { type master; notify no; file "null.zone.file"; };
 zone "spurstogo.com" { type master; notify no; file "null.zone.file"; };
 zone "sputnikmailru.cdnmail.ru" { type master; notify no; file "null.zone.file"; };
@@ -730,11 +704,11 @@ zone "srvmanos.no-ip.info" { type master; notify no; file "null.zone.file"; };
 zone "ss.cybersoft-vn.com" { type master; notify no; file "null.zone.file"; };
 zone "sslv3.at" { type master; notify no; file "null.zone.file"; };
 zone "staging.popclusive.asia" { type master; notify no; file "null.zone.file"; };
+zone "staging2.lifebiotic.com" { type master; notify no; file "null.zone.file"; };
 zone "starcountry.net" { type master; notify no; file "null.zone.file"; };
 zone "starinfotechcollege.com" { type master; notify no; file "null.zone.file"; };
 zone "static.3001.net" { type master; notify no; file "null.zone.file"; };
 zone "static.ilclock.com" { type master; notify no; file "null.zone.file"; };
-zone "static.topxgun.com" { type master; notify no; file "null.zone.file"; };
 zone "stecit.nl" { type master; notify no; file "null.zone.file"; };
 zone "stevewalker.com.au" { type master; notify no; file "null.zone.file"; };
 zone "story-maker.jp" { type master; notify no; file "null.zone.file"; };
@@ -754,7 +728,6 @@ zone "t.honker.info" { type master; notify no; file "null.zone.file"; };
 zone "tandenblekenhoofddorp.nl" { type master; notify no; file "null.zone.file"; };
 zone "taraward.com" { type master; notify no; file "null.zone.file"; };
 zone "taxpos.com" { type master; notify no; file "null.zone.file"; };
-zone "tcy.198424.com" { type master; notify no; file "null.zone.file"; };
 zone "teamtnt.red" { type master; notify no; file "null.zone.file"; };
 zone "teardrop-productions.ro" { type master; notify no; file "null.zone.file"; };
 zone "technoites.com" { type master; notify no; file "null.zone.file"; };
@@ -775,32 +748,28 @@ zone "theprestige.ro" { type master; notify no; file "null.zone.file"; };
 zone "theptiendat.com" { type master; notify no; file "null.zone.file"; };
 zone "thepyramids.nl" { type master; notify no; file "null.zone.file"; };
 zone "therecruiter.io" { type master; notify no; file "null.zone.file"; };
-zone "thevision.ro" { type master; notify no; file "null.zone.file"; };
 zone "thornadops.com" { type master; notify no; file "null.zone.file"; };
 zone "thosewebbs.com" { type master; notify no; file "null.zone.file"; };
 zone "thuong.bidiworks.com" { type master; notify no; file "null.zone.file"; };
 zone "tianangdep.com" { type master; notify no; file "null.zone.file"; };
+zone "tianzi8.cn" { type master; notify no; file "null.zone.file"; };
 zone "tibinst.mefound.com" { type master; notify no; file "null.zone.file"; };
 zone "tibok.lflink.com" { type master; notify no; file "null.zone.file"; };
 zone "tinckorm.beget.tech" { type master; notify no; file "null.zone.file"; };
 zone "tishreycarmelim.co.il" { type master; notify no; file "null.zone.file"; };
 zone "tmhfashionhouse.co.za" { type master; notify no; file "null.zone.file"; };
 zone "toe.polinema.ac.id" { type master; notify no; file "null.zone.file"; };
-zone "tomorrowearth.net" { type master; notify no; file "null.zone.file"; };
 zone "tonghopgia.net" { type master; notify no; file "null.zone.file"; };
 zone "tonydong.com" { type master; notify no; file "null.zone.file"; };
 zone "tonyzone.com" { type master; notify no; file "null.zone.file"; };
-zone "toulousa.com" { type master; notify no; file "null.zone.file"; };
 zone "tsd.jxwan.com" { type master; notify no; file "null.zone.file"; };
 zone "tsredco.telangana.gov.in" { type master; notify no; file "null.zone.file"; };
 zone "tulli.info" { type master; notify no; file "null.zone.file"; };
 zone "tumso.org" { type master; notify no; file "null.zone.file"; };
 zone "tuneup.ibk.me" { type master; notify no; file "null.zone.file"; };
 zone "tup.com.cn" { type master; notify no; file "null.zone.file"; };
-zone "tuskanlehdms.ug" { type master; notify no; file "null.zone.file"; };
 zone "tutuler.com" { type master; notify no; file "null.zone.file"; };
 zone "uc-56.ru" { type master; notify no; file "null.zone.file"; };
-zone "ucto-id.cz" { type master; notify no; file "null.zone.file"; };
 zone "ufabet168168.329263.com" { type master; notify no; file "null.zone.file"; };
 zone "ugc.wegame.com.cn" { type master; notify no; file "null.zone.file"; };
 zone "ultimatelamborghiniexperience.com" { type master; notify no; file "null.zone.file"; };
@@ -833,20 +802,22 @@ zone "vietducbio.com" { type master; notify no; file "null.zone.file"; };
 zone "vigilar.com.br" { type master; notify no; file "null.zone.file"; };
 zone "vip.recommendedtoyoo.com" { type master; notify no; file "null.zone.file"; };
 zone "virustreatments.empeeevents.com" { type master; notify no; file "null.zone.file"; };
+zone "visagepk.com" { type master; notify no; file "null.zone.file"; };
+zone "vistanewsite.ir" { type master; notify no; file "null.zone.file"; };
 zone "visualdata.ru" { type master; notify no; file "null.zone.file"; };
 zone "vitinhvnt.com" { type master; notify no; file "null.zone.file"; };
 zone "vitromed.ro" { type master; notify no; file "null.zone.file"; };
+zone "vjhascv.ru" { type master; notify no; file "null.zone.file"; };
 zone "voyageur.sisnettdesign.com" { type master; notify no; file "null.zone.file"; };
 zone "vrrumover0.vrrum0.farted.net" { type master; notify no; file "null.zone.file"; };
 zone "vvff.in" { type master; notify no; file "null.zone.file"; };
-zone "w.zhzy999.net" { type master; notify no; file "null.zone.file"; };
 zone "wangtong7.siweidaoxiang.com" { type master; notify no; file "null.zone.file"; };
 zone "wangzonghang.cn" { type master; notify no; file "null.zone.file"; };
-zone "wap.dosame.com" { type master; notify no; file "null.zone.file"; };
 zone "ware.ru" { type master; notify no; file "null.zone.file"; };
 zone "warriorllc.com" { type master; notify no; file "null.zone.file"; };
 zone "wbd.5636.com" { type master; notify no; file "null.zone.file"; };
 zone "wbkmt.com" { type master; notify no; file "null.zone.file"; };
+zone "web.lavishsupplystore.com" { type master; notify no; file "null.zone.file"; };
 zone "webarte.com.br" { type master; notify no; file "null.zone.file"; };
 zone "webq.wikaba.com" { type master; notify no; file "null.zone.file"; };
 zone "webserverthai.com" { type master; notify no; file "null.zone.file"; };
@@ -856,7 +827,6 @@ zone "welcometothefuture.com" { type master; notify no; file "null.zone.file"; }
 zone "whgaty.com" { type master; notify no; file "null.zone.file"; };
 zone "wiebe-sanitaer.de" { type master; notify no; file "null.zone.file"; };
 zone "wmd9e.a3i1vvv.feteboc.com" { type master; notify no; file "null.zone.file"; };
-zone "wmi.1217bye.host" { type master; notify no; file "null.zone.file"; };
 zone "wnksupply.co.th" { type master; notify no; file "null.zone.file"; };
 zone "wood-expert.net" { type master; notify no; file "null.zone.file"; };
 zone "woodsytech.com" { type master; notify no; file "null.zone.file"; };
@@ -870,12 +840,12 @@ zone "www2.recepty5.com" { type master; notify no; file "null.zone.file"; };
 zone "x2vn.com" { type master; notify no; file "null.zone.file"; };
 zone "xia.vzboot.com" { type master; notify no; file "null.zone.file"; };
 zone "xiaidown.com" { type master; notify no; file "null.zone.file"; };
+zone "xiaoma-10021647.file.myqcloud.com" { type master; notify no; file "null.zone.file"; };
 zone "xiegushi.cn" { type master; notify no; file "null.zone.file"; };
 zone "xirfad.com" { type master; notify no; file "null.zone.file"; };
 zone "xn--20gb-hediyefrsati-nvc.com" { type master; notify no; file "null.zone.file"; };
 zone "xn--transfgran-mgbbb600b.ro" { type master; notify no; file "null.zone.file"; };
 zone "xtremeforumz.com" { type master; notify no; file "null.zone.file"; };
-zone "xueha.fun" { type master; notify no; file "null.zone.file"; };
 zone "xuhss.com" { type master; notify no; file "null.zone.file"; };
 zone "xxwl.kuaiyunds.com" { type master; notify no; file "null.zone.file"; };
 zone "xxxze.co.nu" { type master; notify no; file "null.zone.file"; };
@@ -898,8 +868,6 @@ zone "zentealounge.com.au" { type master; notify no; file "null.zone.file"; };
 zone "zethla.com" { type master; notify no; file "null.zone.file"; };
 zone "zeytinyagisabun.com" { type master; notify no; file "null.zone.file"; };
 zone "zhetysu360.kz" { type master; notify no; file "null.zone.file"; };
-zone "zhzy999.net" { type master; notify no; file "null.zone.file"; };
-zone "ziliao.yunkaodian.com" { type master; notify no; file "null.zone.file"; };
 zone "zj.9553.com" { type master; notify no; file "null.zone.file"; };
 zone "zmmore.com" { type master; notify no; file "null.zone.file"; };
 zone "zoetermeerov.nl" { type master; notify no; file "null.zone.file"; };
diff --git a/urlhaus-filter-bind.conf b/urlhaus-filter-bind.conf
index b55bf230..b57e585b 100644
--- a/urlhaus-filter-bind.conf
+++ b/urlhaus-filter-bind.conf
@@ -1,5 +1,5 @@
 # Title: abuse.ch URLhaus Malicious Domains BIND Blocklist
-# Updated: Tue, 05 May 2020 00:09:52 UTC
+# Updated: Tue, 05 May 2020 12:09:42 UTC
 # Repo: https://gitlab.com/curben/urlhaus-filter
 # License: https://creativecommons.org/publicdomain/zero/1.0/
 # Source: https://urlhaus.abuse.ch/api/
@@ -356,7 +356,6 @@ zone "2.180site.org" { type master; notify no; file "null.zone.file"; };
 zone "2.ak1ba.pro" { type master; notify no; file "null.zone.file"; };
 zone "2.clcshop.online" { type master; notify no; file "null.zone.file"; };
 zone "2.globalengine.ru" { type master; notify no; file "null.zone.file"; };
-zone "2.indexsinas.me" { type master; notify no; file "null.zone.file"; };
 zone "2.moulding.z8.ru" { type master; notify no; file "null.zone.file"; };
 zone "2.spacepel.com" { type master; notify no; file "null.zone.file"; };
 zone "2.toemobra.com.br" { type master; notify no; file "null.zone.file"; };
@@ -610,6 +609,7 @@ zone "2ndoffice.ph" { type master; notify no; file "null.zone.file"; };
 zone "2ndpub.com" { type master; notify no; file "null.zone.file"; };
 zone "2ndscreensociety.com" { type master; notify no; file "null.zone.file"; };
 zone "2nell.com" { type master; notify no; file "null.zone.file"; };
+zone "2no.co" { type master; notify no; file "null.zone.file"; };
 zone "2pjcza.db.files.1drv.com" { type master; notify no; file "null.zone.file"; };
 zone "2q1wea3rdsf.000webhostapp.com" { type master; notify no; file "null.zone.file"; };
 zone "2q3w.com" { type master; notify no; file "null.zone.file"; };
@@ -641,8 +641,6 @@ zone "3.spacepel.com" { type master; notify no; file "null.zone.file"; };
 zone "3.top4top.net" { type master; notify no; file "null.zone.file"; };
 zone "3.u0135364.z8.ru" { type master; notify no; file "null.zone.file"; };
 zone "3.unplugrevolution.com" { type master; notify no; file "null.zone.file"; };
-zone "3.zhzy999.net" { type master; notify no; file "null.zone.file"; };
-zone "3.zhzy999.net3.zhzy999.net" { type master; notify no; file "null.zone.file"; };
 zone "30-by-30.com" { type master; notify no; file "null.zone.file"; };
 zone "3000adaydomainer.com" { type master; notify no; file "null.zone.file"; };
 zone "300miliardialberi.eu" { type master; notify no; file "null.zone.file"; };
@@ -950,7 +948,6 @@ zone "4wereareyou.icu" { type master; notify no; file "null.zone.file"; };
 zone "4you.by" { type master; notify no; file "null.zone.file"; };
 zone "5-shampurov.ru" { type master; notify no; file "null.zone.file"; };
 zone "5.fjwt1.crsky.com" { type master; notify no; file "null.zone.file"; };
-zone "5.top4top.io" { type master; notify no; file "null.zone.file"; };
 zone "5.u0148466.z8.ru" { type master; notify no; file "null.zone.file"; };
 zone "5.unplugrevolution.com" { type master; notify no; file "null.zone.file"; };
 zone "5003.arentuspecial.com" { type master; notify no; file "null.zone.file"; };
@@ -1303,7 +1300,6 @@ zone "966.basinbultenigonderimi.com" { type master; notify no; file "null.zone.f
 zone "97762.prohoster.biz" { type master; notify no; file "null.zone.file"; };
 zone "9796360.com" { type master; notify no; file "null.zone.file"; };
 zone "97world.com" { type master; notify no; file "null.zone.file"; };
-zone "98.ip-51-91-254.eu" { type master; notify no; file "null.zone.file"; };
 zone "981775.com" { type master; notify no; file "null.zone.file"; };
 zone "988f5c12.ngrok.io" { type master; notify no; file "null.zone.file"; };
 zone "988sconline.com" { type master; notify no; file "null.zone.file"; };
@@ -2199,6 +2195,7 @@ zone "adams-moore.com" { type master; notify no; file "null.zone.file"; };
 zone "adamshop24.de" { type master; notify no; file "null.zone.file"; };
 zone "adamsm.co.za" { type master; notify no; file "null.zone.file"; };
 zone "adamsphotography.com.au" { type master; notify no; file "null.zone.file"; };
+zone "adamtcarruthers.com" { type master; notify no; file "null.zone.file"; };
 zone "adamthelawyer.com" { type master; notify no; file "null.zone.file"; };
 zone "adamwilt15.com" { type master; notify no; file "null.zone.file"; };
 zone "adan-hospital.com" { type master; notify no; file "null.zone.file"; };
@@ -2619,6 +2616,7 @@ zone "affordsolartech.com" { type master; notify no; file "null.zone.file"; };
 zone "affpp.ru" { type master; notify no; file "null.zone.file"; };
 zone "affyboomy.ga" { type master; notify no; file "null.zone.file"; };
 zone "afgeartechnology.com.mx" { type master; notify no; file "null.zone.file"; };
+zone "afges.org" { type master; notify no; file "null.zone.file"; };
 zone "afghanbazarrugs.com" { type master; notify no; file "null.zone.file"; };
 zone "afghanistanpolicy.com" { type master; notify no; file "null.zone.file"; };
 zone "afgsjkhaljfghadfje.ga" { type master; notify no; file "null.zone.file"; };
@@ -2658,7 +2656,6 @@ zone "africaanalytics.tristargl.com" { type master; notify no; file "null.zone.f
 zone "africabluewebs.co.ke" { type master; notify no; file "null.zone.file"; };
 zone "africabootcampacademy.influencetec.net" { type master; notify no; file "null.zone.file"; };
 zone "africahousingawards.com" { type master; notify no; file "null.zone.file"; };
-zone "africainnovates.org" { type master; notify no; file "null.zone.file"; };
 zone "africamarket.shop" { type master; notify no; file "null.zone.file"; };
 zone "africamissions.ca" { type master; notify no; file "null.zone.file"; };
 zone "african-trips.com" { type master; notify no; file "null.zone.file"; };
@@ -2861,6 +2858,7 @@ zone "agnieszkarojek.cba.pl" { type master; notify no; file "null.zone.file"; };
 zone "agoam.bid" { type master; notify no; file "null.zone.file"; };
 zone "agodatex.ga" { type master; notify no; file "null.zone.file"; };
 zone "agogpharrna.com" { type master; notify no; file "null.zone.file"; };
+zone "agorae.afges.org" { type master; notify no; file "null.zone.file"; };
 zone "agoralbe.com" { type master; notify no; file "null.zone.file"; };
 zone "agorapro.com.co" { type master; notify no; file "null.zone.file"; };
 zone "agorlu02.azurewebsites.net" { type master; notify no; file "null.zone.file"; };
@@ -3059,7 +3057,6 @@ zone "aigavicenza.it" { type master; notify no; file "null.zone.file"; };
 zone "aigforms.myap.co.za" { type master; notify no; file "null.zone.file"; };
 zone "aiglemovies.com" { type master; notify no; file "null.zone.file"; };
 zone "aihealth.vn" { type master; notify no; file "null.zone.file"; };
-zone "aiiaiafrzrueuedur.ru" { type master; notify no; file "null.zone.file"; };
 zone "aiineh.com" { type master; notify no; file "null.zone.file"; };
 zone "aiit.ahbys.com" { type master; notify no; file "null.zone.file"; };
 zone "aijdjy.com" { type master; notify no; file "null.zone.file"; };
@@ -3128,7 +3125,6 @@ zone "airgc.in" { type master; notify no; file "null.zone.file"; };
 zone "airinovasi-indonesia.com" { type master; notify no; file "null.zone.file"; };
 zone "airisu-syumikonparty.com" { type master; notify no; file "null.zone.file"; };
 zone "airlife.bget.ru" { type master; notify no; file "null.zone.file"; };
-zone "airliness.info" { type master; notify no; file "null.zone.file"; };
 zone "airlinkcpl.net" { type master; notify no; file "null.zone.file"; };
 zone "airmaildata.com" { type master; notify no; file "null.zone.file"; };
 zone "airmanship.nl" { type master; notify no; file "null.zone.file"; };
@@ -3273,6 +3269,7 @@ zone "akdkart.com" { type master; notify no; file "null.zone.file"; };
 zone "akekartela.com" { type master; notify no; file "null.zone.file"; };
 zone "akeswari.org" { type master; notify no; file "null.zone.file"; };
 zone "akfoundationbd.xyz" { type master; notify no; file "null.zone.file"; };
+zone "akg-eng.net" { type master; notify no; file "null.zone.file"; };
 zone "akgemc.com" { type master; notify no; file "null.zone.file"; };
 zone "akgiyimtekstil.com" { type master; notify no; file "null.zone.file"; };
 zone "akh.ge" { type master; notify no; file "null.zone.file"; };
@@ -3462,6 +3459,7 @@ zone "alberguetaull.com" { type master; notify no; file "null.zone.file"; };
 zone "alberolandia.it" { type master; notify no; file "null.zone.file"; };
 zone "albert.playground.mostar.id" { type master; notify no; file "null.zone.file"; };
 zone "albertaalliance.ca" { type master; notify no; file "null.zone.file"; };
+zone "albertabeef.ca" { type master; notify no; file "null.zone.file"; };
 zone "albertacareers.com" { type master; notify no; file "null.zone.file"; };
 zone "albertandyork.com" { type master; notify no; file "null.zone.file"; };
 zone "albertgrafica.com.br" { type master; notify no; file "null.zone.file"; };
@@ -5537,6 +5535,7 @@ zone "ara4konkatu.info" { type master; notify no; file "null.zone.file"; };
 zone "araba.alabama-marketing.com" { type master; notify no; file "null.zone.file"; };
 zone "arabaresmi.com" { type master; notify no; file "null.zone.file"; };
 zone "arabcb.org" { type master; notify no; file "null.zone.file"; };
+zone "arabcoegypt.com" { type master; notify no; file "null.zone.file"; };
 zone "arabdubaisafari.com" { type master; notify no; file "null.zone.file"; };
 zone "arabianbrother.com" { type master; notify no; file "null.zone.file"; };
 zone "arabiantongue.net" { type master; notify no; file "null.zone.file"; };
@@ -5848,6 +5847,7 @@ zone "arkifield.com" { type master; notify no; file "null.zone.file"; };
 zone "arkist.ist" { type master; notify no; file "null.zone.file"; };
 zone "arkiv.lillehammerartmuseum.com" { type master; notify no; file "null.zone.file"; };
 zone "arkonziv.com" { type master; notify no; file "null.zone.file"; };
+zone "arkshine.com" { type master; notify no; file "null.zone.file"; };
 zone "arksoft.in" { type master; notify no; file "null.zone.file"; };
 zone "arkworkspace.com" { type master; notify no; file "null.zone.file"; };
 zone "arkyreyma.com" { type master; notify no; file "null.zone.file"; };
@@ -6387,6 +6387,7 @@ zone "askibinyuk.myjino.ru" { type master; notify no; file "null.zone.file"; };
 zone "askingpricerealty.com" { type master; notify no; file "null.zone.file"; };
 zone "askjhdaskdhshjfhf.ru" { type master; notify no; file "null.zone.file"; };
 zone "asklaizmir.com.tr" { type master; notify no; file "null.zone.file"; };
+zone "askmufti.org" { type master; notify no; file "null.zone.file"; };
 zone "askom-service.kz" { type master; notify no; file "null.zone.file"; };
 zone "asksuze.com" { type master; notify no; file "null.zone.file"; };
 zone "askthemadpoet.net" { type master; notify no; file "null.zone.file"; };
@@ -7006,7 +7007,6 @@ zone "autodavid.hr" { type master; notify no; file "null.zone.file"; };
 zone "autodetali-161.ru" { type master; notify no; file "null.zone.file"; };
 zone "autodevices.topterra.ru" { type master; notify no; file "null.zone.file"; };
 zone "autodrim.pl" { type master; notify no; file "null.zone.file"; };
-zone "autodwg.com" { type master; notify no; file "null.zone.file"; };
 zone "autoecole-hammamet.tn" { type master; notify no; file "null.zone.file"; };
 zone "autoecole.inchtechs.com" { type master; notify no; file "null.zone.file"; };
 zone "autoecolehophophop.com" { type master; notify no; file "null.zone.file"; };
@@ -7190,7 +7190,6 @@ zone "avenue5.co.in.cp-in-10.webhostbox.net" { type master; notify no; file "nul
 zone "avenzis.nl" { type master; notify no; file "null.zone.file"; };
 zone "averefiducia.com" { type master; notify no; file "null.zone.file"; };
 zone "averfoodrs.eu" { type master; notify no; file "null.zone.file"; };
-zone "averin.pro" { type master; notify no; file "null.zone.file"; };
 zone "averson.by" { type master; notify no; file "null.zone.file"; };
 zone "averybit.com" { type master; notify no; file "null.zone.file"; };
 zone "aveslor.com" { type master; notify no; file "null.zone.file"; };
@@ -7401,6 +7400,7 @@ zone "aydinmete.com.tr" { type master; notify no; file "null.zone.file"; };
 zone "aydinvps.com" { type master; notify no; file "null.zone.file"; };
 zone "aydosyazilim.com" { type master; notify no; file "null.zone.file"; };
 zone "ayecargo.com" { type master; notify no; file "null.zone.file"; };
+zone "ayefin.com" { type master; notify no; file "null.zone.file"; };
 zone "ayeletbenyosef.co.il" { type master; notify no; file "null.zone.file"; };
 zone "ayerstechnology.com" { type master; notify no; file "null.zone.file"; };
 zone "ayeshashoukat.com" { type master; notify no; file "null.zone.file"; };
@@ -7654,7 +7654,6 @@ zone "babystep.biz" { type master; notify no; file "null.zone.file"; };
 zone "babysteps.ge" { type master; notify no; file "null.zone.file"; };
 zone "babyvogel.nl" { type master; notify no; file "null.zone.file"; };
 zone "babzon.club" { type master; notify no; file "null.zone.file"; };
-zone "bac.edu.my" { type master; notify no; file "null.zone.file"; };
 zone "bacamanect.com" { type master; notify no; file "null.zone.file"; };
 zone "baccaosutritue.vn" { type master; notify no; file "null.zone.file"; };
 zone "baceldeniz.com" { type master; notify no; file "null.zone.file"; };
@@ -7685,6 +7684,7 @@ zone "backpage-inc.com" { type master; notify no; file "null.zone.file"; };
 zone "backpinging.com" { type master; notify no; file "null.zone.file"; };
 zone "backselfconfidence.xyz" { type master; notify no; file "null.zone.file"; };
 zone "backstage-secrets.com" { type master; notify no; file "null.zone.file"; };
+zone "backthenstuff.com" { type master; notify no; file "null.zone.file"; };
 zone "backup-new.5kmdeal.my" { type master; notify no; file "null.zone.file"; };
 zone "backup.goooogle.us" { type master; notify no; file "null.zone.file"; };
 zone "backup.litcel.com" { type master; notify no; file "null.zone.file"; };
@@ -8503,6 +8503,7 @@ zone "beachcondolife.tk" { type master; notify no; file "null.zone.file"; };
 zone "beachview.co.za" { type master; notify no; file "null.zone.file"; };
 zone "beachvillas.gr" { type master; notify no; file "null.zone.file"; };
 zone "beachwoodproperty.com.au" { type master; notify no; file "null.zone.file"; };
+zone "beaconacademy.net" { type master; notify no; file "null.zone.file"; };
 zone "beaconhousediscovery.com" { type master; notify no; file "null.zone.file"; };
 zone "beaconr.rungta.ac.in" { type master; notify no; file "null.zone.file"; };
 zone "beactivedigital.com" { type master; notify no; file "null.zone.file"; };
@@ -8524,6 +8525,7 @@ zone "bearholdings.co" { type master; notify no; file "null.zone.file"; };
 zone "bearingspecs.com" { type master; notify no; file "null.zone.file"; };
 zone "bearinmindstrategies.com" { type master; notify no; file "null.zone.file"; };
 zone "bearriverhealth.org" { type master; notify no; file "null.zone.file"; };
+zone "bearsselection.xyz" { type master; notify no; file "null.zone.file"; };
 zone "beaskyshanoi.com" { type master; notify no; file "null.zone.file"; };
 zone "beastmas.club" { type master; notify no; file "null.zone.file"; };
 zone "beat.vision" { type master; notify no; file "null.zone.file"; };
@@ -9400,7 +9402,6 @@ zone "bigdealist.com" { type master; notify no; file "null.zone.file"; };
 zone "bigdev.top" { type master; notify no; file "null.zone.file"; };
 zone "bigdiamondeals.com" { type master; notify no; file "null.zone.file"; };
 zone "bigeyes.com.tw" { type master; notify no; file "null.zone.file"; };
-zone "bigfile.mail.naver.com" { type master; notify no; file "null.zone.file"; };
 zone "bigfishchain.com" { type master; notify no; file "null.zone.file"; };
 zone "bigfoothospitality.com" { type master; notify no; file "null.zone.file"; };
 zone "bigg-live.com" { type master; notify no; file "null.zone.file"; };
@@ -9427,7 +9428,6 @@ zone "bigssearch.com" { type master; notify no; file "null.zone.file"; };
 zone "bigstudio.photo" { type master; notify no; file "null.zone.file"; };
 zone "bigsunshinebooks.com" { type master; notify no; file "null.zone.file"; };
 zone "bigtech24.de" { type master; notify no; file "null.zone.file"; };
-zone "bigtext.club" { type master; notify no; file "null.zone.file"; };
 zone "bigtrading.ga" { type master; notify no; file "null.zone.file"; };
 zone "bigtvjoblist.com" { type master; notify no; file "null.zone.file"; };
 zone "biguwh.com" { type master; notify no; file "null.zone.file"; };
@@ -9576,6 +9576,7 @@ zone "binmsk.ru" { type master; notify no; file "null.zone.file"; };
 zone "binnayem.com" { type master; notify no; file "null.zone.file"; };
 zone "binoculars-shop.ru" { type master; notify no; file "null.zone.file"; };
 zone "binom-perm.cf" { type master; notify no; file "null.zone.file"; };
+zone "binsuloomgroup.com" { type master; notify no; file "null.zone.file"; };
 zone "binta.xyz" { type master; notify no; file "null.zone.file"; };
 zone "bintangbarutama.co.id" { type master; notify no; file "null.zone.file"; };
 zone "bintec.pe" { type master; notify no; file "null.zone.file"; };
@@ -9756,7 +9757,6 @@ zone "biyunhui.com" { type master; notify no; file "null.zone.file"; };
 zone "biz-shop.pro" { type master; notify no; file "null.zone.file"; };
 zone "biz.creationcabin.com" { type master; notify no; file "null.zone.file"; };
 zone "bizajans.com" { type master; notify no; file "null.zone.file"; };
-zone "bizasiatrading.com" { type master; notify no; file "null.zone.file"; };
 zone "bizbhutanevents.com" { type master; notify no; file "null.zone.file"; };
 zone "bizbuilder.co.za" { type master; notify no; file "null.zone.file"; };
 zone "bizcodedigital.in" { type master; notify no; file "null.zone.file"; };
@@ -10412,7 +10412,6 @@ zone "bloodybits.com" { type master; notify no; file "null.zone.file"; };
 zone "bloombrainz.com" { type master; notify no; file "null.zone.file"; };
 zone "bloomcommunityproject.org" { type master; notify no; file "null.zone.file"; };
 zone "bloomestatelitigation.ca" { type master; notify no; file "null.zone.file"; };
-zone "bloomfire.com" { type master; notify no; file "null.zone.file"; };
 zone "bloomflores.com" { type master; notify no; file "null.zone.file"; };
 zone "bloomhomes.in" { type master; notify no; file "null.zone.file"; };
 zone "bloomingbridal.com.au" { type master; notify no; file "null.zone.file"; };
@@ -11190,6 +11189,7 @@ zone "breathtakerstours.com" { type master; notify no; file "null.zone.file"; };
 zone "breazytrans.com" { type master; notify no; file "null.zone.file"; };
 zone "breccioneserrande.com" { type master; notify no; file "null.zone.file"; };
 zone "brechovip.com.br" { type master; notify no; file "null.zone.file"; };
+zone "breda.com" { type master; notify no; file "null.zone.file"; };
 zone "breebaart.net" { type master; notify no; file "null.zone.file"; };
 zone "breed.wanttobea.com" { type master; notify no; file "null.zone.file"; };
 zone "breedencomm.com" { type master; notify no; file "null.zone.file"; };
@@ -11322,6 +11322,7 @@ zone "brittanyschoice.com" { type master; notify no; file "null.zone.file"; };
 zone "britwind.tk" { type master; notify no; file "null.zone.file"; };
 zone "brixxsites.com" { type master; notify no; file "null.zone.file"; };
 zone "brizboy.com" { type master; notify no; file "null.zone.file"; };
+zone "briztechnologies.com" { type master; notify no; file "null.zone.file"; };
 zone "brj.sitedevlink.com" { type master; notify no; file "null.zone.file"; };
 zone "brjsrwaco.watchdogdns.duckdns.org" { type master; notify no; file "null.zone.file"; };
 zone "brkcakiroglu.com" { type master; notify no; file "null.zone.file"; };
@@ -12269,6 +12270,7 @@ zone "camlikkamping.com" { type master; notify no; file "null.zone.file"; };
 zone "camnangtrithuc.com" { type master; notify no; file "null.zone.file"; };
 zone "campagnesms.info" { type master; notify no; file "null.zone.file"; };
 zone "campaigns.actionable-science.com" { type master; notify no; file "null.zone.file"; };
+zone "campana20gb.com" { type master; notify no; file "null.zone.file"; };
 zone "campanus.cz" { type master; notify no; file "null.zone.file"; };
 zone "campbellcheesegrocerybk.com" { type master; notify no; file "null.zone.file"; };
 zone "campbellsbay.school.nz" { type master; notify no; file "null.zone.file"; };
@@ -12955,6 +12957,7 @@ zone "cavalluindistella.com" { type master; notify no; file "null.zone.file"; };
 zone "cavanasipontum.ru" { type master; notify no; file "null.zone.file"; };
 zone "cavancameroon.com" { type master; notify no; file "null.zone.file"; };
 zone "cavaticus.com" { type master; notify no; file "null.zone.file"; };
+zone "caveaudelteatro.it" { type master; notify no; file "null.zone.file"; };
 zone "caveaulechapeau.ch" { type master; notify no; file "null.zone.file"; };
 zone "cavedimarmocarrara.com" { type master; notify no; file "null.zone.file"; };
 zone "cavefashion.com" { type master; notify no; file "null.zone.file"; };
@@ -13713,7 +13716,6 @@ zone "cheaperlounge.com" { type master; notify no; file "null.zone.file"; };
 zone "cheapesthost.com.ng" { type master; notify no; file "null.zone.file"; };
 zone "cheapgadgets-gq.000webhostapp.com" { type master; notify no; file "null.zone.file"; };
 zone "cheapmlbjerseysmarlins.com" { type master; notify no; file "null.zone.file"; };
-zone "cheapmusic.info" { type master; notify no; file "null.zone.file"; };
 zone "cheapnikeairmaxshoes-online.com" { type master; notify no; file "null.zone.file"; };
 zone "cheapoakleysunglasses.net" { type master; notify no; file "null.zone.file"; };
 zone "cheappigeontraps.com" { type master; notify no; file "null.zone.file"; };
@@ -14489,6 +14491,7 @@ zone "clcindy.com" { type master; notify no; file "null.zone.file"; };
 zone "cld-net.com" { type master; notify no; file "null.zone.file"; };
 zone "cld.persiangig.com" { type master; notify no; file "null.zone.file"; };
 zone "cld.pt" { type master; notify no; file "null.zone.file"; };
+zone "cle.ae" { type master; notify no; file "null.zone.file"; };
 zone "clean.crypt24.in" { type master; notify no; file "null.zone.file"; };
 zone "clean.olexandry.ru" { type master; notify no; file "null.zone.file"; };
 zone "clean.vanzherke.ru" { type master; notify no; file "null.zone.file"; };
@@ -14782,7 +14785,6 @@ zone "cmdaitexpo.com" { type master; notify no; file "null.zone.file"; };
 zone "cmdez.ir" { type master; notify no; file "null.zone.file"; };
 zone "cmdou.com" { type master; notify no; file "null.zone.file"; };
 zone "cmeaststar.de" { type master; notify no; file "null.zone.file"; };
-zone "cmg.asia" { type master; notify no; file "null.zone.file"; };
 zone "cmgroup.com.ua" { type master; notify no; file "null.zone.file"; };
 zone "cmhighschool.edu.bd" { type master; notify no; file "null.zone.file"; };
 zone "cmhmfgoutbound.protection.sketchwefair-watduoliprudential.com.watchdogdns.duckdns.org" { type master; notify no; file "null.zone.file"; };
@@ -15325,7 +15327,6 @@ zone "completervnc.com" { type master; notify no; file "null.zone.file"; };
 zone "compliancewing.com" { type master; notify no; file "null.zone.file"; };
 zone "complience.com" { type master; notify no; file "null.zone.file"; };
 zone "compln.net" { type master; notify no; file "null.zone.file"; };
-zone "components.technologymindz.com" { type master; notify no; file "null.zone.file"; };
 zone "composecv.com" { type master; notify no; file "null.zone.file"; };
 zone "composite.be" { type master; notify no; file "null.zone.file"; };
 zone "compoundy.com" { type master; notify no; file "null.zone.file"; };
@@ -15797,6 +15798,7 @@ zone "cordondating.xyz" { type master; notify no; file "null.zone.file"; };
 zone "cordulaklein.de" { type master; notify no; file "null.zone.file"; };
 zone "cordwells.com.au" { type master; notify no; file "null.zone.file"; };
 zone "cordythaiproducts.com" { type master; notify no; file "null.zone.file"; };
+zone "core-tech.com" { type master; notify no; file "null.zone.file"; };
 zone "core.org.af" { type master; notify no; file "null.zone.file"; };
 zone "corebodybrand.com" { type master; notify no; file "null.zone.file"; };
 zone "corehealingmassage.com" { type master; notify no; file "null.zone.file"; };
@@ -16863,7 +16865,6 @@ zone "cysis.cl" { type master; notify no; file "null.zone.file"; };
 zone "cysyonetim.com" { type master; notify no; file "null.zone.file"; };
 zone "cytecgroup.co.za" { type master; notify no; file "null.zone.file"; };
 zone "cytf.coloradotennis.org" { type master; notify no; file "null.zone.file"; };
-zone "cythia0805.com" { type master; notify no; file "null.zone.file"; };
 zone "cythromatt.com" { type master; notify no; file "null.zone.file"; };
 zone "cytotan.website" { type master; notify no; file "null.zone.file"; };
 zone "cytotec-tabs.com" { type master; notify no; file "null.zone.file"; };
@@ -17688,6 +17689,7 @@ zone "ddl7.data.hu" { type master; notify no; file "null.zone.file"; };
 zone "ddmadrasah.com" { type master; notify no; file "null.zone.file"; };
 zone "ddraiggoch.co.uk" { type master; notify no; file "null.zone.file"; };
 zone "ddrcsangrur.com" { type master; notify no; file "null.zone.file"; };
+zone "ddreciclaje.com" { type master; notify no; file "null.zone.file"; };
 zone "dds.com.mx" { type master; notify no; file "null.zone.file"; };
 zone "ddsandesh.com" { type master; notify no; file "null.zone.file"; };
 zone "ddsolutions.pl" { type master; notify no; file "null.zone.file"; };
@@ -18817,7 +18819,6 @@ zone "dewabarbeque.com" { type master; notify no; file "null.zone.file"; };
 zone "dewakartu.info" { type master; notify no; file "null.zone.file"; };
 zone "dewalhoeve.nl" { type master; notify no; file "null.zone.file"; };
 zone "dewapisang.com" { type master; notify no; file "null.zone.file"; };
-zone "dewarejeki.info" { type master; notify no; file "null.zone.file"; };
 zone "dewarejeki.link" { type master; notify no; file "null.zone.file"; };
 zone "dewibebaris.com" { type master; notify no; file "null.zone.file"; };
 zone "dewide.com.br" { type master; notify no; file "null.zone.file"; };
@@ -18847,7 +18848,6 @@ zone "dfafreezeclan.com" { type master; notify no; file "null.zone.file"; };
 zone "dfc33.xyz" { type master; notify no; file "null.zone.file"; };
 zone "dfcf.91756.cn" { type master; notify no; file "null.zone.file"; };
 zone "dfcvbrtwe.ug" { type master; notify no; file "null.zone.file"; };
-zone "dfd.zhzy999.net" { type master; notify no; file "null.zone.file"; };
 zone "dfddfg4df.ru" { type master; notify no; file "null.zone.file"; };
 zone "dffdds.club" { type master; notify no; file "null.zone.file"; };
 zone "dffieo8ieo0380ieovsddsdff89r309ieo89334.com" { type master; notify no; file "null.zone.file"; };
@@ -19806,9 +19806,6 @@ zone "dobro.co.ua" { type master; notify no; file "null.zone.file"; };
 zone "dobrojutrodjevojke.com" { type master; notify no; file "null.zone.file"; };
 zone "dobroviz.com.ua" { type master; notify no; file "null.zone.file"; };
 zone "dobrovorot.su" { type master; notify no; file "null.zone.file"; };
-zone "doc-04-cc-docs.googleusercontent.com" { type master; notify no; file "null.zone.file"; };
-zone "doc-08-5o-docs.googleusercontent.com" { type master; notify no; file "null.zone.file"; };
-zone "doc-0s-c8-docs.googleusercontent.com" { type master; notify no; file "null.zone.file"; };
 zone "doc-hub.healthycheapfast.com" { type master; notify no; file "null.zone.file"; };
 zone "doc-japan.com" { type master; notify no; file "null.zone.file"; };
 zone "doc.albaspizzaastoria.com" { type master; notify no; file "null.zone.file"; };
@@ -20222,7 +20219,6 @@ zone "dosti.webdesignhd.nl" { type master; notify no; file "null.zone.file"; };
 zone "dosttours.com" { type master; notify no; file "null.zone.file"; };
 zone "dosya.tc" { type master; notify no; file "null.zone.file"; };
 zone "dosyproperties.info" { type master; notify no; file "null.zone.file"; };
-zone "dot.state.mn.us" { type master; notify no; file "null.zone.file"; };
 zone "dota2-down.club" { type master; notify no; file "null.zone.file"; };
 zone "dota2-down.site" { type master; notify no; file "null.zone.file"; };
 zone "dotactive.com.au" { type master; notify no; file "null.zone.file"; };
@@ -20429,7 +20425,6 @@ zone "dpa.atos-nao.net" { type master; notify no; file "null.zone.file"; };
 zone "dpack365-my.sharepoint.com" { type master; notify no; file "null.zone.file"; };
 zone "dpacorp.org" { type master; notify no; file "null.zone.file"; };
 zone "dparmm1.wci.com.ph" { type master; notify no; file "null.zone.file"; };
-zone "dpaste.com" { type master; notify no; file "null.zone.file"; };
 zone "dpbh.info" { type master; notify no; file "null.zone.file"; };
 zone "dpbusinessportal.ro" { type master; notify no; file "null.zone.file"; };
 zone "dpe.com.tw" { type master; notify no; file "null.zone.file"; };
@@ -20580,6 +20575,7 @@ zone "dreamlife.com.br" { type master; notify no; file "null.zone.file"; };
 zone "dreamluxuryhairco.com" { type master; notify no; file "null.zone.file"; };
 zone "dreammakerselitefitness.com" { type master; notify no; file "null.zone.file"; };
 zone "dreammaster-uae.com" { type master; notify no; file "null.zone.file"; };
+zone "dreammergeconsult.com" { type master; notify no; file "null.zone.file"; };
 zone "dreammotokolkata.com" { type master; notify no; file "null.zone.file"; };
 zone "dreams-innovations.com" { type master; notify no; file "null.zone.file"; };
 zone "dreamsfashion.com.vn" { type master; notify no; file "null.zone.file"; };
@@ -21570,6 +21566,7 @@ zone "ecity.network" { type master; notify no; file "null.zone.file"; };
 zone "ecitytanduclongan.com" { type master; notify no; file "null.zone.file"; };
 zone "eckdor.de" { type master; notify no; file "null.zone.file"; };
 zone "ecker.aidnet.at" { type master; notify no; file "null.zone.file"; };
+zone "ecklund.no" { type master; notify no; file "null.zone.file"; };
 zone "eclairesuits.com" { type master; notify no; file "null.zone.file"; };
 zone "eclatpro.com" { type master; notify no; file "null.zone.file"; };
 zone "eclecticelectronics.net" { type master; notify no; file "null.zone.file"; };
@@ -22025,6 +22022,7 @@ zone "eitchendie.com" { type master; notify no; file "null.zone.file"; };
 zone "eitworld.com" { type master; notify no; file "null.zone.file"; };
 zone "eiuh9r8fhr98fh.top" { type master; notify no; file "null.zone.file"; };
 zone "eiuwowqwpeoeirwpei.com" { type master; notify no; file "null.zone.file"; };
+zone "ejadarabia.com" { type master; notify no; file "null.zone.file"; };
 zone "ejadvertising.com" { type master; notify no; file "null.zone.file"; };
 zone "ejanlele.design" { type master; notify no; file "null.zone.file"; };
 zone "ejdelapena.com" { type master; notify no; file "null.zone.file"; };
@@ -22247,6 +22245,7 @@ zone "elevatedigitalma.com" { type master; notify no; file "null.zone.file"; };
 zone "elevateducation.agreatidea.studio" { type master; notify no; file "null.zone.file"; };
 zone "elevationshairboutique.com" { type master; notify no; file "null.zone.file"; };
 zone "elevatorbracket.com" { type master; notify no; file "null.zone.file"; };
+zone "elevennevele.com" { type master; notify no; file "null.zone.file"; };
 zone "eleventhcapital.com" { type master; notify no; file "null.zone.file"; };
 zone "elevituc.vn" { type master; notify no; file "null.zone.file"; };
 zone "elezioni-oggi.it" { type master; notify no; file "null.zone.file"; };
@@ -23562,7 +23561,6 @@ zone "etwowsharing.com" { type master; notify no; file "null.zone.file"; };
 zone "etxse.xyz" { type master; notify no; file "null.zone.file"; };
 zone "eu-easy.com" { type master; notify no; file "null.zone.file"; };
 zone "eu.wildfire.paloaltonetworks.com" { type master; notify no; file "null.zone.file"; };
-zone "eu1.salesforce.com" { type master; notify no; file "null.zone.file"; };
 zone "eu283iwoqodjspqisjdf.com" { type master; notify no; file "null.zone.file"; };
 zone "eu5-cdn.devid.info" { type master; notify no; file "null.zone.file"; };
 zone "eubankphoto.com" { type master; notify no; file "null.zone.file"; };
@@ -24012,6 +24010,7 @@ zone "exportaly.com" { type master; notify no; file "null.zone.file"; };
 zone "exportcommunity.in" { type master; notify no; file "null.zone.file"; };
 zone "exportef.info" { type master; notify no; file "null.zone.file"; };
 zone "exposicaoceramicaearte.com.br" { type master; notify no; file "null.zone.file"; };
+zone "exposvision.com" { type master; notify no; file "null.zone.file"; };
 zone "expovitrinadelvalle.com" { type master; notify no; file "null.zone.file"; };
 zone "expresi.club" { type master; notify no; file "null.zone.file"; };
 zone "expresodeportivo.com" { type master; notify no; file "null.zone.file"; };
@@ -25081,6 +25080,7 @@ zone "file2yu.com" { type master; notify no; file "null.zone.file"; };
 zone "file546456.com" { type master; notify no; file "null.zone.file"; };
 zone "filebase.duckdns.org" { type master; notify no; file "null.zone.file"; };
 zone "filebase.mogelgott.de" { type master; notify no; file "null.zone.file"; };
+zone "filebin.net" { type master; notify no; file "null.zone.file"; };
 zone "filebox.hiworks.com" { type master; notify no; file "null.zone.file"; };
 zone "filebr.com" { type master; notify no; file "null.zone.file"; };
 zone "fileco.jobkorea.co.kr" { type master; notify no; file "null.zone.file"; };
@@ -25912,7 +25912,6 @@ zone "forex4pips.com" { type master; notify no; file "null.zone.file"; };
 zone "forexaddictt.com" { type master; notify no; file "null.zone.file"; };
 zone "forexbrokeracademy.com" { type master; notify no; file "null.zone.file"; };
 zone "forexpedia.tradewithrobbie.com" { type master; notify no; file "null.zone.file"; };
-zone "forexpf.ru" { type master; notify no; file "null.zone.file"; };
 zone "forexproservice.com" { type master; notify no; file "null.zone.file"; };
 zone "forexrobot.youralgo.com" { type master; notify no; file "null.zone.file"; };
 zone "forextradingfrx.org" { type master; notify no; file "null.zone.file"; };
@@ -28373,6 +28372,7 @@ zone "goitsoluciones.com" { type master; notify no; file "null.zone.file"; };
 zone "goji-actives.net" { type master; notify no; file "null.zone.file"; };
 zone "gojukai.co" { type master; notify no; file "null.zone.file"; };
 zone "gokceozagar.com" { type master; notify no; file "null.zone.file"; };
+zone "goker.com.tr" { type master; notify no; file "null.zone.file"; };
 zone "gokhancakmak.com.tr" { type master; notify no; file "null.zone.file"; };
 zone "gokjerijk.nl" { type master; notify no; file "null.zone.file"; };
 zone "gokkastennl.com" { type master; notify no; file "null.zone.file"; };
@@ -28668,7 +28668,6 @@ zone "goudu.club" { type master; notify no; file "null.zone.file"; };
 zone "gourmandd.com" { type master; notify no; file "null.zone.file"; };
 zone "gourmetlab.pe" { type master; notify no; file "null.zone.file"; };
 zone "gourmetreats.in" { type master; notify no; file "null.zone.file"; };
-zone "gov.kr" { type master; notify no; file "null.zone.file"; };
 zone "gov.rsmart-testsolutions.watchdogdns.duckdns.org" { type master; notify no; file "null.zone.file"; };
 zone "govche.in" { type master; notify no; file "null.zone.file"; };
 zone "goveboatclub.com.au" { type master; notify no; file "null.zone.file"; };
@@ -29185,7 +29184,6 @@ zone "grupocrecer.org" { type master; notify no; file "null.zone.file"; };
 zone "grupodpi.pe" { type master; notify no; file "null.zone.file"; };
 zone "grupodreyer.com" { type master; notify no; file "null.zone.file"; };
 zone "grupoembatec.com" { type master; notify no; file "null.zone.file"; };
-zone "grupoeq.com" { type master; notify no; file "null.zone.file"; };
 zone "grupoesparta.com.ve" { type master; notify no; file "null.zone.file"; };
 zone "grupofabiamce.com.br" { type master; notify no; file "null.zone.file"; };
 zone "grupofischermineracao.com.br" { type master; notify no; file "null.zone.file"; };
@@ -29195,6 +29193,7 @@ zone "grupoiesp.tk" { type master; notify no; file "null.zone.file"; };
 zone "grupoinalen.com" { type master; notify no; file "null.zone.file"; };
 zone "grupoinfonet.com" { type master; notify no; file "null.zone.file"; };
 zone "grupojg.com.br" { type master; notify no; file "null.zone.file"; };
+zone "grupolainmaculada.com" { type master; notify no; file "null.zone.file"; };
 zone "grupolaplace.com.br" { type master; notify no; file "null.zone.file"; };
 zone "grupoloang.com" { type master; notify no; file "null.zone.file"; };
 zone "grupolorena.com.sv" { type master; notify no; file "null.zone.file"; };
@@ -29293,6 +29292,7 @@ zone "gthtech.com" { type master; notify no; file "null.zone.file"; };
 zone "gtidae.com.pl" { type master; notify no; file "null.zone.file"; };
 zone "gtim.agency" { type master; notify no; file "null.zone.file"; };
 zone "gtiperu.com" { type master; notify no; file "null.zone.file"; };
+zone "gtm-au.com" { type master; notify no; file "null.zone.file"; };
 zone "gtminas.com.br" { type master; notify no; file "null.zone.file"; };
 zone "gtnaidu.com" { type master; notify no; file "null.zone.file"; };
 zone "gtomeconquista.com" { type master; notify no; file "null.zone.file"; };
@@ -29556,6 +29556,7 @@ zone "h-surgeon.info" { type master; notify no; file "null.zone.file"; };
 zone "h-w-c.net" { type master; notify no; file "null.zone.file"; };
 zone "h.eurotrading.com.pl" { type master; notify no; file "null.zone.file"; };
 zone "h.j990981.ru" { type master; notify no; file "null.zone.file"; };
+zone "h.top4top.io" { type master; notify no; file "null.zone.file"; };
 zone "h.valerana44.ru" { type master; notify no; file "null.zone.file"; };
 zone "h1.iwakalong.ru" { type master; notify no; file "null.zone.file"; };
 zone "h112321.s08.test-hf.su" { type master; notify no; file "null.zone.file"; };
@@ -31207,7 +31208,6 @@ zone "home-racing.com" { type master; notify no; file "null.zone.file"; };
 zone "home-spy-shop.com" { type master; notify no; file "null.zone.file"; };
 zone "home.99eurowebsite.ie" { type master; notify no; file "null.zone.file"; };
 zone "home.barley-plus.com" { type master; notify no; file "null.zone.file"; };
-zone "home.earthlink.net" { type master; notify no; file "null.zone.file"; };
 zone "home.evrstudio.com" { type master; notify no; file "null.zone.file"; };
 zone "home.healthiestu.com" { type master; notify no; file "null.zone.file"; };
 zone "home.isdes.com" { type master; notify no; file "null.zone.file"; };
@@ -31680,6 +31680,7 @@ zone "houzess.com" { type master; notify no; file "null.zone.file"; };
 zone "how-to-nampa.com" { type master; notify no; file "null.zone.file"; };
 zone "how-to-tech.com" { type master; notify no; file "null.zone.file"; };
 zone "how.ph" { type master; notify no; file "null.zone.file"; };
+zone "howalshafikings.com" { type master; notify no; file "null.zone.file"; };
 zone "howardbenz.com" { type master; notify no; file "null.zone.file"; };
 zone "howardbragman.com" { type master; notify no; file "null.zone.file"; };
 zone "howardgfranklin.com" { type master; notify no; file "null.zone.file"; };
@@ -31781,7 +31782,6 @@ zone "htepl.com" { type master; notify no; file "null.zone.file"; };
 zone "hthaher.com" { type master; notify no; file "null.zone.file"; };
 zone "hthindustrial.com" { type master; notify no; file "null.zone.file"; };
 zone "hthttp" { type master; notify no; file "null.zone.file"; };
-zone "htl.li" { type master; notify no; file "null.zone.file"; };
 zone "htl.ru" { type master; notify no; file "null.zone.file"; };
 zone "htlinternational.org" { type master; notify no; file "null.zone.file"; };
 zone "htlvn.com" { type master; notify no; file "null.zone.file"; };
@@ -32104,7 +32104,6 @@ zone "i-sharecloud.com" { type master; notify no; file "null.zone.file"; };
 zone "i-supportcharity.com" { type master; notify no; file "null.zone.file"; };
 zone "i-vnsweyu.pl" { type master; notify no; file "null.zone.file"; };
 zone "i-voda.com" { type master; notify no; file "null.zone.file"; };
-zone "i.cubeupload.com" { type master; notify no; file "null.zone.file"; };
 zone "i.fiery.me" { type master; notify no; file "null.zone.file"; };
 zone "i.fluffy.cc" { type master; notify no; file "null.zone.file"; };
 zone "i.funtourspt.eu" { type master; notify no; file "null.zone.file"; };
@@ -32141,6 +32140,7 @@ zone "iaconsultafrica.com" { type master; notify no; file "null.zone.file"; };
 zone "iacp-od.org" { type master; notify no; file "null.zone.file"; };
 zone "iadeca.es" { type master; notify no; file "null.zone.file"; };
 zone "iadigital.com.br" { type master; notify no; file "null.zone.file"; };
+zone "iaecconsultants.com" { type master; notify no; file "null.zone.file"; };
 zone "iain-padangsidimpuan.ac.id" { type master; notify no; file "null.zone.file"; };
 zone "iais.ac.id" { type master; notify no; file "null.zone.file"; };
 zone "iakah.pw" { type master; notify no; file "null.zone.file"; };
@@ -32889,6 +32889,7 @@ zone "imellda.com" { type master; notify no; file "null.zone.file"; };
 zone "imemmw.org" { type master; notify no; file "null.zone.file"; };
 zone "imenbazr.com" { type master; notify no; file "null.zone.file"; };
 zone "imenergo.com" { type master; notify no; file "null.zone.file"; };
+zone "imenizeh.ir" { type master; notify no; file "null.zone.file"; };
 zone "imensanatsi.com" { type master; notify no; file "null.zone.file"; };
 zone "imensandogh.com" { type master; notify no; file "null.zone.file"; };
 zone "imersiongis.com" { type master; notify no; file "null.zone.file"; };
@@ -33054,6 +33055,7 @@ zone "in100tive.com" { type master; notify no; file "null.zone.file"; };
 zone "in365.vn" { type master; notify no; file "null.zone.file"; };
 zone "in8.keton8.com" { type master; notify no; file "null.zone.file"; };
 zone "in9cm.com.br" { type master; notify no; file "null.zone.file"; };
+zone "inac-americas.com" { type master; notify no; file "null.zone.file"; };
 zone "inacioferros.com" { type master; notify no; file "null.zone.file"; };
 zone "inaczasie.pl" { type master; notify no; file "null.zone.file"; };
 zone "inadmin.convshop.com" { type master; notify no; file "null.zone.file"; };
@@ -33137,7 +33139,6 @@ zone "indian-escorts-dubai.com" { type master; notify no; file "null.zone.file";
 zone "indian-escorts-qatar.com" { type master; notify no; file "null.zone.file"; };
 zone "indian-escorts-rak.com" { type master; notify no; file "null.zone.file"; };
 zone "indian-escorts-sharjah.com" { type master; notify no; file "null.zone.file"; };
-zone "indianagoods.club" { type master; notify no; file "null.zone.file"; };
 zone "indianblog.info" { type master; notify no; file "null.zone.file"; };
 zone "indianceramicsourcing.com" { type master; notify no; file "null.zone.file"; };
 zone "indianescortsabudhabi.com" { type master; notify no; file "null.zone.file"; };
@@ -33704,6 +33705,7 @@ zone "integraciontotal.com.mx" { type master; notify no; file "null.zone.file";
 zone "integracooperativa.com" { type master; notify no; file "null.zone.file"; };
 zone "integrafika.co.uk" { type master; notify no; file "null.zone.file"; };
 zone "integraga.com" { type master; notify no; file "null.zone.file"; };
+zone "integralc.com" { type master; notify no; file "null.zone.file"; };
 zone "integralcs.com.br" { type master; notify no; file "null.zone.file"; };
 zone "integralestates.in" { type master; notify no; file "null.zone.file"; };
 zone "integralmakeup.com" { type master; notify no; file "null.zone.file"; };
@@ -33801,7 +33803,6 @@ zone "internationalmscareerseminar.com" { type master; notify no; file "null.zon
 zone "internaut.in" { type master; notify no; file "null.zone.file"; };
 zone "internetcasinoweblog.com" { type master; notify no; file "null.zone.file"; };
 zone "internetjogasz.hu" { type master; notify no; file "null.zone.file"; };
-zone "internetlink.com.mx" { type master; notify no; file "null.zone.file"; };
 zone "internetmarketing4pros.com" { type master; notify no; file "null.zone.file"; };
 zone "internetofsmell.com" { type master; notify no; file "null.zone.file"; };
 zone "internetordbogen.dk" { type master; notify no; file "null.zone.file"; };
@@ -33968,6 +33969,7 @@ zone "ioe-learning.com" { type master; notify no; file "null.zone.file"; };
 zone "ioffe-soft.ru" { type master; notify no; file "null.zone.file"; };
 zone "ioffexpert.com" { type master; notify no; file "null.zone.file"; };
 zone "ioi3.com" { type master; notify no; file "null.zone.file"; };
+zone "iol.ie" { type master; notify no; file "null.zone.file"; };
 zone "iolandagazzerro.it" { type master; notify no; file "null.zone.file"; };
 zone "ion-consulting.com" { type master; notify no; file "null.zone.file"; };
 zone "ioncaresindia.in" { type master; notify no; file "null.zone.file"; };
@@ -34049,6 +34051,7 @@ zone "iphones.bid" { type master; notify no; file "null.zone.file"; };
 zone "iphonessuckballs.life" { type master; notify no; file "null.zone.file"; };
 zone "iphoneteknikservisim.net" { type master; notify no; file "null.zone.file"; };
 zone "iphonewin.website" { type master; notify no; file "null.zone.file"; };
+zone "iphotoalot.com" { type master; notify no; file "null.zone.file"; };
 zone "iphys-hypoxia.kz" { type master; notify no; file "null.zone.file"; };
 zone "ipisu.ru" { type master; notify no; file "null.zone.file"; };
 zone "ipjem.com.br" { type master; notify no; file "null.zone.file"; };
@@ -34675,6 +34678,7 @@ zone "iykelinksyuiop.5gbfree.com" { type master; notify no; file "null.zone.file
 zone "iyle.co.uk" { type master; notify no; file "null.zone.file"; };
 zone "iyycqg.bn.files.1drv.com" { type master; notify no; file "null.zone.file"; };
 zone "iz.owak-kmyt.ru" { type master; notify no; file "null.zone.file"; };
+zone "iz.poznan.pl" { type master; notify no; file "null.zone.file"; };
 zone "izabelatrojanowska.pl" { type master; notify no; file "null.zone.file"; };
 zone "izavu.com" { type master; notify no; file "null.zone.file"; };
 zone "izbetalia.com" { type master; notify no; file "null.zone.file"; };
@@ -35614,7 +35618,6 @@ zone "joedee.co.za" { type master; notify no; file "null.zone.file"; };
 zone "joegie.nl" { type master; notify no; file "null.zone.file"; };
 zone "joeing.duckdns.org" { type master; notify no; file "null.zone.file"; };
 zone "joeing.rapiddns.ru" { type master; notify no; file "null.zone.file"; };
-zone "joeing.warzonedns.com" { type master; notify no; file "null.zone.file"; };
 zone "joeing2.duckdns.org" { type master; notify no; file "null.zone.file"; };
 zone "joeksdj.nl" { type master; notify no; file "null.zone.file"; };
 zone "joelanguell.com" { type master; notify no; file "null.zone.file"; };
@@ -35783,6 +35786,7 @@ zone "josemoo.com" { type master; notify no; file "null.zone.file"; };
 zone "josenutricion.com" { type master; notify no; file "null.zone.file"; };
 zone "joseph.gergis.net" { type master; notify no; file "null.zone.file"; };
 zone "josephalavi.com" { type master; notify no; file "null.zone.file"; };
+zone "josephdutton.com" { type master; notify no; file "null.zone.file"; };
 zone "josephreynolds.net" { type master; notify no; file "null.zone.file"; };
 zone "josephsaadeh.me" { type master; notify no; file "null.zone.file"; };
 zone "josepsullca.com" { type master; notify no; file "null.zone.file"; };
@@ -36955,6 +36959,7 @@ zone "kedaicetakklang.com" { type master; notify no; file "null.zone.file"; };
 zone "kedaijuara.com" { type master; notify no; file "null.zone.file"; };
 zone "kedaimadu.net" { type master; notify no; file "null.zone.file"; };
 zone "kedi-russian.ru" { type master; notify no; file "null.zone.file"; };
+zone "kedisons.com" { type master; notify no; file "null.zone.file"; };
 zone "keelsoft.com" { type master; notify no; file "null.zone.file"; };
 zone "keenpreps.co.uk" { type master; notify no; file "null.zone.file"; };
 zone "keepchest.hopto.org" { type master; notify no; file "null.zone.file"; };
@@ -38614,6 +38619,7 @@ zone "kynmandesign.co.uk" { type master; notify no; file "null.zone.file"; };
 zone "kyokushinmiddleeast.com" { type master; notify no; file "null.zone.file"; };
 zone "kyoman.vn" { type master; notify no; file "null.zone.file"; };
 zone "kyoto-shikakeya.com" { type master; notify no; file "null.zone.file"; };
+zone "kyotoforum.or.jp" { type master; notify no; file "null.zone.file"; };
 zone "kyouei.co.th" { type master; notify no; file "null.zone.file"; };
 zone "kypa.or.ke" { type master; notify no; file "null.zone.file"; };
 zone "kyrmedia.com" { type master; notify no; file "null.zone.file"; };
@@ -39166,6 +39172,7 @@ zone "latiendita.miradiols.cl" { type master; notify no; file "null.zone.file";
 zone "latinannualmeeting.com" { type master; notify no; file "null.zone.file"; };
 zone "latinaradio.cl" { type master; notify no; file "null.zone.file"; };
 zone "latinbeat.com" { type master; notify no; file "null.zone.file"; };
+zone "latinigroup.com" { type master; notify no; file "null.zone.file"; };
 zone "latinos-latins.online" { type master; notify no; file "null.zone.file"; };
 zone "latinovoicesmn.org" { type master; notify no; file "null.zone.file"; };
 zone "latiprantz.com" { type master; notify no; file "null.zone.file"; };
@@ -39540,7 +39547,6 @@ zone "legphelhotel.com" { type master; notify no; file "null.zone.file"; };
 zone "legpnnldy.cf" { type master; notify no; file "null.zone.file"; };
 zone "legrand-boutique.com" { type master; notify no; file "null.zone.file"; };
 zone "legrand.ba" { type master; notify no; file "null.zone.file"; };
-zone "legrand.us" { type master; notify no; file "null.zone.file"; };
 zone "legrandmaghrebconsulting.com" { type master; notify no; file "null.zone.file"; };
 zone "legrandreve.pt" { type master; notify no; file "null.zone.file"; };
 zone "legsgoshop.com" { type master; notify no; file "null.zone.file"; };
@@ -40055,6 +40061,7 @@ zone "lightswitchmarketing.biz" { type master; notify no; file "null.zone.file";
 zone "lightvalleyprune.com" { type master; notify no; file "null.zone.file"; };
 zone "lightwerq.com" { type master; notify no; file "null.zone.file"; };
 zone "lightyard.com" { type master; notify no; file "null.zone.file"; };
+zone "lignar.com" { type master; notify no; file "null.zone.file"; };
 zone "lignarium.se" { type master; notify no; file "null.zone.file"; };
 zone "lignumpolska.com" { type master; notify no; file "null.zone.file"; };
 zone "liguebretagnebillard.fr" { type master; notify no; file "null.zone.file"; };
@@ -40196,7 +40203,6 @@ zone "link.fivetier.com" { type master; notify no; file "null.zone.file"; };
 zone "link.gocrazyflower.com" { type master; notify no; file "null.zone.file"; };
 zone "link.mx" { type master; notify no; file "null.zone.file"; };
 zone "link.nocomplaintsday.info" { type master; notify no; file "null.zone.file"; };
-zone "link.zixcentral.com" { type master; notify no; file "null.zone.file"; };
 zone "link100.cc" { type master; notify no; file "null.zone.file"; };
 zone "link17.by" { type master; notify no; file "null.zone.file"; };
 zone "link2bio.ir" { type master; notify no; file "null.zone.file"; };
@@ -40274,6 +40280,7 @@ zone "liragec.org" { type master; notify no; file "null.zone.file"; };
 zone "lirave.bplaced.net" { type master; notify no; file "null.zone.file"; };
 zone "lis-consult.dk" { type master; notify no; file "null.zone.file"; };
 zone "lisab.se" { type master; notify no; file "null.zone.file"; };
+zone "lisagirl.net" { type master; notify no; file "null.zone.file"; };
 zone "lisans.boxnet.com.tr" { type master; notify no; file "null.zone.file"; };
 zone "lisansustu.info" { type master; notify no; file "null.zone.file"; };
 zone "lisaraeswan.com" { type master; notify no; file "null.zone.file"; };
@@ -40385,7 +40392,6 @@ zone "livechallenge.fr" { type master; notify no; file "null.zone.file"; };
 zone "livecigarevent.com" { type master; notify no; file "null.zone.file"; };
 zone "livecricketscorecard.info" { type master; notify no; file "null.zone.file"; };
 zone "livedaynews.com" { type master; notify no; file "null.zone.file"; };
-zone "livedemo00.template-help.com" { type master; notify no; file "null.zone.file"; };
 zone "livedownload.in" { type master; notify no; file "null.zone.file"; };
 zone "livedrumtracks.com" { type master; notify no; file "null.zone.file"; };
 zone "livehasa.com" { type master; notify no; file "null.zone.file"; };
@@ -40412,6 +40418,7 @@ zone "livetechsupport.ca" { type master; notify no; file "null.zone.file"; };
 zone "livetesting.xyz" { type master; notify no; file "null.zone.file"; };
 zone "livetotry.com" { type master; notify no; file "null.zone.file"; };
 zone "livetours.cl" { type master; notify no; file "null.zone.file"; };
+zone "livetrack.in" { type master; notify no; file "null.zone.file"; };
 zone "livetvsports.ml" { type master; notify no; file "null.zone.file"; };
 zone "liveu.lk" { type master; notify no; file "null.zone.file"; };
 zone "liviavicentini.com" { type master; notify no; file "null.zone.file"; };
@@ -42058,6 +42065,7 @@ zone "mail.openscholarly.com" { type master; notify no; file "null.zone.file"; }
 zone "mail.optiua.com" { type master; notify no; file "null.zone.file"; };
 zone "mail.oregonwinerental.net" { type master; notify no; file "null.zone.file"; };
 zone "mail.outboundnat.com" { type master; notify no; file "null.zone.file"; };
+zone "mail.pallejabcn.com" { type master; notify no; file "null.zone.file"; };
 zone "mail.paracep.com" { type master; notify no; file "null.zone.file"; };
 zone "mail.paramountstudiosholidayvillas.com" { type master; notify no; file "null.zone.file"; };
 zone "mail.parkernetworks.com" { type master; notify no; file "null.zone.file"; };
@@ -43105,6 +43113,7 @@ zone "massdev.co" { type master; notify no; file "null.zone.file"; };
 zone "masseur.es" { type master; notify no; file "null.zone.file"; };
 zone "masseyatnandina.com" { type master; notify no; file "null.zone.file"; };
 zone "massimopintus.com" { type master; notify no; file "null.zone.file"; };
+zone "massivedynamicks.com" { type master; notify no; file "null.zone.file"; };
 zone "massivesales.co.uk" { type master; notify no; file "null.zone.file"; };
 zone "massivewebtech.com" { type master; notify no; file "null.zone.file"; };
 zone "massomsadarpuri.com" { type master; notify no; file "null.zone.file"; };
@@ -44258,7 +44267,6 @@ zone "mfmr.gov.sl" { type master; notify no; file "null.zone.file"; };
 zone "mfomjr.com" { type master; notify no; file "null.zone.file"; };
 zone "mfotovideo.ro" { type master; notify no; file "null.zone.file"; };
 zone "mfpburundi.bi" { type master; notify no; file "null.zone.file"; };
-zone "mfpc.org.my" { type master; notify no; file "null.zone.file"; };
 zone "mfppanel.xyz" { type master; notify no; file "null.zone.file"; };
 zone "mfpvision.com" { type master; notify no; file "null.zone.file"; };
 zone "mfronza.com.br" { type master; notify no; file "null.zone.file"; };
@@ -44409,7 +44417,6 @@ zone "micropcsystem.com" { type master; notify no; file "null.zone.file"; };
 zone "microratings.tk" { type master; notify no; file "null.zone.file"; };
 zone "micros0ft1.ddns.net" { type master; notify no; file "null.zone.file"; };
 zone "microservicesmonitor.com" { type master; notify no; file "null.zone.file"; };
-zone "microsfotgooglegmailoutlook365mailallaregoodformailing.warzonedns.com" { type master; notify no; file "null.zone.file"; };
 zone "microsoft-01.dynamic-dns.net" { type master; notify no; file "null.zone.file"; };
 zone "microsoft-dl.com.br.md-43.webhostbox.net" { type master; notify no; file "null.zone.file"; };
 zone "microsoft-frameworkseguro.com" { type master; notify no; file "null.zone.file"; };
@@ -45542,6 +45549,7 @@ zone "mooi-trade.com" { type master; notify no; file "null.zone.file"; };
 zone "mooipilates.com" { type master; notify no; file "null.zone.file"; };
 zone "mooithailand.nl" { type master; notify no; file "null.zone.file"; };
 zone "moolchi.com" { type master; notify no; file "null.zone.file"; };
+zone "moolo.pl" { type master; notify no; file "null.zone.file"; };
 zone "moomi-daeri.com" { type master; notify no; file "null.zone.file"; };
 zone "moomicos.com" { type master; notify no; file "null.zone.file"; };
 zone "moommam.fr" { type master; notify no; file "null.zone.file"; };
@@ -45851,6 +45859,7 @@ zone "mpgbss.com" { type master; notify no; file "null.zone.file"; };
 zone "mpgestaodepessoas.com.br" { type master; notify no; file "null.zone.file"; };
 zone "mpii.tech" { type master; notify no; file "null.zone.file"; };
 zone "mpinteligente.com" { type master; notify no; file "null.zone.file"; };
+zone "mpkglobaltrainingcorp.net" { type master; notify no; file "null.zone.file"; };
 zone "mplmodapk.site" { type master; notify no; file "null.zone.file"; };
 zone "mpls.foodiecycle.com" { type master; notify no; file "null.zone.file"; };
 zone "mpn.vn" { type master; notify no; file "null.zone.file"; };
@@ -46922,6 +46931,7 @@ zone "nakhlmarket.com" { type master; notify no; file "null.zone.file"; };
 zone "nakshadekho.com" { type master; notify no; file "null.zone.file"; };
 zone "nakshatrajoshi.com" { type master; notify no; file "null.zone.file"; };
 zone "nal.com.ua" { type master; notify no; file "null.zone.file"; };
+zone "nalahotel.com" { type master; notify no; file "null.zone.file"; };
 zone "nalcalar.com" { type master; notify no; file "null.zone.file"; };
 zone "nalfonsotriston.city" { type master; notify no; file "null.zone.file"; };
 zone "nalmac.com" { type master; notify no; file "null.zone.file"; };
@@ -47244,7 +47254,6 @@ zone "nbfghreqww.ug" { type master; notify no; file "null.zone.file"; };
 zone "nbgcpa.net" { type master; notify no; file "null.zone.file"; };
 zone "nbgcpa.org" { type master; notify no; file "null.zone.file"; };
 zone "nbhgroup.in" { type master; notify no; file "null.zone.file"; };
-zone "nbigfile.mail.naver.com" { type master; notify no; file "null.zone.file"; };
 zone "nbiyan.vn" { type master; notify no; file "null.zone.file"; };
 zone "nbj.engaged.it" { type master; notify no; file "null.zone.file"; };
 zone "nbn-nrc.org" { type master; notify no; file "null.zone.file"; };
@@ -47483,6 +47492,7 @@ zone "netafix.com" { type master; notify no; file "null.zone.file"; };
 zone "netasarim.com" { type master; notify no; file "null.zone.file"; };
 zone "netbenfey.ciprudential.com.watchdogdns.duckdns.org" { type master; notify no; file "null.zone.file"; };
 zone "netcity1.net" { type master; notify no; file "null.zone.file"; };
+zone "netck.pl" { type master; notify no; file "null.zone.file"; };
 zone "netcom-soft.com" { type master; notify no; file "null.zone.file"; };
 zone "netcomp.lizave.store" { type master; notify no; file "null.zone.file"; };
 zone "netcorpsgroup.com" { type master; notify no; file "null.zone.file"; };
@@ -47503,7 +47513,6 @@ zone "netin.vn" { type master; notify no; file "null.zone.file"; };
 zone "netizennepal.com" { type master; notify no; file "null.zone.file"; };
 zone "netkafem.org" { type master; notify no; file "null.zone.file"; };
 zone "netking.duckdns.org" { type master; notify no; file "null.zone.file"; };
-zone "netlink.com" { type master; notify no; file "null.zone.file"; };
 zone "netm.club" { type master; notify no; file "null.zone.file"; };
 zone "netmaffia.net" { type master; notify no; file "null.zone.file"; };
 zone "netmansoft.com" { type master; notify no; file "null.zone.file"; };
@@ -47970,6 +47979,7 @@ zone "nguyenthanhriori.com" { type master; notify no; file "null.zone.file"; };
 zone "nguyenthituyet.org" { type master; notify no; file "null.zone.file"; };
 zone "nguyenthuyhanh.com.vn" { type master; notify no; file "null.zone.file"; };
 zone "nguyentrongkha.com" { type master; notify no; file "null.zone.file"; };
+zone "ngyusa.com" { type master; notify no; file "null.zone.file"; };
 zone "nhacchoquangcao24h.com" { type master; notify no; file "null.zone.file"; };
 zone "nhadaiphat.com" { type master; notify no; file "null.zone.file"; };
 zone "nhadatbaria.asia" { type master; notify no; file "null.zone.file"; };
@@ -47980,7 +47990,6 @@ zone "nhadatphonglinh.com" { type master; notify no; file "null.zone.file"; };
 zone "nhadatquan2.xyz" { type master; notify no; file "null.zone.file"; };
 zone "nhadatthienthoi.com" { type master; notify no; file "null.zone.file"; };
 zone "nhadephungyen.com" { type master; notify no; file "null.zone.file"; };
-zone "nhadepkientruc.net" { type master; notify no; file "null.zone.file"; };
 zone "nhahangdaihung.com" { type master; notify no; file "null.zone.file"; };
 zone "nhahanghaivuong.vn" { type master; notify no; file "null.zone.file"; };
 zone "nhahanglegiang.vn" { type master; notify no; file "null.zone.file"; };
@@ -48067,6 +48076,7 @@ zone "nickelaction.com" { type master; notify no; file "null.zone.file"; };
 zone "nicklaslj.se" { type master; notify no; file "null.zone.file"; };
 zone "nickpeets.com" { type master; notify no; file "null.zone.file"; };
 zone "nickycooperhomes.co.nz" { type master; notify no; file "null.zone.file"; };
+zone "nicolaisen.de" { type master; notify no; file "null.zone.file"; };
 zone "nicolasbaldoma.com" { type master; notify no; file "null.zone.file"; };
 zone "nicolasgalvez.com" { type master; notify no; file "null.zone.file"; };
 zone "nicolaskohen.com" { type master; notify no; file "null.zone.file"; };
@@ -48457,7 +48467,6 @@ zone "nonglek.net" { type master; notify no; file "null.zone.file"; };
 zone "nongnghiepgiaphat.com" { type master; notify no; file "null.zone.file"; };
 zone "nongsan24h.com" { type master; notify no; file "null.zone.file"; };
 zone "nongsananhnguyen.com" { type master; notify no; file "null.zone.file"; };
-zone "nongsandungha.com" { type master; notify no; file "null.zone.file"; };
 zone "nonlocality.com" { type master; notify no; file "null.zone.file"; };
 zone "nonnemacher.com.br" { type master; notify no; file "null.zone.file"; };
 zone "nonnewspaper.com" { type master; notify no; file "null.zone.file"; };
@@ -48689,6 +48698,7 @@ zone "novoselica.dp.ua" { type master; notify no; file "null.zone.file"; };
 zone "novosibirsk.quadrotek-logistic.ru" { type master; notify no; file "null.zone.file"; };
 zone "novostack.net" { type master; notify no; file "null.zone.file"; };
 zone "novotravel.ir" { type master; notify no; file "null.zone.file"; };
+zone "nowak-meble.eu" { type master; notify no; file "null.zone.file"; };
 zone "nowkh.com" { type master; notify no; file "null.zone.file"; };
 zone "nowley-rus.ru" { type master; notify no; file "null.zone.file"; };
 zone "nowley-rus.ruadministrator" { type master; notify no; file "null.zone.file"; };
@@ -49330,7 +49340,6 @@ zone "ohotnicom.com" { type master; notify no; file "null.zone.file"; };
 zone "ohscrane.com" { type master; notify no; file "null.zone.file"; };
 zone "ohters.de" { type master; notify no; file "null.zone.file"; };
 zone "ohyellow.nl" { type master; notify no; file "null.zone.file"; };
-zone "oi68.tinypic.com" { type master; notify no; file "null.zone.file"; };
 zone "oiainbtaea38.silverabout.ml" { type master; notify no; file "null.zone.file"; };
 zone "oiasdnqweqasd.com" { type master; notify no; file "null.zone.file"; };
 zone "oiflddw.gq" { type master; notify no; file "null.zone.file"; };
@@ -49584,6 +49593,7 @@ zone "ominenergo.gov.rsmart-testsolutions.watchdogdns.duckdns.org" { type master
 zone "ominix.com" { type master; notify no; file "null.zone.file"; };
 zone "omitkyspisar.cz" { type master; notify no; file "null.zone.file"; };
 zone "omiwnusantara.com" { type master; notify no; file "null.zone.file"; };
+zone "omlinux.com" { type master; notify no; file "null.zone.file"; };
 zone "ommar.ps" { type master; notify no; file "null.zone.file"; };
 zone "ommienetwork.000webhostapp.com" { type master; notify no; file "null.zone.file"; };
 zone "omni-anela.com" { type master; notify no; file "null.zone.file"; };
@@ -50548,6 +50558,7 @@ zone "pablorub-cp38.wordpresstemporal.com" { type master; notify no; file "null.
 zone "pabloteixeira.com" { type master; notify no; file "null.zone.file"; };
 zone "pablotrabucchelli.com" { type master; notify no; file "null.zone.file"; };
 zone "pabnainfo.com" { type master; notify no; file "null.zone.file"; };
+zone "paboard.com" { type master; notify no; file "null.zone.file"; };
 zone "pabrik-tenda.id" { type master; notify no; file "null.zone.file"; };
 zone "pabx-uae.com" { type master; notify no; file "null.zone.file"; };
 zone "pacbest.org" { type master; notify no; file "null.zone.file"; };
@@ -50613,6 +50624,7 @@ zone "pahahome.com" { type master; notify no; file "null.zone.file"; };
 zone "pahanlab.com" { type master; notify no; file "null.zone.file"; };
 zone "paht.nuph.edu.ua" { type master; notify no; file "null.zone.file"; };
 zone "pai.fai.umj.ac.id" { type master; notify no; file "null.zone.file"; };
+zone "paides.com" { type master; notify no; file "null.zone.file"; };
 zone "paidtv.siaraya.com" { type master; notify no; file "null.zone.file"; };
 zone "paifi.net" { type master; notify no; file "null.zone.file"; };
 zone "paigeplacements.co.uk" { type master; notify no; file "null.zone.file"; };
@@ -50943,6 +50955,7 @@ zone "parkinsoncsra.org" { type master; notify no; file "null.zone.file"; };
 zone "parkklead.com" { type master; notify no; file "null.zone.file"; };
 zone "parkourschool.ru" { type master; notify no; file "null.zone.file"; };
 zone "parkradio.ca" { type master; notify no; file "null.zone.file"; };
+zone "parksfo.com" { type master; notify no; file "null.zone.file"; };
 zone "parkside-mi.com" { type master; notify no; file "null.zone.file"; };
 zone "parksteals.com" { type master; notify no; file "null.zone.file"; };
 zone "parkwaygames.com" { type master; notify no; file "null.zone.file"; };
@@ -51069,6 +51082,7 @@ zone "past.com.tr" { type master; notify no; file "null.zone.file"; };
 zone "pastavadese.com" { type master; notify no; file "null.zone.file"; };
 zone "paste.ee" { type master; notify no; file "null.zone.file"; };
 zone "paste.makomk.com" { type master; notify no; file "null.zone.file"; };
+zone "pasteboard.co" { type master; notify no; file "null.zone.file"; };
 zone "pastecode.xyz" { type master; notify no; file "null.zone.file"; };
 zone "pastelcolors.in" { type master; notify no; file "null.zone.file"; };
 zone "pastilepentruslabit.ro" { type master; notify no; file "null.zone.file"; };
@@ -51312,6 +51326,7 @@ zone "pd.ibigcse.net" { type master; notify no; file "null.zone.file"; };
 zone "pd0rt.nl" { type master; notify no; file "null.zone.file"; };
 zone "pdedas.com" { type master; notify no; file "null.zone.file"; };
 zone "pdesaa.cimaa.pt" { type master; notify no; file "null.zone.file"; };
+zone "pdf-archive.com" { type master; notify no; file "null.zone.file"; };
 zone "pdf-archive.press" { type master; notify no; file "null.zone.file"; };
 zone "pdf-archive.store" { type master; notify no; file "null.zone.file"; };
 zone "pdf-compare.site" { type master; notify no; file "null.zone.file"; };
@@ -51347,6 +51362,7 @@ zone "peacegreetings.com" { type master; notify no; file "null.zone.file"; };
 zone "peacemed.e-nformation.ro" { type master; notify no; file "null.zone.file"; };
 zone "peaceseedlings.org" { type master; notify no; file "null.zone.file"; };
 zone "peacesprit.ir" { type master; notify no; file "null.zone.file"; };
+zone "peacewatch.ch" { type master; notify no; file "null.zone.file"; };
 zone "peach-slovenija.si" { type master; notify no; file "null.zone.file"; };
 zone "peachgirl.ru" { type master; notify no; file "null.zone.file"; };
 zone "peacock.dating" { type master; notify no; file "null.zone.file"; };
@@ -51396,6 +51412,7 @@ zone "pedsassociates.com" { type master; notify no; file "null.zone.file"; };
 zone "pedslovo.ru" { type master; notify no; file "null.zone.file"; };
 zone "pedulirakyataceh.org" { type master; notify no; file "null.zone.file"; };
 zone "peechproperties.com" { type master; notify no; file "null.zone.file"; };
+zone "peekaboobubba.com.au" { type master; notify no; file "null.zone.file"; };
 zone "peekaboorevue.com" { type master; notify no; file "null.zone.file"; };
 zone "peekend.com" { type master; notify no; file "null.zone.file"; };
 zone "peer2travel.com" { type master; notify no; file "null.zone.file"; };
@@ -51577,7 +51594,6 @@ zone "periscope.es" { type master; notify no; file "null.zone.file"; };
 zone "peritofinanceiro.tk" { type master; notify no; file "null.zone.file"; };
 zone "perkasa.ddns.net" { type master; notify no; file "null.zone.file"; };
 zone "perkasa.undiksha.ac.id" { type master; notify no; file "null.zone.file"; };
-zone "perkasa.warzonedns.com" { type master; notify no; file "null.zone.file"; };
 zone "perkfix.com" { type master; notify no; file "null.zone.file"; };
 zone "perkim.bondowosokab.go.id" { type master; notify no; file "null.zone.file"; };
 zone "perlage.net" { type master; notify no; file "null.zone.file"; };
@@ -51668,6 +51684,7 @@ zone "petalsnbones.com" { type master; notify no; file "null.zone.file"; };
 zone "petanisukses.club" { type master; notify no; file "null.zone.file"; };
 zone "petcarepass.cz" { type master; notify no; file "null.zone.file"; };
 zone "peteivs.co.nz" { type master; notify no; file "null.zone.file"; };
+zone "petendereruk.pro" { type master; notify no; file "null.zone.file"; };
 zone "peterantennas.bid" { type master; notify no; file "null.zone.file"; };
 zone "peterbeckundpartner.cporsgrunn.folkbjnrwwww.watchdogdns.duckdns.org" { type master; notify no; file "null.zone.file"; };
 zone "petercottontailmovie.com" { type master; notify no; file "null.zone.file"; };
@@ -51851,6 +51868,7 @@ zone "phillbecker.com" { type master; notify no; file "null.zone.file"; };
 zone "phillipjohnson.co.uk" { type master; notify no; file "null.zone.file"; };
 zone "philomenabar.com.br" { type master; notify no; file "null.zone.file"; };
 zone "philpaisley.com" { type master; notify no; file "null.zone.file"; };
+zone "phimhdonline.tv" { type master; notify no; file "null.zone.file"; };
 zone "phimmoinhat.online" { type master; notify no; file "null.zone.file"; };
 zone "phimphot.tk" { type master; notify no; file "null.zone.file"; };
 zone "phitemntech.com" { type master; notify no; file "null.zone.file"; };
@@ -52230,6 +52248,7 @@ zone "pixel.as" { type master; notify no; file "null.zone.file"; };
 zone "pixel.mobycare.website" { type master; notify no; file "null.zone.file"; };
 zone "pixelcrush.net" { type master; notify no; file "null.zone.file"; };
 zone "pixeldra.in" { type master; notify no; file "null.zone.file"; };
+zone "pixeldrain.com" { type master; notify no; file "null.zone.file"; };
 zone "pixelerp.com" { type master; notify no; file "null.zone.file"; };
 zone "pixelfactorysolutions.xyz" { type master; notify no; file "null.zone.file"; };
 zone "pixelguru.info" { type master; notify no; file "null.zone.file"; };
@@ -52333,6 +52352,7 @@ zone "planitsolutions.co.nz" { type master; notify no; file "null.zone.file"; };
 zone "planktonik.hu" { type master; notify no; file "null.zone.file"; };
 zone "planmyfurnitureinterior.com" { type master; notify no; file "null.zone.file"; };
 zone "planningportal.semblueinc.com" { type master; notify no; file "null.zone.file"; };
+zone "planningtravel.es" { type master; notify no; file "null.zone.file"; };
 zone "plannpick.com" { type master; notify no; file "null.zone.file"; };
 zone "plano.xoom.it" { type master; notify no; file "null.zone.file"; };
 zone "planodeobrasdeilhabela.com.br" { type master; notify no; file "null.zone.file"; };
@@ -52386,6 +52406,7 @@ zone "plaxury.com" { type master; notify no; file "null.zone.file"; };
 zone "play-movie.xyz" { type master; notify no; file "null.zone.file"; };
 zone "play0.revosales.ru" { type master; notify no; file "null.zone.file"; };
 zone "play2.revosales.ru" { type master; notify no; file "null.zone.file"; };
+zone "play2win.buzz" { type master; notify no; file "null.zone.file"; };
 zone "play4fitness.co.uk" { type master; notify no; file "null.zone.file"; };
 zone "playalongmusic.net" { type master; notify no; file "null.zone.file"; };
 zone "playasrivieramaya.com" { type master; notify no; file "null.zone.file"; };
@@ -52395,6 +52416,7 @@ zone "playcoin.game" { type master; notify no; file "null.zone.file"; };
 zone "playden.in" { type master; notify no; file "null.zone.file"; };
 zone "playfire.online" { type master; notify no; file "null.zone.file"; };
 zone "playgrounds.tumo.org" { type master; notify no; file "null.zone.file"; };
+zone "playgroupsrl.com" { type master; notify no; file "null.zone.file"; };
 zone "playhard.ru" { type master; notify no; file "null.zone.file"; };
 zone "playitforwardnashville.com" { type master; notify no; file "null.zone.file"; };
 zone "playkey.ga" { type master; notify no; file "null.zone.file"; };
@@ -52467,6 +52489,7 @@ zone "plunatavan.com" { type master; notify no; file "null.zone.file"; };
 zone "plurallider.com.br" { type master; notify no; file "null.zone.file"; };
 zone "plus.mn" { type master; notify no; file "null.zone.file"; };
 zone "plus1interactive.com" { type master; notify no; file "null.zone.file"; };
+zone "plushshow.com" { type master; notify no; file "null.zone.file"; };
 zone "plusjop.nl" { type master; notify no; file "null.zone.file"; };
 zone "plusmicrotd.kz" { type master; notify no; file "null.zone.file"; };
 zone "plussizeall.net" { type master; notify no; file "null.zone.file"; };
@@ -52706,7 +52729,6 @@ zone "pontosat.com.br" { type master; notify no; file "null.zone.file"; };
 zone "pontotocdistrictba.com" { type master; notify no; file "null.zone.file"; };
 zone "pontus-euxinus.ro" { type master; notify no; file "null.zone.file"; };
 zone "pony.s-p-y.ml" { type master; notify no; file "null.zone.file"; };
-zone "pony.warzonedns.com" { type master; notify no; file "null.zone.file"; };
 zone "ponytales.nostalgicbookshelf.com" { type master; notify no; file "null.zone.file"; };
 zone "poojasingh.me" { type master; notify no; file "null.zone.file"; };
 zone "pool.ug" { type master; notify no; file "null.zone.file"; };
@@ -52866,6 +52888,7 @@ zone "positivechangesok.com" { type master; notify no; file "null.zone.file"; };
 zone "positiveconvention.co.za" { type master; notify no; file "null.zone.file"; };
 zone "positiveid.org" { type master; notify no; file "null.zone.file"; };
 zone "positiverne.dk" { type master; notify no; file "null.zone.file"; };
+zone "positronicsindia.com" { type master; notify no; file "null.zone.file"; };
 zone "posizionareunsito.it" { type master; notify no; file "null.zone.file"; };
 zone "poslovni-oglasi.com" { type master; notify no; file "null.zone.file"; };
 zone "poslovno-pregovaranje.com" { type master; notify no; file "null.zone.file"; };
@@ -53329,6 +53352,7 @@ zone "prismware.ml" { type master; notify no; file "null.zone.file"; };
 zone "pristineglassmirror.com" { type master; notify no; file "null.zone.file"; };
 zone "pristinequill.com" { type master; notify no; file "null.zone.file"; };
 zone "prith-hauts-de-france.org" { type master; notify no; file "null.zone.file"; };
+zone "prithvigroup.net" { type master; notify no; file "null.zone.file"; };
 zone "pritsep56.ru" { type master; notify no; file "null.zone.file"; };
 zone "prittworldproperties.co.ke" { type master; notify no; file "null.zone.file"; };
 zone "privacydesignstudio.com" { type master; notify no; file "null.zone.file"; };
@@ -53819,6 +53843,7 @@ zone "proxy-ipv4.com" { type master; notify no; file "null.zone.file"; };
 zone "proxy.qualtrics.com" { type master; notify no; file "null.zone.file"; };
 zone "proxygrnd.xyz" { type master; notify no; file "null.zone.file"; };
 zone "proxyholding.com" { type master; notify no; file "null.zone.file"; };
+zone "proxyresume.com" { type master; notify no; file "null.zone.file"; };
 zone "proxysis.com.br" { type master; notify no; file "null.zone.file"; };
 zone "proyectocithara.org" { type master; notify no; file "null.zone.file"; };
 zone "proyectoin.com" { type master; notify no; file "null.zone.file"; };
@@ -53931,6 +53956,7 @@ zone "psychprofiler.com" { type master; notify no; file "null.zone.file"; };
 zone "psymonkee.com" { type master; notify no; file "null.zone.file"; };
 zone "psynchro.org" { type master; notify no; file "null.zone.file"; };
 zone "ptb.com.mx" { type master; notify no; file "null.zone.file"; };
+zone "ptbsda.com" { type master; notify no; file "null.zone.file"; };
 zone "ptci-md.org" { type master; notify no; file "null.zone.file"; };
 zone "ptdtech.tk" { type master; notify no; file "null.zone.file"; };
 zone "pte.vn" { type master; notify no; file "null.zone.file"; };
@@ -54445,7 +54471,6 @@ zone "qe-zw.top" { type master; notify no; file "null.zone.file"; };
 zone "qe-zz.top" { type master; notify no; file "null.zone.file"; };
 zone "qeba.win" { type master; notify no; file "null.zone.file"; };
 zone "qeducacional.com.br" { type master; notify no; file "null.zone.file"; };
-zone "qeeeeewwswsweerwwerwerwrwerwerwerwere.warzonedns.com" { type master; notify no; file "null.zone.file"; };
 zone "qelie.com" { type master; notify no; file "null.zone.file"; };
 zone "qeoficial.es" { type master; notify no; file "null.zone.file"; };
 zone "qeshmsport.ir" { type master; notify no; file "null.zone.file"; };
@@ -55046,6 +55071,7 @@ zone "radheenterpriseonline.com" { type master; notify no; file "null.zone.file"
 zone "radheshyamcityhomes.com" { type master; notify no; file "null.zone.file"; };
 zone "radi.org.ng" { type master; notify no; file "null.zone.file"; };
 zone "radiantdates.com" { type master; notify no; file "null.zone.file"; };
+zone "radiantqatar.com" { type master; notify no; file "null.zone.file"; };
 zone "radiantservices.com" { type master; notify no; file "null.zone.file"; };
 zone "radicocinas.com.mx" { type master; notify no; file "null.zone.file"; };
 zone "radienten.com" { type master; notify no; file "null.zone.file"; };
@@ -55120,6 +55146,7 @@ zone "raf-dv.ru" { type master; notify no; file "null.zone.file"; };
 zone "rafa-craftsman.com" { type master; notify no; file "null.zone.file"; };
 zone "rafaat.ir" { type master; notify no; file "null.zone.file"; };
 zone "rafaelcarvalho.com.br" { type master; notify no; file "null.zone.file"; };
+zone "rafaelospizzeria.com" { type master; notify no; file "null.zone.file"; };
 zone "rafaelvieira.com.br" { type master; notify no; file "null.zone.file"; };
 zone "rafatelles.com" { type master; notify no; file "null.zone.file"; };
 zone "raffaelli.com.br" { type master; notify no; file "null.zone.file"; };
@@ -55714,6 +55741,7 @@ zone "redhorsebatteries.com" { type master; notify no; file "null.zone.file"; };
 zone "redhorsetile.com" { type master; notify no; file "null.zone.file"; };
 zone "redic.co.uk" { type master; notify no; file "null.zone.file"; };
 zone "redilmatt.biz" { type master; notify no; file "null.zone.file"; };
+zone "redingtonpost.com" { type master; notify no; file "null.zone.file"; };
 zone "redinktattoo.net" { type master; notify no; file "null.zone.file"; };
 zone "redirectiontest.basezap.com" { type master; notify no; file "null.zone.file"; };
 zone "redironmarketing.com" { type master; notify no; file "null.zone.file"; };
@@ -55740,6 +55768,7 @@ zone "redsnowball.com" { type master; notify no; file "null.zone.file"; };
 zone "redsseammgt.com" { type master; notify no; file "null.zone.file"; };
 zone "redtek0.com" { type master; notify no; file "null.zone.file"; };
 zone "redtv.top" { type master; notify no; file "null.zone.file"; };
+zone "redvalidator.com" { type master; notify no; file "null.zone.file"; };
 zone "redvelvetpatisserie.co.uk" { type master; notify no; file "null.zone.file"; };
 zone "redwing.com.eg" { type master; notify no; file "null.zone.file"; };
 zone "redwingdemo.dukaafrica.com" { type master; notify no; file "null.zone.file"; };
@@ -56267,6 +56296,7 @@ zone "rewal.ch" { type master; notify no; file "null.zone.file"; };
 zone "reward.uta.edu.ec" { type master; notify no; file "null.zone.file"; };
 zone "rewitek.nl" { type master; notify no; file "null.zone.file"; };
 zone "rexhagis.nl" { type master; notify no; file "null.zone.file"; };
+zone "rexindototeknik.com" { type master; notify no; file "null.zone.file"; };
 zone "rexpc.dk" { type master; notify no; file "null.zone.file"; };
 zone "rexpronecorpllc.com" { type master; notify no; file "null.zone.file"; };
 zone "rexprosealers.com" { type master; notify no; file "null.zone.file"; };
@@ -56551,6 +56581,7 @@ zone "riverwalkmb.com" { type master; notify no; file "null.zone.file"; };
 zone "rivesam.com" { type master; notify no; file "null.zone.file"; };
 zone "rivesandrives.com" { type master; notify no; file "null.zone.file"; };
 zone "rivestiti.com" { type master; notify no; file "null.zone.file"; };
+zone "rivoltaponteggi.com" { type master; notify no; file "null.zone.file"; };
 zone "riyafisheries.com.cp-51.webhostbox.net" { type master; notify no; file "null.zone.file"; };
 zone "riyanenterprise.com" { type master; notify no; file "null.zone.file"; };
 zone "riyanshoppingbags.com" { type master; notify no; file "null.zone.file"; };
@@ -57142,6 +57173,7 @@ zone "rsquareandco.com" { type master; notify no; file "null.zone.file"; };
 zone "rssansani.com" { type master; notify no; file "null.zone.file"; };
 zone "rssdefense.com" { type master; notify no; file "null.zone.file"; };
 zone "rstarserver17km.xyz" { type master; notify no; file "null.zone.file"; };
+zone "rstelectricals.com" { type master; notify no; file "null.zone.file"; };
 zone "rsterlingzmyrtice.xyz" { type master; notify no; file "null.zone.file"; };
 zone "rstrading.in" { type master; notify no; file "null.zone.file"; };
 zone "rsudpbari.palembang.go.id" { type master; notify no; file "null.zone.file"; };
@@ -57623,6 +57655,7 @@ zone "saepedra.com" { type master; notify no; file "null.zone.file"; };
 zone "safa.205dundas.com" { type master; notify no; file "null.zone.file"; };
 zone "safakteknoloji.com" { type master; notify no; file "null.zone.file"; };
 zone "safaniru.com" { type master; notify no; file "null.zone.file"; };
+zone "safarbekish.com" { type master; notify no; file "null.zone.file"; };
 zone "safari7.devitsandbox.com" { type master; notify no; file "null.zone.file"; };
 zone "safariet-zarzis.com" { type master; notify no; file "null.zone.file"; };
 zone "safarigold.com" { type master; notify no; file "null.zone.file"; };
@@ -57646,7 +57679,6 @@ zone "safelink.themeson.review" { type master; notify no; file "null.zone.file";
 zone "safelinks-protection.com" { type master; notify no; file "null.zone.file"; };
 zone "safemedicinaonline.com" { type master; notify no; file "null.zone.file"; };
 zone "safemoneyamerica.com" { type master; notify no; file "null.zone.file"; };
-zone "safentrix.com" { type master; notify no; file "null.zone.file"; };
 zone "saferoomreviews.com" { type master; notify no; file "null.zone.file"; };
 zone "safesalesnembutal.com" { type master; notify no; file "null.zone.file"; };
 zone "safesandsecurity.co.za" { type master; notify no; file "null.zone.file"; };
@@ -57725,12 +57757,14 @@ zone "sageth.net" { type master; notify no; file "null.zone.file"; };
 zone "sagiri.org" { type master; notify no; file "null.zone.file"; };
 zone "saglikbakanli-hediyeinternet.org" { type master; notify no; file "null.zone.file"; };
 zone "saglikbakanligi-destek.org" { type master; notify no; file "null.zone.file"; };
+zone "saglikbakanligi-destekportal.org" { type master; notify no; file "null.zone.file"; };
 zone "saglikbakanligi20gbinternet.com" { type master; notify no; file "null.zone.file"; };
 zone "saglikbakanligindanhediye20gb.com" { type master; notify no; file "null.zone.file"; };
 zone "saglikgoalapp.site" { type master; notify no; file "null.zone.file"; };
 zone "saglikliapp.live" { type master; notify no; file "null.zone.file"; };
 zone "sagliklibedenim.com" { type master; notify no; file "null.zone.file"; };
 zone "saglikodemelerinial.org" { type master; notify no; file "null.zone.file"; };
+zone "saglikramazan20bgb.net" { type master; notify no; file "null.zone.file"; };
 zone "sagrathi.com" { type master; notify no; file "null.zone.file"; };
 zone "sagunpapers.com" { type master; notify no; file "null.zone.file"; };
 zone "sahabathasyim.com" { type master; notify no; file "null.zone.file"; };
@@ -58458,6 +58492,7 @@ zone "sbs.ipeary.com" { type master; notify no; file "null.zone.file"; };
 zone "sbsbe.co.uk" { type master; notify no; file "null.zone.file"; };
 zone "sbspro.in" { type master; notify no; file "null.zone.file"; };
 zone "sbtabank.in" { type master; notify no; file "null.zone.file"; };
+zone "sbtasimacilik.com" { type master; notify no; file "null.zone.file"; };
 zone "sbtextiles.com" { type master; notify no; file "null.zone.file"; };
 zone "sbwellness.org" { type master; notify no; file "null.zone.file"; };
 zone "sc-tuning.de" { type master; notify no; file "null.zone.file"; };
@@ -59094,6 +59129,7 @@ zone "semashur10s.org" { type master; notify no; file "null.zone.file"; };
 zone "semassi.com" { type master; notify no; file "null.zone.file"; };
 zone "semayakas.com" { type master; notify no; file "null.zone.file"; };
 zone "sembako.manaira.store" { type master; notify no; file "null.zone.file"; };
+zone "semcoe.com" { type master; notify no; file "null.zone.file"; };
 zone "semenfedosov.ru" { type master; notify no; file "null.zone.file"; };
 zone "semengresik.co.id" { type master; notify no; file "null.zone.file"; };
 zone "semestr.by" { type master; notify no; file "null.zone.file"; };
@@ -59451,6 +59487,7 @@ zone "setfalc.com" { type master; notify no; file "null.zone.file"; };
 zone "setfireltd.com" { type master; notify no; file "null.zone.file"; };
 zone "sethoresg.com.br" { type master; notify no; file "null.zone.file"; };
 zone "sethpgoldstein.com" { type master; notify no; file "null.zone.file"; };
+zone "setiamanggalaabadi.com" { type master; notify no; file "null.zone.file"; };
 zone "setimosacramento.com.br" { type master; notify no; file "null.zone.file"; };
 zone "setincon.com" { type master; notify no; file "null.zone.file"; };
 zone "setit.ro" { type master; notify no; file "null.zone.file"; };
@@ -60256,7 +60293,6 @@ zone "si-hao.cn" { type master; notify no; file "null.zone.file"; };
 zone "sia-gmbh.de" { type master; notify no; file "null.zone.file"; };
 zone "siairport.com" { type master; notify no; file "null.zone.file"; };
 zone "siakad.brawijaya.ac.id" { type master; notify no; file "null.zone.file"; };
-zone "siakad.ub.ac.id" { type master; notify no; file "null.zone.file"; };
 zone "sial-healthcare.co.uk" { type master; notify no; file "null.zone.file"; };
 zone "sialkotgoods.com" { type master; notify no; file "null.zone.file"; };
 zone "sialkotmart.net" { type master; notify no; file "null.zone.file"; };
@@ -61788,6 +61824,7 @@ zone "sophiasuites-santorini.com" { type master; notify no; file "null.zone.file
 zone "sophiebarthelemy.fr" { type master; notify no; file "null.zone.file"; };
 zone "sophieguaremas.com" { type master; notify no; file "null.zone.file"; };
 zone "sophiethomasartist.com" { type master; notify no; file "null.zone.file"; };
+zone "sophis.biz" { type master; notify no; file "null.zone.file"; };
 zone "sophistproduction.com" { type master; notify no; file "null.zone.file"; };
 zone "sophro-zara.com" { type master; notify no; file "null.zone.file"; };
 zone "sophrologie-untempspourmoi.fr" { type master; notify no; file "null.zone.file"; };
@@ -62622,6 +62659,7 @@ zone "staging.westlondon-musictutors.co.uk" { type master; notify no; file "null
 zone "staging.wolseleyfamilyplace.com" { type master; notify no; file "null.zone.file"; };
 zone "staging.xdigitalstudio.com" { type master; notify no; file "null.zone.file"; };
 zone "staging1.xamadu.com" { type master; notify no; file "null.zone.file"; };
+zone "staging2.lifebiotic.com" { type master; notify no; file "null.zone.file"; };
 zone "staging3.agencyh.com" { type master; notify no; file "null.zone.file"; };
 zone "stagingmcr.cloudkami.com" { type master; notify no; file "null.zone.file"; };
 zone "stagingmcs.cloudkami.com" { type master; notify no; file "null.zone.file"; };
@@ -62655,6 +62693,7 @@ zone "staminaoptimism.co.kr" { type master; notify no; file "null.zone.file"; };
 zone "stamp2u.com.my" { type master; notify no; file "null.zone.file"; };
 zone "stampa3dplus.com" { type master; notify no; file "null.zone.file"; };
 zone "stampile-sibiu.ro" { type master; notify no; file "null.zone.file"; };
+zone "standardalloysindia.com" { type master; notify no; file "null.zone.file"; };
 zone "standardchartfinance.com.cp-45.webhostbox.net" { type master; notify no; file "null.zone.file"; };
 zone "standardpen.id" { type master; notify no; file "null.zone.file"; };
 zone "standardpopulation.icu" { type master; notify no; file "null.zone.file"; };
@@ -63801,6 +63840,7 @@ zone "sunshinemarketing.biz" { type master; notify no; file "null.zone.file"; };
 zone "sunshinevn.vn" { type master; notify no; file "null.zone.file"; };
 zone "sunshinewebsite.club" { type master; notify no; file "null.zone.file"; };
 zone "sunshinewondervillas.biz" { type master; notify no; file "null.zone.file"; };
+zone "sunsquare.fr" { type master; notify no; file "null.zone.file"; };
 zone "suntour.com.vn" { type master; notify no; file "null.zone.file"; };
 zone "suntreebearing.com" { type master; notify no; file "null.zone.file"; };
 zone "sunucuo.com" { type master; notify no; file "null.zone.file"; };
@@ -63909,7 +63949,6 @@ zone "support.homemakerideas.com" { type master; notify no; file "null.zone.file
 zone "support.imaitaly.biz" { type master; notify no; file "null.zone.file"; };
 zone "support.jbrueggemann.com" { type master; notify no; file "null.zone.file"; };
 zone "support.m2mservices.com" { type master; notify no; file "null.zone.file"; };
-zone "support.mdsol.com" { type master; notify no; file "null.zone.file"; };
 zone "support.nordenrecycling.com" { type master; notify no; file "null.zone.file"; };
 zone "support.pubg.com" { type master; notify no; file "null.zone.file"; };
 zone "support.redbook.aero" { type master; notify no; file "null.zone.file"; };
@@ -64326,7 +64365,6 @@ zone "systemagically.com" { type master; notify no; file "null.zone.file"; };
 zone "systemandcode.com" { type master; notify no; file "null.zone.file"; };
 zone "systematicsarl.com" { type master; notify no; file "null.zone.file"; };
 zone "systematm.com" { type master; notify no; file "null.zone.file"; };
-zone "systemgooglegooglegooglegooglegooglegoole.warzonedns.com" { type master; notify no; file "null.zone.file"; };
 zone "systemintergrafileexchangeserverprotocol.duckdns.org" { type master; notify no; file "null.zone.file"; };
 zone "systemmasterpage.com" { type master; notify no; file "null.zone.file"; };
 zone "systemmicroupdate.com" { type master; notify no; file "null.zone.file"; };
@@ -65903,6 +65941,7 @@ zone "textilesld.cluster020.hosting.ovh.net" { type master; notify no; file "nul
 zone "textilessudamericanos.com" { type master; notify no; file "null.zone.file"; };
 zone "textilesunrise.com" { type master; notify no; file "null.zone.file"; };
 zone "textilkopruch.com.br" { type master; notify no; file "null.zone.file"; };
+zone "texum-me.com" { type master; notify no; file "null.zone.file"; };
 zone "teyouhao.com" { type master; notify no; file "null.zone.file"; };
 zone "tfhvccny.com" { type master; notify no; file "null.zone.file"; };
 zone "tfile.7to.cn" { type master; notify no; file "null.zone.file"; };
@@ -65934,7 +65973,6 @@ zone "thaarcoffee.com" { type master; notify no; file "null.zone.file"; };
 zone "thacci.com.br" { type master; notify no; file "null.zone.file"; };
 zone "thachastew.com" { type master; notify no; file "null.zone.file"; };
 zone "thaddeusarmstrong.com" { type master; notify no; file "null.zone.file"; };
-zone "thadinnoo.co" { type master; notify no; file "null.zone.file"; };
 zone "thagreymatter.com" { type master; notify no; file "null.zone.file"; };
 zone "thai-pub.com" { type master; notify no; file "null.zone.file"; };
 zone "thaiascobrake.com" { type master; notify no; file "null.zone.file"; };
@@ -65998,7 +66036,6 @@ zone "tharsisfilms.com" { type master; notify no; file "null.zone.file"; };
 zone "thatavilellaoficial.com.br" { type master; notify no; file "null.zone.file"; };
 zone "thatoilchick.com" { type master; notify no; file "null.zone.file"; };
 zone "thats-amazing.com" { type master; notify no; file "null.zone.file"; };
-zone "thaus.to" { type master; notify no; file "null.zone.file"; };
 zone "thawani-pay.neomeric.us" { type master; notify no; file "null.zone.file"; };
 zone "thayvoiphone.vn" { type master; notify no; file "null.zone.file"; };
 zone "thc-annex.com" { type master; notify no; file "null.zone.file"; };
@@ -66056,6 +66093,7 @@ zone "thebackslant.com" { type master; notify no; file "null.zone.file"; };
 zone "thebackyardat60nyc.com" { type master; notify no; file "null.zone.file"; };
 zone "thebagforum.com" { type master; notify no; file "null.zone.file"; };
 zone "thebakingtree.com" { type master; notify no; file "null.zone.file"; };
+zone "theballardhouse.org" { type master; notify no; file "null.zone.file"; };
 zone "theballoon.asia" { type master; notify no; file "null.zone.file"; };
 zone "thebandofrivals.dreamhosters.com" { type master; notify no; file "null.zone.file"; };
 zone "thebaptistfoundationofca.com" { type master; notify no; file "null.zone.file"; };
@@ -66132,6 +66170,7 @@ zone "theclaridge.org" { type master; notify no; file "null.zone.file"; };
 zone "theclinicabarros.com" { type master; notify no; file "null.zone.file"; };
 zone "theclown.ca" { type master; notify no; file "null.zone.file"; };
 zone "theclub5.com" { type master; notify no; file "null.zone.file"; };
+zone "theclubmumbai.com" { type master; notify no; file "null.zone.file"; };
 zone "thecoachinglounge.net" { type master; notify no; file "null.zone.file"; };
 zone "thecoastaltimes.media" { type master; notify no; file "null.zone.file"; };
 zone "thecoastofhelpfoundation.org" { type master; notify no; file "null.zone.file"; };
@@ -66313,6 +66352,7 @@ zone "theinspiredblogger.com" { type master; notify no; file "null.zone.file"; }
 zone "theinspireddrive.com" { type master; notify no; file "null.zone.file"; };
 zone "theintelligencer.com.ng" { type master; notify no; file "null.zone.file"; };
 zone "theinvestmentinvestigator.com" { type master; notify no; file "null.zone.file"; };
+zone "theipgenerators.com" { type master; notify no; file "null.zone.file"; };
 zone "theirishhouse.dk" { type master; notify no; file "null.zone.file"; };
 zone "theiro.com" { type master; notify no; file "null.zone.file"; };
 zone "theisel.de" { type master; notify no; file "null.zone.file"; };
@@ -66433,6 +66473,7 @@ zone "themoonplease.com" { type master; notify no; file "null.zone.file"; };
 zone "themorgandollarcoin.com" { type master; notify no; file "null.zone.file"; };
 zone "themortgagefirm.ca" { type master; notify no; file "null.zone.file"; };
 zone "themortgagemom.co.uk" { type master; notify no; file "null.zone.file"; };
+zone "themotorcenter.com" { type master; notify no; file "null.zone.file"; };
 zone "themrimidnightclub.com" { type master; notify no; file "null.zone.file"; };
 zone "themuertitos.com" { type master; notify no; file "null.zone.file"; };
 zone "themusae.com" { type master; notify no; file "null.zone.file"; };
@@ -67573,6 +67614,7 @@ zone "toramanlar.com.tr" { type master; notify no; file "null.zone.file"; };
 zone "torbat-h.persiangig.com" { type master; notify no; file "null.zone.file"; };
 zone "toresu.net" { type master; notify no; file "null.zone.file"; };
 zone "torfinn.com" { type master; notify no; file "null.zone.file"; };
+zone "torfsgebroeders.eu" { type master; notify no; file "null.zone.file"; };
 zone "torg-master.pro" { type master; notify no; file "null.zone.file"; };
 zone "torginvest.ru.com" { type master; notify no; file "null.zone.file"; };
 zone "torishima-qa.com" { type master; notify no; file "null.zone.file"; };
@@ -68040,6 +68082,7 @@ zone "treehugginpussy.de" { type master; notify no; file "null.zone.file"; };
 zone "treesguru.com" { type master; notify no; file "null.zone.file"; };
 zone "treesurveys.infrontdesigns.com" { type master; notify no; file "null.zone.file"; };
 zone "trefiart.com.br" { type master; notify no; file "null.zone.file"; };
+zone "trefzer-it.de" { type master; notify no; file "null.zone.file"; };
 zone "trehoada2.ballybeauty.vn" { type master; notify no; file "null.zone.file"; };
 zone "trehoadatoanthan.info" { type master; notify no; file "null.zone.file"; };
 zone "trehoadatoanthan.net" { type master; notify no; file "null.zone.file"; };
@@ -68481,6 +68524,7 @@ zone "tuneldeviento.es" { type master; notify no; file "null.zone.file"; };
 zone "tunerg.com" { type master; notify no; file "null.zone.file"; };
 zone "tunerl.cn" { type master; notify no; file "null.zone.file"; };
 zone "tuneup.ibk.me" { type master; notify no; file "null.zone.file"; };
+zone "tunggalmandiri.com" { type master; notify no; file "null.zone.file"; };
 zone "tuningshop.ro" { type master; notify no; file "null.zone.file"; };
 zone "tunisia-school.com" { type master; notify no; file "null.zone.file"; };
 zone "tunisiagulf.com" { type master; notify no; file "null.zone.file"; };
@@ -68570,6 +68614,7 @@ zone "tutranquilo.com.co" { type master; notify no; file "null.zone.file"; };
 zone "tuttimare.com.br" { type master; notify no; file "null.zone.file"; };
 zone "tuttoirc.net" { type master; notify no; file "null.zone.file"; };
 zone "tuttopizzas.cl" { type master; notify no; file "null.zone.file"; };
+zone "tuttosteopatia.it" { type master; notify no; file "null.zone.file"; };
 zone "tuttotenda.it" { type master; notify no; file "null.zone.file"; };
 zone "tuttoutu.com" { type master; notify no; file "null.zone.file"; };
 zone "tuttyguru.com" { type master; notify no; file "null.zone.file"; };
@@ -68583,6 +68628,7 @@ zone "tuvandauthau.net" { type master; notify no; file "null.zone.file"; };
 zone "tuvandoanhnghiep.org" { type master; notify no; file "null.zone.file"; };
 zone "tuvanduhocdaiviet.com.vn" { type master; notify no; file "null.zone.file"; };
 zone "tuvanduhocduc.org" { type master; notify no; file "null.zone.file"; };
+zone "tuvanduhocmap.com" { type master; notify no; file "null.zone.file"; };
 zone "tuvangamenet.com" { type master; notify no; file "null.zone.file"; };
 zone "tuvangioitinh.com" { type master; notify no; file "null.zone.file"; };
 zone "tuvanluat.vn" { type master; notify no; file "null.zone.file"; };
@@ -69600,11 +69646,9 @@ zone "ury8297ridowoury833oe.com" { type master; notify no; file "null.zone.file"
 zone "urzedniczatv.pl" { type master; notify no; file "null.zone.file"; };
 zone "us-defense-department.ml" { type master; notify no; file "null.zone.file"; };
 zone "us-trans.ru" { type master; notify no; file "null.zone.file"; };
-zone "us-west-2.protection.sophos.com" { type master; notify no; file "null.zone.file"; };
 zone "us.cdn.persiangig.com" { type master; notify no; file "null.zone.file"; };
 zone "us.gsearch.com.de" { type master; notify no; file "null.zone.file"; };
 zone "us.hostiso.cloud" { type master; notify no; file "null.zone.file"; };
-zone "us2.campaign-archive.com" { type master; notify no; file "null.zone.file"; };
 zone "us5interclub.cba.pl" { type master; notify no; file "null.zone.file"; };
 zone "usa-lenders.com" { type master; notify no; file "null.zone.file"; };
 zone "usa-market.org" { type master; notify no; file "null.zone.file"; };
@@ -70203,6 +70247,7 @@ zone "velasmeralda.it" { type master; notify no; file "null.zone.file"; };
 zone "velassantos.com.br" { type master; notify no; file "null.zone.file"; };
 zone "velatoursrls.com" { type master; notify no; file "null.zone.file"; };
 zone "veldhuizenwonen.nl" { type master; notify no; file "null.zone.file"; };
+zone "velerobeach.com" { type master; notify no; file "null.zone.file"; };
 zone "velerosa.it" { type master; notify no; file "null.zone.file"; };
 zone "velimir-grgic.com" { type master; notify no; file "null.zone.file"; };
 zone "velisnackindonesia.com" { type master; notify no; file "null.zone.file"; };
@@ -70788,7 +70833,6 @@ zone "vip-rocket.net" { type master; notify no; file "null.zone.file"; };
 zone "vip-watch.store" { type master; notify no; file "null.zone.file"; };
 zone "vip.lijinxi.com" { type master; notify no; file "null.zone.file"; };
 zone "vip.maohuagong.com" { type master; notify no; file "null.zone.file"; };
-zone "vip.muabannhanh.com" { type master; notify no; file "null.zone.file"; };
 zone "vip.recommendedtoyoo.com" { type master; notify no; file "null.zone.file"; };
 zone "vip.zbfcxx.cn" { type master; notify no; file "null.zone.file"; };
 zone "vip163.cf" { type master; notify no; file "null.zone.file"; };
@@ -71061,6 +71105,7 @@ zone "vizk2.ug" { type master; notify no; file "null.zone.file"; };
 zone "viztarinfotech.com" { type master; notify no; file "null.zone.file"; };
 zone "vjarenouy.email" { type master; notify no; file "null.zone.file"; };
 zone "vjencanjazagreb.hr" { type master; notify no; file "null.zone.file"; };
+zone "vjhascv.ru" { type master; notify no; file "null.zone.file"; };
 zone "vjjb.cn" { type master; notify no; file "null.zone.file"; };
 zone "vjqsdq.am.files.1drv.com" { type master; notify no; file "null.zone.file"; };
 zone "vjsingh.info" { type master; notify no; file "null.zone.file"; };
@@ -71424,7 +71469,6 @@ zone "w-wolf.de" { type master; notify no; file "null.zone.file"; };
 zone "w.amendserver.com" { type master; notify no; file "null.zone.file"; };
 zone "w.lazer-n.com" { type master; notify no; file "null.zone.file"; };
 zone "w.outletonline-michaelkors.com" { type master; notify no; file "null.zone.file"; };
-zone "w.zhzy999.net" { type master; notify no; file "null.zone.file"; };
 zone "w04.jujingdao.com" { type master; notify no; file "null.zone.file"; };
 zone "w077775.blob2.ge.tt" { type master; notify no; file "null.zone.file"; };
 zone "w0alqa.dm.files.1drv.com" { type master; notify no; file "null.zone.file"; };
@@ -71634,7 +71678,6 @@ zone "wartazone.com" { type master; notify no; file "null.zone.file"; };
 zone "wartini.de" { type master; notify no; file "null.zone.file"; };
 zone "warunknasakita.co.id" { type master; notify no; file "null.zone.file"; };
 zone "warwickvalleyliving.com" { type master; notify no; file "null.zone.file"; };
-zone "warzonedns.com" { type master; notify no; file "null.zone.file"; };
 zone "warzonesecure.com" { type master; notify no; file "null.zone.file"; };
 zone "was-studio.com" { type master; notify no; file "null.zone.file"; };
 zone "wasama.org" { type master; notify no; file "null.zone.file"; };
@@ -71821,6 +71864,7 @@ zone "web.emsfabrik.de" { type master; notify no; file "null.zone.file"; };
 zone "web.gotham.com.au" { type master; notify no; file "null.zone.file"; };
 zone "web.hfsistemas.com" { type master; notify no; file "null.zone.file"; };
 zone "web.ismt.pt" { type master; notify no; file "null.zone.file"; };
+zone "web.lavishsupplystore.com" { type master; notify no; file "null.zone.file"; };
 zone "web.muasam360.com" { type master; notify no; file "null.zone.file"; };
 zone "web.pa-cirebon.go.id" { type master; notify no; file "null.zone.file"; };
 zone "web.plf.vn" { type master; notify no; file "null.zone.file"; };
@@ -72218,7 +72262,6 @@ zone "wertedits.com" { type master; notify no; file "null.zone.file"; };
 zone "wertios.com" { type master; notify no; file "null.zone.file"; };
 zone "werwrewrkv.ru" { type master; notify no; file "null.zone.file"; };
 zone "werycloud.website" { type master; notify no; file "null.zone.file"; };
-zone "wesco.com" { type master; notify no; file "null.zone.file"; };
 zone "wesconsultants.com" { type master; notify no; file "null.zone.file"; };
 zone "weseleopole.pl" { type master; notify no; file "null.zone.file"; };
 zone "weservehosting.net" { type master; notify no; file "null.zone.file"; };
@@ -72259,6 +72302,7 @@ zone "westminster.edu.vn" { type master; notify no; file "null.zone.file"; };
 zone "westnilepress.org" { type master; notify no; file "null.zone.file"; };
 zone "westonslidingdoorrepair.com" { type master; notify no; file "null.zone.file"; };
 zone "westpalmbeachgaragedoorrepair.com" { type master; notify no; file "null.zone.file"; };
+zone "westportshipping.com" { type master; notify no; file "null.zone.file"; };
 zone "westseattlenailsalon.com" { type master; notify no; file "null.zone.file"; };
 zone "westsideresources.org" { type master; notify no; file "null.zone.file"; };
 zone "weststop.ro" { type master; notify no; file "null.zone.file"; };
@@ -72542,7 +72586,6 @@ zone "wimkegravestein.nl" { type master; notify no; file "null.zone.file"; };
 zone "wimpiebarnard.co.za" { type master; notify no; file "null.zone.file"; };
 zone "win-best.com.hk" { type master; notify no; file "null.zone.file"; };
 zone "win-speed.com" { type master; notify no; file "null.zone.file"; };
-zone "win.tue.nl" { type master; notify no; file "null.zone.file"; };
 zone "win1more.com" { type master; notify no; file "null.zone.file"; };
 zone "win32.x10host.com" { type master; notify no; file "null.zone.file"; };
 zone "winactive.host" { type master; notify no; file "null.zone.file"; };
@@ -72558,7 +72601,6 @@ zone "wincoair.com" { type master; notify no; file "null.zone.file"; };
 zone "wind0wsactivator.host" { type master; notify no; file "null.zone.file"; };
 zone "wind7.ru" { type master; notify no; file "null.zone.file"; };
 zone "windailygh.com" { type master; notify no; file "null.zone.file"; };
-zone "windefenderprotectedwindefendergooglegmail.warzonedns.com" { type master; notify no; file "null.zone.file"; };
 zone "windfarmdevelopments.co.nz" { type master; notify no; file "null.zone.file"; };
 zone "windmedbiolife.com" { type master; notify no; file "null.zone.file"; };
 zone "windmillhill.school" { type master; notify no; file "null.zone.file"; };
@@ -72593,6 +72635,7 @@ zone "winebiddingthailand.com" { type master; notify no; file "null.zone.file";
 zone "winecorkartist.com" { type master; notify no; file "null.zone.file"; };
 zone "winefly.net" { type master; notify no; file "null.zone.file"; };
 zone "winefriend.co.za" { type master; notify no; file "null.zone.file"; };
+zone "winenews.it" { type master; notify no; file "null.zone.file"; };
 zone "wineswap.com.au" { type master; notify no; file "null.zone.file"; };
 zone "winetourism.soprexdev.com" { type master; notify no; file "null.zone.file"; };
 zone "winett.net" { type master; notify no; file "null.zone.file"; };
@@ -72751,7 +72794,6 @@ zone "wmdcustoms.com" { type master; notify no; file "null.zone.file"; };
 zone "wmebbiz.co.za" { type master; notify no; file "null.zone.file"; };
 zone "wmf.desevens.com.ng" { type master; notify no; file "null.zone.file"; };
 zone "wmg128.com" { type master; notify no; file "null.zone.file"; };
-zone "wmi.1217bye.host" { type master; notify no; file "null.zone.file"; };
 zone "wmkatz.com" { type master; notify no; file "null.zone.file"; };
 zone "wmo-raad.inov.me" { type master; notify no; file "null.zone.file"; };
 zone "wmpatagonia.cl" { type master; notify no; file "null.zone.file"; };
@@ -72805,6 +72847,7 @@ zone "womenempowermentpakistan.com" { type master; notify no; file "null.zone.fi
 zone "womenhealth.aureliusconferences.com" { type master; notify no; file "null.zone.file"; };
 zone "womenindeed.org" { type master; notify no; file "null.zone.file"; };
 zone "womeninwealthinc.com" { type master; notify no; file "null.zone.file"; };
+zone "womenofimpactt.com" { type master; notify no; file "null.zone.file"; };
 zone "womenofthebibleonline.com" { type master; notify no; file "null.zone.file"; };
 zone "womensbathingsuit.com" { type master; notify no; file "null.zone.file"; };
 zone "womenshospital.in" { type master; notify no; file "null.zone.file"; };
@@ -72924,7 +72967,6 @@ zone "work.kromedout.com" { type master; notify no; file "null.zone.file"; };
 zone "work.vexacom.com" { type master; notify no; file "null.zone.file"; };
 zone "work4sales.com" { type master; notify no; file "null.zone.file"; };
 zone "work707.work" { type master; notify no; file "null.zone.file"; };
-zone "workbigfinetonychuckgoodallarefinezynovaexploitgood.warzonedns.com" { type master; notify no; file "null.zone.file"; };
 zone "workbus.ru" { type master; notify no; file "null.zone.file"; };
 zone "workcompoptions.com" { type master; notify no; file "null.zone.file"; };
 zone "workd.ru" { type master; notify no; file "null.zone.file"; };
@@ -73135,7 +73177,6 @@ zone "wpdev.hooshmarketing.com" { type master; notify no; file "null.zone.file";
 zone "wpdev.strativ-support.se" { type master; notify no; file "null.zone.file"; };
 zone "wpdev.ted.solutions" { type master; notify no; file "null.zone.file"; };
 zone "wpdev.ztickerz.io" { type master; notify no; file "null.zone.file"; };
-zone "wpengine.zendesk.com" { type master; notify no; file "null.zone.file"; };
 zone "wpgtxdtgifr.ga" { type master; notify no; file "null.zone.file"; };
 zone "wpldjxxxua.ga" { type master; notify no; file "null.zone.file"; };
 zone "wpmagian.com" { type master; notify no; file "null.zone.file"; };
@@ -73348,6 +73389,7 @@ zone "wz-architekten.de" { type master; notify no; file "null.zone.file"; };
 zone "wz6.com.cn" { type master; notify no; file "null.zone.file"; };
 zone "wzgysg.com" { type master; notify no; file "null.zone.file"; };
 zone "wzjp.boyuberq.ru" { type master; notify no; file "null.zone.file"; };
+zone "wzlegal.com" { type master; notify no; file "null.zone.file"; };
 zone "wzry173.com" { type master; notify no; file "null.zone.file"; };
 zone "wzrysp.com" { type master; notify no; file "null.zone.file"; };
 zone "wzsfkq.dm.files.1drv.com" { type master; notify no; file "null.zone.file"; };
@@ -75192,7 +75234,6 @@ zone "zhuti.freexulai.com" { type master; notify no; file "null.zone.file"; };
 zone "zhwaike.com" { type master; notify no; file "null.zone.file"; };
 zone "zhwq1216.com" { type master; notify no; file "null.zone.file"; };
 zone "zhycron.com.br" { type master; notify no; file "null.zone.file"; };
-zone "zhzy999.net" { type master; notify no; file "null.zone.file"; };
 zone "ziadonline.com" { type master; notify no; file "null.zone.file"; };
 zone "ziancontinental.ro" { type master; notify no; file "null.zone.file"; };
 zone "ziarulrevolutionarul.ro" { type master; notify no; file "null.zone.file"; };
@@ -75338,7 +75379,6 @@ zone "zonacomforta.com" { type master; notify no; file "null.zone.file"; };
 zone "zonadeseguridad.mx" { type master; notify no; file "null.zone.file"; };
 zone "zonadeseguridad.net" { type master; notify no; file "null.zone.file"; };
 zone "zonamarketingdigital.online" { type master; notify no; file "null.zone.file"; };
-zone "zonamusicex.com" { type master; notify no; file "null.zone.file"; };
 zone "zonaykan.com" { type master; notify no; file "null.zone.file"; };
 zone "zone-812.ml" { type master; notify no; file "null.zone.file"; };
 zone "zone3.de" { type master; notify no; file "null.zone.file"; };
@@ -75473,7 +75513,6 @@ zone "zyd1.com" { type master; notify no; file "null.zone.file"; };
 zone "zykj.shop" { type master; notify no; file "null.zone.file"; };
 zone "zylokk.000webhostapp.com" { type master; notify no; file "null.zone.file"; };
 zone "zymogen.net" { type master; notify no; file "null.zone.file"; };
-zone "zyncxxcciidiiudfisuifsiufusdfisdisifidfisuifisfisifisu.warzonedns.com" { type master; notify no; file "null.zone.file"; };
 zone "zypeujun.ru" { type master; notify no; file "null.zone.file"; };
 zone "zyr.co.jp" { type master; notify no; file "null.zone.file"; };
 zone "zyrstststzzxccxccddfgdd.duckdns.org" { type master; notify no; file "null.zone.file"; };
diff --git a/urlhaus-filter-dnsmasq-online.conf b/urlhaus-filter-dnsmasq-online.conf
index 704d9c8f..709534e1 100644
--- a/urlhaus-filter-dnsmasq-online.conf
+++ b/urlhaus-filter-dnsmasq-online.conf
@@ -1,17 +1,13 @@
 # Title: abuse.ch URLhaus Malicious Domains dnsmasq Blocklist
-# Updated: Tue, 05 May 2020 00:09:52 UTC
+# Updated: Tue, 05 May 2020 12:09:42 UTC
 # Repo: https://gitlab.com/curben/urlhaus-filter
 # License: https://creativecommons.org/publicdomain/zero/1.0/
 # Source: https://urlhaus.abuse.ch/api/
 address=/13pope.com/0.0.0.0
 address=/150.co.il/0.0.0.0
-address=/2.indexsinas.me/0.0.0.0
 address=/2000kumdo.com/0.0.0.0
 address=/21robo.com/0.0.0.0
 address=/224001.selcdn.ru/0.0.0.0
-address=/3.zhzy999.net/0.0.0.0
-address=/3.zhzy999.net3.zhzy999.net/0.0.0.0
-address=/31639.xc.mieseng.com/0.0.0.0
 address=/3mandatesmedia.com/0.0.0.0
 address=/3ypackaging.com/0.0.0.0
 address=/402musicfest.com/0.0.0.0
@@ -19,8 +15,10 @@ address=/49parallel.ca/0.0.0.0
 address=/786suncity.com/0.0.0.0
 address=/8133msc.com/0.0.0.0
 address=/8200msc.com/0.0.0.0
+address=/87du.vip/0.0.0.0
 address=/887sconline.com/0.0.0.0
 address=/88mscco.com/0.0.0.0
+address=/SnackFreebie.com/0.0.0.0
 address=/a-reality.co.uk/0.0.0.0
 address=/aaasolution.co.th/0.0.0.0
 address=/aaload05.top/0.0.0.0
@@ -28,11 +26,11 @@ address=/accessyouraudience.com/0.0.0.0
 address=/acdesignhub.com/0.0.0.0
 address=/acteon.com.ar/0.0.0.0
 address=/activecost.com.au/0.0.0.0
+address=/adamtcarruthers.com/0.0.0.0
 address=/adnquocte.com/0.0.0.0
 address=/aelogica.com/0.0.0.0
 address=/agiandsam.com/0.0.0.0
 address=/agipasesores.com/0.0.0.0
-address=/agsir.com/0.0.0.0
 address=/aite.me/0.0.0.0
 address=/ajibolarilwan.com/0.0.0.0
 address=/al-wahd.com/0.0.0.0
@@ -43,20 +41,19 @@ address=/alexbase.com/0.0.0.0
 address=/alexwacker.com/0.0.0.0
 address=/algorithmshargh.com/0.0.0.0
 address=/allloveseries.com/0.0.0.0
-address=/alnahrainfilminstitute.com/0.0.0.0
 address=/alohasoftware.net/0.0.0.0
 address=/alphaconsumer.net/0.0.0.0
 address=/am-concepts.ca/0.0.0.0
 address=/amd.alibuf.com/0.0.0.0
+address=/amedeoscognamiglio.329263.com/0.0.0.0
 address=/amemarine.co.th/0.0.0.0
 address=/americanrange.com/0.0.0.0
 address=/anadolutatili.com/0.0.0.0
-address=/anamikaindanegas.in/0.0.0.0
 address=/andreelapeyre.com/0.0.0.0
 address=/andremaraisbeleggings.co.za/0.0.0.0
 address=/angiathinh.com/0.0.0.0
+address=/angthong.nfe.go.th/0.0.0.0
 address=/ansarihospital.in/0.0.0.0
-address=/anuragsharma.co.in/0.0.0.0
 address=/anvietpro.com/0.0.0.0
 address=/anysbergbiltong.co.za/0.0.0.0
 address=/aoujlift.ir/0.0.0.0
@@ -64,12 +61,12 @@ address=/apartdelpinar.com.ar/0.0.0.0
 address=/apoolcondo.com/0.0.0.0
 address=/apware.co.kr/0.0.0.0
 address=/archiv.bg/0.0.0.0
-address=/arcticprospectus.com/0.0.0.0
 address=/areac-agr.com/0.0.0.0
 address=/aresorganics.com/0.0.0.0
+address=/arowanafishforsale.com/0.0.0.0
 address=/ascentive.com/0.0.0.0
-address=/ashoakacharya.com/0.0.0.0
 address=/askarindo.or.id/0.0.0.0
+address=/askmufti.org/0.0.0.0
 address=/atfile.com/0.0.0.0
 address=/atomlines.com/0.0.0.0
 address=/attach.66rpg.com/0.0.0.0
@@ -83,29 +80,29 @@ address=/aznetsolutions.com/0.0.0.0
 address=/azureautomation.co.uk/0.0.0.0
 address=/azzd.co.kr/0.0.0.0
 address=/babaroadways.in/0.0.0.0
-address=/backlinksale.com/0.0.0.0
-address=/badgesforbullies.org/0.0.0.0
 address=/bamakobleach.free.fr/0.0.0.0
 address=/bangkok-orchids.com/0.0.0.0
 address=/banzaimonkey.com/0.0.0.0
 address=/bapo.granudan.cn/0.0.0.0
+address=/baritaco.com/0.0.0.0
 address=/baybars.xyz/0.0.0.0
 address=/bbs.sunwy.org/0.0.0.0
 address=/bbs1.marisfrolg.com/0.0.0.0
 address=/bd11.52lishi.com/0.0.0.0
 address=/bd12.52lishi.com/0.0.0.0
 address=/bd18.52lishi.com/0.0.0.0
-address=/bd19.52lishi.com/0.0.0.0
 address=/beibei.xx007.cc/0.0.0.0
 address=/bepgroup.com.hk/0.0.0.0
 address=/besserblok-ufa.ru/0.0.0.0
 address=/besttasimacilik.com.tr/0.0.0.0
+address=/beta.pterosol.com/0.0.0.0
 address=/bflow.security-portal.cz/0.0.0.0
 address=/bigdealist.com/0.0.0.0
 address=/bildeboks.no/0.0.0.0
 address=/bilim-pavlodar.gov.kz/0.0.0.0
 address=/billieellish.org/0.0.0.0
 address=/bingxiong.vip/0.0.0.0
+address=/bistlearn.ir/0.0.0.0
 address=/bjkumdo.com/0.0.0.0
 address=/blog.241optical.com/0.0.0.0
 address=/blog.hanxe.com/0.0.0.0
@@ -118,9 +115,11 @@ address=/brbs.customer.netspace.net.au/0.0.0.0
 address=/brewmethods.com/0.0.0.0
 address=/btlocum.pl/0.0.0.0
 address=/bugansavings.com/0.0.0.0
+address=/bxbx28.cn/0.0.0.0
 address=/byqkdy.com/0.0.0.0
 address=/c.vvvvvvvvv.ga/0.0.0.0
 address=/cameli.vn/0.0.0.0
+address=/campana20gb.com/0.0.0.0
 address=/canaan.io/0.0.0.0
 address=/canmivback.biz/0.0.0.0
 address=/caravella.com.br/0.0.0.0
@@ -128,6 +127,7 @@ address=/cassovia.sk/0.0.0.0
 address=/castmart.ga/0.0.0.0
 address=/cbk.m.dodo52.com/0.0.0.0
 address=/ccnn.xiaomier.cn/0.0.0.0
+address=/cdn-10049480.file.myqcloud.com/0.0.0.0
 address=/cdn.truelife.vn/0.0.0.0
 address=/cdn.xiaoduoai.com/0.0.0.0
 address=/cdnus.laboratoryconecpttoday.com/0.0.0.0
@@ -148,17 +148,17 @@ address=/chipmarkets.com/0.0.0.0
 address=/chiptune.com/0.0.0.0
 address=/chj.m.dodo52.com/0.0.0.0
 address=/chuckweiss.com/0.0.0.0
-address=/cista-dobra-voda.com/0.0.0.0
 address=/clareiamente.clareiamente.com/0.0.0.0
 address=/clearwaterriveroutfitting.com/0.0.0.0
 address=/client.yaap.co.uk/0.0.0.0
 address=/clinicamariademolina.com/0.0.0.0
 address=/cloud-server-updater2.co.za/0.0.0.0
-address=/compesat.com/0.0.0.0
+address=/colourcreative.co.za/0.0.0.0
 address=/complan.hu/0.0.0.0
 address=/complanbt.hu/0.0.0.0
 address=/comtechadsl.com/0.0.0.0
 address=/config.kuaisousou.top/0.0.0.0
+address=/config.wwmhdq.com/0.0.0.0
 address=/consultingcy.com/0.0.0.0
 address=/counciloflight.bravepages.com/0.0.0.0
 address=/cqjcc.org/0.0.0.0
@@ -166,12 +166,9 @@ address=/crittersbythebay.com/0.0.0.0
 address=/cryline.net/0.0.0.0
 address=/csnserver.com/0.0.0.0
 address=/csw.hu/0.0.0.0
-address=/cuacuonsieure.com/0.0.0.0
 address=/cvc.com.pl/0.0.0.0
 address=/cyclomove.com/0.0.0.0
 address=/czsl.91756.cn/0.0.0.0
-address=/d3.99ddd.com/0.0.0.0
-address=/d9.99ddd.com/0.0.0.0
 address=/da.alibuf.com/0.0.0.0
 address=/daithanhphung.com/0.0.0.0
 address=/danielbastos.com/0.0.0.0
@@ -195,10 +192,10 @@ address=/dev1.xicom.us/0.0.0.0
 address=/dev5.mypagevn.com/0.0.0.0
 address=/dezcom.com/0.0.0.0
 address=/dfcf.91756.cn/0.0.0.0
-address=/dfd.zhzy999.net/0.0.0.0
 address=/dfzm.91756.cn/0.0.0.0
 address=/dgecolesdepolice.bf/0.0.0.0
 address=/dgnj.cn/0.0.0.0
+address=/dhlservices.duckdns.org/0.0.0.0
 address=/diazavendano.cl/0.0.0.0
 address=/dichvuvesinhcongnghiep.top/0.0.0.0
 address=/dienmaycu.vn/0.0.0.0
@@ -210,26 +207,25 @@ address=/ditec.com.my/0.0.0.0
 address=/divinevacations.in/0.0.0.0
 address=/dkw-engineering.net/0.0.0.0
 address=/dl-gameplayer.dmm.com/0.0.0.0
-address=/dl.1003b.56a.com/0.0.0.0
 address=/dl.198424.com/0.0.0.0
 address=/dl.dzqzd.com/0.0.0.0
-address=/dl.kuaile-u.com/0.0.0.0
-address=/dl2.soft-lenta.ru/0.0.0.0
+address=/dl.iqilie.com/0.0.0.0
 address=/dlist.iqilie.com/0.0.0.0
 address=/dmresor.se/0.0.0.0
 address=/dnn.alibuf.com/0.0.0.0
 address=/dns.alibuf.com/0.0.0.0
 address=/dodsonimaging.com/0.0.0.0
 address=/don.viameventos.com.br/0.0.0.0
+address=/dongiln.co/0.0.0.0
 address=/donmago.com/0.0.0.0
 address=/donoffermaster.best/0.0.0.0
 address=/doostansocks.ir/0.0.0.0
 address=/doransky.info/0.0.0.0
-address=/dosame.com/0.0.0.0
 address=/down.ancamera.co.kr/0.0.0.0
 address=/down.gogominer.com/0.0.0.0
 address=/down.haote.com/0.0.0.0
 address=/down.pcclear.com/0.0.0.0
+address=/down.pdflist.cqhbkjzx.com/0.0.0.0
 address=/down.startools.co.kr/0.0.0.0
 address=/down.tgjkbx.cn/0.0.0.0
 address=/down.upzxt.com/0.0.0.0
@@ -251,14 +247,12 @@ address=/dpeasesummithilltoppers.pbworks.com/0.0.0.0
 address=/dr080.com/0.0.0.0
 address=/dralpaslan.com/0.0.0.0
 address=/dreamfile.club/0.0.0.0
-address=/drivolani.us/0.0.0.0
 address=/drools-moved.46999.n3.nabble.com/0.0.0.0
 address=/druzim.freewww.biz/0.0.0.0
 address=/dsiun.com/0.0.0.0
 address=/dtsay.xyz/0.0.0.0
 address=/dudulm.com/0.0.0.0
 address=/dusdn.mireene.com/0.0.0.0
-address=/dw.58wangdun.com/0.0.0.0
 address=/dx.qqyewu.com/0.0.0.0
 address=/dx1.qqtn.com/0.0.0.0
 address=/dx2.qqtn.com/0.0.0.0
@@ -267,7 +261,9 @@ address=/dx60.siweidaoxiang.com/0.0.0.0
 address=/dzinestudio87.co.uk/0.0.0.0
 address=/e.dangeana.com/0.0.0.0
 address=/easydown.workday360.cn/0.0.0.0
+address=/ebook.w3wvg.com/0.0.0.0
 address=/edicolanazionale.it/0.0.0.0
+address=/elokshinproperty.co.za/0.0.0.0
 address=/emir-elbahr.com/0.0.0.0
 address=/enc-tech.com/0.0.0.0
 address=/energisegroup.com/0.0.0.0
@@ -276,21 +272,20 @@ address=/er-bulisguvenligi.com/0.0.0.0
 address=/ermekanik.com/0.0.0.0
 address=/esolvent.pl/0.0.0.0
 address=/esteteam.org/0.0.0.0
+address=/exposvision.com/0.0.0.0
 address=/ezfintechcorp.com/0.0.0.0
 address=/fafhoafouehfuh.su/0.0.0.0
-address=/fairyqueenstore.com/0.0.0.0
 address=/fastsoft.onlinedown.net/0.0.0.0
 address=/fazi.pl/0.0.0.0
-address=/fedsfmr.ru/0.0.0.0
 address=/fenoma.net/0.0.0.0
 address=/ffv322.ru/0.0.0.0
 address=/ffv32223.ru/0.0.0.0
 address=/fidiag.kymco.com/0.0.0.0
+address=/fifa555easy.329263.com/0.0.0.0
 address=/figuig.net/0.0.0.0
 address=/fileco.jobkorea.co.kr/0.0.0.0
 address=/filen3.utengine.co.kr/0.0.0.0
 address=/filen5.utengine.co.kr/0.0.0.0
-address=/files.fqapps.com/0.0.0.0
 address=/files.rakbot.ru/0.0.0.0
 address=/files6.uludagbilisim.com/0.0.0.0
 address=/fishingbigstore.com/0.0.0.0
@@ -298,7 +293,6 @@ address=/fitmanacademy.com/0.0.0.0
 address=/fkd.derpcity.ru/0.0.0.0
 address=/flex.ru/0.0.0.0
 address=/flood-protection.org/0.0.0.0
-address=/fmjstorage.com/0.0.0.0
 address=/fordlamdong.com.vn/0.0.0.0
 address=/foreverprecious.org/0.0.0.0
 address=/foxfennecs.com/0.0.0.0
@@ -307,21 +301,20 @@ address=/fte.m.dodo52.com/0.0.0.0
 address=/ftpcnc-p2sp.pconline.com.cn/0.0.0.0
 address=/ftpftpftp.com/0.0.0.0
 address=/funletters.net/0.0.0.0
+address=/funpartyrent.com/0.0.0.0
 address=/futuregraphics.com.ar/0.0.0.0
-address=/g.7230.com/0.0.0.0
 address=/g0ogle.free.fr/0.0.0.0
+address=/gainsdirectory.com/0.0.0.0
 address=/galuhtea.com/0.0.0.0
 address=/gamee.top/0.0.0.0
+address=/garage.themebuffets.com/0.0.0.0
 address=/garenanow.myvnc.com/0.0.0.0
 address=/garenanow4.myvnc.com/0.0.0.0
 address=/gargiulo.com.ar/0.0.0.0
 address=/gateway-heide.de/0.0.0.0
 address=/gateway.ethlqd.com/0.0.0.0
-address=/gd2.greenxf.com/0.0.0.0
 address=/genesisconstruction.co.za/0.0.0.0
 address=/germistonmiraclecentre.co.za/0.0.0.0
-address=/getfashionmania.com/0.0.0.0
-address=/ghislain.dartois.pagesperso-orange.fr/0.0.0.0
 address=/ghwls44.gabia.io/0.0.0.0
 address=/gimscompany.com/0.0.0.0
 address=/glitzygal.net/0.0.0.0
@@ -331,8 +324,6 @@ address=/gnimelf.net/0.0.0.0
 address=/go.xsuad.com/0.0.0.0
 address=/gocanada.vn/0.0.0.0
 address=/google.ghststr.com/0.0.0.0
-address=/gopala.es/0.0.0.0
-address=/gov.kr/0.0.0.0
 address=/govhotel.us/0.0.0.0
 address=/grafchekloder.rebatesrule.net/0.0.0.0
 address=/granportale.com.br/0.0.0.0
@@ -340,7 +331,6 @@ address=/green100.cn/0.0.0.0
 address=/greenfood.sa.com/0.0.0.0
 address=/greenleaveperu.com/0.0.0.0
 address=/gssgroups.com/0.0.0.0
-address=/gx-10012947.file.myqcloud.com/0.0.0.0
 address=/habbotips.free.fr/0.0.0.0
 address=/hagebakken.no/0.0.0.0
 address=/halcat.com/0.0.0.0
@@ -348,7 +338,6 @@ address=/hanaphoto.co.kr/0.0.0.0
 address=/handrush.com/0.0.0.0
 address=/hanoihub.vn/0.0.0.0
 address=/hazel-azure.co.th/0.0.0.0
-address=/hdxa.net/0.0.0.0
 address=/healtina.com/0.0.0.0
 address=/heavenif.co.za/0.0.0.0
 address=/hediyeinternetpaket.com/0.0.0.0
@@ -361,9 +350,7 @@ address=/hoayeuthuong-my.sharepoint.com/0.0.0.0
 address=/hostzaa.com/0.0.0.0
 address=/hotart.co.nz/0.0.0.0
 address=/hotel-le-relais-des-moulins.com/0.0.0.0
-address=/hotelbharatpurpalace.com/0.0.0.0
 address=/housewifes.co/0.0.0.0
-address=/hqsistemas.com.ar/0.0.0.0
 address=/hseda.com/0.0.0.0
 address=/hsmwebapp.com/0.0.0.0
 address=/htxl.cn/0.0.0.0
@@ -377,12 +364,12 @@ address=/ideadom.pl/0.0.0.0
 address=/ihpmed.ae/0.0.0.0
 address=/ileolaherbalcare.com.ng/0.0.0.0
 address=/imellda.com/0.0.0.0
+address=/imenizeh.ir/0.0.0.0
 address=/impression-gobelet.com/0.0.0.0
 address=/in-sect.com/0.0.0.0
 address=/inapadvance.com/0.0.0.0
 address=/incrediblepixels.com/0.0.0.0
 address=/incredicole.com/0.0.0.0
-address=/ini.egkj.com/0.0.0.0
 address=/innovation4crisis.org/0.0.0.0
 address=/instanttechnology.com.au/0.0.0.0
 address=/intelicasa.ro/0.0.0.0
@@ -400,6 +387,7 @@ address=/itrigger.cn/0.0.0.0
 address=/itsnixielou.com/0.0.0.0
 address=/ixlonbcc.com/0.0.0.0
 address=/izu.co.jp/0.0.0.0
+address=/jahesa.com/0.0.0.0
 address=/jaincakes.xyz/0.0.0.0
 address=/jamiekaylive.com/0.0.0.0
 address=/jansen-heesch.nl/0.0.0.0
@@ -428,6 +416,7 @@ address=/k3.etfiber.net/0.0.0.0
 address=/kabiru.ru/0.0.0.0
 address=/kachsurf.mylftv.com/0.0.0.0
 address=/kamasu11.cafe24.com/0.0.0.0
+address=/kamisecurity.com.my/0.0.0.0
 address=/kanok.co.th/0.0.0.0
 address=/kar.big-pro.com/0.0.0.0
 address=/karavantekstil.com/0.0.0.0
@@ -435,16 +424,15 @@ address=/kassohome.com.tr/0.0.0.0
 address=/kdsp.co.kr/0.0.0.0
 address=/kejpa.com/0.0.0.0
 address=/kenareh-gostare-aras.ir/0.0.0.0
+address=/kgfs3.329263.com/0.0.0.0
 address=/khunnapap.com/0.0.0.0
 address=/kiencuonghotel.vn/0.0.0.0
 address=/kjbm9.mof.gov.cn/0.0.0.0
 address=/kleinendeli.co.za/0.0.0.0
-address=/knightsbridgeenergy.com.ng/0.0.0.0
 address=/koppemotta.com.br/0.0.0.0
 address=/koralli.if.ua/0.0.0.0
 address=/kqq.kz/0.0.0.0
 address=/kristofferdaniels.com/0.0.0.0
-address=/kupaliskohs.sk/0.0.0.0
 address=/kuznetsov.ca/0.0.0.0
 address=/kwanfromhongkong.com/0.0.0.0
 address=/kwikomfi-lab.com/0.0.0.0
@@ -463,13 +451,14 @@ address=/learningcomputing.org/0.0.0.0
 address=/lebedyn.info/0.0.0.0
 address=/lecafedesartistes.com/0.0.0.0
 address=/lengendryme.com/0.0.0.0
-address=/leukkado.be/0.0.0.0
+address=/lesa.at.true.by/0.0.0.0
 address=/lhbfirst.com/0.0.0.0
 address=/libya-info.com/0.0.0.0
 address=/lifeapt.biz/0.0.0.0
 address=/linx.li/0.0.0.0
 address=/lists.ibiblio.org/0.0.0.0
 address=/lists.mplayerhq.hu/0.0.0.0
+address=/livetrack.in/0.0.0.0
 address=/lodergord.com/0.0.0.0
 address=/log.yundabao.cn/0.0.0.0
 address=/lsyr.net/0.0.0.0
@@ -484,11 +473,10 @@ address=/mackleyn.com/0.0.0.0
 address=/magda.zelentourism.com/0.0.0.0
 address=/makosoft.hu/0.0.0.0
 address=/malin-akerman.net/0.0.0.0
-address=/mangawt.com/0.0.0.0
 address=/margopassadorestylist.com/0.0.0.0
-address=/maringareservas.com.br/0.0.0.0
 address=/marketprice.com.ng/0.0.0.0
 address=/marksidfgs.ug/0.0.0.0
+address=/marocaji.com/0.0.0.0
 address=/matt-e.it/0.0.0.0
 address=/mattayom31.go.th/0.0.0.0
 address=/mazury4x4.pl/0.0.0.0
@@ -496,7 +484,6 @@ address=/mbgrm.com/0.0.0.0
 address=/mecbox.cn/0.0.0.0
 address=/mediamatkat.fi/0.0.0.0
 address=/medianews.ge/0.0.0.0
-address=/medicacademic.com/0.0.0.0
 address=/medreg.uz/0.0.0.0
 address=/meert.org/0.0.0.0
 address=/meeweb.com/0.0.0.0
@@ -507,7 +494,6 @@ address=/metallexs.com/0.0.0.0
 address=/mettaanand.org/0.0.0.0
 address=/mettek.com.tr/0.0.0.0
 address=/mfevr.com/0.0.0.0
-address=/mfpc.org.my/0.0.0.0
 address=/mhkdhotbot.myvnc.com/0.0.0.0
 address=/mhkdhotbot80.myvnc.com/0.0.0.0
 address=/micahproducts.com/0.0.0.0
@@ -516,7 +502,6 @@ address=/mirror.mypage.sk/0.0.0.0
 address=/mis.nbcc.ac.th/0.0.0.0
 address=/misterson.com/0.0.0.0
 address=/mistydeblasiophotography.com/0.0.0.0
-address=/mitonegbh.xyz/0.0.0.0
 address=/mkk09.kr/0.0.0.0
 address=/mkontakt.az/0.0.0.0
 address=/mmc.ru.com/0.0.0.0
@@ -524,6 +509,7 @@ address=/mobiadnews.com/0.0.0.0
 address=/mobilier-modern.ro/0.0.0.0
 address=/modcloudserver.eu/0.0.0.0
 address=/moha-group.com/0.0.0.0
+address=/monmariage.info/0.0.0.0
 address=/moscow11.at/0.0.0.0
 address=/mountveederwines.com/0.0.0.0
 address=/moyo.co.kr/0.0.0.0
@@ -533,16 +519,12 @@ address=/msecurity.ro/0.0.0.0
 address=/mteng.mmj7.com/0.0.0.0
 address=/mtfelektroteknik.com/0.0.0.0
 address=/mueblesjcp.cl/0.0.0.0
-address=/mv360.net/0.0.0.0
 address=/mvb.kz/0.0.0.0
-address=/mvdrepair.com/0.0.0.0
 address=/mxpiqw.am.files.1drv.com/0.0.0.0
-address=/myexpertca.in/0.0.0.0
+address=/mydesign.thinkeraibirds.com/0.0.0.0
 address=/myhood.cl/0.0.0.0
 address=/myo.net.au/0.0.0.0
 address=/myofficeplus.com/0.0.0.0
-address=/myonlinepokiesblog.com/0.0.0.0
-address=/mytex.pe/0.0.0.0
 address=/mytrains.net/0.0.0.0
 address=/mywp.asia/0.0.0.0
 address=/myyttilukukansasta.fi/0.0.0.0
@@ -557,14 +539,12 @@ address=/nebraskacharters.com.au/0.0.0.0
 address=/nemo.herc.ws/0.0.0.0
 address=/neocity1.free.fr/0.0.0.0
 address=/nerve.untergrund.net/0.0.0.0
-address=/new.tristatehs.com/0.0.0.0
 address=/news.abfakerman.ir/0.0.0.0
 address=/news.omumusic.net/0.0.0.0
 address=/newsun-shop.com/0.0.0.0
 address=/newxing.com/0.0.0.0
 address=/nexity.me/0.0.0.0
 address=/nfbio.com/0.0.0.0
-address=/ngoaingu.garage.com.vn/0.0.0.0
 address=/nofound.000webhostapp.com/0.0.0.0
 address=/norperuinge.com.pe/0.0.0.0
 address=/nprg.ru/0.0.0.0
@@ -574,6 +554,7 @@ address=/oa.fnysw.com/0.0.0.0
 address=/oa.hys.cn/0.0.0.0
 address=/obnova.zzux.com/0.0.0.0
 address=/obseques-conseils.com/0.0.0.0
+address=/ohe.ie/0.0.0.0
 address=/oknoplastik.sk/0.0.0.0
 address=/omega.az/0.0.0.0
 address=/omsk-osma.ru/0.0.0.0
@@ -599,7 +580,6 @@ address=/pack301.bravepages.com/0.0.0.0
 address=/pakdesighee.com/0.0.0.0
 address=/palochusvet.szm.com/0.0.0.0
 address=/partyflix.net/0.0.0.0
-address=/pat4.jetos.com/0.0.0.0
 address=/pat4.qpoe.com/0.0.0.0
 address=/patch2.51lg.com/0.0.0.0
 address=/patch2.99ddd.com/0.0.0.0
@@ -610,6 +590,7 @@ address=/pcginsure.com/0.0.0.0
 address=/pcsoori.com/0.0.0.0
 address=/pedidoslalacteo.com.ar/0.0.0.0
 address=/peterssandmay.com/0.0.0.0
+address=/petromltd.com/0.0.0.0
 address=/ph4s.ru/0.0.0.0
 address=/phamchilong.com/0.0.0.0
 address=/phudieusongma.com/0.0.0.0
@@ -623,7 +604,6 @@ address=/podrska.com.hr/0.0.0.0
 address=/ponto50.com.br/0.0.0.0
 address=/poolbook.ir/0.0.0.0
 address=/ppl.ac.id/0.0.0.0
-address=/prabhuandsons.com/0.0.0.0
 address=/pratapnursery.com/0.0.0.0
 address=/prepaenunsoloexamen.academiagalileoac.com/0.0.0.0
 address=/probost.cz/0.0.0.0
@@ -637,7 +617,6 @@ address=/qmsled.com/0.0.0.0
 address=/qppl.angiang.gov.vn/0.0.0.0
 address=/quantominds.com/0.0.0.0
 address=/quartier-midi.be/0.0.0.0
-address=/quehagoencartagena.com/0.0.0.0
 address=/quickuploader.xyz/0.0.0.0
 address=/raacts.in/0.0.0.0
 address=/raifix.com.br/0.0.0.0
@@ -651,7 +630,6 @@ address=/recommendservices.com/0.0.0.0
 address=/redeemerssports.com/0.0.0.0
 address=/redesoftdownload.info/0.0.0.0
 address=/renimin.mymom.info/0.0.0.0
-address=/renovanorte.com/0.0.0.0
 address=/res.uf1.cn/0.0.0.0
 address=/ret.space/0.0.0.0
 address=/rezaazizi.ir/0.0.0.0
@@ -668,12 +646,11 @@ address=/royalplusmobile.ir/0.0.0.0
 address=/ruisgood.ru/0.0.0.0
 address=/rusch.nu/0.0.0.0
 address=/s.51shijuan.com/0.0.0.0
-address=/s.kk30.com/0.0.0.0
-address=/s14b.91danji.com/0.0.0.0
-address=/s14b.groundyun.cn/0.0.0.0
 address=/sabiupd.compress.to/0.0.0.0
 address=/saboorjaam.ir/0.0.0.0
 address=/sabupda.vizvaz.com/0.0.0.0
+address=/saglikbakanligi-destekportal.org/0.0.0.0
+address=/saglikramazan20bgb.net/0.0.0.0
 address=/sahathaikasetpan.com/0.0.0.0
 address=/salvationbd.com/0.0.0.0
 address=/sandovalgraphics.com/0.0.0.0
@@ -684,7 +661,6 @@ address=/schollaert.eu/0.0.0.0
 address=/sefp-boispro.fr/0.0.0.0
 address=/selekture.com/0.0.0.0
 address=/selvikoyunciftligi.com/0.0.0.0
-address=/sernayconsultores.com/0.0.0.0
 address=/serpentrising.com/0.0.0.0
 address=/servicemhkd.myvnc.com/0.0.0.0
 address=/servicemhkd80.myvnc.com/0.0.0.0
@@ -694,7 +670,6 @@ address=/sgm.pc6.com/0.0.0.0
 address=/shacked.webdepot.co.il/0.0.0.0
 address=/shahtoba.faqserv.com/0.0.0.0
 address=/shaoxiaofei.cn/0.0.0.0
-address=/share.dmca.gripe/0.0.0.0
 address=/sharjahas.com/0.0.0.0
 address=/shembefoundation.com/0.0.0.0
 address=/simlun.com.ar/0.0.0.0
@@ -720,7 +695,6 @@ address=/sophiaskyhotel.vn/0.0.0.0
 address=/sota-france.fr/0.0.0.0
 address=/souldancing.cn/0.0.0.0
 address=/souq-aljwalat.com/0.0.0.0
-address=/spdtextile.com/0.0.0.0
 address=/speed.myz.info/0.0.0.0
 address=/spurstogo.com/0.0.0.0
 address=/sputnikmailru.cdnmail.ru/0.0.0.0
@@ -730,11 +704,11 @@ address=/srvmanos.no-ip.info/0.0.0.0
 address=/ss.cybersoft-vn.com/0.0.0.0
 address=/sslv3.at/0.0.0.0
 address=/staging.popclusive.asia/0.0.0.0
+address=/staging2.lifebiotic.com/0.0.0.0
 address=/starcountry.net/0.0.0.0
 address=/starinfotechcollege.com/0.0.0.0
 address=/static.3001.net/0.0.0.0
 address=/static.ilclock.com/0.0.0.0
-address=/static.topxgun.com/0.0.0.0
 address=/stecit.nl/0.0.0.0
 address=/stevewalker.com.au/0.0.0.0
 address=/story-maker.jp/0.0.0.0
@@ -754,7 +728,6 @@ address=/t.honker.info/0.0.0.0
 address=/tandenblekenhoofddorp.nl/0.0.0.0
 address=/taraward.com/0.0.0.0
 address=/taxpos.com/0.0.0.0
-address=/tcy.198424.com/0.0.0.0
 address=/teamtnt.red/0.0.0.0
 address=/teardrop-productions.ro/0.0.0.0
 address=/technoites.com/0.0.0.0
@@ -775,32 +748,28 @@ address=/theprestige.ro/0.0.0.0
 address=/theptiendat.com/0.0.0.0
 address=/thepyramids.nl/0.0.0.0
 address=/therecruiter.io/0.0.0.0
-address=/thevision.ro/0.0.0.0
 address=/thornadops.com/0.0.0.0
 address=/thosewebbs.com/0.0.0.0
 address=/thuong.bidiworks.com/0.0.0.0
 address=/tianangdep.com/0.0.0.0
+address=/tianzi8.cn/0.0.0.0
 address=/tibinst.mefound.com/0.0.0.0
 address=/tibok.lflink.com/0.0.0.0
 address=/tinckorm.beget.tech/0.0.0.0
 address=/tishreycarmelim.co.il/0.0.0.0
 address=/tmhfashionhouse.co.za/0.0.0.0
 address=/toe.polinema.ac.id/0.0.0.0
-address=/tomorrowearth.net/0.0.0.0
 address=/tonghopgia.net/0.0.0.0
 address=/tonydong.com/0.0.0.0
 address=/tonyzone.com/0.0.0.0
-address=/toulousa.com/0.0.0.0
 address=/tsd.jxwan.com/0.0.0.0
 address=/tsredco.telangana.gov.in/0.0.0.0
 address=/tulli.info/0.0.0.0
 address=/tumso.org/0.0.0.0
 address=/tuneup.ibk.me/0.0.0.0
 address=/tup.com.cn/0.0.0.0
-address=/tuskanlehdms.ug/0.0.0.0
 address=/tutuler.com/0.0.0.0
 address=/uc-56.ru/0.0.0.0
-address=/ucto-id.cz/0.0.0.0
 address=/ufabet168168.329263.com/0.0.0.0
 address=/ugc.wegame.com.cn/0.0.0.0
 address=/ultimatelamborghiniexperience.com/0.0.0.0
@@ -833,20 +802,22 @@ address=/vietducbio.com/0.0.0.0
 address=/vigilar.com.br/0.0.0.0
 address=/vip.recommendedtoyoo.com/0.0.0.0
 address=/virustreatments.empeeevents.com/0.0.0.0
+address=/visagepk.com/0.0.0.0
+address=/vistanewsite.ir/0.0.0.0
 address=/visualdata.ru/0.0.0.0
 address=/vitinhvnt.com/0.0.0.0
 address=/vitromed.ro/0.0.0.0
+address=/vjhascv.ru/0.0.0.0
 address=/voyageur.sisnettdesign.com/0.0.0.0
 address=/vrrumover0.vrrum0.farted.net/0.0.0.0
 address=/vvff.in/0.0.0.0
-address=/w.zhzy999.net/0.0.0.0
 address=/wangtong7.siweidaoxiang.com/0.0.0.0
 address=/wangzonghang.cn/0.0.0.0
-address=/wap.dosame.com/0.0.0.0
 address=/ware.ru/0.0.0.0
 address=/warriorllc.com/0.0.0.0
 address=/wbd.5636.com/0.0.0.0
 address=/wbkmt.com/0.0.0.0
+address=/web.lavishsupplystore.com/0.0.0.0
 address=/webarte.com.br/0.0.0.0
 address=/webq.wikaba.com/0.0.0.0
 address=/webserverthai.com/0.0.0.0
@@ -856,7 +827,6 @@ address=/welcometothefuture.com/0.0.0.0
 address=/whgaty.com/0.0.0.0
 address=/wiebe-sanitaer.de/0.0.0.0
 address=/wmd9e.a3i1vvv.feteboc.com/0.0.0.0
-address=/wmi.1217bye.host/0.0.0.0
 address=/wnksupply.co.th/0.0.0.0
 address=/wood-expert.net/0.0.0.0
 address=/woodsytech.com/0.0.0.0
@@ -870,12 +840,12 @@ address=/www2.recepty5.com/0.0.0.0
 address=/x2vn.com/0.0.0.0
 address=/xia.vzboot.com/0.0.0.0
 address=/xiaidown.com/0.0.0.0
+address=/xiaoma-10021647.file.myqcloud.com/0.0.0.0
 address=/xiegushi.cn/0.0.0.0
 address=/xirfad.com/0.0.0.0
 address=/xn--20gb-hediyefrsati-nvc.com/0.0.0.0
 address=/xn--transfgran-mgbbb600b.ro/0.0.0.0
 address=/xtremeforumz.com/0.0.0.0
-address=/xueha.fun/0.0.0.0
 address=/xuhss.com/0.0.0.0
 address=/xxwl.kuaiyunds.com/0.0.0.0
 address=/xxxze.co.nu/0.0.0.0
@@ -898,8 +868,6 @@ address=/zentealounge.com.au/0.0.0.0
 address=/zethla.com/0.0.0.0
 address=/zeytinyagisabun.com/0.0.0.0
 address=/zhetysu360.kz/0.0.0.0
-address=/zhzy999.net/0.0.0.0
-address=/ziliao.yunkaodian.com/0.0.0.0
 address=/zj.9553.com/0.0.0.0
 address=/zmmore.com/0.0.0.0
 address=/zoetermeerov.nl/0.0.0.0
diff --git a/urlhaus-filter-dnsmasq.conf b/urlhaus-filter-dnsmasq.conf
index 43f3ad84..c28866d0 100644
--- a/urlhaus-filter-dnsmasq.conf
+++ b/urlhaus-filter-dnsmasq.conf
@@ -1,5 +1,5 @@
 # Title: abuse.ch URLhaus Malicious Domains dnsmasq Blocklist
-# Updated: Tue, 05 May 2020 00:09:52 UTC
+# Updated: Tue, 05 May 2020 12:09:42 UTC
 # Repo: https://gitlab.com/curben/urlhaus-filter
 # License: https://creativecommons.org/publicdomain/zero/1.0/
 # Source: https://urlhaus.abuse.ch/api/
@@ -356,7 +356,6 @@ address=/2.180site.org/0.0.0.0
 address=/2.ak1ba.pro/0.0.0.0
 address=/2.clcshop.online/0.0.0.0
 address=/2.globalengine.ru/0.0.0.0
-address=/2.indexsinas.me/0.0.0.0
 address=/2.moulding.z8.ru/0.0.0.0
 address=/2.spacepel.com/0.0.0.0
 address=/2.toemobra.com.br/0.0.0.0
@@ -610,6 +609,7 @@ address=/2ndoffice.ph/0.0.0.0
 address=/2ndpub.com/0.0.0.0
 address=/2ndscreensociety.com/0.0.0.0
 address=/2nell.com/0.0.0.0
+address=/2no.co/0.0.0.0
 address=/2pjcza.db.files.1drv.com/0.0.0.0
 address=/2q1wea3rdsf.000webhostapp.com/0.0.0.0
 address=/2q3w.com/0.0.0.0
@@ -641,8 +641,6 @@ address=/3.spacepel.com/0.0.0.0
 address=/3.top4top.net/0.0.0.0
 address=/3.u0135364.z8.ru/0.0.0.0
 address=/3.unplugrevolution.com/0.0.0.0
-address=/3.zhzy999.net/0.0.0.0
-address=/3.zhzy999.net3.zhzy999.net/0.0.0.0
 address=/30-by-30.com/0.0.0.0
 address=/3000adaydomainer.com/0.0.0.0
 address=/300miliardialberi.eu/0.0.0.0
@@ -950,7 +948,6 @@ address=/4wereareyou.icu/0.0.0.0
 address=/4you.by/0.0.0.0
 address=/5-shampurov.ru/0.0.0.0
 address=/5.fjwt1.crsky.com/0.0.0.0
-address=/5.top4top.io/0.0.0.0
 address=/5.u0148466.z8.ru/0.0.0.0
 address=/5.unplugrevolution.com/0.0.0.0
 address=/5003.arentuspecial.com/0.0.0.0
@@ -1303,7 +1300,6 @@ address=/966.basinbultenigonderimi.com/0.0.0.0
 address=/97762.prohoster.biz/0.0.0.0
 address=/9796360.com/0.0.0.0
 address=/97world.com/0.0.0.0
-address=/98.ip-51-91-254.eu/0.0.0.0
 address=/981775.com/0.0.0.0
 address=/988f5c12.ngrok.io/0.0.0.0
 address=/988sconline.com/0.0.0.0
@@ -2199,6 +2195,7 @@ address=/adams-moore.com/0.0.0.0
 address=/adamshop24.de/0.0.0.0
 address=/adamsm.co.za/0.0.0.0
 address=/adamsphotography.com.au/0.0.0.0
+address=/adamtcarruthers.com/0.0.0.0
 address=/adamthelawyer.com/0.0.0.0
 address=/adamwilt15.com/0.0.0.0
 address=/adan-hospital.com/0.0.0.0
@@ -2619,6 +2616,7 @@ address=/affordsolartech.com/0.0.0.0
 address=/affpp.ru/0.0.0.0
 address=/affyboomy.ga/0.0.0.0
 address=/afgeartechnology.com.mx/0.0.0.0
+address=/afges.org/0.0.0.0
 address=/afghanbazarrugs.com/0.0.0.0
 address=/afghanistanpolicy.com/0.0.0.0
 address=/afgsjkhaljfghadfje.ga/0.0.0.0
@@ -2658,7 +2656,6 @@ address=/africaanalytics.tristargl.com/0.0.0.0
 address=/africabluewebs.co.ke/0.0.0.0
 address=/africabootcampacademy.influencetec.net/0.0.0.0
 address=/africahousingawards.com/0.0.0.0
-address=/africainnovates.org/0.0.0.0
 address=/africamarket.shop/0.0.0.0
 address=/africamissions.ca/0.0.0.0
 address=/african-trips.com/0.0.0.0
@@ -2861,6 +2858,7 @@ address=/agnieszkarojek.cba.pl/0.0.0.0
 address=/agoam.bid/0.0.0.0
 address=/agodatex.ga/0.0.0.0
 address=/agogpharrna.com/0.0.0.0
+address=/agorae.afges.org/0.0.0.0
 address=/agoralbe.com/0.0.0.0
 address=/agorapro.com.co/0.0.0.0
 address=/agorlu02.azurewebsites.net/0.0.0.0
@@ -3059,7 +3057,6 @@ address=/aigavicenza.it/0.0.0.0
 address=/aigforms.myap.co.za/0.0.0.0
 address=/aiglemovies.com/0.0.0.0
 address=/aihealth.vn/0.0.0.0
-address=/aiiaiafrzrueuedur.ru/0.0.0.0
 address=/aiineh.com/0.0.0.0
 address=/aiit.ahbys.com/0.0.0.0
 address=/aijdjy.com/0.0.0.0
@@ -3128,7 +3125,6 @@ address=/airgc.in/0.0.0.0
 address=/airinovasi-indonesia.com/0.0.0.0
 address=/airisu-syumikonparty.com/0.0.0.0
 address=/airlife.bget.ru/0.0.0.0
-address=/airliness.info/0.0.0.0
 address=/airlinkcpl.net/0.0.0.0
 address=/airmaildata.com/0.0.0.0
 address=/airmanship.nl/0.0.0.0
@@ -3273,6 +3269,7 @@ address=/akdkart.com/0.0.0.0
 address=/akekartela.com/0.0.0.0
 address=/akeswari.org/0.0.0.0
 address=/akfoundationbd.xyz/0.0.0.0
+address=/akg-eng.net/0.0.0.0
 address=/akgemc.com/0.0.0.0
 address=/akgiyimtekstil.com/0.0.0.0
 address=/akh.ge/0.0.0.0
@@ -3462,6 +3459,7 @@ address=/alberguetaull.com/0.0.0.0
 address=/alberolandia.it/0.0.0.0
 address=/albert.playground.mostar.id/0.0.0.0
 address=/albertaalliance.ca/0.0.0.0
+address=/albertabeef.ca/0.0.0.0
 address=/albertacareers.com/0.0.0.0
 address=/albertandyork.com/0.0.0.0
 address=/albertgrafica.com.br/0.0.0.0
@@ -5537,6 +5535,7 @@ address=/ara4konkatu.info/0.0.0.0
 address=/araba.alabama-marketing.com/0.0.0.0
 address=/arabaresmi.com/0.0.0.0
 address=/arabcb.org/0.0.0.0
+address=/arabcoegypt.com/0.0.0.0
 address=/arabdubaisafari.com/0.0.0.0
 address=/arabianbrother.com/0.0.0.0
 address=/arabiantongue.net/0.0.0.0
@@ -5848,6 +5847,7 @@ address=/arkifield.com/0.0.0.0
 address=/arkist.ist/0.0.0.0
 address=/arkiv.lillehammerartmuseum.com/0.0.0.0
 address=/arkonziv.com/0.0.0.0
+address=/arkshine.com/0.0.0.0
 address=/arksoft.in/0.0.0.0
 address=/arkworkspace.com/0.0.0.0
 address=/arkyreyma.com/0.0.0.0
@@ -6387,6 +6387,7 @@ address=/askibinyuk.myjino.ru/0.0.0.0
 address=/askingpricerealty.com/0.0.0.0
 address=/askjhdaskdhshjfhf.ru/0.0.0.0
 address=/asklaizmir.com.tr/0.0.0.0
+address=/askmufti.org/0.0.0.0
 address=/askom-service.kz/0.0.0.0
 address=/asksuze.com/0.0.0.0
 address=/askthemadpoet.net/0.0.0.0
@@ -7006,7 +7007,6 @@ address=/autodavid.hr/0.0.0.0
 address=/autodetali-161.ru/0.0.0.0
 address=/autodevices.topterra.ru/0.0.0.0
 address=/autodrim.pl/0.0.0.0
-address=/autodwg.com/0.0.0.0
 address=/autoecole-hammamet.tn/0.0.0.0
 address=/autoecole.inchtechs.com/0.0.0.0
 address=/autoecolehophophop.com/0.0.0.0
@@ -7190,7 +7190,6 @@ address=/avenue5.co.in.cp-in-10.webhostbox.net/0.0.0.0
 address=/avenzis.nl/0.0.0.0
 address=/averefiducia.com/0.0.0.0
 address=/averfoodrs.eu/0.0.0.0
-address=/averin.pro/0.0.0.0
 address=/averson.by/0.0.0.0
 address=/averybit.com/0.0.0.0
 address=/aveslor.com/0.0.0.0
@@ -7401,6 +7400,7 @@ address=/aydinmete.com.tr/0.0.0.0
 address=/aydinvps.com/0.0.0.0
 address=/aydosyazilim.com/0.0.0.0
 address=/ayecargo.com/0.0.0.0
+address=/ayefin.com/0.0.0.0
 address=/ayeletbenyosef.co.il/0.0.0.0
 address=/ayerstechnology.com/0.0.0.0
 address=/ayeshashoukat.com/0.0.0.0
@@ -7654,7 +7654,6 @@ address=/babystep.biz/0.0.0.0
 address=/babysteps.ge/0.0.0.0
 address=/babyvogel.nl/0.0.0.0
 address=/babzon.club/0.0.0.0
-address=/bac.edu.my/0.0.0.0
 address=/bacamanect.com/0.0.0.0
 address=/baccaosutritue.vn/0.0.0.0
 address=/baceldeniz.com/0.0.0.0
@@ -7685,6 +7684,7 @@ address=/backpage-inc.com/0.0.0.0
 address=/backpinging.com/0.0.0.0
 address=/backselfconfidence.xyz/0.0.0.0
 address=/backstage-secrets.com/0.0.0.0
+address=/backthenstuff.com/0.0.0.0
 address=/backup-new.5kmdeal.my/0.0.0.0
 address=/backup.goooogle.us/0.0.0.0
 address=/backup.litcel.com/0.0.0.0
@@ -8503,6 +8503,7 @@ address=/beachcondolife.tk/0.0.0.0
 address=/beachview.co.za/0.0.0.0
 address=/beachvillas.gr/0.0.0.0
 address=/beachwoodproperty.com.au/0.0.0.0
+address=/beaconacademy.net/0.0.0.0
 address=/beaconhousediscovery.com/0.0.0.0
 address=/beaconr.rungta.ac.in/0.0.0.0
 address=/beactivedigital.com/0.0.0.0
@@ -8524,6 +8525,7 @@ address=/bearholdings.co/0.0.0.0
 address=/bearingspecs.com/0.0.0.0
 address=/bearinmindstrategies.com/0.0.0.0
 address=/bearriverhealth.org/0.0.0.0
+address=/bearsselection.xyz/0.0.0.0
 address=/beaskyshanoi.com/0.0.0.0
 address=/beastmas.club/0.0.0.0
 address=/beat.vision/0.0.0.0
@@ -9400,7 +9402,6 @@ address=/bigdealist.com/0.0.0.0
 address=/bigdev.top/0.0.0.0
 address=/bigdiamondeals.com/0.0.0.0
 address=/bigeyes.com.tw/0.0.0.0
-address=/bigfile.mail.naver.com/0.0.0.0
 address=/bigfishchain.com/0.0.0.0
 address=/bigfoothospitality.com/0.0.0.0
 address=/bigg-live.com/0.0.0.0
@@ -9427,7 +9428,6 @@ address=/bigssearch.com/0.0.0.0
 address=/bigstudio.photo/0.0.0.0
 address=/bigsunshinebooks.com/0.0.0.0
 address=/bigtech24.de/0.0.0.0
-address=/bigtext.club/0.0.0.0
 address=/bigtrading.ga/0.0.0.0
 address=/bigtvjoblist.com/0.0.0.0
 address=/biguwh.com/0.0.0.0
@@ -9576,6 +9576,7 @@ address=/binmsk.ru/0.0.0.0
 address=/binnayem.com/0.0.0.0
 address=/binoculars-shop.ru/0.0.0.0
 address=/binom-perm.cf/0.0.0.0
+address=/binsuloomgroup.com/0.0.0.0
 address=/binta.xyz/0.0.0.0
 address=/bintangbarutama.co.id/0.0.0.0
 address=/bintec.pe/0.0.0.0
@@ -9756,7 +9757,6 @@ address=/biyunhui.com/0.0.0.0
 address=/biz-shop.pro/0.0.0.0
 address=/biz.creationcabin.com/0.0.0.0
 address=/bizajans.com/0.0.0.0
-address=/bizasiatrading.com/0.0.0.0
 address=/bizbhutanevents.com/0.0.0.0
 address=/bizbuilder.co.za/0.0.0.0
 address=/bizcodedigital.in/0.0.0.0
@@ -10412,7 +10412,6 @@ address=/bloodybits.com/0.0.0.0
 address=/bloombrainz.com/0.0.0.0
 address=/bloomcommunityproject.org/0.0.0.0
 address=/bloomestatelitigation.ca/0.0.0.0
-address=/bloomfire.com/0.0.0.0
 address=/bloomflores.com/0.0.0.0
 address=/bloomhomes.in/0.0.0.0
 address=/bloomingbridal.com.au/0.0.0.0
@@ -11190,6 +11189,7 @@ address=/breathtakerstours.com/0.0.0.0
 address=/breazytrans.com/0.0.0.0
 address=/breccioneserrande.com/0.0.0.0
 address=/brechovip.com.br/0.0.0.0
+address=/breda.com/0.0.0.0
 address=/breebaart.net/0.0.0.0
 address=/breed.wanttobea.com/0.0.0.0
 address=/breedencomm.com/0.0.0.0
@@ -11322,6 +11322,7 @@ address=/brittanyschoice.com/0.0.0.0
 address=/britwind.tk/0.0.0.0
 address=/brixxsites.com/0.0.0.0
 address=/brizboy.com/0.0.0.0
+address=/briztechnologies.com/0.0.0.0
 address=/brj.sitedevlink.com/0.0.0.0
 address=/brjsrwaco.watchdogdns.duckdns.org/0.0.0.0
 address=/brkcakiroglu.com/0.0.0.0
@@ -12269,6 +12270,7 @@ address=/camlikkamping.com/0.0.0.0
 address=/camnangtrithuc.com/0.0.0.0
 address=/campagnesms.info/0.0.0.0
 address=/campaigns.actionable-science.com/0.0.0.0
+address=/campana20gb.com/0.0.0.0
 address=/campanus.cz/0.0.0.0
 address=/campbellcheesegrocerybk.com/0.0.0.0
 address=/campbellsbay.school.nz/0.0.0.0
@@ -12955,6 +12957,7 @@ address=/cavalluindistella.com/0.0.0.0
 address=/cavanasipontum.ru/0.0.0.0
 address=/cavancameroon.com/0.0.0.0
 address=/cavaticus.com/0.0.0.0
+address=/caveaudelteatro.it/0.0.0.0
 address=/caveaulechapeau.ch/0.0.0.0
 address=/cavedimarmocarrara.com/0.0.0.0
 address=/cavefashion.com/0.0.0.0
@@ -13713,7 +13716,6 @@ address=/cheaperlounge.com/0.0.0.0
 address=/cheapesthost.com.ng/0.0.0.0
 address=/cheapgadgets-gq.000webhostapp.com/0.0.0.0
 address=/cheapmlbjerseysmarlins.com/0.0.0.0
-address=/cheapmusic.info/0.0.0.0
 address=/cheapnikeairmaxshoes-online.com/0.0.0.0
 address=/cheapoakleysunglasses.net/0.0.0.0
 address=/cheappigeontraps.com/0.0.0.0
@@ -14489,6 +14491,7 @@ address=/clcindy.com/0.0.0.0
 address=/cld-net.com/0.0.0.0
 address=/cld.persiangig.com/0.0.0.0
 address=/cld.pt/0.0.0.0
+address=/cle.ae/0.0.0.0
 address=/clean.crypt24.in/0.0.0.0
 address=/clean.olexandry.ru/0.0.0.0
 address=/clean.vanzherke.ru/0.0.0.0
@@ -14782,7 +14785,6 @@ address=/cmdaitexpo.com/0.0.0.0
 address=/cmdez.ir/0.0.0.0
 address=/cmdou.com/0.0.0.0
 address=/cmeaststar.de/0.0.0.0
-address=/cmg.asia/0.0.0.0
 address=/cmgroup.com.ua/0.0.0.0
 address=/cmhighschool.edu.bd/0.0.0.0
 address=/cmhmfgoutbound.protection.sketchwefair-watduoliprudential.com.watchdogdns.duckdns.org/0.0.0.0
@@ -15325,7 +15327,6 @@ address=/completervnc.com/0.0.0.0
 address=/compliancewing.com/0.0.0.0
 address=/complience.com/0.0.0.0
 address=/compln.net/0.0.0.0
-address=/components.technologymindz.com/0.0.0.0
 address=/composecv.com/0.0.0.0
 address=/composite.be/0.0.0.0
 address=/compoundy.com/0.0.0.0
@@ -15797,6 +15798,7 @@ address=/cordondating.xyz/0.0.0.0
 address=/cordulaklein.de/0.0.0.0
 address=/cordwells.com.au/0.0.0.0
 address=/cordythaiproducts.com/0.0.0.0
+address=/core-tech.com/0.0.0.0
 address=/core.org.af/0.0.0.0
 address=/corebodybrand.com/0.0.0.0
 address=/corehealingmassage.com/0.0.0.0
@@ -16863,7 +16865,6 @@ address=/cysis.cl/0.0.0.0
 address=/cysyonetim.com/0.0.0.0
 address=/cytecgroup.co.za/0.0.0.0
 address=/cytf.coloradotennis.org/0.0.0.0
-address=/cythia0805.com/0.0.0.0
 address=/cythromatt.com/0.0.0.0
 address=/cytotan.website/0.0.0.0
 address=/cytotec-tabs.com/0.0.0.0
@@ -17688,6 +17689,7 @@ address=/ddl7.data.hu/0.0.0.0
 address=/ddmadrasah.com/0.0.0.0
 address=/ddraiggoch.co.uk/0.0.0.0
 address=/ddrcsangrur.com/0.0.0.0
+address=/ddreciclaje.com/0.0.0.0
 address=/dds.com.mx/0.0.0.0
 address=/ddsandesh.com/0.0.0.0
 address=/ddsolutions.pl/0.0.0.0
@@ -18817,7 +18819,6 @@ address=/dewabarbeque.com/0.0.0.0
 address=/dewakartu.info/0.0.0.0
 address=/dewalhoeve.nl/0.0.0.0
 address=/dewapisang.com/0.0.0.0
-address=/dewarejeki.info/0.0.0.0
 address=/dewarejeki.link/0.0.0.0
 address=/dewibebaris.com/0.0.0.0
 address=/dewide.com.br/0.0.0.0
@@ -18847,7 +18848,6 @@ address=/dfafreezeclan.com/0.0.0.0
 address=/dfc33.xyz/0.0.0.0
 address=/dfcf.91756.cn/0.0.0.0
 address=/dfcvbrtwe.ug/0.0.0.0
-address=/dfd.zhzy999.net/0.0.0.0
 address=/dfddfg4df.ru/0.0.0.0
 address=/dffdds.club/0.0.0.0
 address=/dffieo8ieo0380ieovsddsdff89r309ieo89334.com/0.0.0.0
@@ -19806,9 +19806,6 @@ address=/dobro.co.ua/0.0.0.0
 address=/dobrojutrodjevojke.com/0.0.0.0
 address=/dobroviz.com.ua/0.0.0.0
 address=/dobrovorot.su/0.0.0.0
-address=/doc-04-cc-docs.googleusercontent.com/0.0.0.0
-address=/doc-08-5o-docs.googleusercontent.com/0.0.0.0
-address=/doc-0s-c8-docs.googleusercontent.com/0.0.0.0
 address=/doc-hub.healthycheapfast.com/0.0.0.0
 address=/doc-japan.com/0.0.0.0
 address=/doc.albaspizzaastoria.com/0.0.0.0
@@ -20222,7 +20219,6 @@ address=/dosti.webdesignhd.nl/0.0.0.0
 address=/dosttours.com/0.0.0.0
 address=/dosya.tc/0.0.0.0
 address=/dosyproperties.info/0.0.0.0
-address=/dot.state.mn.us/0.0.0.0
 address=/dota2-down.club/0.0.0.0
 address=/dota2-down.site/0.0.0.0
 address=/dotactive.com.au/0.0.0.0
@@ -20429,7 +20425,6 @@ address=/dpa.atos-nao.net/0.0.0.0
 address=/dpack365-my.sharepoint.com/0.0.0.0
 address=/dpacorp.org/0.0.0.0
 address=/dparmm1.wci.com.ph/0.0.0.0
-address=/dpaste.com/0.0.0.0
 address=/dpbh.info/0.0.0.0
 address=/dpbusinessportal.ro/0.0.0.0
 address=/dpe.com.tw/0.0.0.0
@@ -20580,6 +20575,7 @@ address=/dreamlife.com.br/0.0.0.0
 address=/dreamluxuryhairco.com/0.0.0.0
 address=/dreammakerselitefitness.com/0.0.0.0
 address=/dreammaster-uae.com/0.0.0.0
+address=/dreammergeconsult.com/0.0.0.0
 address=/dreammotokolkata.com/0.0.0.0
 address=/dreams-innovations.com/0.0.0.0
 address=/dreamsfashion.com.vn/0.0.0.0
@@ -21570,6 +21566,7 @@ address=/ecity.network/0.0.0.0
 address=/ecitytanduclongan.com/0.0.0.0
 address=/eckdor.de/0.0.0.0
 address=/ecker.aidnet.at/0.0.0.0
+address=/ecklund.no/0.0.0.0
 address=/eclairesuits.com/0.0.0.0
 address=/eclatpro.com/0.0.0.0
 address=/eclecticelectronics.net/0.0.0.0
@@ -22025,6 +22022,7 @@ address=/eitchendie.com/0.0.0.0
 address=/eitworld.com/0.0.0.0
 address=/eiuh9r8fhr98fh.top/0.0.0.0
 address=/eiuwowqwpeoeirwpei.com/0.0.0.0
+address=/ejadarabia.com/0.0.0.0
 address=/ejadvertising.com/0.0.0.0
 address=/ejanlele.design/0.0.0.0
 address=/ejdelapena.com/0.0.0.0
@@ -22247,6 +22245,7 @@ address=/elevatedigitalma.com/0.0.0.0
 address=/elevateducation.agreatidea.studio/0.0.0.0
 address=/elevationshairboutique.com/0.0.0.0
 address=/elevatorbracket.com/0.0.0.0
+address=/elevennevele.com/0.0.0.0
 address=/eleventhcapital.com/0.0.0.0
 address=/elevituc.vn/0.0.0.0
 address=/elezioni-oggi.it/0.0.0.0
@@ -23562,7 +23561,6 @@ address=/etwowsharing.com/0.0.0.0
 address=/etxse.xyz/0.0.0.0
 address=/eu-easy.com/0.0.0.0
 address=/eu.wildfire.paloaltonetworks.com/0.0.0.0
-address=/eu1.salesforce.com/0.0.0.0
 address=/eu283iwoqodjspqisjdf.com/0.0.0.0
 address=/eu5-cdn.devid.info/0.0.0.0
 address=/eubankphoto.com/0.0.0.0
@@ -24012,6 +24010,7 @@ address=/exportaly.com/0.0.0.0
 address=/exportcommunity.in/0.0.0.0
 address=/exportef.info/0.0.0.0
 address=/exposicaoceramicaearte.com.br/0.0.0.0
+address=/exposvision.com/0.0.0.0
 address=/expovitrinadelvalle.com/0.0.0.0
 address=/expresi.club/0.0.0.0
 address=/expresodeportivo.com/0.0.0.0
@@ -25081,6 +25080,7 @@ address=/file2yu.com/0.0.0.0
 address=/file546456.com/0.0.0.0
 address=/filebase.duckdns.org/0.0.0.0
 address=/filebase.mogelgott.de/0.0.0.0
+address=/filebin.net/0.0.0.0
 address=/filebox.hiworks.com/0.0.0.0
 address=/filebr.com/0.0.0.0
 address=/fileco.jobkorea.co.kr/0.0.0.0
@@ -25912,7 +25912,6 @@ address=/forex4pips.com/0.0.0.0
 address=/forexaddictt.com/0.0.0.0
 address=/forexbrokeracademy.com/0.0.0.0
 address=/forexpedia.tradewithrobbie.com/0.0.0.0
-address=/forexpf.ru/0.0.0.0
 address=/forexproservice.com/0.0.0.0
 address=/forexrobot.youralgo.com/0.0.0.0
 address=/forextradingfrx.org/0.0.0.0
@@ -28373,6 +28372,7 @@ address=/goitsoluciones.com/0.0.0.0
 address=/goji-actives.net/0.0.0.0
 address=/gojukai.co/0.0.0.0
 address=/gokceozagar.com/0.0.0.0
+address=/goker.com.tr/0.0.0.0
 address=/gokhancakmak.com.tr/0.0.0.0
 address=/gokjerijk.nl/0.0.0.0
 address=/gokkastennl.com/0.0.0.0
@@ -28668,7 +28668,6 @@ address=/goudu.club/0.0.0.0
 address=/gourmandd.com/0.0.0.0
 address=/gourmetlab.pe/0.0.0.0
 address=/gourmetreats.in/0.0.0.0
-address=/gov.kr/0.0.0.0
 address=/gov.rsmart-testsolutions.watchdogdns.duckdns.org/0.0.0.0
 address=/govche.in/0.0.0.0
 address=/goveboatclub.com.au/0.0.0.0
@@ -29185,7 +29184,6 @@ address=/grupocrecer.org/0.0.0.0
 address=/grupodpi.pe/0.0.0.0
 address=/grupodreyer.com/0.0.0.0
 address=/grupoembatec.com/0.0.0.0
-address=/grupoeq.com/0.0.0.0
 address=/grupoesparta.com.ve/0.0.0.0
 address=/grupofabiamce.com.br/0.0.0.0
 address=/grupofischermineracao.com.br/0.0.0.0
@@ -29195,6 +29193,7 @@ address=/grupoiesp.tk/0.0.0.0
 address=/grupoinalen.com/0.0.0.0
 address=/grupoinfonet.com/0.0.0.0
 address=/grupojg.com.br/0.0.0.0
+address=/grupolainmaculada.com/0.0.0.0
 address=/grupolaplace.com.br/0.0.0.0
 address=/grupoloang.com/0.0.0.0
 address=/grupolorena.com.sv/0.0.0.0
@@ -29293,6 +29292,7 @@ address=/gthtech.com/0.0.0.0
 address=/gtidae.com.pl/0.0.0.0
 address=/gtim.agency/0.0.0.0
 address=/gtiperu.com/0.0.0.0
+address=/gtm-au.com/0.0.0.0
 address=/gtminas.com.br/0.0.0.0
 address=/gtnaidu.com/0.0.0.0
 address=/gtomeconquista.com/0.0.0.0
@@ -29556,6 +29556,7 @@ address=/h-surgeon.info/0.0.0.0
 address=/h-w-c.net/0.0.0.0
 address=/h.eurotrading.com.pl/0.0.0.0
 address=/h.j990981.ru/0.0.0.0
+address=/h.top4top.io/0.0.0.0
 address=/h.valerana44.ru/0.0.0.0
 address=/h1.iwakalong.ru/0.0.0.0
 address=/h112321.s08.test-hf.su/0.0.0.0
@@ -31207,7 +31208,6 @@ address=/home-racing.com/0.0.0.0
 address=/home-spy-shop.com/0.0.0.0
 address=/home.99eurowebsite.ie/0.0.0.0
 address=/home.barley-plus.com/0.0.0.0
-address=/home.earthlink.net/0.0.0.0
 address=/home.evrstudio.com/0.0.0.0
 address=/home.healthiestu.com/0.0.0.0
 address=/home.isdes.com/0.0.0.0
@@ -31680,6 +31680,7 @@ address=/houzess.com/0.0.0.0
 address=/how-to-nampa.com/0.0.0.0
 address=/how-to-tech.com/0.0.0.0
 address=/how.ph/0.0.0.0
+address=/howalshafikings.com/0.0.0.0
 address=/howardbenz.com/0.0.0.0
 address=/howardbragman.com/0.0.0.0
 address=/howardgfranklin.com/0.0.0.0
@@ -31781,7 +31782,6 @@ address=/htepl.com/0.0.0.0
 address=/hthaher.com/0.0.0.0
 address=/hthindustrial.com/0.0.0.0
 address=/hthttp/0.0.0.0
-address=/htl.li/0.0.0.0
 address=/htl.ru/0.0.0.0
 address=/htlinternational.org/0.0.0.0
 address=/htlvn.com/0.0.0.0
@@ -32104,7 +32104,6 @@ address=/i-sharecloud.com/0.0.0.0
 address=/i-supportcharity.com/0.0.0.0
 address=/i-vnsweyu.pl/0.0.0.0
 address=/i-voda.com/0.0.0.0
-address=/i.cubeupload.com/0.0.0.0
 address=/i.fiery.me/0.0.0.0
 address=/i.fluffy.cc/0.0.0.0
 address=/i.funtourspt.eu/0.0.0.0
@@ -32141,6 +32140,7 @@ address=/iaconsultafrica.com/0.0.0.0
 address=/iacp-od.org/0.0.0.0
 address=/iadeca.es/0.0.0.0
 address=/iadigital.com.br/0.0.0.0
+address=/iaecconsultants.com/0.0.0.0
 address=/iain-padangsidimpuan.ac.id/0.0.0.0
 address=/iais.ac.id/0.0.0.0
 address=/iakah.pw/0.0.0.0
@@ -32889,6 +32889,7 @@ address=/imellda.com/0.0.0.0
 address=/imemmw.org/0.0.0.0
 address=/imenbazr.com/0.0.0.0
 address=/imenergo.com/0.0.0.0
+address=/imenizeh.ir/0.0.0.0
 address=/imensanatsi.com/0.0.0.0
 address=/imensandogh.com/0.0.0.0
 address=/imersiongis.com/0.0.0.0
@@ -33054,6 +33055,7 @@ address=/in100tive.com/0.0.0.0
 address=/in365.vn/0.0.0.0
 address=/in8.keton8.com/0.0.0.0
 address=/in9cm.com.br/0.0.0.0
+address=/inac-americas.com/0.0.0.0
 address=/inacioferros.com/0.0.0.0
 address=/inaczasie.pl/0.0.0.0
 address=/inadmin.convshop.com/0.0.0.0
@@ -33137,7 +33139,6 @@ address=/indian-escorts-dubai.com/0.0.0.0
 address=/indian-escorts-qatar.com/0.0.0.0
 address=/indian-escorts-rak.com/0.0.0.0
 address=/indian-escorts-sharjah.com/0.0.0.0
-address=/indianagoods.club/0.0.0.0
 address=/indianblog.info/0.0.0.0
 address=/indianceramicsourcing.com/0.0.0.0
 address=/indianescortsabudhabi.com/0.0.0.0
@@ -33704,6 +33705,7 @@ address=/integraciontotal.com.mx/0.0.0.0
 address=/integracooperativa.com/0.0.0.0
 address=/integrafika.co.uk/0.0.0.0
 address=/integraga.com/0.0.0.0
+address=/integralc.com/0.0.0.0
 address=/integralcs.com.br/0.0.0.0
 address=/integralestates.in/0.0.0.0
 address=/integralmakeup.com/0.0.0.0
@@ -33801,7 +33803,6 @@ address=/internationalmscareerseminar.com/0.0.0.0
 address=/internaut.in/0.0.0.0
 address=/internetcasinoweblog.com/0.0.0.0
 address=/internetjogasz.hu/0.0.0.0
-address=/internetlink.com.mx/0.0.0.0
 address=/internetmarketing4pros.com/0.0.0.0
 address=/internetofsmell.com/0.0.0.0
 address=/internetordbogen.dk/0.0.0.0
@@ -33968,6 +33969,7 @@ address=/ioe-learning.com/0.0.0.0
 address=/ioffe-soft.ru/0.0.0.0
 address=/ioffexpert.com/0.0.0.0
 address=/ioi3.com/0.0.0.0
+address=/iol.ie/0.0.0.0
 address=/iolandagazzerro.it/0.0.0.0
 address=/ion-consulting.com/0.0.0.0
 address=/ioncaresindia.in/0.0.0.0
@@ -34049,6 +34051,7 @@ address=/iphones.bid/0.0.0.0
 address=/iphonessuckballs.life/0.0.0.0
 address=/iphoneteknikservisim.net/0.0.0.0
 address=/iphonewin.website/0.0.0.0
+address=/iphotoalot.com/0.0.0.0
 address=/iphys-hypoxia.kz/0.0.0.0
 address=/ipisu.ru/0.0.0.0
 address=/ipjem.com.br/0.0.0.0
@@ -34675,6 +34678,7 @@ address=/iykelinksyuiop.5gbfree.com/0.0.0.0
 address=/iyle.co.uk/0.0.0.0
 address=/iyycqg.bn.files.1drv.com/0.0.0.0
 address=/iz.owak-kmyt.ru/0.0.0.0
+address=/iz.poznan.pl/0.0.0.0
 address=/izabelatrojanowska.pl/0.0.0.0
 address=/izavu.com/0.0.0.0
 address=/izbetalia.com/0.0.0.0
@@ -35614,7 +35618,6 @@ address=/joedee.co.za/0.0.0.0
 address=/joegie.nl/0.0.0.0
 address=/joeing.duckdns.org/0.0.0.0
 address=/joeing.rapiddns.ru/0.0.0.0
-address=/joeing.warzonedns.com/0.0.0.0
 address=/joeing2.duckdns.org/0.0.0.0
 address=/joeksdj.nl/0.0.0.0
 address=/joelanguell.com/0.0.0.0
@@ -35783,6 +35786,7 @@ address=/josemoo.com/0.0.0.0
 address=/josenutricion.com/0.0.0.0
 address=/joseph.gergis.net/0.0.0.0
 address=/josephalavi.com/0.0.0.0
+address=/josephdutton.com/0.0.0.0
 address=/josephreynolds.net/0.0.0.0
 address=/josephsaadeh.me/0.0.0.0
 address=/josepsullca.com/0.0.0.0
@@ -36955,6 +36959,7 @@ address=/kedaicetakklang.com/0.0.0.0
 address=/kedaijuara.com/0.0.0.0
 address=/kedaimadu.net/0.0.0.0
 address=/kedi-russian.ru/0.0.0.0
+address=/kedisons.com/0.0.0.0
 address=/keelsoft.com/0.0.0.0
 address=/keenpreps.co.uk/0.0.0.0
 address=/keepchest.hopto.org/0.0.0.0
@@ -38614,6 +38619,7 @@ address=/kynmandesign.co.uk/0.0.0.0
 address=/kyokushinmiddleeast.com/0.0.0.0
 address=/kyoman.vn/0.0.0.0
 address=/kyoto-shikakeya.com/0.0.0.0
+address=/kyotoforum.or.jp/0.0.0.0
 address=/kyouei.co.th/0.0.0.0
 address=/kypa.or.ke/0.0.0.0
 address=/kyrmedia.com/0.0.0.0
@@ -39166,6 +39172,7 @@ address=/latiendita.miradiols.cl/0.0.0.0
 address=/latinannualmeeting.com/0.0.0.0
 address=/latinaradio.cl/0.0.0.0
 address=/latinbeat.com/0.0.0.0
+address=/latinigroup.com/0.0.0.0
 address=/latinos-latins.online/0.0.0.0
 address=/latinovoicesmn.org/0.0.0.0
 address=/latiprantz.com/0.0.0.0
@@ -39540,7 +39547,6 @@ address=/legphelhotel.com/0.0.0.0
 address=/legpnnldy.cf/0.0.0.0
 address=/legrand-boutique.com/0.0.0.0
 address=/legrand.ba/0.0.0.0
-address=/legrand.us/0.0.0.0
 address=/legrandmaghrebconsulting.com/0.0.0.0
 address=/legrandreve.pt/0.0.0.0
 address=/legsgoshop.com/0.0.0.0
@@ -40055,6 +40061,7 @@ address=/lightswitchmarketing.biz/0.0.0.0
 address=/lightvalleyprune.com/0.0.0.0
 address=/lightwerq.com/0.0.0.0
 address=/lightyard.com/0.0.0.0
+address=/lignar.com/0.0.0.0
 address=/lignarium.se/0.0.0.0
 address=/lignumpolska.com/0.0.0.0
 address=/liguebretagnebillard.fr/0.0.0.0
@@ -40196,7 +40203,6 @@ address=/link.fivetier.com/0.0.0.0
 address=/link.gocrazyflower.com/0.0.0.0
 address=/link.mx/0.0.0.0
 address=/link.nocomplaintsday.info/0.0.0.0
-address=/link.zixcentral.com/0.0.0.0
 address=/link100.cc/0.0.0.0
 address=/link17.by/0.0.0.0
 address=/link2bio.ir/0.0.0.0
@@ -40274,6 +40280,7 @@ address=/liragec.org/0.0.0.0
 address=/lirave.bplaced.net/0.0.0.0
 address=/lis-consult.dk/0.0.0.0
 address=/lisab.se/0.0.0.0
+address=/lisagirl.net/0.0.0.0
 address=/lisans.boxnet.com.tr/0.0.0.0
 address=/lisansustu.info/0.0.0.0
 address=/lisaraeswan.com/0.0.0.0
@@ -40385,7 +40392,6 @@ address=/livechallenge.fr/0.0.0.0
 address=/livecigarevent.com/0.0.0.0
 address=/livecricketscorecard.info/0.0.0.0
 address=/livedaynews.com/0.0.0.0
-address=/livedemo00.template-help.com/0.0.0.0
 address=/livedownload.in/0.0.0.0
 address=/livedrumtracks.com/0.0.0.0
 address=/livehasa.com/0.0.0.0
@@ -40412,6 +40418,7 @@ address=/livetechsupport.ca/0.0.0.0
 address=/livetesting.xyz/0.0.0.0
 address=/livetotry.com/0.0.0.0
 address=/livetours.cl/0.0.0.0
+address=/livetrack.in/0.0.0.0
 address=/livetvsports.ml/0.0.0.0
 address=/liveu.lk/0.0.0.0
 address=/liviavicentini.com/0.0.0.0
@@ -42058,6 +42065,7 @@ address=/mail.openscholarly.com/0.0.0.0
 address=/mail.optiua.com/0.0.0.0
 address=/mail.oregonwinerental.net/0.0.0.0
 address=/mail.outboundnat.com/0.0.0.0
+address=/mail.pallejabcn.com/0.0.0.0
 address=/mail.paracep.com/0.0.0.0
 address=/mail.paramountstudiosholidayvillas.com/0.0.0.0
 address=/mail.parkernetworks.com/0.0.0.0
@@ -43105,6 +43113,7 @@ address=/massdev.co/0.0.0.0
 address=/masseur.es/0.0.0.0
 address=/masseyatnandina.com/0.0.0.0
 address=/massimopintus.com/0.0.0.0
+address=/massivedynamicks.com/0.0.0.0
 address=/massivesales.co.uk/0.0.0.0
 address=/massivewebtech.com/0.0.0.0
 address=/massomsadarpuri.com/0.0.0.0
@@ -44258,7 +44267,6 @@ address=/mfmr.gov.sl/0.0.0.0
 address=/mfomjr.com/0.0.0.0
 address=/mfotovideo.ro/0.0.0.0
 address=/mfpburundi.bi/0.0.0.0
-address=/mfpc.org.my/0.0.0.0
 address=/mfppanel.xyz/0.0.0.0
 address=/mfpvision.com/0.0.0.0
 address=/mfronza.com.br/0.0.0.0
@@ -44409,7 +44417,6 @@ address=/micropcsystem.com/0.0.0.0
 address=/microratings.tk/0.0.0.0
 address=/micros0ft1.ddns.net/0.0.0.0
 address=/microservicesmonitor.com/0.0.0.0
-address=/microsfotgooglegmailoutlook365mailallaregoodformailing.warzonedns.com/0.0.0.0
 address=/microsoft-01.dynamic-dns.net/0.0.0.0
 address=/microsoft-dl.com.br.md-43.webhostbox.net/0.0.0.0
 address=/microsoft-frameworkseguro.com/0.0.0.0
@@ -45542,6 +45549,7 @@ address=/mooi-trade.com/0.0.0.0
 address=/mooipilates.com/0.0.0.0
 address=/mooithailand.nl/0.0.0.0
 address=/moolchi.com/0.0.0.0
+address=/moolo.pl/0.0.0.0
 address=/moomi-daeri.com/0.0.0.0
 address=/moomicos.com/0.0.0.0
 address=/moommam.fr/0.0.0.0
@@ -45851,6 +45859,7 @@ address=/mpgbss.com/0.0.0.0
 address=/mpgestaodepessoas.com.br/0.0.0.0
 address=/mpii.tech/0.0.0.0
 address=/mpinteligente.com/0.0.0.0
+address=/mpkglobaltrainingcorp.net/0.0.0.0
 address=/mplmodapk.site/0.0.0.0
 address=/mpls.foodiecycle.com/0.0.0.0
 address=/mpn.vn/0.0.0.0
@@ -46922,6 +46931,7 @@ address=/nakhlmarket.com/0.0.0.0
 address=/nakshadekho.com/0.0.0.0
 address=/nakshatrajoshi.com/0.0.0.0
 address=/nal.com.ua/0.0.0.0
+address=/nalahotel.com/0.0.0.0
 address=/nalcalar.com/0.0.0.0
 address=/nalfonsotriston.city/0.0.0.0
 address=/nalmac.com/0.0.0.0
@@ -47244,7 +47254,6 @@ address=/nbfghreqww.ug/0.0.0.0
 address=/nbgcpa.net/0.0.0.0
 address=/nbgcpa.org/0.0.0.0
 address=/nbhgroup.in/0.0.0.0
-address=/nbigfile.mail.naver.com/0.0.0.0
 address=/nbiyan.vn/0.0.0.0
 address=/nbj.engaged.it/0.0.0.0
 address=/nbn-nrc.org/0.0.0.0
@@ -47483,6 +47492,7 @@ address=/netafix.com/0.0.0.0
 address=/netasarim.com/0.0.0.0
 address=/netbenfey.ciprudential.com.watchdogdns.duckdns.org/0.0.0.0
 address=/netcity1.net/0.0.0.0
+address=/netck.pl/0.0.0.0
 address=/netcom-soft.com/0.0.0.0
 address=/netcomp.lizave.store/0.0.0.0
 address=/netcorpsgroup.com/0.0.0.0
@@ -47503,7 +47513,6 @@ address=/netin.vn/0.0.0.0
 address=/netizennepal.com/0.0.0.0
 address=/netkafem.org/0.0.0.0
 address=/netking.duckdns.org/0.0.0.0
-address=/netlink.com/0.0.0.0
 address=/netm.club/0.0.0.0
 address=/netmaffia.net/0.0.0.0
 address=/netmansoft.com/0.0.0.0
@@ -47970,6 +47979,7 @@ address=/nguyenthanhriori.com/0.0.0.0
 address=/nguyenthituyet.org/0.0.0.0
 address=/nguyenthuyhanh.com.vn/0.0.0.0
 address=/nguyentrongkha.com/0.0.0.0
+address=/ngyusa.com/0.0.0.0
 address=/nhacchoquangcao24h.com/0.0.0.0
 address=/nhadaiphat.com/0.0.0.0
 address=/nhadatbaria.asia/0.0.0.0
@@ -47980,7 +47990,6 @@ address=/nhadatphonglinh.com/0.0.0.0
 address=/nhadatquan2.xyz/0.0.0.0
 address=/nhadatthienthoi.com/0.0.0.0
 address=/nhadephungyen.com/0.0.0.0
-address=/nhadepkientruc.net/0.0.0.0
 address=/nhahangdaihung.com/0.0.0.0
 address=/nhahanghaivuong.vn/0.0.0.0
 address=/nhahanglegiang.vn/0.0.0.0
@@ -48067,6 +48076,7 @@ address=/nickelaction.com/0.0.0.0
 address=/nicklaslj.se/0.0.0.0
 address=/nickpeets.com/0.0.0.0
 address=/nickycooperhomes.co.nz/0.0.0.0
+address=/nicolaisen.de/0.0.0.0
 address=/nicolasbaldoma.com/0.0.0.0
 address=/nicolasgalvez.com/0.0.0.0
 address=/nicolaskohen.com/0.0.0.0
@@ -48457,7 +48467,6 @@ address=/nonglek.net/0.0.0.0
 address=/nongnghiepgiaphat.com/0.0.0.0
 address=/nongsan24h.com/0.0.0.0
 address=/nongsananhnguyen.com/0.0.0.0
-address=/nongsandungha.com/0.0.0.0
 address=/nonlocality.com/0.0.0.0
 address=/nonnemacher.com.br/0.0.0.0
 address=/nonnewspaper.com/0.0.0.0
@@ -48689,6 +48698,7 @@ address=/novoselica.dp.ua/0.0.0.0
 address=/novosibirsk.quadrotek-logistic.ru/0.0.0.0
 address=/novostack.net/0.0.0.0
 address=/novotravel.ir/0.0.0.0
+address=/nowak-meble.eu/0.0.0.0
 address=/nowkh.com/0.0.0.0
 address=/nowley-rus.ru/0.0.0.0
 address=/nowley-rus.ruadministrator/0.0.0.0
@@ -49330,7 +49340,6 @@ address=/ohotnicom.com/0.0.0.0
 address=/ohscrane.com/0.0.0.0
 address=/ohters.de/0.0.0.0
 address=/ohyellow.nl/0.0.0.0
-address=/oi68.tinypic.com/0.0.0.0
 address=/oiainbtaea38.silverabout.ml/0.0.0.0
 address=/oiasdnqweqasd.com/0.0.0.0
 address=/oiflddw.gq/0.0.0.0
@@ -49584,6 +49593,7 @@ address=/ominenergo.gov.rsmart-testsolutions.watchdogdns.duckdns.org/0.0.0.0
 address=/ominix.com/0.0.0.0
 address=/omitkyspisar.cz/0.0.0.0
 address=/omiwnusantara.com/0.0.0.0
+address=/omlinux.com/0.0.0.0
 address=/ommar.ps/0.0.0.0
 address=/ommienetwork.000webhostapp.com/0.0.0.0
 address=/omni-anela.com/0.0.0.0
@@ -50548,6 +50558,7 @@ address=/pablorub-cp38.wordpresstemporal.com/0.0.0.0
 address=/pabloteixeira.com/0.0.0.0
 address=/pablotrabucchelli.com/0.0.0.0
 address=/pabnainfo.com/0.0.0.0
+address=/paboard.com/0.0.0.0
 address=/pabrik-tenda.id/0.0.0.0
 address=/pabx-uae.com/0.0.0.0
 address=/pacbest.org/0.0.0.0
@@ -50613,6 +50624,7 @@ address=/pahahome.com/0.0.0.0
 address=/pahanlab.com/0.0.0.0
 address=/paht.nuph.edu.ua/0.0.0.0
 address=/pai.fai.umj.ac.id/0.0.0.0
+address=/paides.com/0.0.0.0
 address=/paidtv.siaraya.com/0.0.0.0
 address=/paifi.net/0.0.0.0
 address=/paigeplacements.co.uk/0.0.0.0
@@ -50943,6 +50955,7 @@ address=/parkinsoncsra.org/0.0.0.0
 address=/parkklead.com/0.0.0.0
 address=/parkourschool.ru/0.0.0.0
 address=/parkradio.ca/0.0.0.0
+address=/parksfo.com/0.0.0.0
 address=/parkside-mi.com/0.0.0.0
 address=/parksteals.com/0.0.0.0
 address=/parkwaygames.com/0.0.0.0
@@ -51069,6 +51082,7 @@ address=/past.com.tr/0.0.0.0
 address=/pastavadese.com/0.0.0.0
 address=/paste.ee/0.0.0.0
 address=/paste.makomk.com/0.0.0.0
+address=/pasteboard.co/0.0.0.0
 address=/pastecode.xyz/0.0.0.0
 address=/pastelcolors.in/0.0.0.0
 address=/pastilepentruslabit.ro/0.0.0.0
@@ -51312,6 +51326,7 @@ address=/pd.ibigcse.net/0.0.0.0
 address=/pd0rt.nl/0.0.0.0
 address=/pdedas.com/0.0.0.0
 address=/pdesaa.cimaa.pt/0.0.0.0
+address=/pdf-archive.com/0.0.0.0
 address=/pdf-archive.press/0.0.0.0
 address=/pdf-archive.store/0.0.0.0
 address=/pdf-compare.site/0.0.0.0
@@ -51347,6 +51362,7 @@ address=/peacegreetings.com/0.0.0.0
 address=/peacemed.e-nformation.ro/0.0.0.0
 address=/peaceseedlings.org/0.0.0.0
 address=/peacesprit.ir/0.0.0.0
+address=/peacewatch.ch/0.0.0.0
 address=/peach-slovenija.si/0.0.0.0
 address=/peachgirl.ru/0.0.0.0
 address=/peacock.dating/0.0.0.0
@@ -51396,6 +51412,7 @@ address=/pedsassociates.com/0.0.0.0
 address=/pedslovo.ru/0.0.0.0
 address=/pedulirakyataceh.org/0.0.0.0
 address=/peechproperties.com/0.0.0.0
+address=/peekaboobubba.com.au/0.0.0.0
 address=/peekaboorevue.com/0.0.0.0
 address=/peekend.com/0.0.0.0
 address=/peer2travel.com/0.0.0.0
@@ -51577,7 +51594,6 @@ address=/periscope.es/0.0.0.0
 address=/peritofinanceiro.tk/0.0.0.0
 address=/perkasa.ddns.net/0.0.0.0
 address=/perkasa.undiksha.ac.id/0.0.0.0
-address=/perkasa.warzonedns.com/0.0.0.0
 address=/perkfix.com/0.0.0.0
 address=/perkim.bondowosokab.go.id/0.0.0.0
 address=/perlage.net/0.0.0.0
@@ -51668,6 +51684,7 @@ address=/petalsnbones.com/0.0.0.0
 address=/petanisukses.club/0.0.0.0
 address=/petcarepass.cz/0.0.0.0
 address=/peteivs.co.nz/0.0.0.0
+address=/petendereruk.pro/0.0.0.0
 address=/peterantennas.bid/0.0.0.0
 address=/peterbeckundpartner.cporsgrunn.folkbjnrwwww.watchdogdns.duckdns.org/0.0.0.0
 address=/petercottontailmovie.com/0.0.0.0
@@ -51851,6 +51868,7 @@ address=/phillbecker.com/0.0.0.0
 address=/phillipjohnson.co.uk/0.0.0.0
 address=/philomenabar.com.br/0.0.0.0
 address=/philpaisley.com/0.0.0.0
+address=/phimhdonline.tv/0.0.0.0
 address=/phimmoinhat.online/0.0.0.0
 address=/phimphot.tk/0.0.0.0
 address=/phitemntech.com/0.0.0.0
@@ -52230,6 +52248,7 @@ address=/pixel.as/0.0.0.0
 address=/pixel.mobycare.website/0.0.0.0
 address=/pixelcrush.net/0.0.0.0
 address=/pixeldra.in/0.0.0.0
+address=/pixeldrain.com/0.0.0.0
 address=/pixelerp.com/0.0.0.0
 address=/pixelfactorysolutions.xyz/0.0.0.0
 address=/pixelguru.info/0.0.0.0
@@ -52333,6 +52352,7 @@ address=/planitsolutions.co.nz/0.0.0.0
 address=/planktonik.hu/0.0.0.0
 address=/planmyfurnitureinterior.com/0.0.0.0
 address=/planningportal.semblueinc.com/0.0.0.0
+address=/planningtravel.es/0.0.0.0
 address=/plannpick.com/0.0.0.0
 address=/plano.xoom.it/0.0.0.0
 address=/planodeobrasdeilhabela.com.br/0.0.0.0
@@ -52386,6 +52406,7 @@ address=/plaxury.com/0.0.0.0
 address=/play-movie.xyz/0.0.0.0
 address=/play0.revosales.ru/0.0.0.0
 address=/play2.revosales.ru/0.0.0.0
+address=/play2win.buzz/0.0.0.0
 address=/play4fitness.co.uk/0.0.0.0
 address=/playalongmusic.net/0.0.0.0
 address=/playasrivieramaya.com/0.0.0.0
@@ -52395,6 +52416,7 @@ address=/playcoin.game/0.0.0.0
 address=/playden.in/0.0.0.0
 address=/playfire.online/0.0.0.0
 address=/playgrounds.tumo.org/0.0.0.0
+address=/playgroupsrl.com/0.0.0.0
 address=/playhard.ru/0.0.0.0
 address=/playitforwardnashville.com/0.0.0.0
 address=/playkey.ga/0.0.0.0
@@ -52467,6 +52489,7 @@ address=/plunatavan.com/0.0.0.0
 address=/plurallider.com.br/0.0.0.0
 address=/plus.mn/0.0.0.0
 address=/plus1interactive.com/0.0.0.0
+address=/plushshow.com/0.0.0.0
 address=/plusjop.nl/0.0.0.0
 address=/plusmicrotd.kz/0.0.0.0
 address=/plussizeall.net/0.0.0.0
@@ -52706,7 +52729,6 @@ address=/pontosat.com.br/0.0.0.0
 address=/pontotocdistrictba.com/0.0.0.0
 address=/pontus-euxinus.ro/0.0.0.0
 address=/pony.s-p-y.ml/0.0.0.0
-address=/pony.warzonedns.com/0.0.0.0
 address=/ponytales.nostalgicbookshelf.com/0.0.0.0
 address=/poojasingh.me/0.0.0.0
 address=/pool.ug/0.0.0.0
@@ -52866,6 +52888,7 @@ address=/positivechangesok.com/0.0.0.0
 address=/positiveconvention.co.za/0.0.0.0
 address=/positiveid.org/0.0.0.0
 address=/positiverne.dk/0.0.0.0
+address=/positronicsindia.com/0.0.0.0
 address=/posizionareunsito.it/0.0.0.0
 address=/poslovni-oglasi.com/0.0.0.0
 address=/poslovno-pregovaranje.com/0.0.0.0
@@ -53329,6 +53352,7 @@ address=/prismware.ml/0.0.0.0
 address=/pristineglassmirror.com/0.0.0.0
 address=/pristinequill.com/0.0.0.0
 address=/prith-hauts-de-france.org/0.0.0.0
+address=/prithvigroup.net/0.0.0.0
 address=/pritsep56.ru/0.0.0.0
 address=/prittworldproperties.co.ke/0.0.0.0
 address=/privacydesignstudio.com/0.0.0.0
@@ -53819,6 +53843,7 @@ address=/proxy-ipv4.com/0.0.0.0
 address=/proxy.qualtrics.com/0.0.0.0
 address=/proxygrnd.xyz/0.0.0.0
 address=/proxyholding.com/0.0.0.0
+address=/proxyresume.com/0.0.0.0
 address=/proxysis.com.br/0.0.0.0
 address=/proyectocithara.org/0.0.0.0
 address=/proyectoin.com/0.0.0.0
@@ -53931,6 +53956,7 @@ address=/psychprofiler.com/0.0.0.0
 address=/psymonkee.com/0.0.0.0
 address=/psynchro.org/0.0.0.0
 address=/ptb.com.mx/0.0.0.0
+address=/ptbsda.com/0.0.0.0
 address=/ptci-md.org/0.0.0.0
 address=/ptdtech.tk/0.0.0.0
 address=/pte.vn/0.0.0.0
@@ -54445,7 +54471,6 @@ address=/qe-zw.top/0.0.0.0
 address=/qe-zz.top/0.0.0.0
 address=/qeba.win/0.0.0.0
 address=/qeducacional.com.br/0.0.0.0
-address=/qeeeeewwswsweerwwerwerwrwerwerwerwere.warzonedns.com/0.0.0.0
 address=/qelie.com/0.0.0.0
 address=/qeoficial.es/0.0.0.0
 address=/qeshmsport.ir/0.0.0.0
@@ -55046,6 +55071,7 @@ address=/radheenterpriseonline.com/0.0.0.0
 address=/radheshyamcityhomes.com/0.0.0.0
 address=/radi.org.ng/0.0.0.0
 address=/radiantdates.com/0.0.0.0
+address=/radiantqatar.com/0.0.0.0
 address=/radiantservices.com/0.0.0.0
 address=/radicocinas.com.mx/0.0.0.0
 address=/radienten.com/0.0.0.0
@@ -55120,6 +55146,7 @@ address=/raf-dv.ru/0.0.0.0
 address=/rafa-craftsman.com/0.0.0.0
 address=/rafaat.ir/0.0.0.0
 address=/rafaelcarvalho.com.br/0.0.0.0
+address=/rafaelospizzeria.com/0.0.0.0
 address=/rafaelvieira.com.br/0.0.0.0
 address=/rafatelles.com/0.0.0.0
 address=/raffaelli.com.br/0.0.0.0
@@ -55714,6 +55741,7 @@ address=/redhorsebatteries.com/0.0.0.0
 address=/redhorsetile.com/0.0.0.0
 address=/redic.co.uk/0.0.0.0
 address=/redilmatt.biz/0.0.0.0
+address=/redingtonpost.com/0.0.0.0
 address=/redinktattoo.net/0.0.0.0
 address=/redirectiontest.basezap.com/0.0.0.0
 address=/redironmarketing.com/0.0.0.0
@@ -55740,6 +55768,7 @@ address=/redsnowball.com/0.0.0.0
 address=/redsseammgt.com/0.0.0.0
 address=/redtek0.com/0.0.0.0
 address=/redtv.top/0.0.0.0
+address=/redvalidator.com/0.0.0.0
 address=/redvelvetpatisserie.co.uk/0.0.0.0
 address=/redwing.com.eg/0.0.0.0
 address=/redwingdemo.dukaafrica.com/0.0.0.0
@@ -56267,6 +56296,7 @@ address=/rewal.ch/0.0.0.0
 address=/reward.uta.edu.ec/0.0.0.0
 address=/rewitek.nl/0.0.0.0
 address=/rexhagis.nl/0.0.0.0
+address=/rexindototeknik.com/0.0.0.0
 address=/rexpc.dk/0.0.0.0
 address=/rexpronecorpllc.com/0.0.0.0
 address=/rexprosealers.com/0.0.0.0
@@ -56551,6 +56581,7 @@ address=/riverwalkmb.com/0.0.0.0
 address=/rivesam.com/0.0.0.0
 address=/rivesandrives.com/0.0.0.0
 address=/rivestiti.com/0.0.0.0
+address=/rivoltaponteggi.com/0.0.0.0
 address=/riyafisheries.com.cp-51.webhostbox.net/0.0.0.0
 address=/riyanenterprise.com/0.0.0.0
 address=/riyanshoppingbags.com/0.0.0.0
@@ -57142,6 +57173,7 @@ address=/rsquareandco.com/0.0.0.0
 address=/rssansani.com/0.0.0.0
 address=/rssdefense.com/0.0.0.0
 address=/rstarserver17km.xyz/0.0.0.0
+address=/rstelectricals.com/0.0.0.0
 address=/rsterlingzmyrtice.xyz/0.0.0.0
 address=/rstrading.in/0.0.0.0
 address=/rsudpbari.palembang.go.id/0.0.0.0
@@ -57623,6 +57655,7 @@ address=/saepedra.com/0.0.0.0
 address=/safa.205dundas.com/0.0.0.0
 address=/safakteknoloji.com/0.0.0.0
 address=/safaniru.com/0.0.0.0
+address=/safarbekish.com/0.0.0.0
 address=/safari7.devitsandbox.com/0.0.0.0
 address=/safariet-zarzis.com/0.0.0.0
 address=/safarigold.com/0.0.0.0
@@ -57646,7 +57679,6 @@ address=/safelink.themeson.review/0.0.0.0
 address=/safelinks-protection.com/0.0.0.0
 address=/safemedicinaonline.com/0.0.0.0
 address=/safemoneyamerica.com/0.0.0.0
-address=/safentrix.com/0.0.0.0
 address=/saferoomreviews.com/0.0.0.0
 address=/safesalesnembutal.com/0.0.0.0
 address=/safesandsecurity.co.za/0.0.0.0
@@ -57725,12 +57757,14 @@ address=/sageth.net/0.0.0.0
 address=/sagiri.org/0.0.0.0
 address=/saglikbakanli-hediyeinternet.org/0.0.0.0
 address=/saglikbakanligi-destek.org/0.0.0.0
+address=/saglikbakanligi-destekportal.org/0.0.0.0
 address=/saglikbakanligi20gbinternet.com/0.0.0.0
 address=/saglikbakanligindanhediye20gb.com/0.0.0.0
 address=/saglikgoalapp.site/0.0.0.0
 address=/saglikliapp.live/0.0.0.0
 address=/sagliklibedenim.com/0.0.0.0
 address=/saglikodemelerinial.org/0.0.0.0
+address=/saglikramazan20bgb.net/0.0.0.0
 address=/sagrathi.com/0.0.0.0
 address=/sagunpapers.com/0.0.0.0
 address=/sahabathasyim.com/0.0.0.0
@@ -58458,6 +58492,7 @@ address=/sbs.ipeary.com/0.0.0.0
 address=/sbsbe.co.uk/0.0.0.0
 address=/sbspro.in/0.0.0.0
 address=/sbtabank.in/0.0.0.0
+address=/sbtasimacilik.com/0.0.0.0
 address=/sbtextiles.com/0.0.0.0
 address=/sbwellness.org/0.0.0.0
 address=/sc-tuning.de/0.0.0.0
@@ -59094,6 +59129,7 @@ address=/semashur10s.org/0.0.0.0
 address=/semassi.com/0.0.0.0
 address=/semayakas.com/0.0.0.0
 address=/sembako.manaira.store/0.0.0.0
+address=/semcoe.com/0.0.0.0
 address=/semenfedosov.ru/0.0.0.0
 address=/semengresik.co.id/0.0.0.0
 address=/semestr.by/0.0.0.0
@@ -59451,6 +59487,7 @@ address=/setfalc.com/0.0.0.0
 address=/setfireltd.com/0.0.0.0
 address=/sethoresg.com.br/0.0.0.0
 address=/sethpgoldstein.com/0.0.0.0
+address=/setiamanggalaabadi.com/0.0.0.0
 address=/setimosacramento.com.br/0.0.0.0
 address=/setincon.com/0.0.0.0
 address=/setit.ro/0.0.0.0
@@ -60256,7 +60293,6 @@ address=/si-hao.cn/0.0.0.0
 address=/sia-gmbh.de/0.0.0.0
 address=/siairport.com/0.0.0.0
 address=/siakad.brawijaya.ac.id/0.0.0.0
-address=/siakad.ub.ac.id/0.0.0.0
 address=/sial-healthcare.co.uk/0.0.0.0
 address=/sialkotgoods.com/0.0.0.0
 address=/sialkotmart.net/0.0.0.0
@@ -61788,6 +61824,7 @@ address=/sophiasuites-santorini.com/0.0.0.0
 address=/sophiebarthelemy.fr/0.0.0.0
 address=/sophieguaremas.com/0.0.0.0
 address=/sophiethomasartist.com/0.0.0.0
+address=/sophis.biz/0.0.0.0
 address=/sophistproduction.com/0.0.0.0
 address=/sophro-zara.com/0.0.0.0
 address=/sophrologie-untempspourmoi.fr/0.0.0.0
@@ -62622,6 +62659,7 @@ address=/staging.westlondon-musictutors.co.uk/0.0.0.0
 address=/staging.wolseleyfamilyplace.com/0.0.0.0
 address=/staging.xdigitalstudio.com/0.0.0.0
 address=/staging1.xamadu.com/0.0.0.0
+address=/staging2.lifebiotic.com/0.0.0.0
 address=/staging3.agencyh.com/0.0.0.0
 address=/stagingmcr.cloudkami.com/0.0.0.0
 address=/stagingmcs.cloudkami.com/0.0.0.0
@@ -62655,6 +62693,7 @@ address=/staminaoptimism.co.kr/0.0.0.0
 address=/stamp2u.com.my/0.0.0.0
 address=/stampa3dplus.com/0.0.0.0
 address=/stampile-sibiu.ro/0.0.0.0
+address=/standardalloysindia.com/0.0.0.0
 address=/standardchartfinance.com.cp-45.webhostbox.net/0.0.0.0
 address=/standardpen.id/0.0.0.0
 address=/standardpopulation.icu/0.0.0.0
@@ -63801,6 +63840,7 @@ address=/sunshinemarketing.biz/0.0.0.0
 address=/sunshinevn.vn/0.0.0.0
 address=/sunshinewebsite.club/0.0.0.0
 address=/sunshinewondervillas.biz/0.0.0.0
+address=/sunsquare.fr/0.0.0.0
 address=/suntour.com.vn/0.0.0.0
 address=/suntreebearing.com/0.0.0.0
 address=/sunucuo.com/0.0.0.0
@@ -63909,7 +63949,6 @@ address=/support.homemakerideas.com/0.0.0.0
 address=/support.imaitaly.biz/0.0.0.0
 address=/support.jbrueggemann.com/0.0.0.0
 address=/support.m2mservices.com/0.0.0.0
-address=/support.mdsol.com/0.0.0.0
 address=/support.nordenrecycling.com/0.0.0.0
 address=/support.pubg.com/0.0.0.0
 address=/support.redbook.aero/0.0.0.0
@@ -64326,7 +64365,6 @@ address=/systemagically.com/0.0.0.0
 address=/systemandcode.com/0.0.0.0
 address=/systematicsarl.com/0.0.0.0
 address=/systematm.com/0.0.0.0
-address=/systemgooglegooglegooglegooglegooglegoole.warzonedns.com/0.0.0.0
 address=/systemintergrafileexchangeserverprotocol.duckdns.org/0.0.0.0
 address=/systemmasterpage.com/0.0.0.0
 address=/systemmicroupdate.com/0.0.0.0
@@ -65903,6 +65941,7 @@ address=/textilesld.cluster020.hosting.ovh.net/0.0.0.0
 address=/textilessudamericanos.com/0.0.0.0
 address=/textilesunrise.com/0.0.0.0
 address=/textilkopruch.com.br/0.0.0.0
+address=/texum-me.com/0.0.0.0
 address=/teyouhao.com/0.0.0.0
 address=/tfhvccny.com/0.0.0.0
 address=/tfile.7to.cn/0.0.0.0
@@ -65934,7 +65973,6 @@ address=/thaarcoffee.com/0.0.0.0
 address=/thacci.com.br/0.0.0.0
 address=/thachastew.com/0.0.0.0
 address=/thaddeusarmstrong.com/0.0.0.0
-address=/thadinnoo.co/0.0.0.0
 address=/thagreymatter.com/0.0.0.0
 address=/thai-pub.com/0.0.0.0
 address=/thaiascobrake.com/0.0.0.0
@@ -65998,7 +66036,6 @@ address=/tharsisfilms.com/0.0.0.0
 address=/thatavilellaoficial.com.br/0.0.0.0
 address=/thatoilchick.com/0.0.0.0
 address=/thats-amazing.com/0.0.0.0
-address=/thaus.to/0.0.0.0
 address=/thawani-pay.neomeric.us/0.0.0.0
 address=/thayvoiphone.vn/0.0.0.0
 address=/thc-annex.com/0.0.0.0
@@ -66056,6 +66093,7 @@ address=/thebackslant.com/0.0.0.0
 address=/thebackyardat60nyc.com/0.0.0.0
 address=/thebagforum.com/0.0.0.0
 address=/thebakingtree.com/0.0.0.0
+address=/theballardhouse.org/0.0.0.0
 address=/theballoon.asia/0.0.0.0
 address=/thebandofrivals.dreamhosters.com/0.0.0.0
 address=/thebaptistfoundationofca.com/0.0.0.0
@@ -66132,6 +66170,7 @@ address=/theclaridge.org/0.0.0.0
 address=/theclinicabarros.com/0.0.0.0
 address=/theclown.ca/0.0.0.0
 address=/theclub5.com/0.0.0.0
+address=/theclubmumbai.com/0.0.0.0
 address=/thecoachinglounge.net/0.0.0.0
 address=/thecoastaltimes.media/0.0.0.0
 address=/thecoastofhelpfoundation.org/0.0.0.0
@@ -66313,6 +66352,7 @@ address=/theinspiredblogger.com/0.0.0.0
 address=/theinspireddrive.com/0.0.0.0
 address=/theintelligencer.com.ng/0.0.0.0
 address=/theinvestmentinvestigator.com/0.0.0.0
+address=/theipgenerators.com/0.0.0.0
 address=/theirishhouse.dk/0.0.0.0
 address=/theiro.com/0.0.0.0
 address=/theisel.de/0.0.0.0
@@ -66433,6 +66473,7 @@ address=/themoonplease.com/0.0.0.0
 address=/themorgandollarcoin.com/0.0.0.0
 address=/themortgagefirm.ca/0.0.0.0
 address=/themortgagemom.co.uk/0.0.0.0
+address=/themotorcenter.com/0.0.0.0
 address=/themrimidnightclub.com/0.0.0.0
 address=/themuertitos.com/0.0.0.0
 address=/themusae.com/0.0.0.0
@@ -67573,6 +67614,7 @@ address=/toramanlar.com.tr/0.0.0.0
 address=/torbat-h.persiangig.com/0.0.0.0
 address=/toresu.net/0.0.0.0
 address=/torfinn.com/0.0.0.0
+address=/torfsgebroeders.eu/0.0.0.0
 address=/torg-master.pro/0.0.0.0
 address=/torginvest.ru.com/0.0.0.0
 address=/torishima-qa.com/0.0.0.0
@@ -68040,6 +68082,7 @@ address=/treehugginpussy.de/0.0.0.0
 address=/treesguru.com/0.0.0.0
 address=/treesurveys.infrontdesigns.com/0.0.0.0
 address=/trefiart.com.br/0.0.0.0
+address=/trefzer-it.de/0.0.0.0
 address=/trehoada2.ballybeauty.vn/0.0.0.0
 address=/trehoadatoanthan.info/0.0.0.0
 address=/trehoadatoanthan.net/0.0.0.0
@@ -68481,6 +68524,7 @@ address=/tuneldeviento.es/0.0.0.0
 address=/tunerg.com/0.0.0.0
 address=/tunerl.cn/0.0.0.0
 address=/tuneup.ibk.me/0.0.0.0
+address=/tunggalmandiri.com/0.0.0.0
 address=/tuningshop.ro/0.0.0.0
 address=/tunisia-school.com/0.0.0.0
 address=/tunisiagulf.com/0.0.0.0
@@ -68570,6 +68614,7 @@ address=/tutranquilo.com.co/0.0.0.0
 address=/tuttimare.com.br/0.0.0.0
 address=/tuttoirc.net/0.0.0.0
 address=/tuttopizzas.cl/0.0.0.0
+address=/tuttosteopatia.it/0.0.0.0
 address=/tuttotenda.it/0.0.0.0
 address=/tuttoutu.com/0.0.0.0
 address=/tuttyguru.com/0.0.0.0
@@ -68583,6 +68628,7 @@ address=/tuvandauthau.net/0.0.0.0
 address=/tuvandoanhnghiep.org/0.0.0.0
 address=/tuvanduhocdaiviet.com.vn/0.0.0.0
 address=/tuvanduhocduc.org/0.0.0.0
+address=/tuvanduhocmap.com/0.0.0.0
 address=/tuvangamenet.com/0.0.0.0
 address=/tuvangioitinh.com/0.0.0.0
 address=/tuvanluat.vn/0.0.0.0
@@ -69600,11 +69646,9 @@ address=/ury8297ridowoury833oe.com/0.0.0.0
 address=/urzedniczatv.pl/0.0.0.0
 address=/us-defense-department.ml/0.0.0.0
 address=/us-trans.ru/0.0.0.0
-address=/us-west-2.protection.sophos.com/0.0.0.0
 address=/us.cdn.persiangig.com/0.0.0.0
 address=/us.gsearch.com.de/0.0.0.0
 address=/us.hostiso.cloud/0.0.0.0
-address=/us2.campaign-archive.com/0.0.0.0
 address=/us5interclub.cba.pl/0.0.0.0
 address=/usa-lenders.com/0.0.0.0
 address=/usa-market.org/0.0.0.0
@@ -70203,6 +70247,7 @@ address=/velasmeralda.it/0.0.0.0
 address=/velassantos.com.br/0.0.0.0
 address=/velatoursrls.com/0.0.0.0
 address=/veldhuizenwonen.nl/0.0.0.0
+address=/velerobeach.com/0.0.0.0
 address=/velerosa.it/0.0.0.0
 address=/velimir-grgic.com/0.0.0.0
 address=/velisnackindonesia.com/0.0.0.0
@@ -70788,7 +70833,6 @@ address=/vip-rocket.net/0.0.0.0
 address=/vip-watch.store/0.0.0.0
 address=/vip.lijinxi.com/0.0.0.0
 address=/vip.maohuagong.com/0.0.0.0
-address=/vip.muabannhanh.com/0.0.0.0
 address=/vip.recommendedtoyoo.com/0.0.0.0
 address=/vip.zbfcxx.cn/0.0.0.0
 address=/vip163.cf/0.0.0.0
@@ -71061,6 +71105,7 @@ address=/vizk2.ug/0.0.0.0
 address=/viztarinfotech.com/0.0.0.0
 address=/vjarenouy.email/0.0.0.0
 address=/vjencanjazagreb.hr/0.0.0.0
+address=/vjhascv.ru/0.0.0.0
 address=/vjjb.cn/0.0.0.0
 address=/vjqsdq.am.files.1drv.com/0.0.0.0
 address=/vjsingh.info/0.0.0.0
@@ -71424,7 +71469,6 @@ address=/w-wolf.de/0.0.0.0
 address=/w.amendserver.com/0.0.0.0
 address=/w.lazer-n.com/0.0.0.0
 address=/w.outletonline-michaelkors.com/0.0.0.0
-address=/w.zhzy999.net/0.0.0.0
 address=/w04.jujingdao.com/0.0.0.0
 address=/w077775.blob2.ge.tt/0.0.0.0
 address=/w0alqa.dm.files.1drv.com/0.0.0.0
@@ -71634,7 +71678,6 @@ address=/wartazone.com/0.0.0.0
 address=/wartini.de/0.0.0.0
 address=/warunknasakita.co.id/0.0.0.0
 address=/warwickvalleyliving.com/0.0.0.0
-address=/warzonedns.com/0.0.0.0
 address=/warzonesecure.com/0.0.0.0
 address=/was-studio.com/0.0.0.0
 address=/wasama.org/0.0.0.0
@@ -71821,6 +71864,7 @@ address=/web.emsfabrik.de/0.0.0.0
 address=/web.gotham.com.au/0.0.0.0
 address=/web.hfsistemas.com/0.0.0.0
 address=/web.ismt.pt/0.0.0.0
+address=/web.lavishsupplystore.com/0.0.0.0
 address=/web.muasam360.com/0.0.0.0
 address=/web.pa-cirebon.go.id/0.0.0.0
 address=/web.plf.vn/0.0.0.0
@@ -72218,7 +72262,6 @@ address=/wertedits.com/0.0.0.0
 address=/wertios.com/0.0.0.0
 address=/werwrewrkv.ru/0.0.0.0
 address=/werycloud.website/0.0.0.0
-address=/wesco.com/0.0.0.0
 address=/wesconsultants.com/0.0.0.0
 address=/weseleopole.pl/0.0.0.0
 address=/weservehosting.net/0.0.0.0
@@ -72259,6 +72302,7 @@ address=/westminster.edu.vn/0.0.0.0
 address=/westnilepress.org/0.0.0.0
 address=/westonslidingdoorrepair.com/0.0.0.0
 address=/westpalmbeachgaragedoorrepair.com/0.0.0.0
+address=/westportshipping.com/0.0.0.0
 address=/westseattlenailsalon.com/0.0.0.0
 address=/westsideresources.org/0.0.0.0
 address=/weststop.ro/0.0.0.0
@@ -72542,7 +72586,6 @@ address=/wimkegravestein.nl/0.0.0.0
 address=/wimpiebarnard.co.za/0.0.0.0
 address=/win-best.com.hk/0.0.0.0
 address=/win-speed.com/0.0.0.0
-address=/win.tue.nl/0.0.0.0
 address=/win1more.com/0.0.0.0
 address=/win32.x10host.com/0.0.0.0
 address=/winactive.host/0.0.0.0
@@ -72558,7 +72601,6 @@ address=/wincoair.com/0.0.0.0
 address=/wind0wsactivator.host/0.0.0.0
 address=/wind7.ru/0.0.0.0
 address=/windailygh.com/0.0.0.0
-address=/windefenderprotectedwindefendergooglegmail.warzonedns.com/0.0.0.0
 address=/windfarmdevelopments.co.nz/0.0.0.0
 address=/windmedbiolife.com/0.0.0.0
 address=/windmillhill.school/0.0.0.0
@@ -72593,6 +72635,7 @@ address=/winebiddingthailand.com/0.0.0.0
 address=/winecorkartist.com/0.0.0.0
 address=/winefly.net/0.0.0.0
 address=/winefriend.co.za/0.0.0.0
+address=/winenews.it/0.0.0.0
 address=/wineswap.com.au/0.0.0.0
 address=/winetourism.soprexdev.com/0.0.0.0
 address=/winett.net/0.0.0.0
@@ -72751,7 +72794,6 @@ address=/wmdcustoms.com/0.0.0.0
 address=/wmebbiz.co.za/0.0.0.0
 address=/wmf.desevens.com.ng/0.0.0.0
 address=/wmg128.com/0.0.0.0
-address=/wmi.1217bye.host/0.0.0.0
 address=/wmkatz.com/0.0.0.0
 address=/wmo-raad.inov.me/0.0.0.0
 address=/wmpatagonia.cl/0.0.0.0
@@ -72805,6 +72847,7 @@ address=/womenempowermentpakistan.com/0.0.0.0
 address=/womenhealth.aureliusconferences.com/0.0.0.0
 address=/womenindeed.org/0.0.0.0
 address=/womeninwealthinc.com/0.0.0.0
+address=/womenofimpactt.com/0.0.0.0
 address=/womenofthebibleonline.com/0.0.0.0
 address=/womensbathingsuit.com/0.0.0.0
 address=/womenshospital.in/0.0.0.0
@@ -72924,7 +72967,6 @@ address=/work.kromedout.com/0.0.0.0
 address=/work.vexacom.com/0.0.0.0
 address=/work4sales.com/0.0.0.0
 address=/work707.work/0.0.0.0
-address=/workbigfinetonychuckgoodallarefinezynovaexploitgood.warzonedns.com/0.0.0.0
 address=/workbus.ru/0.0.0.0
 address=/workcompoptions.com/0.0.0.0
 address=/workd.ru/0.0.0.0
@@ -73135,7 +73177,6 @@ address=/wpdev.hooshmarketing.com/0.0.0.0
 address=/wpdev.strativ-support.se/0.0.0.0
 address=/wpdev.ted.solutions/0.0.0.0
 address=/wpdev.ztickerz.io/0.0.0.0
-address=/wpengine.zendesk.com/0.0.0.0
 address=/wpgtxdtgifr.ga/0.0.0.0
 address=/wpldjxxxua.ga/0.0.0.0
 address=/wpmagian.com/0.0.0.0
@@ -73348,6 +73389,7 @@ address=/wz-architekten.de/0.0.0.0
 address=/wz6.com.cn/0.0.0.0
 address=/wzgysg.com/0.0.0.0
 address=/wzjp.boyuberq.ru/0.0.0.0
+address=/wzlegal.com/0.0.0.0
 address=/wzry173.com/0.0.0.0
 address=/wzrysp.com/0.0.0.0
 address=/wzsfkq.dm.files.1drv.com/0.0.0.0
@@ -75192,7 +75234,6 @@ address=/zhuti.freexulai.com/0.0.0.0
 address=/zhwaike.com/0.0.0.0
 address=/zhwq1216.com/0.0.0.0
 address=/zhycron.com.br/0.0.0.0
-address=/zhzy999.net/0.0.0.0
 address=/ziadonline.com/0.0.0.0
 address=/ziancontinental.ro/0.0.0.0
 address=/ziarulrevolutionarul.ro/0.0.0.0
@@ -75338,7 +75379,6 @@ address=/zonacomforta.com/0.0.0.0
 address=/zonadeseguridad.mx/0.0.0.0
 address=/zonadeseguridad.net/0.0.0.0
 address=/zonamarketingdigital.online/0.0.0.0
-address=/zonamusicex.com/0.0.0.0
 address=/zonaykan.com/0.0.0.0
 address=/zone-812.ml/0.0.0.0
 address=/zone3.de/0.0.0.0
@@ -75473,7 +75513,6 @@ address=/zyd1.com/0.0.0.0
 address=/zykj.shop/0.0.0.0
 address=/zylokk.000webhostapp.com/0.0.0.0
 address=/zymogen.net/0.0.0.0
-address=/zyncxxcciidiiudfisuifsiufusdfisdisifidfisuifisfisifisu.warzonedns.com/0.0.0.0
 address=/zypeujun.ru/0.0.0.0
 address=/zyr.co.jp/0.0.0.0
 address=/zyrstststzzxccxccddfgdd.duckdns.org/0.0.0.0
diff --git a/urlhaus-filter-domains-online.txt b/urlhaus-filter-domains-online.txt
index 3ea96efb..ccee9cb5 100644
--- a/urlhaus-filter-domains-online.txt
+++ b/urlhaus-filter-domains-online.txt
@@ -1,5 +1,5 @@
 # Title: abuse.ch URLhaus Online Malicious Domains Blocklist
-# Updated: Tue, 05 May 2020 00:09:52 UTC
+# Updated: Tue, 05 May 2020 12:09:42 UTC
 # Repo: https://gitlab.com/curben/urlhaus-filter
 # License: https://creativecommons.org/publicdomain/zero/1.0/
 # Source: https://urlhaus.abuse.ch/api/
@@ -8,14 +8,15 @@
 1.246.222.105
 1.246.222.113
 1.246.222.123
-1.246.222.134
 1.246.222.138
 1.246.222.14
 1.246.222.153
 1.246.222.165
 1.246.222.174
 1.246.222.20
+1.246.222.228
 1.246.222.232
+1.246.222.234
 1.246.222.237
 1.246.222.245
 1.246.222.36
@@ -53,7 +54,6 @@
 1.246.223.58
 1.246.223.6
 1.246.223.60
-1.246.223.61
 1.246.223.64
 1.246.223.71
 1.246.223.94
@@ -71,15 +71,16 @@
 102.141.240.139
 102.141.241.14
 102.182.126.91
+102.68.153.66
 103.139.219.9
 103.16.145.25
 103.204.168.34
 103.214.6.199
 103.221.254.130
 103.230.62.146
+103.234.226.133
 103.237.173.218
 103.240.249.121
-103.247.217.147
 103.254.205.135
 103.255.235.219
 103.31.47.214
@@ -89,6 +90,7 @@
 103.51.249.64
 103.60.110.111
 103.76.20.197
+103.77.157.11
 103.79.112.254
 103.80.210.9
 103.92.101.178
@@ -104,13 +106,7 @@
 106.104.115.213
 106.105.197.111
 106.105.218.18
-106.110.129.163
 106.110.205.207
-106.110.69.24
-106.110.71.236
-106.110.79.230
-106.111.41.140
-106.124.188.160
 106.242.20.219
 106.248.202.245
 107.158.154.94
@@ -127,12 +123,14 @@
 109.185.26.178
 109.233.196.232
 109.235.7.228
+109.248.58.238
 109.86.168.132
 109.86.85.253
 109.88.185.119
+109.95.15.210
 109.96.57.246
 110.154.250.225
-110.155.54.100
+110.156.65.88
 110.179.30.218
 110.179.5.188
 110.179.50.161
@@ -163,35 +161,34 @@
 111.38.30.47
 111.38.9.115
 111.40.79.79
+111.42.102.131
 111.42.102.171
-111.42.103.6
+111.42.102.72
 111.42.103.77
 111.42.67.49
-111.43.223.27
+111.43.223.112
 111.61.52.53
 111.90.150.64
 111.90.187.162
 111.93.169.90
 112.123.109.196
 112.123.109.59
-112.123.62.200
-112.133.195.58
 112.156.36.178
 112.160.193.57
 112.160.56.81
 112.163.80.114
+112.165.97.124
 112.166.251.121
 112.167.14.237
 112.167.148.70
 112.167.218.221
-112.17.104.45
-112.17.123.56
+112.17.78.163
 112.17.78.186
+112.170.165.71
 112.170.205.16
 112.170.205.85
 112.170.23.21
 112.184.221.213
-112.184.231.90
 112.185.140.99
 112.187.143.180
 112.187.217.80
@@ -207,11 +204,14 @@
 112.27.91.247
 112.78.45.158
 113.102.205.189
+113.103.57.153
 113.11.95.254
 113.133.224.80
+113.133.230.134
 113.219.81.166
 113.221.50.64
 113.240.186.132
+113.240.219.238
 113.243.74.89
 113.245.186.38
 113.254.169.251
@@ -219,46 +219,44 @@
 114.168.158.117
 114.226.139.37
 114.226.234.139
-114.226.234.153
-114.226.81.92
 114.226.84.3
 114.227.1.22
+114.228.25.50
 114.228.63.106
-114.229.18.229
 114.229.42.210
-114.234.104.158
 114.234.150.187
 114.234.69.205
 114.235.202.95
 114.235.208.243
+114.235.222.245
 114.235.246.18
-114.236.152.230
-114.239.1.105
 114.239.112.118
-114.239.128.231
 114.239.180.198
-114.239.37.159
-114.239.46.132
 114.239.80.42
 114.79.172.42
+115.216.208.162
 115.230.80.192
 115.48.34.1
+115.49.146.138
 115.49.147.197
-115.49.249.110
 115.49.37.132
 115.50.0.131
-115.59.17.176
+115.53.52.233
+115.58.134.107
+115.63.186.148
 115.77.186.182
 115.85.65.211
 116.100.249.121
 116.103.218.57
 116.110.18.194
+116.114.95.204
 116.149.247.146
 116.177.178.206
 116.177.179.202
 116.206.164.46
-116.26.114.202
+117.123.171.105
 117.206.159.20
+117.55.133.56
 117.63.51.128
 117.86.24.209
 117.87.44.106
@@ -268,18 +266,18 @@
 117.93.176.207
 117.93.216.98
 117.95.173.64
-117.95.226.223
 118.127.210.136
 118.151.220.206
 118.232.208.215
 118.232.209.108
 118.232.96.150
 118.233.39.25
-118.233.39.9
 118.32.199.219
 118.33.41.227
 118.35.65.115
 118.37.91.137
+118.38.143.102
+118.38.242.167
 118.40.183.176
 118.42.208.62
 118.46.36.186
@@ -287,6 +285,7 @@
 118.99.179.164
 118.99.239.217
 119.102.153.184
+119.136.88.217
 119.194.91.157
 119.2.48.159
 119.203.9.192
@@ -312,7 +311,9 @@
 120.52.33.2
 120.69.89.50
 121.121.117.190
+121.121.121.76
 121.122.104.75
+121.135.146.40
 121.136.137.7
 121.140.141.73
 121.148.122.219
@@ -322,6 +323,7 @@
 121.154.43.105
 121.155.233.13
 121.155.233.159
+121.159.208.28
 121.163.48.30
 121.165.140.117
 121.168.227.85
@@ -334,30 +336,29 @@
 121.184.131.249
 121.186.105.200
 121.186.74.53
-121.231.100.43
-121.231.164.108
 121.232.179.201
 121.233.103.163
 121.233.116.232
-121.233.117.174
 121.233.127.156
 121.233.68.89
-121.236.142.86
 121.86.113.254
 122.176.72.49
 123.0.198.186
 123.0.209.88
 123.10.137.138
 123.10.152.230
+123.10.223.91
 123.10.51.127
 123.11.25.254
 123.11.5.184
 123.113.102.36
+123.12.44.253
 123.194.235.37
 123.194.60.105
 123.194.60.238
 123.202.118.92
 123.241.112.94
+123.4.223.123
 123.51.152.54
 124.119.138.243
 124.67.89.40
@@ -368,15 +369,16 @@
 125.136.94.85
 125.137.120.38
 125.18.28.170
-125.209.71.6
+125.26.165.244
+125.40.234.73
 125.42.233.154
 125.44.116.149
-125.45.123.104
 125.45.52.161
-125.69.86.192
+125.71.148.155
 128.65.187.123
 129.121.176.89
 129.126.204.40
+133.167.105.83
 138.117.6.232
 138.197.153.117
 139.5.177.10
@@ -384,15 +386,12 @@
 13pope.com
 14.141.175.107
 14.161.4.53
-14.33.86.236
 14.34.165.243
-14.37.6.148
 14.41.57.152
 14.45.167.58
 14.46.209.82
 14.46.51.53
 14.48.245.16
-14.48.88.250
 14.49.212.151
 14.53.20.41
 14.54.95.158
@@ -408,8 +407,8 @@
 144.132.166.70
 144.136.155.166
 144.217.117.146
+145.255.26.115
 146.71.79.230
-147.91.212.250
 149.56.79.215
 150.co.il
 151.232.56.134
@@ -417,19 +416,16 @@
 152.249.225.24
 152.250.250.194
 154.91.144.44
+156.96.48.220
 159.224.74.112
 162.194.28.60
-162.212.113.149
 162.212.113.70
 162.212.114.196
-162.212.114.32
 162.212.115.189
 162.212.115.219
-162.212.115.80
 162.250.126.186
 163.13.182.105
 163.22.51.1
-163.47.145.202
 164.132.92.180
 165.227.220.53
 165.73.60.72
@@ -458,9 +454,8 @@
 175.200.153.48
 175.202.162.120
 175.210.50.4
-175.211.16.150
 175.212.31.241
-175.212.95.112
+175.212.52.9
 175.213.134.89
 175.215.226.31
 176.108.58.123
@@ -476,7 +471,6 @@
 176.113.161.129
 176.113.161.131
 176.113.161.133
-176.113.161.136
 176.113.161.138
 176.113.161.37
 176.113.161.41
@@ -487,13 +481,12 @@
 176.113.161.66
 176.113.161.68
 176.113.161.86
-176.113.161.87
 176.113.161.88
+176.113.161.89
 176.113.161.92
 176.113.161.93
 176.12.117.70
 176.14.234.5
-176.178.184.124
 176.214.78.192
 177.128.126.70
 177.137.107.131
@@ -503,7 +496,6 @@
 177.37.163.174
 177.38.176.22
 177.46.86.65
-177.54.82.154
 177.54.83.22
 177.67.8.11
 177.72.2.186
@@ -512,7 +504,6 @@
 178.134.248.74
 178.134.61.94
 178.136.195.90
-178.151.143.2
 178.165.122.141
 178.169.165.90
 178.19.183.14
@@ -533,16 +524,12 @@
 179.99.210.161
 180.104.182.79
 180.104.183.200
-180.104.195.10
 180.104.214.33
 180.104.59.28
 180.104.9.150
-180.115.66.239
-180.116.17.37
 180.116.20.254
 180.116.210.174
 180.116.224.151
-180.116.224.91
 180.116.96.229
 180.117.89.28
 180.117.91.251
@@ -554,14 +541,9 @@
 180.124.174.33
 180.124.214.4
 180.124.235.240
-180.124.6.47
 180.176.105.41
 180.176.110.243
-180.176.211.171
-180.177.104.65
-180.177.242.73
 180.189.104.106
-180.218.105.80
 180.218.161.128
 180.248.80.38
 180.43.82.186
@@ -588,13 +570,11 @@
 181.224.242.131
 181.40.117.138
 181.48.187.146
-182.113.221.17
+181.49.241.50
 182.114.249.171
 182.120.217.177
 182.124.173.124
-182.126.183.47
 182.126.214.208
-182.127.242.93
 182.127.67.155
 182.160.101.51
 182.160.125.229
@@ -605,12 +585,13 @@
 183.105.206.26
 183.106.201.118
 183.107.57.170
+183.109.5.228
 183.130.63.13
 183.151.121.12
-183.215.188.47
 183.221.125.206
 183.4.28.24
 183.4.30.251
+183.87.255.182
 184.163.2.58
 185.10.165.62
 185.12.78.161
@@ -618,18 +599,17 @@
 185.138.123.179
 185.14.250.199
 185.153.196.209
-185.172.110.214
+185.172.110.208
 185.172.110.216
 185.172.110.224
 185.172.110.232
-185.172.110.234
 185.172.110.238
-185.172.110.241
 185.172.110.243
 185.172.110.250
 185.181.10.234
 185.227.64.59
 185.242.104.98
+185.244.39.251
 185.34.16.231
 185.43.19.151
 185.5.229.8
@@ -647,8 +627,6 @@
 186.251.253.134
 186.34.4.40
 186.42.255.230
-186.73.188.132
-187.107.191.197
 187.12.10.98
 187.172.68.247
 187.183.213.88
@@ -677,7 +655,6 @@
 188.83.202.25
 189.126.70.222
 189.252.214.199
-189.45.44.86
 190.0.42.106
 190.110.161.252
 190.119.207.58
@@ -707,7 +684,6 @@
 190.99.117.10
 191.102.123.132
 191.103.252.116
-191.13.184.58
 191.209.53.113
 191.223.54.151
 191.255.248.220
@@ -716,9 +692,7 @@
 192.119.87.242
 192.236.146.53
 192.236.147.189
-192.236.147.67
 193.106.57.83
-193.142.146.30
 193.228.135.144
 193.248.246.94
 193.38.51.25
@@ -743,12 +717,12 @@
 196.221.144.149
 196.32.106.85
 197.155.66.202
+197.210.214.11
+197.51.235.38
 198.24.75.52
 199.36.76.2
 199.83.203.104
-199.83.203.115
 199.83.203.137
-199.83.203.229
 199.83.203.85
 199.83.204.244
 199.83.204.89
@@ -764,7 +738,6 @@
 2.55.103.71
 2.55.89.188
 2.82.28.27
-2.indexsinas.me
 200.105.167.98
 200.107.7.242
 200.111.189.70
@@ -801,6 +774,7 @@
 202.4.124.58
 202.51.191.174
 202.74.236.9
+202.79.46.30
 203.114.116.37
 203.129.254.50
 203.163.211.46
@@ -878,7 +852,6 @@
 217.145.193.216
 217.218.218.196
 217.26.162.115
-217.61.22.186
 217.8.117.23
 217.8.117.76
 218.144.252.19
@@ -886,11 +859,9 @@
 218.156.132.7
 218.156.26.85
 218.157.214.219
-218.159.238.10
 218.203.206.137
 218.21.170.239
 218.21.170.6
-218.21.170.96
 218.255.247.58
 218.31.2.125
 218.32.118.1
@@ -903,6 +874,7 @@
 219.68.1.148
 219.68.245.63
 219.68.251.32
+219.70.238.66
 219.70.63.196
 219.80.217.209
 21robo.com
@@ -910,24 +882,23 @@
 220.122.180.53
 220.80.136.75
 220.82.140.17
+221.13.236.180
 221.144.153.139
+221.15.11.116
 221.155.253.61
 221.155.30.60
-221.155.68.193
+221.158.124.81
 221.159.171.90
 221.166.254.127
 221.167.18.122
-221.210.211.16
-221.210.211.8
-221.210.211.9
-221.226.86.151
-222.105.26.35
 222.113.138.43
 222.116.70.13
 222.118.213.93
+222.138.150.1
+222.138.150.125
+222.139.222.59
 222.139.30.106
 222.140.37.5
-222.185.161.165
 222.185.199.202
 222.185.73.210
 222.187.159.223
@@ -944,7 +915,6 @@
 23.254.211.179
 23.254.226.60
 23.94.154.115
-23.95.89.78
 24.0.252.145
 24.10.116.43
 24.103.74.180
@@ -957,26 +927,19 @@
 24.165.41.55
 24.187.204.102
 24.228.16.207
-24.72.128.195
 24.99.99.166
 27.113.29.218
 27.116.48.102
 27.116.84.57
-27.147.29.52
 27.147.40.128
 27.155.87.120
 27.238.33.39
-27.41.135.19
 27.41.177.145
-27.41.225.96
+27.41.187.108
 27.41.227.6
 27.48.138.13
-3.zhzy999.net
-3.zhzy999.net3.zhzy999.net
-31.128.173.853.zhzy999.net
-31.128.173.853.zhzy999.net31.128.173.853.zhzy999.net
-31.13.23.180
 31.132.143.21
+31.146.124.188
 31.146.212.197
 31.146.212.252
 31.146.229.140
@@ -1004,7 +967,6 @@
 31.27.128.108
 31.30.119.23
 31.44.54.110
-31639.xc.mieseng.com
 35.141.217.189
 35.221.223.15
 36.107.211.17
@@ -1012,13 +974,12 @@
 36.33.139.64
 36.33.248.102
 36.33.248.208
-36.35.160.240
+36.39.47.194
 36.66.105.159
 36.66.133.125
 36.66.139.36
 36.66.168.45
 36.66.190.11
-36.67.152.161
 36.67.223.231
 36.67.42.193
 36.74.74.99
@@ -1031,22 +992,24 @@
 37.142.138.126
 37.17.21.242
 37.222.98.51
-37.232.98.103
+37.235.162.131
 37.29.67.145
 37.34.250.243
 37.49.226.160
 37.49.226.162
 37.49.226.209
 37.49.226.210
+37.49.226.228
 37.49.226.230
+37.49.230.103
 37.49.230.141
 37.49.230.234
 37.54.14.36
 3mandatesmedia.com
 3ypackaging.com
-40.85.183.45
 402musicfest.com
 41.139.209.46
+41.165.130.43
 41.190.63.174
 41.190.70.238
 41.211.112.82
@@ -1058,33 +1021,46 @@
 41.64.170.241
 41.67.137.162
 41.72.203.82
+41.76.157.2
 41.79.234.90
+41.86.19.200
 42.115.25.55
+42.115.86.142
+42.225.203.189
 42.227.121.217
+42.227.145.119
+42.227.147.234
+42.227.166.214
 42.227.184.46
+42.227.201.91
+42.227.202.11
 42.230.252.207
-42.230.51.38
-42.235.49.199
-42.238.149.21
-42.239.91.19
+42.231.170.22
+42.239.96.146
 42.61.99.155
 42.82.191.105
 43.252.8.94
 45.114.68.156
+45.115.253.82
 45.118.165.115
 45.138.97.46
 45.139.236.14
 45.14.150.29
 45.14.151.249
+45.163.149.85
 45.19.201.181
 45.221.78.166
+45.221.78.38
 45.229.22.195
+45.32.234.129
 45.49.113.70
 45.50.228.207
 45.95.168.202
 45.95.168.251
 45.95.168.97
+45.95.169.249
 45.95.169.254
+45.95.55.58
 46.100.251.72
 46.100.56.152
 46.100.57.58
@@ -1101,7 +1077,6 @@
 46.236.65.83
 46.241.120.165
 46.36.74.43
-46.39.247.65
 46.47.106.63
 46.6.1.167
 46.97.76.242
@@ -1126,16 +1101,13 @@
 49.213.179.129
 49.236.213.248
 49.246.91.131
-49.68.129.106
 49.68.154.84
 49.68.213.49
 49.68.226.132
-49.68.235.19
 49.68.250.118
-49.68.54.141
 49.70.127.10
-49.70.137.78
 49.70.234.20
+49.70.34.196
 49.81.134.147
 49.81.91.113
 49.82.14.191
@@ -1143,9 +1115,7 @@
 49.82.228.87
 49.82.249.71
 49.82.250.152
-49.82.252.63
 49.82.50.209
-49.84.125.254
 49.84.93.106
 49.89.115.124
 49.89.139.161
@@ -1158,11 +1128,12 @@
 5.101.196.90
 5.101.213.234
 5.128.62.127
+5.185.85.122
 5.19.248.85
+5.198.241.29
 5.201.130.125
 5.206.227.18
 5.238.110.62
-5.252.179.60
 5.29.175.150
 5.57.133.136
 5.8.208.49
@@ -1181,28 +1152,23 @@
 58.243.121.118
 58.243.122.144
 58.243.123.161
-58.243.190.127
 58.243.20.165
 58.40.122.158
 59.0.224.88
 59.0.78.18
 59.1.81.1
 59.12.134.224
-59.127.31.71
 59.174.151.114
+59.19.231.31
 59.2.40.1
 59.22.144.136
 59.23.208.62
 59.3.253.82
-59.4.104.15
 59.7.40.82
 60.184.172.193
-61.168.45.178
 61.247.224.66
 61.52.100.115
 61.53.254.152
-61.54.249.180
-61.56.182.218
 61.58.174.253
 61.58.55.226
 61.60.204.178
@@ -1239,7 +1205,6 @@
 66.70.225.220
 66.90.187.191
 66.96.252.2
-67.245.47.15
 67.8.138.101
 68.134.186.196
 68.174.119.7
@@ -1276,6 +1241,7 @@
 74.113.230.55
 74.66.217.253
 74.75.165.81
+75.127.0.11
 75.3.198.176
 75.55.248.20
 76.108.23.131
@@ -1322,6 +1288,7 @@
 80.19.101.218
 80.191.250.164
 80.210.19.69
+80.210.28.73
 80.211.102.87
 80.224.107.163
 80.235.214.123
@@ -1403,21 +1370,21 @@
 86.107.167.93
 86.18.117.139
 86.35.43.220
+86.7.86.4
 87.120.235.164
 87.241.175.89
 87.66.219.63
 87.97.154.37
+87du.vip
 88.102.33.14
 88.201.34.243
-88.218.16.118
-88.218.16.37
 88.218.16.38
 88.218.17.197
 88.218.17.222
+88.220.80.210
 88.225.222.128
 88.247.194.52
 88.248.121.238
-88.249.120.216
 88.250.196.101
 88.250.85.219
 887sconline.com
@@ -1432,16 +1399,16 @@
 89.208.105.18
 89.216.122.78
 89.22.152.244
-89.235.98.60
-89.32.41.87
 89.40.85.166
 89.40.87.5
+89.46.237.89
 91.134.252.221
 91.149.191.182
 91.177.139.132
 91.187.103.32
 91.187.119.26
 91.191.32.34
+91.196.36.84
 91.215.126.208
 91.216.149.130
 91.217.2.120
@@ -1460,9 +1427,7 @@
 92.45.198.60
 92.51.127.94
 92.55.124.64
-93.102.193.254
 93.116.166.51
-93.119.236.72
 93.122.213.217
 93.122.225.34
 93.171.33.234
@@ -1483,6 +1448,7 @@
 94.230.152.192
 94.244.113.217
 94.244.25.21
+94.41.0.174
 94.53.120.109
 94.64.246.247
 95.132.129.250
@@ -1493,6 +1459,7 @@
 95.170.201.34
 95.210.1.42
 95.231.116.118
+95.243.30.86
 95.86.56.174
 96.75.90.185
 96.77.17.146
@@ -1504,6 +1471,7 @@
 98.238.122.130
 99.121.0.96
 99.50.211.58
+SnackFreebie.com
 a-reality.co.uk
 aaasolution.co.th
 aaload05.top
@@ -1511,11 +1479,11 @@ accessyouraudience.com
 acdesignhub.com
 acteon.com.ar
 activecost.com.au
+adamtcarruthers.com
 adnquocte.com
 aelogica.com
 agiandsam.com
 agipasesores.com
-agsir.com
 aite.me
 ajibolarilwan.com
 al-wahd.com
@@ -1526,20 +1494,19 @@ alexbase.com
 alexwacker.com
 algorithmshargh.com
 allloveseries.com
-alnahrainfilminstitute.com
 alohasoftware.net
 alphaconsumer.net
 am-concepts.ca
 amd.alibuf.com
+amedeoscognamiglio.329263.com
 amemarine.co.th
 americanrange.com
 anadolutatili.com
-anamikaindanegas.in
 andreelapeyre.com
 andremaraisbeleggings.co.za
 angiathinh.com
+angthong.nfe.go.th
 ansarihospital.in
-anuragsharma.co.in
 anvietpro.com
 anysbergbiltong.co.za
 aoujlift.ir
@@ -1547,12 +1514,12 @@ apartdelpinar.com.ar
 apoolcondo.com
 apware.co.kr
 archiv.bg
-arcticprospectus.com
 areac-agr.com
 aresorganics.com
+arowanafishforsale.com
 ascentive.com
-ashoakacharya.com
 askarindo.or.id
+askmufti.org
 atfile.com
 atomlines.com
 attach.66rpg.com
@@ -1566,29 +1533,29 @@ aznetsolutions.com
 azureautomation.co.uk
 azzd.co.kr
 babaroadways.in
-backlinksale.com
-badgesforbullies.org
 bamakobleach.free.fr
 bangkok-orchids.com
 banzaimonkey.com
 bapo.granudan.cn
+baritaco.com
 baybars.xyz
 bbs.sunwy.org
 bbs1.marisfrolg.com
 bd11.52lishi.com
 bd12.52lishi.com
 bd18.52lishi.com
-bd19.52lishi.com
 beibei.xx007.cc
 bepgroup.com.hk
 besserblok-ufa.ru
 besttasimacilik.com.tr
+beta.pterosol.com
 bflow.security-portal.cz
 bigdealist.com
 bildeboks.no
 bilim-pavlodar.gov.kz
 billieellish.org
 bingxiong.vip
+bistlearn.ir
 bjkumdo.com
 blog.241optical.com
 blog.hanxe.com
@@ -1601,9 +1568,11 @@ brbs.customer.netspace.net.au
 brewmethods.com
 btlocum.pl
 bugansavings.com
+bxbx28.cn
 byqkdy.com
 c.vvvvvvvvv.ga
 cameli.vn
+campana20gb.com
 canaan.io
 canmivback.biz
 caravella.com.br
@@ -1611,6 +1580,7 @@ cassovia.sk
 castmart.ga
 cbk.m.dodo52.com
 ccnn.xiaomier.cn
+cdn-10049480.file.myqcloud.com
 cdn.truelife.vn
 cdn.xiaoduoai.com
 cdnus.laboratoryconecpttoday.com
@@ -1631,17 +1601,17 @@ chipmarkets.com
 chiptune.com
 chj.m.dodo52.com
 chuckweiss.com
-cista-dobra-voda.com
 clareiamente.clareiamente.com
 clearwaterriveroutfitting.com
 client.yaap.co.uk
 clinicamariademolina.com
 cloud-server-updater2.co.za
-compesat.com
+colourcreative.co.za
 complan.hu
 complanbt.hu
 comtechadsl.com
 config.kuaisousou.top
+config.wwmhdq.com
 consultingcy.com
 counciloflight.bravepages.com
 cqjcc.org
@@ -1649,12 +1619,9 @@ crittersbythebay.com
 cryline.net
 csnserver.com
 csw.hu
-cuacuonsieure.com
 cvc.com.pl
 cyclomove.com
 czsl.91756.cn
-d3.99ddd.com
-d9.99ddd.com
 da.alibuf.com
 daithanhphung.com
 danielbastos.com
@@ -1678,10 +1645,10 @@ dev1.xicom.us
 dev5.mypagevn.com
 dezcom.com
 dfcf.91756.cn
-dfd.zhzy999.net
 dfzm.91756.cn
 dgecolesdepolice.bf
 dgnj.cn
+dhlservices.duckdns.org
 diazavendano.cl
 dichvuvesinhcongnghiep.top
 dienmaycu.vn
@@ -1693,26 +1660,25 @@ ditec.com.my
 divinevacations.in
 dkw-engineering.net
 dl-gameplayer.dmm.com
-dl.1003b.56a.com
 dl.198424.com
 dl.dzqzd.com
-dl.kuaile-u.com
-dl2.soft-lenta.ru
+dl.iqilie.com
 dlist.iqilie.com
 dmresor.se
 dnn.alibuf.com
 dns.alibuf.com
 dodsonimaging.com
 don.viameventos.com.br
+dongiln.co
 donmago.com
 donoffermaster.best
 doostansocks.ir
 doransky.info
-dosame.com
 down.ancamera.co.kr
 down.gogominer.com
 down.haote.com
 down.pcclear.com
+down.pdflist.cqhbkjzx.com
 down.startools.co.kr
 down.tgjkbx.cn
 down.upzxt.com
@@ -1734,14 +1700,12 @@ dpeasesummithilltoppers.pbworks.com
 dr080.com
 dralpaslan.com
 dreamfile.club
-drivolani.us
 drools-moved.46999.n3.nabble.com
 druzim.freewww.biz
 dsiun.com
 dtsay.xyz
 dudulm.com
 dusdn.mireene.com
-dw.58wangdun.com
 dx.qqyewu.com
 dx1.qqtn.com
 dx2.qqtn.com
@@ -1750,7 +1714,9 @@ dx60.siweidaoxiang.com
 dzinestudio87.co.uk
 e.dangeana.com
 easydown.workday360.cn
+ebook.w3wvg.com
 edicolanazionale.it
+elokshinproperty.co.za
 emir-elbahr.com
 enc-tech.com
 energisegroup.com
@@ -1759,21 +1725,20 @@ er-bulisguvenligi.com
 ermekanik.com
 esolvent.pl
 esteteam.org
+exposvision.com
 ezfintechcorp.com
 fafhoafouehfuh.su
-fairyqueenstore.com
 fastsoft.onlinedown.net
 fazi.pl
-fedsfmr.ru
 fenoma.net
 ffv322.ru
 ffv32223.ru
 fidiag.kymco.com
+fifa555easy.329263.com
 figuig.net
 fileco.jobkorea.co.kr
 filen3.utengine.co.kr
 filen5.utengine.co.kr
-files.fqapps.com
 files.rakbot.ru
 files6.uludagbilisim.com
 fishingbigstore.com
@@ -1781,7 +1746,6 @@ fitmanacademy.com
 fkd.derpcity.ru
 flex.ru
 flood-protection.org
-fmjstorage.com
 fordlamdong.com.vn
 foreverprecious.org
 foxfennecs.com
@@ -1790,21 +1754,20 @@ fte.m.dodo52.com
 ftpcnc-p2sp.pconline.com.cn
 ftpftpftp.com
 funletters.net
+funpartyrent.com
 futuregraphics.com.ar
-g.7230.com
 g0ogle.free.fr
+gainsdirectory.com
 galuhtea.com
 gamee.top
+garage.themebuffets.com
 garenanow.myvnc.com
 garenanow4.myvnc.com
 gargiulo.com.ar
 gateway-heide.de
 gateway.ethlqd.com
-gd2.greenxf.com
 genesisconstruction.co.za
 germistonmiraclecentre.co.za
-getfashionmania.com
-ghislain.dartois.pagesperso-orange.fr
 ghwls44.gabia.io
 gimscompany.com
 glitzygal.net
@@ -1814,8 +1777,6 @@ gnimelf.net
 go.xsuad.com
 gocanada.vn
 google.ghststr.com
-gopala.es
-gov.kr
 govhotel.us
 grafchekloder.rebatesrule.net
 granportale.com.br
@@ -1823,7 +1784,6 @@ green100.cn
 greenfood.sa.com
 greenleaveperu.com
 gssgroups.com
-gx-10012947.file.myqcloud.com
 habbotips.free.fr
 hagebakken.no
 halcat.com
@@ -1831,7 +1791,6 @@ hanaphoto.co.kr
 handrush.com
 hanoihub.vn
 hazel-azure.co.th
-hdxa.net
 healtina.com
 heavenif.co.za
 hediyeinternetpaket.com
@@ -1844,9 +1803,7 @@ hoayeuthuong-my.sharepoint.com
 hostzaa.com
 hotart.co.nz
 hotel-le-relais-des-moulins.com
-hotelbharatpurpalace.com
 housewifes.co
-hqsistemas.com.ar
 hseda.com
 hsmwebapp.com
 htxl.cn
@@ -1860,12 +1817,12 @@ ideadom.pl
 ihpmed.ae
 ileolaherbalcare.com.ng
 imellda.com
+imenizeh.ir
 impression-gobelet.com
 in-sect.com
 inapadvance.com
 incrediblepixels.com
 incredicole.com
-ini.egkj.com
 innovation4crisis.org
 instanttechnology.com.au
 intelicasa.ro
@@ -1883,6 +1840,7 @@ itrigger.cn
 itsnixielou.com
 ixlonbcc.com
 izu.co.jp
+jahesa.com
 jaincakes.xyz
 jamiekaylive.com
 jansen-heesch.nl
@@ -1911,6 +1869,7 @@ k3.etfiber.net
 kabiru.ru
 kachsurf.mylftv.com
 kamasu11.cafe24.com
+kamisecurity.com.my
 kanok.co.th
 kar.big-pro.com
 karavantekstil.com
@@ -1918,16 +1877,15 @@ kassohome.com.tr
 kdsp.co.kr
 kejpa.com
 kenareh-gostare-aras.ir
+kgfs3.329263.com
 khunnapap.com
 kiencuonghotel.vn
 kjbm9.mof.gov.cn
 kleinendeli.co.za
-knightsbridgeenergy.com.ng
 koppemotta.com.br
 koralli.if.ua
 kqq.kz
 kristofferdaniels.com
-kupaliskohs.sk
 kuznetsov.ca
 kwanfromhongkong.com
 kwikomfi-lab.com
@@ -1946,13 +1904,14 @@ learningcomputing.org
 lebedyn.info
 lecafedesartistes.com
 lengendryme.com
-leukkado.be
+lesa.at.true.by
 lhbfirst.com
 libya-info.com
 lifeapt.biz
 linx.li
 lists.ibiblio.org
 lists.mplayerhq.hu
+livetrack.in
 lodergord.com
 log.yundabao.cn
 lsyr.net
@@ -1967,11 +1926,10 @@ mackleyn.com
 magda.zelentourism.com
 makosoft.hu
 malin-akerman.net
-mangawt.com
 margopassadorestylist.com
-maringareservas.com.br
 marketprice.com.ng
 marksidfgs.ug
+marocaji.com
 matt-e.it
 mattayom31.go.th
 mazury4x4.pl
@@ -1979,7 +1937,6 @@ mbgrm.com
 mecbox.cn
 mediamatkat.fi
 medianews.ge
-medicacademic.com
 medreg.uz
 meert.org
 meeweb.com
@@ -1990,7 +1947,6 @@ metallexs.com
 mettaanand.org
 mettek.com.tr
 mfevr.com
-mfpc.org.my
 mhkdhotbot.myvnc.com
 mhkdhotbot80.myvnc.com
 micahproducts.com
@@ -1999,7 +1955,6 @@ mirror.mypage.sk
 mis.nbcc.ac.th
 misterson.com
 mistydeblasiophotography.com
-mitonegbh.xyz
 mkk09.kr
 mkontakt.az
 mmc.ru.com
@@ -2007,6 +1962,7 @@ mobiadnews.com
 mobilier-modern.ro
 modcloudserver.eu
 moha-group.com
+monmariage.info
 moscow11.at
 mountveederwines.com
 moyo.co.kr
@@ -2016,16 +1972,12 @@ msecurity.ro
 mteng.mmj7.com
 mtfelektroteknik.com
 mueblesjcp.cl
-mv360.net
 mvb.kz
-mvdrepair.com
 mxpiqw.am.files.1drv.com
-myexpertca.in
+mydesign.thinkeraibirds.com
 myhood.cl
 myo.net.au
 myofficeplus.com
-myonlinepokiesblog.com
-mytex.pe
 mytrains.net
 mywp.asia
 myyttilukukansasta.fi
@@ -2040,14 +1992,12 @@ nebraskacharters.com.au
 nemo.herc.ws
 neocity1.free.fr
 nerve.untergrund.net
-new.tristatehs.com
 news.abfakerman.ir
 news.omumusic.net
 newsun-shop.com
 newxing.com
 nexity.me
 nfbio.com
-ngoaingu.garage.com.vn
 nofound.000webhostapp.com
 norperuinge.com.pe
 nprg.ru
@@ -2057,6 +2007,7 @@ oa.fnysw.com
 oa.hys.cn
 obnova.zzux.com
 obseques-conseils.com
+ohe.ie
 oknoplastik.sk
 omega.az
 omsk-osma.ru
@@ -2082,7 +2033,6 @@ pack301.bravepages.com
 pakdesighee.com
 palochusvet.szm.com
 partyflix.net
-pat4.jetos.com
 pat4.qpoe.com
 patch2.51lg.com
 patch2.99ddd.com
@@ -2093,6 +2043,7 @@ pcginsure.com
 pcsoori.com
 pedidoslalacteo.com.ar
 peterssandmay.com
+petromltd.com
 ph4s.ru
 phamchilong.com
 phudieusongma.com
@@ -2106,7 +2057,6 @@ podrska.com.hr
 ponto50.com.br
 poolbook.ir
 ppl.ac.id
-prabhuandsons.com
 pratapnursery.com
 prepaenunsoloexamen.academiagalileoac.com
 probost.cz
@@ -2120,7 +2070,6 @@ qmsled.com
 qppl.angiang.gov.vn
 quantominds.com
 quartier-midi.be
-quehagoencartagena.com
 quickuploader.xyz
 raacts.in
 raifix.com.br
@@ -2134,7 +2083,6 @@ recommendservices.com
 redeemerssports.com
 redesoftdownload.info
 renimin.mymom.info
-renovanorte.com
 res.uf1.cn
 ret.space
 rezaazizi.ir
@@ -2151,12 +2099,11 @@ royalplusmobile.ir
 ruisgood.ru
 rusch.nu
 s.51shijuan.com
-s.kk30.com
-s14b.91danji.com
-s14b.groundyun.cn
 sabiupd.compress.to
 saboorjaam.ir
 sabupda.vizvaz.com
+saglikbakanligi-destekportal.org
+saglikramazan20bgb.net
 sahathaikasetpan.com
 salvationbd.com
 sandovalgraphics.com
@@ -2167,7 +2114,6 @@ schollaert.eu
 sefp-boispro.fr
 selekture.com
 selvikoyunciftligi.com
-sernayconsultores.com
 serpentrising.com
 servicemhkd.myvnc.com
 servicemhkd80.myvnc.com
@@ -2177,7 +2123,6 @@ sgm.pc6.com
 shacked.webdepot.co.il
 shahtoba.faqserv.com
 shaoxiaofei.cn
-share.dmca.gripe
 sharjahas.com
 shembefoundation.com
 simlun.com.ar
@@ -2203,7 +2148,6 @@ sophiaskyhotel.vn
 sota-france.fr
 souldancing.cn
 souq-aljwalat.com
-spdtextile.com
 speed.myz.info
 spurstogo.com
 sputnikmailru.cdnmail.ru
@@ -2213,11 +2157,11 @@ srvmanos.no-ip.info
 ss.cybersoft-vn.com
 sslv3.at
 staging.popclusive.asia
+staging2.lifebiotic.com
 starcountry.net
 starinfotechcollege.com
 static.3001.net
 static.ilclock.com
-static.topxgun.com
 stecit.nl
 stevewalker.com.au
 story-maker.jp
@@ -2237,7 +2181,6 @@ t.honker.info
 tandenblekenhoofddorp.nl
 taraward.com
 taxpos.com
-tcy.198424.com
 teamtnt.red
 teardrop-productions.ro
 technoites.com
@@ -2258,32 +2201,28 @@ theprestige.ro
 theptiendat.com
 thepyramids.nl
 therecruiter.io
-thevision.ro
 thornadops.com
 thosewebbs.com
 thuong.bidiworks.com
 tianangdep.com
+tianzi8.cn
 tibinst.mefound.com
 tibok.lflink.com
 tinckorm.beget.tech
 tishreycarmelim.co.il
 tmhfashionhouse.co.za
 toe.polinema.ac.id
-tomorrowearth.net
 tonghopgia.net
 tonydong.com
 tonyzone.com
-toulousa.com
 tsd.jxwan.com
 tsredco.telangana.gov.in
 tulli.info
 tumso.org
 tuneup.ibk.me
 tup.com.cn
-tuskanlehdms.ug
 tutuler.com
 uc-56.ru
-ucto-id.cz
 ufabet168168.329263.com
 ugc.wegame.com.cn
 ultimatelamborghiniexperience.com
@@ -2316,20 +2255,22 @@ vietducbio.com
 vigilar.com.br
 vip.recommendedtoyoo.com
 virustreatments.empeeevents.com
+visagepk.com
+vistanewsite.ir
 visualdata.ru
 vitinhvnt.com
 vitromed.ro
+vjhascv.ru
 voyageur.sisnettdesign.com
 vrrumover0.vrrum0.farted.net
 vvff.in
-w.zhzy999.net
 wangtong7.siweidaoxiang.com
 wangzonghang.cn
-wap.dosame.com
 ware.ru
 warriorllc.com
 wbd.5636.com
 wbkmt.com
+web.lavishsupplystore.com
 webarte.com.br
 webq.wikaba.com
 webserverthai.com
@@ -2339,7 +2280,6 @@ welcometothefuture.com
 whgaty.com
 wiebe-sanitaer.de
 wmd9e.a3i1vvv.feteboc.com
-wmi.1217bye.host
 wnksupply.co.th
 wood-expert.net
 woodsytech.com
@@ -2353,12 +2293,12 @@ www2.recepty5.com
 x2vn.com
 xia.vzboot.com
 xiaidown.com
+xiaoma-10021647.file.myqcloud.com
 xiegushi.cn
 xirfad.com
 xn--20gb-hediyefrsati-nvc.com
 xn--transfgran-mgbbb600b.ro
 xtremeforumz.com
-xueha.fun
 xuhss.com
 xxwl.kuaiyunds.com
 xxxze.co.nu
@@ -2381,8 +2321,6 @@ zentealounge.com.au
 zethla.com
 zeytinyagisabun.com
 zhetysu360.kz
-zhzy999.net
-ziliao.yunkaodian.com
 zj.9553.com
 zmmore.com
 zoetermeerov.nl
diff --git a/urlhaus-filter-domains.txt b/urlhaus-filter-domains.txt
index b29e925b..7abbd5d4 100644
--- a/urlhaus-filter-domains.txt
+++ b/urlhaus-filter-domains.txt
@@ -1,5 +1,5 @@
 # Title: abuse.ch URLhaus Malicious Domains Blocklist
-# Updated: Tue, 05 May 2020 00:09:52 UTC
+# Updated: Tue, 05 May 2020 12:09:42 UTC
 # Repo: https://gitlab.com/curben/urlhaus-filter
 # License: https://creativecommons.org/publicdomain/zero/1.0/
 # Source: https://urlhaus.abuse.ch/api/
@@ -257,6 +257,7 @@
 1.34.165.65
 1.34.166.137
 1.34.168.211
+1.34.17.215
 1.34.170.168
 1.34.173.15
 1.34.180.128
@@ -2340,6 +2341,7 @@
 110.156.60.73
 110.156.62.196
 110.156.65.177
+110.156.65.88
 110.156.66.65
 110.156.67.205
 110.156.81.73
@@ -3027,6 +3029,7 @@
 112.164.95.47
 112.165.11.115
 112.165.170.131
+112.165.97.124
 112.166.251.121
 112.167.14.237
 112.167.148.70
@@ -3162,6 +3165,7 @@
 113.103.56.104
 113.103.56.242
 113.103.57.152
+113.103.57.153
 113.103.58.202
 113.103.58.235
 113.109.52.111
@@ -3231,6 +3235,7 @@
 113.133.230.114
 113.133.230.120
 113.133.230.129
+113.133.230.134
 113.133.230.156
 113.133.230.225
 113.133.230.227
@@ -3340,6 +3345,7 @@
 113.240.216.136
 113.240.216.87
 113.240.218.195
+113.240.219.238
 113.240.219.47
 113.243.0.76
 113.243.1.166
@@ -3764,6 +3770,7 @@
 114.228.248.138
 114.228.248.59
 114.228.25.5
+114.228.25.50
 114.228.27.34
 114.228.27.92
 114.228.28.212
@@ -3963,6 +3970,7 @@
 114.235.211.16
 114.235.22.32
 114.235.222.230
+114.235.222.245
 114.235.230.5
 114.235.231.35
 114.235.232.20
@@ -4364,6 +4372,7 @@
 114.34.185.143
 114.34.195.231
 114.34.222.71
+114.34.226.203
 114.34.228.175
 114.34.25.132
 114.34.37.36
@@ -4545,6 +4554,7 @@
 115.216.111.23
 115.216.115.122
 115.216.118.218
+115.216.208.162
 115.216.210.105
 115.216.214.215
 115.216.24.55
@@ -4693,6 +4703,7 @@
 115.49.144.191
 115.49.144.46
 115.49.144.51
+115.49.146.138
 115.49.146.192
 115.49.147.108
 115.49.147.197
@@ -5131,6 +5142,7 @@
 115.53.29.19
 115.53.31.10
 115.53.39.133
+115.53.52.233
 115.53.55.137
 115.53.63.184
 115.53.85.87
@@ -5194,6 +5206,7 @@
 115.55.137.49
 115.55.138.161
 115.55.138.235
+115.55.140.206
 115.55.140.92
 115.55.141.235
 115.55.142.188
@@ -5483,6 +5496,7 @@
 115.58.133.41
 115.58.133.53
 115.58.133.70
+115.58.134.107
 115.58.134.187
 115.58.134.198
 115.58.134.21
@@ -5820,6 +5834,7 @@
 115.63.140.32
 115.63.141.174
 115.63.176.199
+115.63.186.148
 115.63.186.53
 115.63.188.223
 115.63.189.151
@@ -7397,6 +7412,7 @@
 119.129.203.251
 119.129.203.29
 119.134.202.157
+119.136.88.217
 119.145.61.159
 119.15.92.126
 119.155.43.38
@@ -7785,6 +7801,7 @@
 121.101.185.126
 121.102.114.222
 121.121.117.190
+121.121.121.76
 121.121.129.87
 121.121.42.75
 121.121.81.191
@@ -8511,6 +8528,7 @@
 123.10.22.53
 123.10.222.107
 123.10.222.129
+123.10.223.91
 123.10.229.210
 123.10.23.171
 123.10.23.194
@@ -9110,6 +9128,7 @@
 123.12.42.108
 123.12.42.117
 123.12.44.174
+123.12.44.253
 123.12.45.160
 123.12.45.179
 123.12.45.37
@@ -9337,6 +9356,7 @@
 123.4.216.84
 123.4.217.29
 123.4.220.192
+123.4.223.123
 123.4.223.253
 123.4.240.235
 123.4.241.230
@@ -9949,6 +9969,7 @@
 125.26.165.244
 125.26.169.151
 125.26.169.191
+125.26.40.94
 125.27.147.92
 125.27.148.103
 125.27.187.233
@@ -9967,6 +9988,7 @@
 125.40.210.202
 125.40.211.109
 125.40.234.169
+125.40.234.73
 125.40.235.80
 125.40.33.61
 125.40.72.149
@@ -10443,6 +10465,7 @@
 125.70.118.65
 125.70.118.95
 125.70.39.147
+125.71.148.155
 125.72.173.103
 125.77.30.21
 125.77.30.31
@@ -10683,6 +10706,7 @@
 132.255.21.50
 132.255.253.64
 13207303642.aircq.com
+133.167.105.83
 133.18.169.9
 133.18.201.42
 133.18.202.74
@@ -12643,6 +12667,7 @@
 159.65.169.108
 159.65.170.120
 159.65.170.44
+159.65.171.28
 159.65.171.79
 159.65.172.17
 159.65.177.158
@@ -13650,6 +13675,7 @@
 167.71.101.10
 167.71.102.73
 167.71.103.48
+167.71.107.14
 167.71.107.219
 167.71.107.86
 167.71.109.81
@@ -14906,6 +14932,7 @@
 172.36.56.27
 172.36.56.55
 172.36.56.65
+172.36.57.100
 172.36.57.107
 172.36.57.117
 172.36.57.143
@@ -15474,6 +15501,7 @@
 172.39.72.131
 172.39.72.142
 172.39.72.227
+172.39.72.32
 172.39.72.45
 172.39.72.63
 172.39.73.155
@@ -15644,6 +15672,7 @@
 172.45.2.115
 172.45.20.164
 172.45.20.220
+172.45.24.42
 172.45.25.197
 172.45.25.91
 172.45.26.71
@@ -19603,6 +19632,7 @@
 183.107.136.8
 183.107.57.170
 183.108.170.41
+183.109.5.228
 183.110.79.42
 183.128.140.241
 183.128.143.249
@@ -20620,6 +20650,7 @@
 185.244.39.19
 185.244.39.198
 185.244.39.201
+185.244.39.251
 185.244.39.45
 185.244.39.47
 185.244.39.51
@@ -21214,6 +21245,7 @@
 188.166.24.72
 188.166.25.58
 188.166.27.168
+188.166.3.147
 188.166.31.61
 188.166.36.43
 188.166.37.28
@@ -22344,6 +22376,7 @@
 194.5.250.114
 194.5.250.181
 194.5.250.45
+194.5.79.166
 194.5.98.158
 194.5.98.70
 194.5.99.229
@@ -23190,7 +23223,6 @@
 2.ak1ba.pro
 2.clcshop.online
 2.globalengine.ru
-2.indexsinas.me
 2.moulding.z8.ru
 2.spacepel.com
 2.toemobra.com.br
@@ -25677,6 +25709,7 @@
 221.13.235.220
 221.13.235.239
 221.13.236.137
+221.13.236.180
 221.13.237.113
 221.13.237.244
 221.13.239.203
@@ -25715,6 +25748,7 @@
 221.15.103.138
 221.15.108.33
 221.15.109.175
+221.15.11.116
 221.15.11.167
 221.15.11.23
 221.15.11.53
@@ -26068,6 +26102,8 @@
 222.138.149.179
 222.138.149.207
 222.138.149.236
+222.138.150.1
+222.138.150.125
 222.138.150.177
 222.138.150.235
 222.138.150.236
@@ -26222,6 +26258,7 @@
 222.139.222.249
 222.139.222.251
 222.139.222.39
+222.139.222.59
 222.139.222.76
 222.139.222.82
 222.139.223.0
@@ -26649,6 +26686,7 @@
 222.242.158.161
 222.242.159.200
 222.242.159.77
+222.242.182.187
 222.242.182.26
 222.242.182.75
 222.242.183.201
@@ -27549,6 +27587,7 @@
 27.41.182.54
 27.41.184.39
 27.41.186.140
+27.41.187.108
 27.41.187.214
 27.41.204.118
 27.41.204.37
@@ -27689,6 +27728,7 @@
 2ndpub.com
 2ndscreensociety.com
 2nell.com
+2no.co
 2pjcza.db.files.1drv.com
 2q1wea3rdsf.000webhostapp.com
 2q3w.com
@@ -27757,8 +27797,6 @@
 3.top4top.net
 3.u0135364.z8.ru
 3.unplugrevolution.com
-3.zhzy999.net
-3.zhzy999.net3.zhzy999.net
 30-by-30.com
 3000adaydomainer.com
 300miliardialberi.eu
@@ -27769,8 +27807,6 @@
 30gb-internet.com
 30plusbootcamp.com
 30undertennis.com
-31.128.173.853.zhzy999.net
-31.128.173.853.zhzy999.net31.128.173.853.zhzy999.net
 31.129.171.138
 31.129.70.65
 31.13.136.116
@@ -29159,6 +29195,7 @@
 37.49.226.209
 37.49.226.21
 37.49.226.210
+37.49.226.228
 37.49.226.230
 37.49.226.43
 37.49.226.5
@@ -29490,6 +29527,7 @@
 41.84.131.222
 41.86.18.137
 41.86.18.20
+41.86.19.200
 41.86.21.56
 41.86.251.38
 41.89.94.30
@@ -29637,6 +29675,7 @@
 42.225.202.67
 42.225.203.143
 42.225.203.144
+42.225.203.189
 42.225.203.238
 42.225.203.5
 42.225.204.1
@@ -29767,9 +29806,11 @@
 42.227.130.224
 42.227.134.220
 42.227.144.26
+42.227.145.119
 42.227.145.251
 42.227.146.134
 42.227.147.116
+42.227.147.234
 42.227.150.207
 42.227.150.64
 42.227.153.234
@@ -29807,6 +29848,7 @@
 42.227.165.40
 42.227.165.55
 42.227.166.197
+42.227.166.214
 42.227.166.251
 42.227.166.252
 42.227.166.33
@@ -29867,6 +29909,8 @@
 42.227.200.230
 42.227.201.132
 42.227.201.165
+42.227.201.91
+42.227.202.11
 42.227.202.186
 42.227.202.209
 42.227.202.34
@@ -30299,6 +30343,7 @@
 42.231.166.245
 42.231.167.181
 42.231.167.230
+42.231.170.22
 42.231.172.115
 42.231.172.237
 42.231.172.252
@@ -31006,6 +31051,7 @@
 42.239.135.135
 42.239.135.196
 42.239.136.130
+42.239.137.2
 42.239.139.152
 42.239.14.14
 42.239.14.60
@@ -31223,6 +31269,7 @@
 42.239.95.33
 42.239.95.6
 42.239.96.109
+42.239.96.146
 42.239.96.176
 42.239.96.250
 42.239.97.103
@@ -31647,6 +31694,7 @@
 45.32.222.62
 45.32.226.191
 45.32.230.13
+45.32.234.129
 45.32.24.207
 45.32.245.156
 45.32.25.30
@@ -31907,6 +31955,7 @@
 45.95.169.233
 45.95.169.234
 45.95.169.238
+45.95.169.249
 45.95.169.254
 45.95.55.110
 45.95.55.121
@@ -33084,6 +33133,7 @@
 49.70.33.178
 49.70.34.12
 49.70.34.180
+49.70.34.196
 49.70.34.223
 49.70.36.49
 49.70.38.214
@@ -33887,7 +33937,6 @@
 5.95.226.79
 5.95.59.66
 5.fjwt1.crsky.com
-5.top4top.io
 5.u0148466.z8.ru
 5.unplugrevolution.com
 50.115.165.107
@@ -34606,6 +34655,7 @@
 59.175.83.212
 59.18.157.62
 59.188.255.217
+59.19.231.31
 59.2.130.197
 59.2.145.43
 59.2.151.157
@@ -37189,6 +37239,7 @@
 77.43.198.253
 77.43.199.201
 77.43.205.175
+77.43.206.170
 77.43.207.236
 77.43.207.41
 77.43.208.172
@@ -38416,6 +38467,7 @@
 86.35.43.220
 86.5.70.142
 86.63.78.214
+86.7.86.4
 86.82.137.79
 86.91.10.91
 860259.com
@@ -39719,7 +39771,6 @@
 98.238.122.130
 98.253.113.227
 98.254.125.18
-98.ip-51-91-254.eu
 981775.com
 988f5c12.ngrok.io
 988sconline.com
@@ -40623,6 +40674,7 @@ adams-moore.com
 adamshop24.de
 adamsm.co.za
 adamsphotography.com.au
+adamtcarruthers.com
 adamthelawyer.com
 adamwilt15.com
 adan-hospital.com
@@ -41043,6 +41095,7 @@ affordsolartech.com
 affpp.ru
 affyboomy.ga
 afgeartechnology.com.mx
+afges.org
 afghanbazarrugs.com
 afghanistanpolicy.com
 afgsjkhaljfghadfje.ga
@@ -41082,7 +41135,6 @@ africaanalytics.tristargl.com
 africabluewebs.co.ke
 africabootcampacademy.influencetec.net
 africahousingawards.com
-africainnovates.org
 africamarket.shop
 africamissions.ca
 african-trips.com
@@ -41285,6 +41337,7 @@ agnieszkarojek.cba.pl
 agoam.bid
 agodatex.ga
 agogpharrna.com
+agorae.afges.org
 agoralbe.com
 agorapro.com.co
 agorlu02.azurewebsites.net
@@ -41483,7 +41536,6 @@ aigavicenza.it
 aigforms.myap.co.za
 aiglemovies.com
 aihealth.vn
-aiiaiafrzrueuedur.ru
 aiineh.com
 aiit.ahbys.com
 aijdjy.com
@@ -41552,7 +41604,6 @@ airgc.in
 airinovasi-indonesia.com
 airisu-syumikonparty.com
 airlife.bget.ru
-airliness.info
 airlinkcpl.net
 airmaildata.com
 airmanship.nl
@@ -41697,6 +41748,7 @@ akdkart.com
 akekartela.com
 akeswari.org
 akfoundationbd.xyz
+akg-eng.net
 akgemc.com
 akgiyimtekstil.com
 akh.ge
@@ -41886,6 +41938,7 @@ alberguetaull.com
 alberolandia.it
 albert.playground.mostar.id
 albertaalliance.ca
+albertabeef.ca
 albertacareers.com
 albertandyork.com
 albertgrafica.com.br
@@ -43961,6 +44014,7 @@ ara4konkatu.info
 araba.alabama-marketing.com
 arabaresmi.com
 arabcb.org
+arabcoegypt.com
 arabdubaisafari.com
 arabianbrother.com
 arabiantongue.net
@@ -44272,6 +44326,7 @@ arkifield.com
 arkist.ist
 arkiv.lillehammerartmuseum.com
 arkonziv.com
+arkshine.com
 arksoft.in
 arkworkspace.com
 arkyreyma.com
@@ -44811,6 +44866,7 @@ askibinyuk.myjino.ru
 askingpricerealty.com
 askjhdaskdhshjfhf.ru
 asklaizmir.com.tr
+askmufti.org
 askom-service.kz
 asksuze.com
 askthemadpoet.net
@@ -45430,7 +45486,6 @@ autodavid.hr
 autodetali-161.ru
 autodevices.topterra.ru
 autodrim.pl
-autodwg.com
 autoecole-hammamet.tn
 autoecole.inchtechs.com
 autoecolehophophop.com
@@ -45614,7 +45669,6 @@ avenue5.co.in.cp-in-10.webhostbox.net
 avenzis.nl
 averefiducia.com
 averfoodrs.eu
-averin.pro
 averson.by
 averybit.com
 aveslor.com
@@ -45825,6 +45879,7 @@ aydinmete.com.tr
 aydinvps.com
 aydosyazilim.com
 ayecargo.com
+ayefin.com
 ayeletbenyosef.co.il
 ayerstechnology.com
 ayeshashoukat.com
@@ -46078,7 +46133,6 @@ babystep.biz
 babysteps.ge
 babyvogel.nl
 babzon.club
-bac.edu.my
 bacamanect.com
 baccaosutritue.vn
 baceldeniz.com
@@ -46109,6 +46163,7 @@ backpage-inc.com
 backpinging.com
 backselfconfidence.xyz
 backstage-secrets.com
+backthenstuff.com
 backup-new.5kmdeal.my
 backup.goooogle.us
 backup.litcel.com
@@ -46927,6 +46982,7 @@ beachcondolife.tk
 beachview.co.za
 beachvillas.gr
 beachwoodproperty.com.au
+beaconacademy.net
 beaconhousediscovery.com
 beaconr.rungta.ac.in
 beactivedigital.com
@@ -46948,6 +47004,7 @@ bearholdings.co
 bearingspecs.com
 bearinmindstrategies.com
 bearriverhealth.org
+bearsselection.xyz
 beaskyshanoi.com
 beastmas.club
 beat.vision
@@ -47824,7 +47881,6 @@ bigdealist.com
 bigdev.top
 bigdiamondeals.com
 bigeyes.com.tw
-bigfile.mail.naver.com
 bigfishchain.com
 bigfoothospitality.com
 bigg-live.com
@@ -47851,7 +47907,6 @@ bigssearch.com
 bigstudio.photo
 bigsunshinebooks.com
 bigtech24.de
-bigtext.club
 bigtrading.ga
 bigtvjoblist.com
 biguwh.com
@@ -48000,6 +48055,7 @@ binmsk.ru
 binnayem.com
 binoculars-shop.ru
 binom-perm.cf
+binsuloomgroup.com
 binta.xyz
 bintangbarutama.co.id
 bintec.pe
@@ -48180,7 +48236,6 @@ biyunhui.com
 biz-shop.pro
 biz.creationcabin.com
 bizajans.com
-bizasiatrading.com
 bizbhutanevents.com
 bizbuilder.co.za
 bizcodedigital.in
@@ -48836,7 +48891,6 @@ bloodybits.com
 bloombrainz.com
 bloomcommunityproject.org
 bloomestatelitigation.ca
-bloomfire.com
 bloomflores.com
 bloomhomes.in
 bloomingbridal.com.au
@@ -49614,6 +49668,7 @@ breathtakerstours.com
 breazytrans.com
 breccioneserrande.com
 brechovip.com.br
+breda.com
 breebaart.net
 breed.wanttobea.com
 breedencomm.com
@@ -49746,6 +49801,7 @@ brittanyschoice.com
 britwind.tk
 brixxsites.com
 brizboy.com
+briztechnologies.com
 brj.sitedevlink.com
 brjsrwaco.watchdogdns.duckdns.org
 brkcakiroglu.com
@@ -50693,6 +50749,7 @@ camlikkamping.com
 camnangtrithuc.com
 campagnesms.info
 campaigns.actionable-science.com
+campana20gb.com
 campanus.cz
 campbellcheesegrocerybk.com
 campbellsbay.school.nz
@@ -51379,6 +51436,7 @@ cavalluindistella.com
 cavanasipontum.ru
 cavancameroon.com
 cavaticus.com
+caveaudelteatro.it
 caveaulechapeau.ch
 cavedimarmocarrara.com
 cavefashion.com
@@ -52137,7 +52195,6 @@ cheaperlounge.com
 cheapesthost.com.ng
 cheapgadgets-gq.000webhostapp.com
 cheapmlbjerseysmarlins.com
-cheapmusic.info
 cheapnikeairmaxshoes-online.com
 cheapoakleysunglasses.net
 cheappigeontraps.com
@@ -52913,6 +52970,7 @@ clcindy.com
 cld-net.com
 cld.persiangig.com
 cld.pt
+cle.ae
 clean.crypt24.in
 clean.olexandry.ru
 clean.vanzherke.ru
@@ -53206,7 +53264,6 @@ cmdaitexpo.com
 cmdez.ir
 cmdou.com
 cmeaststar.de
-cmg.asia
 cmgroup.com.ua
 cmhighschool.edu.bd
 cmhmfgoutbound.protection.sketchwefair-watduoliprudential.com.watchdogdns.duckdns.org
@@ -53749,7 +53806,6 @@ completervnc.com
 compliancewing.com
 complience.com
 compln.net
-components.technologymindz.com
 composecv.com
 composite.be
 compoundy.com
@@ -54221,6 +54277,7 @@ cordondating.xyz
 cordulaklein.de
 cordwells.com.au
 cordythaiproducts.com
+core-tech.com
 core.org.af
 corebodybrand.com
 corehealingmassage.com
@@ -55287,7 +55344,6 @@ cysis.cl
 cysyonetim.com
 cytecgroup.co.za
 cytf.coloradotennis.org
-cythia0805.com
 cythromatt.com
 cytotan.website
 cytotec-tabs.com
@@ -56112,6 +56168,7 @@ ddl7.data.hu
 ddmadrasah.com
 ddraiggoch.co.uk
 ddrcsangrur.com
+ddreciclaje.com
 dds.com.mx
 ddsandesh.com
 ddsolutions.pl
@@ -57241,7 +57298,6 @@ dewabarbeque.com
 dewakartu.info
 dewalhoeve.nl
 dewapisang.com
-dewarejeki.info
 dewarejeki.link
 dewibebaris.com
 dewide.com.br
@@ -57271,7 +57327,6 @@ dfafreezeclan.com
 dfc33.xyz
 dfcf.91756.cn
 dfcvbrtwe.ug
-dfd.zhzy999.net
 dfddfg4df.ru
 dffdds.club
 dffieo8ieo0380ieovsddsdff89r309ieo89334.com
@@ -58230,9 +58285,6 @@ dobro.co.ua
 dobrojutrodjevojke.com
 dobroviz.com.ua
 dobrovorot.su
-doc-04-cc-docs.googleusercontent.com
-doc-08-5o-docs.googleusercontent.com
-doc-0s-c8-docs.googleusercontent.com
 doc-hub.healthycheapfast.com
 doc-japan.com
 doc.albaspizzaastoria.com
@@ -58646,7 +58698,6 @@ dosti.webdesignhd.nl
 dosttours.com
 dosya.tc
 dosyproperties.info
-dot.state.mn.us
 dota2-down.club
 dota2-down.site
 dotactive.com.au
@@ -58853,7 +58904,6 @@ dpa.atos-nao.net
 dpack365-my.sharepoint.com
 dpacorp.org
 dparmm1.wci.com.ph
-dpaste.com
 dpbh.info
 dpbusinessportal.ro
 dpe.com.tw
@@ -59004,6 +59054,7 @@ dreamlife.com.br
 dreamluxuryhairco.com
 dreammakerselitefitness.com
 dreammaster-uae.com
+dreammergeconsult.com
 dreammotokolkata.com
 dreams-innovations.com
 dreamsfashion.com.vn
@@ -59994,6 +60045,7 @@ ecity.network
 ecitytanduclongan.com
 eckdor.de
 ecker.aidnet.at
+ecklund.no
 eclairesuits.com
 eclatpro.com
 eclecticelectronics.net
@@ -60449,6 +60501,7 @@ eitchendie.com
 eitworld.com
 eiuh9r8fhr98fh.top
 eiuwowqwpeoeirwpei.com
+ejadarabia.com
 ejadvertising.com
 ejanlele.design
 ejdelapena.com
@@ -60671,6 +60724,7 @@ elevatedigitalma.com
 elevateducation.agreatidea.studio
 elevationshairboutique.com
 elevatorbracket.com
+elevennevele.com
 eleventhcapital.com
 elevituc.vn
 elezioni-oggi.it
@@ -61986,7 +62040,6 @@ etwowsharing.com
 etxse.xyz
 eu-easy.com
 eu.wildfire.paloaltonetworks.com
-eu1.salesforce.com
 eu283iwoqodjspqisjdf.com
 eu5-cdn.devid.info
 eubankphoto.com
@@ -62436,6 +62489,7 @@ exportaly.com
 exportcommunity.in
 exportef.info
 exposicaoceramicaearte.com.br
+exposvision.com
 expovitrinadelvalle.com
 expresi.club
 expresodeportivo.com
@@ -63505,6 +63559,7 @@ file2yu.com
 file546456.com
 filebase.duckdns.org
 filebase.mogelgott.de
+filebin.net
 filebox.hiworks.com
 filebr.com
 fileco.jobkorea.co.kr
@@ -64336,7 +64391,6 @@ forex4pips.com
 forexaddictt.com
 forexbrokeracademy.com
 forexpedia.tradewithrobbie.com
-forexpf.ru
 forexproservice.com
 forexrobot.youralgo.com
 forextradingfrx.org
@@ -66797,6 +66851,7 @@ goitsoluciones.com
 goji-actives.net
 gojukai.co
 gokceozagar.com
+goker.com.tr
 gokhancakmak.com.tr
 gokjerijk.nl
 gokkastennl.com
@@ -67092,7 +67147,6 @@ goudu.club
 gourmandd.com
 gourmetlab.pe
 gourmetreats.in
-gov.kr
 gov.rsmart-testsolutions.watchdogdns.duckdns.org
 govche.in
 goveboatclub.com.au
@@ -67609,7 +67663,6 @@ grupocrecer.org
 grupodpi.pe
 grupodreyer.com
 grupoembatec.com
-grupoeq.com
 grupoesparta.com.ve
 grupofabiamce.com.br
 grupofischermineracao.com.br
@@ -67619,6 +67672,7 @@ grupoiesp.tk
 grupoinalen.com
 grupoinfonet.com
 grupojg.com.br
+grupolainmaculada.com
 grupolaplace.com.br
 grupoloang.com
 grupolorena.com.sv
@@ -67717,6 +67771,7 @@ gthtech.com
 gtidae.com.pl
 gtim.agency
 gtiperu.com
+gtm-au.com
 gtminas.com.br
 gtnaidu.com
 gtomeconquista.com
@@ -67980,6 +68035,7 @@ h-surgeon.info
 h-w-c.net
 h.eurotrading.com.pl
 h.j990981.ru
+h.top4top.io
 h.valerana44.ru
 h1.iwakalong.ru
 h112321.s08.test-hf.su
@@ -69631,7 +69687,6 @@ home-racing.com
 home-spy-shop.com
 home.99eurowebsite.ie
 home.barley-plus.com
-home.earthlink.net
 home.evrstudio.com
 home.healthiestu.com
 home.isdes.com
@@ -70104,6 +70159,7 @@ houzess.com
 how-to-nampa.com
 how-to-tech.com
 how.ph
+howalshafikings.com
 howardbenz.com
 howardbragman.com
 howardgfranklin.com
@@ -70205,7 +70261,6 @@ htepl.com
 hthaher.com
 hthindustrial.com
 hthttp
-htl.li
 htl.ru
 htlinternational.org
 htlvn.com
@@ -70528,7 +70583,6 @@ i-sharecloud.com
 i-supportcharity.com
 i-vnsweyu.pl
 i-voda.com
-i.cubeupload.com
 i.fiery.me
 i.fluffy.cc
 i.funtourspt.eu
@@ -70565,6 +70619,7 @@ iaconsultafrica.com
 iacp-od.org
 iadeca.es
 iadigital.com.br
+iaecconsultants.com
 iain-padangsidimpuan.ac.id
 iais.ac.id
 iakah.pw
@@ -71313,6 +71368,7 @@ imellda.com
 imemmw.org
 imenbazr.com
 imenergo.com
+imenizeh.ir
 imensanatsi.com
 imensandogh.com
 imersiongis.com
@@ -71478,6 +71534,7 @@ in100tive.com
 in365.vn
 in8.keton8.com
 in9cm.com.br
+inac-americas.com
 inacioferros.com
 inaczasie.pl
 inadmin.convshop.com
@@ -71561,7 +71618,6 @@ indian-escorts-dubai.com
 indian-escorts-qatar.com
 indian-escorts-rak.com
 indian-escorts-sharjah.com
-indianagoods.club
 indianblog.info
 indianceramicsourcing.com
 indianescortsabudhabi.com
@@ -72128,6 +72184,7 @@ integraciontotal.com.mx
 integracooperativa.com
 integrafika.co.uk
 integraga.com
+integralc.com
 integralcs.com.br
 integralestates.in
 integralmakeup.com
@@ -72225,7 +72282,6 @@ internationalmscareerseminar.com
 internaut.in
 internetcasinoweblog.com
 internetjogasz.hu
-internetlink.com.mx
 internetmarketing4pros.com
 internetofsmell.com
 internetordbogen.dk
@@ -72392,6 +72448,7 @@ ioe-learning.com
 ioffe-soft.ru
 ioffexpert.com
 ioi3.com
+iol.ie
 iolandagazzerro.it
 ion-consulting.com
 ioncaresindia.in
@@ -72473,6 +72530,7 @@ iphones.bid
 iphonessuckballs.life
 iphoneteknikservisim.net
 iphonewin.website
+iphotoalot.com
 iphys-hypoxia.kz
 ipisu.ru
 ipjem.com.br
@@ -73099,6 +73157,7 @@ iykelinksyuiop.5gbfree.com
 iyle.co.uk
 iyycqg.bn.files.1drv.com
 iz.owak-kmyt.ru
+iz.poznan.pl
 izabelatrojanowska.pl
 izavu.com
 izbetalia.com
@@ -74038,7 +74097,6 @@ joedee.co.za
 joegie.nl
 joeing.duckdns.org
 joeing.rapiddns.ru
-joeing.warzonedns.com
 joeing2.duckdns.org
 joeksdj.nl
 joelanguell.com
@@ -74207,6 +74265,7 @@ josemoo.com
 josenutricion.com
 joseph.gergis.net
 josephalavi.com
+josephdutton.com
 josephreynolds.net
 josephsaadeh.me
 josepsullca.com
@@ -75379,6 +75438,7 @@ kedaicetakklang.com
 kedaijuara.com
 kedaimadu.net
 kedi-russian.ru
+kedisons.com
 keelsoft.com
 keenpreps.co.uk
 keepchest.hopto.org
@@ -77038,6 +77098,7 @@ kynmandesign.co.uk
 kyokushinmiddleeast.com
 kyoman.vn
 kyoto-shikakeya.com
+kyotoforum.or.jp
 kyouei.co.th
 kypa.or.ke
 kyrmedia.com
@@ -77590,6 +77651,7 @@ latiendita.miradiols.cl
 latinannualmeeting.com
 latinaradio.cl
 latinbeat.com
+latinigroup.com
 latinos-latins.online
 latinovoicesmn.org
 latiprantz.com
@@ -77964,7 +78026,6 @@ legphelhotel.com
 legpnnldy.cf
 legrand-boutique.com
 legrand.ba
-legrand.us
 legrandmaghrebconsulting.com
 legrandreve.pt
 legsgoshop.com
@@ -78479,6 +78540,7 @@ lightswitchmarketing.biz
 lightvalleyprune.com
 lightwerq.com
 lightyard.com
+lignar.com
 lignarium.se
 lignumpolska.com
 liguebretagnebillard.fr
@@ -78620,7 +78682,6 @@ link.fivetier.com
 link.gocrazyflower.com
 link.mx
 link.nocomplaintsday.info
-link.zixcentral.com
 link100.cc
 link17.by
 link2bio.ir
@@ -78698,6 +78759,7 @@ liragec.org
 lirave.bplaced.net
 lis-consult.dk
 lisab.se
+lisagirl.net
 lisans.boxnet.com.tr
 lisansustu.info
 lisaraeswan.com
@@ -78809,7 +78871,6 @@ livechallenge.fr
 livecigarevent.com
 livecricketscorecard.info
 livedaynews.com
-livedemo00.template-help.com
 livedownload.in
 livedrumtracks.com
 livehasa.com
@@ -78836,6 +78897,7 @@ livetechsupport.ca
 livetesting.xyz
 livetotry.com
 livetours.cl
+livetrack.in
 livetvsports.ml
 liveu.lk
 liviavicentini.com
@@ -80482,6 +80544,7 @@ mail.openscholarly.com
 mail.optiua.com
 mail.oregonwinerental.net
 mail.outboundnat.com
+mail.pallejabcn.com
 mail.paracep.com
 mail.paramountstudiosholidayvillas.com
 mail.parkernetworks.com
@@ -81529,6 +81592,7 @@ massdev.co
 masseur.es
 masseyatnandina.com
 massimopintus.com
+massivedynamicks.com
 massivesales.co.uk
 massivewebtech.com
 massomsadarpuri.com
@@ -82682,7 +82746,6 @@ mfmr.gov.sl
 mfomjr.com
 mfotovideo.ro
 mfpburundi.bi
-mfpc.org.my
 mfppanel.xyz
 mfpvision.com
 mfronza.com.br
@@ -82833,7 +82896,6 @@ micropcsystem.com
 microratings.tk
 micros0ft1.ddns.net
 microservicesmonitor.com
-microsfotgooglegmailoutlook365mailallaregoodformailing.warzonedns.com
 microsoft-01.dynamic-dns.net
 microsoft-dl.com.br.md-43.webhostbox.net
 microsoft-frameworkseguro.com
@@ -83966,6 +84028,7 @@ mooi-trade.com
 mooipilates.com
 mooithailand.nl
 moolchi.com
+moolo.pl
 moomi-daeri.com
 moomicos.com
 moommam.fr
@@ -84275,6 +84338,7 @@ mpgbss.com
 mpgestaodepessoas.com.br
 mpii.tech
 mpinteligente.com
+mpkglobaltrainingcorp.net
 mplmodapk.site
 mpls.foodiecycle.com
 mpn.vn
@@ -85346,6 +85410,7 @@ nakhlmarket.com
 nakshadekho.com
 nakshatrajoshi.com
 nal.com.ua
+nalahotel.com
 nalcalar.com
 nalfonsotriston.city
 nalmac.com
@@ -85668,7 +85733,6 @@ nbfghreqww.ug
 nbgcpa.net
 nbgcpa.org
 nbhgroup.in
-nbigfile.mail.naver.com
 nbiyan.vn
 nbj.engaged.it
 nbn-nrc.org
@@ -85907,6 +85971,7 @@ netafix.com
 netasarim.com
 netbenfey.ciprudential.com.watchdogdns.duckdns.org
 netcity1.net
+netck.pl
 netcom-soft.com
 netcomp.lizave.store
 netcorpsgroup.com
@@ -85927,7 +85992,6 @@ netin.vn
 netizennepal.com
 netkafem.org
 netking.duckdns.org
-netlink.com
 netm.club
 netmaffia.net
 netmansoft.com
@@ -86394,6 +86458,7 @@ nguyenthanhriori.com
 nguyenthituyet.org
 nguyenthuyhanh.com.vn
 nguyentrongkha.com
+ngyusa.com
 nhacchoquangcao24h.com
 nhadaiphat.com
 nhadatbaria.asia
@@ -86404,7 +86469,6 @@ nhadatphonglinh.com
 nhadatquan2.xyz
 nhadatthienthoi.com
 nhadephungyen.com
-nhadepkientruc.net
 nhahangdaihung.com
 nhahanghaivuong.vn
 nhahanglegiang.vn
@@ -86491,6 +86555,7 @@ nickelaction.com
 nicklaslj.se
 nickpeets.com
 nickycooperhomes.co.nz
+nicolaisen.de
 nicolasbaldoma.com
 nicolasgalvez.com
 nicolaskohen.com
@@ -86881,7 +86946,6 @@ nonglek.net
 nongnghiepgiaphat.com
 nongsan24h.com
 nongsananhnguyen.com
-nongsandungha.com
 nonlocality.com
 nonnemacher.com.br
 nonnewspaper.com
@@ -87113,6 +87177,7 @@ novoselica.dp.ua
 novosibirsk.quadrotek-logistic.ru
 novostack.net
 novotravel.ir
+nowak-meble.eu
 nowkh.com
 nowley-rus.ru
 nowley-rus.ruadministrator
@@ -87754,7 +87819,6 @@ ohotnicom.com
 ohscrane.com
 ohters.de
 ohyellow.nl
-oi68.tinypic.com
 oiainbtaea38.silverabout.ml
 oiasdnqweqasd.com
 oiflddw.gq
@@ -88008,6 +88072,7 @@ ominenergo.gov.rsmart-testsolutions.watchdogdns.duckdns.org
 ominix.com
 omitkyspisar.cz
 omiwnusantara.com
+omlinux.com
 ommar.ps
 ommienetwork.000webhostapp.com
 omni-anela.com
@@ -88972,6 +89037,7 @@ pablorub-cp38.wordpresstemporal.com
 pabloteixeira.com
 pablotrabucchelli.com
 pabnainfo.com
+paboard.com
 pabrik-tenda.id
 pabx-uae.com
 pacbest.org
@@ -89037,6 +89103,7 @@ pahahome.com
 pahanlab.com
 paht.nuph.edu.ua
 pai.fai.umj.ac.id
+paides.com
 paidtv.siaraya.com
 paifi.net
 paigeplacements.co.uk
@@ -89367,6 +89434,7 @@ parkinsoncsra.org
 parkklead.com
 parkourschool.ru
 parkradio.ca
+parksfo.com
 parkside-mi.com
 parksteals.com
 parkwaygames.com
@@ -89493,6 +89561,7 @@ past.com.tr
 pastavadese.com
 paste.ee
 paste.makomk.com
+pasteboard.co
 pastecode.xyz
 pastelcolors.in
 pastilepentruslabit.ro
@@ -89736,6 +89805,7 @@ pd.ibigcse.net
 pd0rt.nl
 pdedas.com
 pdesaa.cimaa.pt
+pdf-archive.com
 pdf-archive.press
 pdf-archive.store
 pdf-compare.site
@@ -89771,6 +89841,7 @@ peacegreetings.com
 peacemed.e-nformation.ro
 peaceseedlings.org
 peacesprit.ir
+peacewatch.ch
 peach-slovenija.si
 peachgirl.ru
 peacock.dating
@@ -89820,6 +89891,7 @@ pedsassociates.com
 pedslovo.ru
 pedulirakyataceh.org
 peechproperties.com
+peekaboobubba.com.au
 peekaboorevue.com
 peekend.com
 peer2travel.com
@@ -90001,7 +90073,6 @@ periscope.es
 peritofinanceiro.tk
 perkasa.ddns.net
 perkasa.undiksha.ac.id
-perkasa.warzonedns.com
 perkfix.com
 perkim.bondowosokab.go.id
 perlage.net
@@ -90092,6 +90163,7 @@ petalsnbones.com
 petanisukses.club
 petcarepass.cz
 peteivs.co.nz
+petendereruk.pro
 peterantennas.bid
 peterbeckundpartner.cporsgrunn.folkbjnrwwww.watchdogdns.duckdns.org
 petercottontailmovie.com
@@ -90275,6 +90347,7 @@ phillbecker.com
 phillipjohnson.co.uk
 philomenabar.com.br
 philpaisley.com
+phimhdonline.tv
 phimmoinhat.online
 phimphot.tk
 phitemntech.com
@@ -90654,6 +90727,7 @@ pixel.as
 pixel.mobycare.website
 pixelcrush.net
 pixeldra.in
+pixeldrain.com
 pixelerp.com
 pixelfactorysolutions.xyz
 pixelguru.info
@@ -90757,6 +90831,7 @@ planitsolutions.co.nz
 planktonik.hu
 planmyfurnitureinterior.com
 planningportal.semblueinc.com
+planningtravel.es
 plannpick.com
 plano.xoom.it
 planodeobrasdeilhabela.com.br
@@ -90810,6 +90885,7 @@ plaxury.com
 play-movie.xyz
 play0.revosales.ru
 play2.revosales.ru
+play2win.buzz
 play4fitness.co.uk
 playalongmusic.net
 playasrivieramaya.com
@@ -90819,6 +90895,7 @@ playcoin.game
 playden.in
 playfire.online
 playgrounds.tumo.org
+playgroupsrl.com
 playhard.ru
 playitforwardnashville.com
 playkey.ga
@@ -90891,6 +90968,7 @@ plunatavan.com
 plurallider.com.br
 plus.mn
 plus1interactive.com
+plushshow.com
 plusjop.nl
 plusmicrotd.kz
 plussizeall.net
@@ -91130,7 +91208,6 @@ pontosat.com.br
 pontotocdistrictba.com
 pontus-euxinus.ro
 pony.s-p-y.ml
-pony.warzonedns.com
 ponytales.nostalgicbookshelf.com
 poojasingh.me
 pool.ug
@@ -91290,6 +91367,7 @@ positivechangesok.com
 positiveconvention.co.za
 positiveid.org
 positiverne.dk
+positronicsindia.com
 posizionareunsito.it
 poslovni-oglasi.com
 poslovno-pregovaranje.com
@@ -91753,6 +91831,7 @@ prismware.ml
 pristineglassmirror.com
 pristinequill.com
 prith-hauts-de-france.org
+prithvigroup.net
 pritsep56.ru
 prittworldproperties.co.ke
 privacydesignstudio.com
@@ -92243,6 +92322,7 @@ proxy-ipv4.com
 proxy.qualtrics.com
 proxygrnd.xyz
 proxyholding.com
+proxyresume.com
 proxysis.com.br
 proyectocithara.org
 proyectoin.com
@@ -92355,6 +92435,7 @@ psychprofiler.com
 psymonkee.com
 psynchro.org
 ptb.com.mx
+ptbsda.com
 ptci-md.org
 ptdtech.tk
 pte.vn
@@ -92869,7 +92950,6 @@ qe-zw.top
 qe-zz.top
 qeba.win
 qeducacional.com.br
-qeeeeewwswsweerwwerwerwrwerwerwerwere.warzonedns.com
 qelie.com
 qeoficial.es
 qeshmsport.ir
@@ -93470,6 +93550,7 @@ radheenterpriseonline.com
 radheshyamcityhomes.com
 radi.org.ng
 radiantdates.com
+radiantqatar.com
 radiantservices.com
 radicocinas.com.mx
 radienten.com
@@ -93544,6 +93625,7 @@ raf-dv.ru
 rafa-craftsman.com
 rafaat.ir
 rafaelcarvalho.com.br
+rafaelospizzeria.com
 rafaelvieira.com.br
 rafatelles.com
 raffaelli.com.br
@@ -94138,6 +94220,7 @@ redhorsebatteries.com
 redhorsetile.com
 redic.co.uk
 redilmatt.biz
+redingtonpost.com
 redinktattoo.net
 redirectiontest.basezap.com
 redironmarketing.com
@@ -94164,6 +94247,7 @@ redsnowball.com
 redsseammgt.com
 redtek0.com
 redtv.top
+redvalidator.com
 redvelvetpatisserie.co.uk
 redwing.com.eg
 redwingdemo.dukaafrica.com
@@ -94691,6 +94775,7 @@ rewal.ch
 reward.uta.edu.ec
 rewitek.nl
 rexhagis.nl
+rexindototeknik.com
 rexpc.dk
 rexpronecorpllc.com
 rexprosealers.com
@@ -94975,6 +95060,7 @@ riverwalkmb.com
 rivesam.com
 rivesandrives.com
 rivestiti.com
+rivoltaponteggi.com
 riyafisheries.com.cp-51.webhostbox.net
 riyanenterprise.com
 riyanshoppingbags.com
@@ -95566,6 +95652,7 @@ rsquareandco.com
 rssansani.com
 rssdefense.com
 rstarserver17km.xyz
+rstelectricals.com
 rsterlingzmyrtice.xyz
 rstrading.in
 rsudpbari.palembang.go.id
@@ -96047,6 +96134,7 @@ saepedra.com
 safa.205dundas.com
 safakteknoloji.com
 safaniru.com
+safarbekish.com
 safari7.devitsandbox.com
 safariet-zarzis.com
 safarigold.com
@@ -96070,7 +96158,6 @@ safelink.themeson.review
 safelinks-protection.com
 safemedicinaonline.com
 safemoneyamerica.com
-safentrix.com
 saferoomreviews.com
 safesalesnembutal.com
 safesandsecurity.co.za
@@ -96149,12 +96236,14 @@ sageth.net
 sagiri.org
 saglikbakanli-hediyeinternet.org
 saglikbakanligi-destek.org
+saglikbakanligi-destekportal.org
 saglikbakanligi20gbinternet.com
 saglikbakanligindanhediye20gb.com
 saglikgoalapp.site
 saglikliapp.live
 sagliklibedenim.com
 saglikodemelerinial.org
+saglikramazan20bgb.net
 sagrathi.com
 sagunpapers.com
 sahabathasyim.com
@@ -96882,6 +96971,7 @@ sbs.ipeary.com
 sbsbe.co.uk
 sbspro.in
 sbtabank.in
+sbtasimacilik.com
 sbtextiles.com
 sbwellness.org
 sc-tuning.de
@@ -97518,6 +97608,7 @@ semashur10s.org
 semassi.com
 semayakas.com
 sembako.manaira.store
+semcoe.com
 semenfedosov.ru
 semengresik.co.id
 semestr.by
@@ -97875,6 +97966,7 @@ setfalc.com
 setfireltd.com
 sethoresg.com.br
 sethpgoldstein.com
+setiamanggalaabadi.com
 setimosacramento.com.br
 setincon.com
 setit.ro
@@ -98680,7 +98772,6 @@ si-hao.cn
 sia-gmbh.de
 siairport.com
 siakad.brawijaya.ac.id
-siakad.ub.ac.id
 sial-healthcare.co.uk
 sialkotgoods.com
 sialkotmart.net
@@ -100212,6 +100303,7 @@ sophiasuites-santorini.com
 sophiebarthelemy.fr
 sophieguaremas.com
 sophiethomasartist.com
+sophis.biz
 sophistproduction.com
 sophro-zara.com
 sophrologie-untempspourmoi.fr
@@ -101046,6 +101138,7 @@ staging.westlondon-musictutors.co.uk
 staging.wolseleyfamilyplace.com
 staging.xdigitalstudio.com
 staging1.xamadu.com
+staging2.lifebiotic.com
 staging3.agencyh.com
 stagingmcr.cloudkami.com
 stagingmcs.cloudkami.com
@@ -101079,6 +101172,7 @@ staminaoptimism.co.kr
 stamp2u.com.my
 stampa3dplus.com
 stampile-sibiu.ro
+standardalloysindia.com
 standardchartfinance.com.cp-45.webhostbox.net
 standardpen.id
 standardpopulation.icu
@@ -102228,6 +102322,7 @@ sunshinemarketing.biz
 sunshinevn.vn
 sunshinewebsite.club
 sunshinewondervillas.biz
+sunsquare.fr
 suntour.com.vn
 suntreebearing.com
 sunucuo.com
@@ -102336,7 +102431,6 @@ support.homemakerideas.com
 support.imaitaly.biz
 support.jbrueggemann.com
 support.m2mservices.com
-support.mdsol.com
 support.nordenrecycling.com
 support.pubg.com
 support.redbook.aero
@@ -102753,7 +102847,6 @@ systemagically.com
 systemandcode.com
 systematicsarl.com
 systematm.com
-systemgooglegooglegooglegooglegooglegoole.warzonedns.com
 systemintergrafileexchangeserverprotocol.duckdns.org
 systemmasterpage.com
 systemmicroupdate.com
@@ -104330,6 +104423,7 @@ textilesld.cluster020.hosting.ovh.net
 textilessudamericanos.com
 textilesunrise.com
 textilkopruch.com.br
+texum-me.com
 teyouhao.com
 tfhvccny.com
 tfile.7to.cn
@@ -104361,7 +104455,6 @@ thaarcoffee.com
 thacci.com.br
 thachastew.com
 thaddeusarmstrong.com
-thadinnoo.co
 thagreymatter.com
 thai-pub.com
 thaiascobrake.com
@@ -104425,7 +104518,6 @@ tharsisfilms.com
 thatavilellaoficial.com.br
 thatoilchick.com
 thats-amazing.com
-thaus.to
 thawani-pay.neomeric.us
 thayvoiphone.vn
 thc-annex.com
@@ -104483,6 +104575,7 @@ thebackslant.com
 thebackyardat60nyc.com
 thebagforum.com
 thebakingtree.com
+theballardhouse.org
 theballoon.asia
 thebandofrivals.dreamhosters.com
 thebaptistfoundationofca.com
@@ -104559,6 +104652,7 @@ theclaridge.org
 theclinicabarros.com
 theclown.ca
 theclub5.com
+theclubmumbai.com
 thecoachinglounge.net
 thecoastaltimes.media
 thecoastofhelpfoundation.org
@@ -104740,6 +104834,7 @@ theinspiredblogger.com
 theinspireddrive.com
 theintelligencer.com.ng
 theinvestmentinvestigator.com
+theipgenerators.com
 theirishhouse.dk
 theiro.com
 theisel.de
@@ -104860,6 +104955,7 @@ themoonplease.com
 themorgandollarcoin.com
 themortgagefirm.ca
 themortgagemom.co.uk
+themotorcenter.com
 themrimidnightclub.com
 themuertitos.com
 themusae.com
@@ -106000,6 +106096,7 @@ toramanlar.com.tr
 torbat-h.persiangig.com
 toresu.net
 torfinn.com
+torfsgebroeders.eu
 torg-master.pro
 torginvest.ru.com
 torishima-qa.com
@@ -106467,6 +106564,7 @@ treehugginpussy.de
 treesguru.com
 treesurveys.infrontdesigns.com
 trefiart.com.br
+trefzer-it.de
 trehoada2.ballybeauty.vn
 trehoadatoanthan.info
 trehoadatoanthan.net
@@ -106908,6 +107006,7 @@ tuneldeviento.es
 tunerg.com
 tunerl.cn
 tuneup.ibk.me
+tunggalmandiri.com
 tuningshop.ro
 tunisia-school.com
 tunisiagulf.com
@@ -106997,6 +107096,7 @@ tutranquilo.com.co
 tuttimare.com.br
 tuttoirc.net
 tuttopizzas.cl
+tuttosteopatia.it
 tuttotenda.it
 tuttoutu.com
 tuttyguru.com
@@ -107010,6 +107110,7 @@ tuvandauthau.net
 tuvandoanhnghiep.org
 tuvanduhocdaiviet.com.vn
 tuvanduhocduc.org
+tuvanduhocmap.com
 tuvangamenet.com
 tuvangioitinh.com
 tuvanluat.vn
@@ -108027,11 +108128,9 @@ ury8297ridowoury833oe.com
 urzedniczatv.pl
 us-defense-department.ml
 us-trans.ru
-us-west-2.protection.sophos.com
 us.cdn.persiangig.com
 us.gsearch.com.de
 us.hostiso.cloud
-us2.campaign-archive.com
 us5interclub.cba.pl
 usa-lenders.com
 usa-market.org
@@ -108630,6 +108729,7 @@ velasmeralda.it
 velassantos.com.br
 velatoursrls.com
 veldhuizenwonen.nl
+velerobeach.com
 velerosa.it
 velimir-grgic.com
 velisnackindonesia.com
@@ -109215,7 +109315,6 @@ vip-rocket.net
 vip-watch.store
 vip.lijinxi.com
 vip.maohuagong.com
-vip.muabannhanh.com
 vip.recommendedtoyoo.com
 vip.zbfcxx.cn
 vip163.cf
@@ -109488,6 +109587,7 @@ vizk2.ug
 viztarinfotech.com
 vjarenouy.email
 vjencanjazagreb.hr
+vjhascv.ru
 vjjb.cn
 vjqsdq.am.files.1drv.com
 vjsingh.info
@@ -109851,7 +109951,6 @@ w-wolf.de
 w.amendserver.com
 w.lazer-n.com
 w.outletonline-michaelkors.com
-w.zhzy999.net
 w04.jujingdao.com
 w077775.blob2.ge.tt
 w0alqa.dm.files.1drv.com
@@ -110061,7 +110160,6 @@ wartazone.com
 wartini.de
 warunknasakita.co.id
 warwickvalleyliving.com
-warzonedns.com
 warzonesecure.com
 was-studio.com
 wasama.org
@@ -110248,6 +110346,7 @@ web.emsfabrik.de
 web.gotham.com.au
 web.hfsistemas.com
 web.ismt.pt
+web.lavishsupplystore.com
 web.muasam360.com
 web.pa-cirebon.go.id
 web.plf.vn
@@ -110645,7 +110744,6 @@ wertedits.com
 wertios.com
 werwrewrkv.ru
 werycloud.website
-wesco.com
 wesconsultants.com
 weseleopole.pl
 weservehosting.net
@@ -110686,6 +110784,7 @@ westminster.edu.vn
 westnilepress.org
 westonslidingdoorrepair.com
 westpalmbeachgaragedoorrepair.com
+westportshipping.com
 westseattlenailsalon.com
 westsideresources.org
 weststop.ro
@@ -110969,7 +111068,6 @@ wimkegravestein.nl
 wimpiebarnard.co.za
 win-best.com.hk
 win-speed.com
-win.tue.nl
 win1more.com
 win32.x10host.com
 winactive.host
@@ -110985,7 +111083,6 @@ wincoair.com
 wind0wsactivator.host
 wind7.ru
 windailygh.com
-windefenderprotectedwindefendergooglegmail.warzonedns.com
 windfarmdevelopments.co.nz
 windmedbiolife.com
 windmillhill.school
@@ -111020,6 +111117,7 @@ winebiddingthailand.com
 winecorkartist.com
 winefly.net
 winefriend.co.za
+winenews.it
 wineswap.com.au
 winetourism.soprexdev.com
 winett.net
@@ -111178,7 +111276,6 @@ wmdcustoms.com
 wmebbiz.co.za
 wmf.desevens.com.ng
 wmg128.com
-wmi.1217bye.host
 wmkatz.com
 wmo-raad.inov.me
 wmpatagonia.cl
@@ -111232,6 +111329,7 @@ womenempowermentpakistan.com
 womenhealth.aureliusconferences.com
 womenindeed.org
 womeninwealthinc.com
+womenofimpactt.com
 womenofthebibleonline.com
 womensbathingsuit.com
 womenshospital.in
@@ -111351,7 +111449,6 @@ work.kromedout.com
 work.vexacom.com
 work4sales.com
 work707.work
-workbigfinetonychuckgoodallarefinezynovaexploitgood.warzonedns.com
 workbus.ru
 workcompoptions.com
 workd.ru
@@ -111562,7 +111659,6 @@ wpdev.hooshmarketing.com
 wpdev.strativ-support.se
 wpdev.ted.solutions
 wpdev.ztickerz.io
-wpengine.zendesk.com
 wpgtxdtgifr.ga
 wpldjxxxua.ga
 wpmagian.com
@@ -111775,6 +111871,7 @@ wz-architekten.de
 wz6.com.cn
 wzgysg.com
 wzjp.boyuberq.ru
+wzlegal.com
 wzry173.com
 wzrysp.com
 wzsfkq.dm.files.1drv.com
@@ -113619,7 +113716,6 @@ zhuti.freexulai.com
 zhwaike.com
 zhwq1216.com
 zhycron.com.br
-zhzy999.net
 ziadonline.com
 ziancontinental.ro
 ziarulrevolutionarul.ro
@@ -113765,7 +113861,6 @@ zonacomforta.com
 zonadeseguridad.mx
 zonadeseguridad.net
 zonamarketingdigital.online
-zonamusicex.com
 zonaykan.com
 zone-812.ml
 zone3.de
@@ -113900,7 +113995,6 @@ zyd1.com
 zykj.shop
 zylokk.000webhostapp.com
 zymogen.net
-zyncxxcciidiiudfisuifsiufusdfisdisifidfisuifisfisifisu.warzonedns.com
 zypeujun.ru
 zyr.co.jp
 zyrstststzzxccxccddfgdd.duckdns.org
diff --git a/urlhaus-filter-hosts-online.txt b/urlhaus-filter-hosts-online.txt
index 9d03cfe3..ba58b042 100644
--- a/urlhaus-filter-hosts-online.txt
+++ b/urlhaus-filter-hosts-online.txt
@@ -1,17 +1,13 @@
 # Title: abuse.ch URLhaus Malicious Online Hosts Blocklist
-# Updated: Tue, 05 May 2020 00:09:52 UTC
+# Updated: Tue, 05 May 2020 12:09:42 UTC
 # Repo: https://gitlab.com/curben/urlhaus-filter
 # License: https://creativecommons.org/publicdomain/zero/1.0/
 # Source: https://urlhaus.abuse.ch/api/
 0.0.0.0 13pope.com
 0.0.0.0 150.co.il
-0.0.0.0 2.indexsinas.me
 0.0.0.0 2000kumdo.com
 0.0.0.0 21robo.com
 0.0.0.0 224001.selcdn.ru
-0.0.0.0 3.zhzy999.net
-0.0.0.0 3.zhzy999.net3.zhzy999.net
-0.0.0.0 31639.xc.mieseng.com
 0.0.0.0 3mandatesmedia.com
 0.0.0.0 3ypackaging.com
 0.0.0.0 402musicfest.com
@@ -19,8 +15,10 @@
 0.0.0.0 786suncity.com
 0.0.0.0 8133msc.com
 0.0.0.0 8200msc.com
+0.0.0.0 87du.vip
 0.0.0.0 887sconline.com
 0.0.0.0 88mscco.com
+0.0.0.0 SnackFreebie.com
 0.0.0.0 a-reality.co.uk
 0.0.0.0 aaasolution.co.th
 0.0.0.0 aaload05.top
@@ -28,11 +26,11 @@
 0.0.0.0 acdesignhub.com
 0.0.0.0 acteon.com.ar
 0.0.0.0 activecost.com.au
+0.0.0.0 adamtcarruthers.com
 0.0.0.0 adnquocte.com
 0.0.0.0 aelogica.com
 0.0.0.0 agiandsam.com
 0.0.0.0 agipasesores.com
-0.0.0.0 agsir.com
 0.0.0.0 aite.me
 0.0.0.0 ajibolarilwan.com
 0.0.0.0 al-wahd.com
@@ -43,20 +41,19 @@
 0.0.0.0 alexwacker.com
 0.0.0.0 algorithmshargh.com
 0.0.0.0 allloveseries.com
-0.0.0.0 alnahrainfilminstitute.com
 0.0.0.0 alohasoftware.net
 0.0.0.0 alphaconsumer.net
 0.0.0.0 am-concepts.ca
 0.0.0.0 amd.alibuf.com
+0.0.0.0 amedeoscognamiglio.329263.com
 0.0.0.0 amemarine.co.th
 0.0.0.0 americanrange.com
 0.0.0.0 anadolutatili.com
-0.0.0.0 anamikaindanegas.in
 0.0.0.0 andreelapeyre.com
 0.0.0.0 andremaraisbeleggings.co.za
 0.0.0.0 angiathinh.com
+0.0.0.0 angthong.nfe.go.th
 0.0.0.0 ansarihospital.in
-0.0.0.0 anuragsharma.co.in
 0.0.0.0 anvietpro.com
 0.0.0.0 anysbergbiltong.co.za
 0.0.0.0 aoujlift.ir
@@ -64,12 +61,12 @@
 0.0.0.0 apoolcondo.com
 0.0.0.0 apware.co.kr
 0.0.0.0 archiv.bg
-0.0.0.0 arcticprospectus.com
 0.0.0.0 areac-agr.com
 0.0.0.0 aresorganics.com
+0.0.0.0 arowanafishforsale.com
 0.0.0.0 ascentive.com
-0.0.0.0 ashoakacharya.com
 0.0.0.0 askarindo.or.id
+0.0.0.0 askmufti.org
 0.0.0.0 atfile.com
 0.0.0.0 atomlines.com
 0.0.0.0 attach.66rpg.com
@@ -83,29 +80,29 @@
 0.0.0.0 azureautomation.co.uk
 0.0.0.0 azzd.co.kr
 0.0.0.0 babaroadways.in
-0.0.0.0 backlinksale.com
-0.0.0.0 badgesforbullies.org
 0.0.0.0 bamakobleach.free.fr
 0.0.0.0 bangkok-orchids.com
 0.0.0.0 banzaimonkey.com
 0.0.0.0 bapo.granudan.cn
+0.0.0.0 baritaco.com
 0.0.0.0 baybars.xyz
 0.0.0.0 bbs.sunwy.org
 0.0.0.0 bbs1.marisfrolg.com
 0.0.0.0 bd11.52lishi.com
 0.0.0.0 bd12.52lishi.com
 0.0.0.0 bd18.52lishi.com
-0.0.0.0 bd19.52lishi.com
 0.0.0.0 beibei.xx007.cc
 0.0.0.0 bepgroup.com.hk
 0.0.0.0 besserblok-ufa.ru
 0.0.0.0 besttasimacilik.com.tr
+0.0.0.0 beta.pterosol.com
 0.0.0.0 bflow.security-portal.cz
 0.0.0.0 bigdealist.com
 0.0.0.0 bildeboks.no
 0.0.0.0 bilim-pavlodar.gov.kz
 0.0.0.0 billieellish.org
 0.0.0.0 bingxiong.vip
+0.0.0.0 bistlearn.ir
 0.0.0.0 bjkumdo.com
 0.0.0.0 blog.241optical.com
 0.0.0.0 blog.hanxe.com
@@ -118,9 +115,11 @@
 0.0.0.0 brewmethods.com
 0.0.0.0 btlocum.pl
 0.0.0.0 bugansavings.com
+0.0.0.0 bxbx28.cn
 0.0.0.0 byqkdy.com
 0.0.0.0 c.vvvvvvvvv.ga
 0.0.0.0 cameli.vn
+0.0.0.0 campana20gb.com
 0.0.0.0 canaan.io
 0.0.0.0 canmivback.biz
 0.0.0.0 caravella.com.br
@@ -128,6 +127,7 @@
 0.0.0.0 castmart.ga
 0.0.0.0 cbk.m.dodo52.com
 0.0.0.0 ccnn.xiaomier.cn
+0.0.0.0 cdn-10049480.file.myqcloud.com
 0.0.0.0 cdn.truelife.vn
 0.0.0.0 cdn.xiaoduoai.com
 0.0.0.0 cdnus.laboratoryconecpttoday.com
@@ -148,17 +148,17 @@
 0.0.0.0 chiptune.com
 0.0.0.0 chj.m.dodo52.com
 0.0.0.0 chuckweiss.com
-0.0.0.0 cista-dobra-voda.com
 0.0.0.0 clareiamente.clareiamente.com
 0.0.0.0 clearwaterriveroutfitting.com
 0.0.0.0 client.yaap.co.uk
 0.0.0.0 clinicamariademolina.com
 0.0.0.0 cloud-server-updater2.co.za
-0.0.0.0 compesat.com
+0.0.0.0 colourcreative.co.za
 0.0.0.0 complan.hu
 0.0.0.0 complanbt.hu
 0.0.0.0 comtechadsl.com
 0.0.0.0 config.kuaisousou.top
+0.0.0.0 config.wwmhdq.com
 0.0.0.0 consultingcy.com
 0.0.0.0 counciloflight.bravepages.com
 0.0.0.0 cqjcc.org
@@ -166,12 +166,9 @@
 0.0.0.0 cryline.net
 0.0.0.0 csnserver.com
 0.0.0.0 csw.hu
-0.0.0.0 cuacuonsieure.com
 0.0.0.0 cvc.com.pl
 0.0.0.0 cyclomove.com
 0.0.0.0 czsl.91756.cn
-0.0.0.0 d3.99ddd.com
-0.0.0.0 d9.99ddd.com
 0.0.0.0 da.alibuf.com
 0.0.0.0 daithanhphung.com
 0.0.0.0 danielbastos.com
@@ -195,10 +192,10 @@
 0.0.0.0 dev5.mypagevn.com
 0.0.0.0 dezcom.com
 0.0.0.0 dfcf.91756.cn
-0.0.0.0 dfd.zhzy999.net
 0.0.0.0 dfzm.91756.cn
 0.0.0.0 dgecolesdepolice.bf
 0.0.0.0 dgnj.cn
+0.0.0.0 dhlservices.duckdns.org
 0.0.0.0 diazavendano.cl
 0.0.0.0 dichvuvesinhcongnghiep.top
 0.0.0.0 dienmaycu.vn
@@ -210,26 +207,25 @@
 0.0.0.0 divinevacations.in
 0.0.0.0 dkw-engineering.net
 0.0.0.0 dl-gameplayer.dmm.com
-0.0.0.0 dl.1003b.56a.com
 0.0.0.0 dl.198424.com
 0.0.0.0 dl.dzqzd.com
-0.0.0.0 dl.kuaile-u.com
-0.0.0.0 dl2.soft-lenta.ru
+0.0.0.0 dl.iqilie.com
 0.0.0.0 dlist.iqilie.com
 0.0.0.0 dmresor.se
 0.0.0.0 dnn.alibuf.com
 0.0.0.0 dns.alibuf.com
 0.0.0.0 dodsonimaging.com
 0.0.0.0 don.viameventos.com.br
+0.0.0.0 dongiln.co
 0.0.0.0 donmago.com
 0.0.0.0 donoffermaster.best
 0.0.0.0 doostansocks.ir
 0.0.0.0 doransky.info
-0.0.0.0 dosame.com
 0.0.0.0 down.ancamera.co.kr
 0.0.0.0 down.gogominer.com
 0.0.0.0 down.haote.com
 0.0.0.0 down.pcclear.com
+0.0.0.0 down.pdflist.cqhbkjzx.com
 0.0.0.0 down.startools.co.kr
 0.0.0.0 down.tgjkbx.cn
 0.0.0.0 down.upzxt.com
@@ -251,14 +247,12 @@
 0.0.0.0 dr080.com
 0.0.0.0 dralpaslan.com
 0.0.0.0 dreamfile.club
-0.0.0.0 drivolani.us
 0.0.0.0 drools-moved.46999.n3.nabble.com
 0.0.0.0 druzim.freewww.biz
 0.0.0.0 dsiun.com
 0.0.0.0 dtsay.xyz
 0.0.0.0 dudulm.com
 0.0.0.0 dusdn.mireene.com
-0.0.0.0 dw.58wangdun.com
 0.0.0.0 dx.qqyewu.com
 0.0.0.0 dx1.qqtn.com
 0.0.0.0 dx2.qqtn.com
@@ -267,7 +261,9 @@
 0.0.0.0 dzinestudio87.co.uk
 0.0.0.0 e.dangeana.com
 0.0.0.0 easydown.workday360.cn
+0.0.0.0 ebook.w3wvg.com
 0.0.0.0 edicolanazionale.it
+0.0.0.0 elokshinproperty.co.za
 0.0.0.0 emir-elbahr.com
 0.0.0.0 enc-tech.com
 0.0.0.0 energisegroup.com
@@ -276,21 +272,20 @@
 0.0.0.0 ermekanik.com
 0.0.0.0 esolvent.pl
 0.0.0.0 esteteam.org
+0.0.0.0 exposvision.com
 0.0.0.0 ezfintechcorp.com
 0.0.0.0 fafhoafouehfuh.su
-0.0.0.0 fairyqueenstore.com
 0.0.0.0 fastsoft.onlinedown.net
 0.0.0.0 fazi.pl
-0.0.0.0 fedsfmr.ru
 0.0.0.0 fenoma.net
 0.0.0.0 ffv322.ru
 0.0.0.0 ffv32223.ru
 0.0.0.0 fidiag.kymco.com
+0.0.0.0 fifa555easy.329263.com
 0.0.0.0 figuig.net
 0.0.0.0 fileco.jobkorea.co.kr
 0.0.0.0 filen3.utengine.co.kr
 0.0.0.0 filen5.utengine.co.kr
-0.0.0.0 files.fqapps.com
 0.0.0.0 files.rakbot.ru
 0.0.0.0 files6.uludagbilisim.com
 0.0.0.0 fishingbigstore.com
@@ -298,7 +293,6 @@
 0.0.0.0 fkd.derpcity.ru
 0.0.0.0 flex.ru
 0.0.0.0 flood-protection.org
-0.0.0.0 fmjstorage.com
 0.0.0.0 fordlamdong.com.vn
 0.0.0.0 foreverprecious.org
 0.0.0.0 foxfennecs.com
@@ -307,21 +301,20 @@
 0.0.0.0 ftpcnc-p2sp.pconline.com.cn
 0.0.0.0 ftpftpftp.com
 0.0.0.0 funletters.net
+0.0.0.0 funpartyrent.com
 0.0.0.0 futuregraphics.com.ar
-0.0.0.0 g.7230.com
 0.0.0.0 g0ogle.free.fr
+0.0.0.0 gainsdirectory.com
 0.0.0.0 galuhtea.com
 0.0.0.0 gamee.top
+0.0.0.0 garage.themebuffets.com
 0.0.0.0 garenanow.myvnc.com
 0.0.0.0 garenanow4.myvnc.com
 0.0.0.0 gargiulo.com.ar
 0.0.0.0 gateway-heide.de
 0.0.0.0 gateway.ethlqd.com
-0.0.0.0 gd2.greenxf.com
 0.0.0.0 genesisconstruction.co.za
 0.0.0.0 germistonmiraclecentre.co.za
-0.0.0.0 getfashionmania.com
-0.0.0.0 ghislain.dartois.pagesperso-orange.fr
 0.0.0.0 ghwls44.gabia.io
 0.0.0.0 gimscompany.com
 0.0.0.0 glitzygal.net
@@ -331,8 +324,6 @@
 0.0.0.0 go.xsuad.com
 0.0.0.0 gocanada.vn
 0.0.0.0 google.ghststr.com
-0.0.0.0 gopala.es
-0.0.0.0 gov.kr
 0.0.0.0 govhotel.us
 0.0.0.0 grafchekloder.rebatesrule.net
 0.0.0.0 granportale.com.br
@@ -340,7 +331,6 @@
 0.0.0.0 greenfood.sa.com
 0.0.0.0 greenleaveperu.com
 0.0.0.0 gssgroups.com
-0.0.0.0 gx-10012947.file.myqcloud.com
 0.0.0.0 habbotips.free.fr
 0.0.0.0 hagebakken.no
 0.0.0.0 halcat.com
@@ -348,7 +338,6 @@
 0.0.0.0 handrush.com
 0.0.0.0 hanoihub.vn
 0.0.0.0 hazel-azure.co.th
-0.0.0.0 hdxa.net
 0.0.0.0 healtina.com
 0.0.0.0 heavenif.co.za
 0.0.0.0 hediyeinternetpaket.com
@@ -361,9 +350,7 @@
 0.0.0.0 hostzaa.com
 0.0.0.0 hotart.co.nz
 0.0.0.0 hotel-le-relais-des-moulins.com
-0.0.0.0 hotelbharatpurpalace.com
 0.0.0.0 housewifes.co
-0.0.0.0 hqsistemas.com.ar
 0.0.0.0 hseda.com
 0.0.0.0 hsmwebapp.com
 0.0.0.0 htxl.cn
@@ -377,12 +364,12 @@
 0.0.0.0 ihpmed.ae
 0.0.0.0 ileolaherbalcare.com.ng
 0.0.0.0 imellda.com
+0.0.0.0 imenizeh.ir
 0.0.0.0 impression-gobelet.com
 0.0.0.0 in-sect.com
 0.0.0.0 inapadvance.com
 0.0.0.0 incrediblepixels.com
 0.0.0.0 incredicole.com
-0.0.0.0 ini.egkj.com
 0.0.0.0 innovation4crisis.org
 0.0.0.0 instanttechnology.com.au
 0.0.0.0 intelicasa.ro
@@ -400,6 +387,7 @@
 0.0.0.0 itsnixielou.com
 0.0.0.0 ixlonbcc.com
 0.0.0.0 izu.co.jp
+0.0.0.0 jahesa.com
 0.0.0.0 jaincakes.xyz
 0.0.0.0 jamiekaylive.com
 0.0.0.0 jansen-heesch.nl
@@ -428,6 +416,7 @@
 0.0.0.0 kabiru.ru
 0.0.0.0 kachsurf.mylftv.com
 0.0.0.0 kamasu11.cafe24.com
+0.0.0.0 kamisecurity.com.my
 0.0.0.0 kanok.co.th
 0.0.0.0 kar.big-pro.com
 0.0.0.0 karavantekstil.com
@@ -435,16 +424,15 @@
 0.0.0.0 kdsp.co.kr
 0.0.0.0 kejpa.com
 0.0.0.0 kenareh-gostare-aras.ir
+0.0.0.0 kgfs3.329263.com
 0.0.0.0 khunnapap.com
 0.0.0.0 kiencuonghotel.vn
 0.0.0.0 kjbm9.mof.gov.cn
 0.0.0.0 kleinendeli.co.za
-0.0.0.0 knightsbridgeenergy.com.ng
 0.0.0.0 koppemotta.com.br
 0.0.0.0 koralli.if.ua
 0.0.0.0 kqq.kz
 0.0.0.0 kristofferdaniels.com
-0.0.0.0 kupaliskohs.sk
 0.0.0.0 kuznetsov.ca
 0.0.0.0 kwanfromhongkong.com
 0.0.0.0 kwikomfi-lab.com
@@ -463,13 +451,14 @@
 0.0.0.0 lebedyn.info
 0.0.0.0 lecafedesartistes.com
 0.0.0.0 lengendryme.com
-0.0.0.0 leukkado.be
+0.0.0.0 lesa.at.true.by
 0.0.0.0 lhbfirst.com
 0.0.0.0 libya-info.com
 0.0.0.0 lifeapt.biz
 0.0.0.0 linx.li
 0.0.0.0 lists.ibiblio.org
 0.0.0.0 lists.mplayerhq.hu
+0.0.0.0 livetrack.in
 0.0.0.0 lodergord.com
 0.0.0.0 log.yundabao.cn
 0.0.0.0 lsyr.net
@@ -484,11 +473,10 @@
 0.0.0.0 magda.zelentourism.com
 0.0.0.0 makosoft.hu
 0.0.0.0 malin-akerman.net
-0.0.0.0 mangawt.com
 0.0.0.0 margopassadorestylist.com
-0.0.0.0 maringareservas.com.br
 0.0.0.0 marketprice.com.ng
 0.0.0.0 marksidfgs.ug
+0.0.0.0 marocaji.com
 0.0.0.0 matt-e.it
 0.0.0.0 mattayom31.go.th
 0.0.0.0 mazury4x4.pl
@@ -496,7 +484,6 @@
 0.0.0.0 mecbox.cn
 0.0.0.0 mediamatkat.fi
 0.0.0.0 medianews.ge
-0.0.0.0 medicacademic.com
 0.0.0.0 medreg.uz
 0.0.0.0 meert.org
 0.0.0.0 meeweb.com
@@ -507,7 +494,6 @@
 0.0.0.0 mettaanand.org
 0.0.0.0 mettek.com.tr
 0.0.0.0 mfevr.com
-0.0.0.0 mfpc.org.my
 0.0.0.0 mhkdhotbot.myvnc.com
 0.0.0.0 mhkdhotbot80.myvnc.com
 0.0.0.0 micahproducts.com
@@ -516,7 +502,6 @@
 0.0.0.0 mis.nbcc.ac.th
 0.0.0.0 misterson.com
 0.0.0.0 mistydeblasiophotography.com
-0.0.0.0 mitonegbh.xyz
 0.0.0.0 mkk09.kr
 0.0.0.0 mkontakt.az
 0.0.0.0 mmc.ru.com
@@ -524,6 +509,7 @@
 0.0.0.0 mobilier-modern.ro
 0.0.0.0 modcloudserver.eu
 0.0.0.0 moha-group.com
+0.0.0.0 monmariage.info
 0.0.0.0 moscow11.at
 0.0.0.0 mountveederwines.com
 0.0.0.0 moyo.co.kr
@@ -533,16 +519,12 @@
 0.0.0.0 mteng.mmj7.com
 0.0.0.0 mtfelektroteknik.com
 0.0.0.0 mueblesjcp.cl
-0.0.0.0 mv360.net
 0.0.0.0 mvb.kz
-0.0.0.0 mvdrepair.com
 0.0.0.0 mxpiqw.am.files.1drv.com
-0.0.0.0 myexpertca.in
+0.0.0.0 mydesign.thinkeraibirds.com
 0.0.0.0 myhood.cl
 0.0.0.0 myo.net.au
 0.0.0.0 myofficeplus.com
-0.0.0.0 myonlinepokiesblog.com
-0.0.0.0 mytex.pe
 0.0.0.0 mytrains.net
 0.0.0.0 mywp.asia
 0.0.0.0 myyttilukukansasta.fi
@@ -557,14 +539,12 @@
 0.0.0.0 nemo.herc.ws
 0.0.0.0 neocity1.free.fr
 0.0.0.0 nerve.untergrund.net
-0.0.0.0 new.tristatehs.com
 0.0.0.0 news.abfakerman.ir
 0.0.0.0 news.omumusic.net
 0.0.0.0 newsun-shop.com
 0.0.0.0 newxing.com
 0.0.0.0 nexity.me
 0.0.0.0 nfbio.com
-0.0.0.0 ngoaingu.garage.com.vn
 0.0.0.0 nofound.000webhostapp.com
 0.0.0.0 norperuinge.com.pe
 0.0.0.0 nprg.ru
@@ -574,6 +554,7 @@
 0.0.0.0 oa.hys.cn
 0.0.0.0 obnova.zzux.com
 0.0.0.0 obseques-conseils.com
+0.0.0.0 ohe.ie
 0.0.0.0 oknoplastik.sk
 0.0.0.0 omega.az
 0.0.0.0 omsk-osma.ru
@@ -599,7 +580,6 @@
 0.0.0.0 pakdesighee.com
 0.0.0.0 palochusvet.szm.com
 0.0.0.0 partyflix.net
-0.0.0.0 pat4.jetos.com
 0.0.0.0 pat4.qpoe.com
 0.0.0.0 patch2.51lg.com
 0.0.0.0 patch2.99ddd.com
@@ -610,6 +590,7 @@
 0.0.0.0 pcsoori.com
 0.0.0.0 pedidoslalacteo.com.ar
 0.0.0.0 peterssandmay.com
+0.0.0.0 petromltd.com
 0.0.0.0 ph4s.ru
 0.0.0.0 phamchilong.com
 0.0.0.0 phudieusongma.com
@@ -623,7 +604,6 @@
 0.0.0.0 ponto50.com.br
 0.0.0.0 poolbook.ir
 0.0.0.0 ppl.ac.id
-0.0.0.0 prabhuandsons.com
 0.0.0.0 pratapnursery.com
 0.0.0.0 prepaenunsoloexamen.academiagalileoac.com
 0.0.0.0 probost.cz
@@ -637,7 +617,6 @@
 0.0.0.0 qppl.angiang.gov.vn
 0.0.0.0 quantominds.com
 0.0.0.0 quartier-midi.be
-0.0.0.0 quehagoencartagena.com
 0.0.0.0 quickuploader.xyz
 0.0.0.0 raacts.in
 0.0.0.0 raifix.com.br
@@ -651,7 +630,6 @@
 0.0.0.0 redeemerssports.com
 0.0.0.0 redesoftdownload.info
 0.0.0.0 renimin.mymom.info
-0.0.0.0 renovanorte.com
 0.0.0.0 res.uf1.cn
 0.0.0.0 ret.space
 0.0.0.0 rezaazizi.ir
@@ -668,12 +646,11 @@
 0.0.0.0 ruisgood.ru
 0.0.0.0 rusch.nu
 0.0.0.0 s.51shijuan.com
-0.0.0.0 s.kk30.com
-0.0.0.0 s14b.91danji.com
-0.0.0.0 s14b.groundyun.cn
 0.0.0.0 sabiupd.compress.to
 0.0.0.0 saboorjaam.ir
 0.0.0.0 sabupda.vizvaz.com
+0.0.0.0 saglikbakanligi-destekportal.org
+0.0.0.0 saglikramazan20bgb.net
 0.0.0.0 sahathaikasetpan.com
 0.0.0.0 salvationbd.com
 0.0.0.0 sandovalgraphics.com
@@ -684,7 +661,6 @@
 0.0.0.0 sefp-boispro.fr
 0.0.0.0 selekture.com
 0.0.0.0 selvikoyunciftligi.com
-0.0.0.0 sernayconsultores.com
 0.0.0.0 serpentrising.com
 0.0.0.0 servicemhkd.myvnc.com
 0.0.0.0 servicemhkd80.myvnc.com
@@ -694,7 +670,6 @@
 0.0.0.0 shacked.webdepot.co.il
 0.0.0.0 shahtoba.faqserv.com
 0.0.0.0 shaoxiaofei.cn
-0.0.0.0 share.dmca.gripe
 0.0.0.0 sharjahas.com
 0.0.0.0 shembefoundation.com
 0.0.0.0 simlun.com.ar
@@ -720,7 +695,6 @@
 0.0.0.0 sota-france.fr
 0.0.0.0 souldancing.cn
 0.0.0.0 souq-aljwalat.com
-0.0.0.0 spdtextile.com
 0.0.0.0 speed.myz.info
 0.0.0.0 spurstogo.com
 0.0.0.0 sputnikmailru.cdnmail.ru
@@ -730,11 +704,11 @@
 0.0.0.0 ss.cybersoft-vn.com
 0.0.0.0 sslv3.at
 0.0.0.0 staging.popclusive.asia
+0.0.0.0 staging2.lifebiotic.com
 0.0.0.0 starcountry.net
 0.0.0.0 starinfotechcollege.com
 0.0.0.0 static.3001.net
 0.0.0.0 static.ilclock.com
-0.0.0.0 static.topxgun.com
 0.0.0.0 stecit.nl
 0.0.0.0 stevewalker.com.au
 0.0.0.0 story-maker.jp
@@ -754,7 +728,6 @@
 0.0.0.0 tandenblekenhoofddorp.nl
 0.0.0.0 taraward.com
 0.0.0.0 taxpos.com
-0.0.0.0 tcy.198424.com
 0.0.0.0 teamtnt.red
 0.0.0.0 teardrop-productions.ro
 0.0.0.0 technoites.com
@@ -775,32 +748,28 @@
 0.0.0.0 theptiendat.com
 0.0.0.0 thepyramids.nl
 0.0.0.0 therecruiter.io
-0.0.0.0 thevision.ro
 0.0.0.0 thornadops.com
 0.0.0.0 thosewebbs.com
 0.0.0.0 thuong.bidiworks.com
 0.0.0.0 tianangdep.com
+0.0.0.0 tianzi8.cn
 0.0.0.0 tibinst.mefound.com
 0.0.0.0 tibok.lflink.com
 0.0.0.0 tinckorm.beget.tech
 0.0.0.0 tishreycarmelim.co.il
 0.0.0.0 tmhfashionhouse.co.za
 0.0.0.0 toe.polinema.ac.id
-0.0.0.0 tomorrowearth.net
 0.0.0.0 tonghopgia.net
 0.0.0.0 tonydong.com
 0.0.0.0 tonyzone.com
-0.0.0.0 toulousa.com
 0.0.0.0 tsd.jxwan.com
 0.0.0.0 tsredco.telangana.gov.in
 0.0.0.0 tulli.info
 0.0.0.0 tumso.org
 0.0.0.0 tuneup.ibk.me
 0.0.0.0 tup.com.cn
-0.0.0.0 tuskanlehdms.ug
 0.0.0.0 tutuler.com
 0.0.0.0 uc-56.ru
-0.0.0.0 ucto-id.cz
 0.0.0.0 ufabet168168.329263.com
 0.0.0.0 ugc.wegame.com.cn
 0.0.0.0 ultimatelamborghiniexperience.com
@@ -833,20 +802,22 @@
 0.0.0.0 vigilar.com.br
 0.0.0.0 vip.recommendedtoyoo.com
 0.0.0.0 virustreatments.empeeevents.com
+0.0.0.0 visagepk.com
+0.0.0.0 vistanewsite.ir
 0.0.0.0 visualdata.ru
 0.0.0.0 vitinhvnt.com
 0.0.0.0 vitromed.ro
+0.0.0.0 vjhascv.ru
 0.0.0.0 voyageur.sisnettdesign.com
 0.0.0.0 vrrumover0.vrrum0.farted.net
 0.0.0.0 vvff.in
-0.0.0.0 w.zhzy999.net
 0.0.0.0 wangtong7.siweidaoxiang.com
 0.0.0.0 wangzonghang.cn
-0.0.0.0 wap.dosame.com
 0.0.0.0 ware.ru
 0.0.0.0 warriorllc.com
 0.0.0.0 wbd.5636.com
 0.0.0.0 wbkmt.com
+0.0.0.0 web.lavishsupplystore.com
 0.0.0.0 webarte.com.br
 0.0.0.0 webq.wikaba.com
 0.0.0.0 webserverthai.com
@@ -856,7 +827,6 @@
 0.0.0.0 whgaty.com
 0.0.0.0 wiebe-sanitaer.de
 0.0.0.0 wmd9e.a3i1vvv.feteboc.com
-0.0.0.0 wmi.1217bye.host
 0.0.0.0 wnksupply.co.th
 0.0.0.0 wood-expert.net
 0.0.0.0 woodsytech.com
@@ -870,12 +840,12 @@
 0.0.0.0 x2vn.com
 0.0.0.0 xia.vzboot.com
 0.0.0.0 xiaidown.com
+0.0.0.0 xiaoma-10021647.file.myqcloud.com
 0.0.0.0 xiegushi.cn
 0.0.0.0 xirfad.com
 0.0.0.0 xn--20gb-hediyefrsati-nvc.com
 0.0.0.0 xn--transfgran-mgbbb600b.ro
 0.0.0.0 xtremeforumz.com
-0.0.0.0 xueha.fun
 0.0.0.0 xuhss.com
 0.0.0.0 xxwl.kuaiyunds.com
 0.0.0.0 xxxze.co.nu
@@ -898,8 +868,6 @@
 0.0.0.0 zethla.com
 0.0.0.0 zeytinyagisabun.com
 0.0.0.0 zhetysu360.kz
-0.0.0.0 zhzy999.net
-0.0.0.0 ziliao.yunkaodian.com
 0.0.0.0 zj.9553.com
 0.0.0.0 zmmore.com
 0.0.0.0 zoetermeerov.nl
diff --git a/urlhaus-filter-hosts.txt b/urlhaus-filter-hosts.txt
index fffa03fd..e7d35686 100644
--- a/urlhaus-filter-hosts.txt
+++ b/urlhaus-filter-hosts.txt
@@ -1,5 +1,5 @@
 # Title: abuse.ch URLhaus Malicious Hosts Blocklist
-# Updated: Tue, 05 May 2020 00:09:52 UTC
+# Updated: Tue, 05 May 2020 12:09:42 UTC
 # Repo: https://gitlab.com/curben/urlhaus-filter
 # License: https://creativecommons.org/publicdomain/zero/1.0/
 # Source: https://urlhaus.abuse.ch/api/
@@ -356,7 +356,6 @@
 0.0.0.0 2.ak1ba.pro
 0.0.0.0 2.clcshop.online
 0.0.0.0 2.globalengine.ru
-0.0.0.0 2.indexsinas.me
 0.0.0.0 2.moulding.z8.ru
 0.0.0.0 2.spacepel.com
 0.0.0.0 2.toemobra.com.br
@@ -610,6 +609,7 @@
 0.0.0.0 2ndpub.com
 0.0.0.0 2ndscreensociety.com
 0.0.0.0 2nell.com
+0.0.0.0 2no.co
 0.0.0.0 2pjcza.db.files.1drv.com
 0.0.0.0 2q1wea3rdsf.000webhostapp.com
 0.0.0.0 2q3w.com
@@ -641,8 +641,6 @@
 0.0.0.0 3.top4top.net
 0.0.0.0 3.u0135364.z8.ru
 0.0.0.0 3.unplugrevolution.com
-0.0.0.0 3.zhzy999.net
-0.0.0.0 3.zhzy999.net3.zhzy999.net
 0.0.0.0 30-by-30.com
 0.0.0.0 3000adaydomainer.com
 0.0.0.0 300miliardialberi.eu
@@ -950,7 +948,6 @@
 0.0.0.0 4you.by
 0.0.0.0 5-shampurov.ru
 0.0.0.0 5.fjwt1.crsky.com
-0.0.0.0 5.top4top.io
 0.0.0.0 5.u0148466.z8.ru
 0.0.0.0 5.unplugrevolution.com
 0.0.0.0 5003.arentuspecial.com
@@ -1303,7 +1300,6 @@
 0.0.0.0 97762.prohoster.biz
 0.0.0.0 9796360.com
 0.0.0.0 97world.com
-0.0.0.0 98.ip-51-91-254.eu
 0.0.0.0 981775.com
 0.0.0.0 988f5c12.ngrok.io
 0.0.0.0 988sconline.com
@@ -2199,6 +2195,7 @@
 0.0.0.0 adamshop24.de
 0.0.0.0 adamsm.co.za
 0.0.0.0 adamsphotography.com.au
+0.0.0.0 adamtcarruthers.com
 0.0.0.0 adamthelawyer.com
 0.0.0.0 adamwilt15.com
 0.0.0.0 adan-hospital.com
@@ -2619,6 +2616,7 @@
 0.0.0.0 affpp.ru
 0.0.0.0 affyboomy.ga
 0.0.0.0 afgeartechnology.com.mx
+0.0.0.0 afges.org
 0.0.0.0 afghanbazarrugs.com
 0.0.0.0 afghanistanpolicy.com
 0.0.0.0 afgsjkhaljfghadfje.ga
@@ -2658,7 +2656,6 @@
 0.0.0.0 africabluewebs.co.ke
 0.0.0.0 africabootcampacademy.influencetec.net
 0.0.0.0 africahousingawards.com
-0.0.0.0 africainnovates.org
 0.0.0.0 africamarket.shop
 0.0.0.0 africamissions.ca
 0.0.0.0 african-trips.com
@@ -2861,6 +2858,7 @@
 0.0.0.0 agoam.bid
 0.0.0.0 agodatex.ga
 0.0.0.0 agogpharrna.com
+0.0.0.0 agorae.afges.org
 0.0.0.0 agoralbe.com
 0.0.0.0 agorapro.com.co
 0.0.0.0 agorlu02.azurewebsites.net
@@ -3059,7 +3057,6 @@
 0.0.0.0 aigforms.myap.co.za
 0.0.0.0 aiglemovies.com
 0.0.0.0 aihealth.vn
-0.0.0.0 aiiaiafrzrueuedur.ru
 0.0.0.0 aiineh.com
 0.0.0.0 aiit.ahbys.com
 0.0.0.0 aijdjy.com
@@ -3128,7 +3125,6 @@
 0.0.0.0 airinovasi-indonesia.com
 0.0.0.0 airisu-syumikonparty.com
 0.0.0.0 airlife.bget.ru
-0.0.0.0 airliness.info
 0.0.0.0 airlinkcpl.net
 0.0.0.0 airmaildata.com
 0.0.0.0 airmanship.nl
@@ -3273,6 +3269,7 @@
 0.0.0.0 akekartela.com
 0.0.0.0 akeswari.org
 0.0.0.0 akfoundationbd.xyz
+0.0.0.0 akg-eng.net
 0.0.0.0 akgemc.com
 0.0.0.0 akgiyimtekstil.com
 0.0.0.0 akh.ge
@@ -3462,6 +3459,7 @@
 0.0.0.0 alberolandia.it
 0.0.0.0 albert.playground.mostar.id
 0.0.0.0 albertaalliance.ca
+0.0.0.0 albertabeef.ca
 0.0.0.0 albertacareers.com
 0.0.0.0 albertandyork.com
 0.0.0.0 albertgrafica.com.br
@@ -5537,6 +5535,7 @@
 0.0.0.0 araba.alabama-marketing.com
 0.0.0.0 arabaresmi.com
 0.0.0.0 arabcb.org
+0.0.0.0 arabcoegypt.com
 0.0.0.0 arabdubaisafari.com
 0.0.0.0 arabianbrother.com
 0.0.0.0 arabiantongue.net
@@ -5848,6 +5847,7 @@
 0.0.0.0 arkist.ist
 0.0.0.0 arkiv.lillehammerartmuseum.com
 0.0.0.0 arkonziv.com
+0.0.0.0 arkshine.com
 0.0.0.0 arksoft.in
 0.0.0.0 arkworkspace.com
 0.0.0.0 arkyreyma.com
@@ -6387,6 +6387,7 @@
 0.0.0.0 askingpricerealty.com
 0.0.0.0 askjhdaskdhshjfhf.ru
 0.0.0.0 asklaizmir.com.tr
+0.0.0.0 askmufti.org
 0.0.0.0 askom-service.kz
 0.0.0.0 asksuze.com
 0.0.0.0 askthemadpoet.net
@@ -7006,7 +7007,6 @@
 0.0.0.0 autodetali-161.ru
 0.0.0.0 autodevices.topterra.ru
 0.0.0.0 autodrim.pl
-0.0.0.0 autodwg.com
 0.0.0.0 autoecole-hammamet.tn
 0.0.0.0 autoecole.inchtechs.com
 0.0.0.0 autoecolehophophop.com
@@ -7190,7 +7190,6 @@
 0.0.0.0 avenzis.nl
 0.0.0.0 averefiducia.com
 0.0.0.0 averfoodrs.eu
-0.0.0.0 averin.pro
 0.0.0.0 averson.by
 0.0.0.0 averybit.com
 0.0.0.0 aveslor.com
@@ -7401,6 +7400,7 @@
 0.0.0.0 aydinvps.com
 0.0.0.0 aydosyazilim.com
 0.0.0.0 ayecargo.com
+0.0.0.0 ayefin.com
 0.0.0.0 ayeletbenyosef.co.il
 0.0.0.0 ayerstechnology.com
 0.0.0.0 ayeshashoukat.com
@@ -7654,7 +7654,6 @@
 0.0.0.0 babysteps.ge
 0.0.0.0 babyvogel.nl
 0.0.0.0 babzon.club
-0.0.0.0 bac.edu.my
 0.0.0.0 bacamanect.com
 0.0.0.0 baccaosutritue.vn
 0.0.0.0 baceldeniz.com
@@ -7685,6 +7684,7 @@
 0.0.0.0 backpinging.com
 0.0.0.0 backselfconfidence.xyz
 0.0.0.0 backstage-secrets.com
+0.0.0.0 backthenstuff.com
 0.0.0.0 backup-new.5kmdeal.my
 0.0.0.0 backup.goooogle.us
 0.0.0.0 backup.litcel.com
@@ -8503,6 +8503,7 @@
 0.0.0.0 beachview.co.za
 0.0.0.0 beachvillas.gr
 0.0.0.0 beachwoodproperty.com.au
+0.0.0.0 beaconacademy.net
 0.0.0.0 beaconhousediscovery.com
 0.0.0.0 beaconr.rungta.ac.in
 0.0.0.0 beactivedigital.com
@@ -8524,6 +8525,7 @@
 0.0.0.0 bearingspecs.com
 0.0.0.0 bearinmindstrategies.com
 0.0.0.0 bearriverhealth.org
+0.0.0.0 bearsselection.xyz
 0.0.0.0 beaskyshanoi.com
 0.0.0.0 beastmas.club
 0.0.0.0 beat.vision
@@ -9400,7 +9402,6 @@
 0.0.0.0 bigdev.top
 0.0.0.0 bigdiamondeals.com
 0.0.0.0 bigeyes.com.tw
-0.0.0.0 bigfile.mail.naver.com
 0.0.0.0 bigfishchain.com
 0.0.0.0 bigfoothospitality.com
 0.0.0.0 bigg-live.com
@@ -9427,7 +9428,6 @@
 0.0.0.0 bigstudio.photo
 0.0.0.0 bigsunshinebooks.com
 0.0.0.0 bigtech24.de
-0.0.0.0 bigtext.club
 0.0.0.0 bigtrading.ga
 0.0.0.0 bigtvjoblist.com
 0.0.0.0 biguwh.com
@@ -9576,6 +9576,7 @@
 0.0.0.0 binnayem.com
 0.0.0.0 binoculars-shop.ru
 0.0.0.0 binom-perm.cf
+0.0.0.0 binsuloomgroup.com
 0.0.0.0 binta.xyz
 0.0.0.0 bintangbarutama.co.id
 0.0.0.0 bintec.pe
@@ -9756,7 +9757,6 @@
 0.0.0.0 biz-shop.pro
 0.0.0.0 biz.creationcabin.com
 0.0.0.0 bizajans.com
-0.0.0.0 bizasiatrading.com
 0.0.0.0 bizbhutanevents.com
 0.0.0.0 bizbuilder.co.za
 0.0.0.0 bizcodedigital.in
@@ -10412,7 +10412,6 @@
 0.0.0.0 bloombrainz.com
 0.0.0.0 bloomcommunityproject.org
 0.0.0.0 bloomestatelitigation.ca
-0.0.0.0 bloomfire.com
 0.0.0.0 bloomflores.com
 0.0.0.0 bloomhomes.in
 0.0.0.0 bloomingbridal.com.au
@@ -11190,6 +11189,7 @@
 0.0.0.0 breazytrans.com
 0.0.0.0 breccioneserrande.com
 0.0.0.0 brechovip.com.br
+0.0.0.0 breda.com
 0.0.0.0 breebaart.net
 0.0.0.0 breed.wanttobea.com
 0.0.0.0 breedencomm.com
@@ -11322,6 +11322,7 @@
 0.0.0.0 britwind.tk
 0.0.0.0 brixxsites.com
 0.0.0.0 brizboy.com
+0.0.0.0 briztechnologies.com
 0.0.0.0 brj.sitedevlink.com
 0.0.0.0 brjsrwaco.watchdogdns.duckdns.org
 0.0.0.0 brkcakiroglu.com
@@ -12269,6 +12270,7 @@
 0.0.0.0 camnangtrithuc.com
 0.0.0.0 campagnesms.info
 0.0.0.0 campaigns.actionable-science.com
+0.0.0.0 campana20gb.com
 0.0.0.0 campanus.cz
 0.0.0.0 campbellcheesegrocerybk.com
 0.0.0.0 campbellsbay.school.nz
@@ -12955,6 +12957,7 @@
 0.0.0.0 cavanasipontum.ru
 0.0.0.0 cavancameroon.com
 0.0.0.0 cavaticus.com
+0.0.0.0 caveaudelteatro.it
 0.0.0.0 caveaulechapeau.ch
 0.0.0.0 cavedimarmocarrara.com
 0.0.0.0 cavefashion.com
@@ -13713,7 +13716,6 @@
 0.0.0.0 cheapesthost.com.ng
 0.0.0.0 cheapgadgets-gq.000webhostapp.com
 0.0.0.0 cheapmlbjerseysmarlins.com
-0.0.0.0 cheapmusic.info
 0.0.0.0 cheapnikeairmaxshoes-online.com
 0.0.0.0 cheapoakleysunglasses.net
 0.0.0.0 cheappigeontraps.com
@@ -14489,6 +14491,7 @@
 0.0.0.0 cld-net.com
 0.0.0.0 cld.persiangig.com
 0.0.0.0 cld.pt
+0.0.0.0 cle.ae
 0.0.0.0 clean.crypt24.in
 0.0.0.0 clean.olexandry.ru
 0.0.0.0 clean.vanzherke.ru
@@ -14782,7 +14785,6 @@
 0.0.0.0 cmdez.ir
 0.0.0.0 cmdou.com
 0.0.0.0 cmeaststar.de
-0.0.0.0 cmg.asia
 0.0.0.0 cmgroup.com.ua
 0.0.0.0 cmhighschool.edu.bd
 0.0.0.0 cmhmfgoutbound.protection.sketchwefair-watduoliprudential.com.watchdogdns.duckdns.org
@@ -15325,7 +15327,6 @@
 0.0.0.0 compliancewing.com
 0.0.0.0 complience.com
 0.0.0.0 compln.net
-0.0.0.0 components.technologymindz.com
 0.0.0.0 composecv.com
 0.0.0.0 composite.be
 0.0.0.0 compoundy.com
@@ -15797,6 +15798,7 @@
 0.0.0.0 cordulaklein.de
 0.0.0.0 cordwells.com.au
 0.0.0.0 cordythaiproducts.com
+0.0.0.0 core-tech.com
 0.0.0.0 core.org.af
 0.0.0.0 corebodybrand.com
 0.0.0.0 corehealingmassage.com
@@ -16863,7 +16865,6 @@
 0.0.0.0 cysyonetim.com
 0.0.0.0 cytecgroup.co.za
 0.0.0.0 cytf.coloradotennis.org
-0.0.0.0 cythia0805.com
 0.0.0.0 cythromatt.com
 0.0.0.0 cytotan.website
 0.0.0.0 cytotec-tabs.com
@@ -17688,6 +17689,7 @@
 0.0.0.0 ddmadrasah.com
 0.0.0.0 ddraiggoch.co.uk
 0.0.0.0 ddrcsangrur.com
+0.0.0.0 ddreciclaje.com
 0.0.0.0 dds.com.mx
 0.0.0.0 ddsandesh.com
 0.0.0.0 ddsolutions.pl
@@ -18817,7 +18819,6 @@
 0.0.0.0 dewakartu.info
 0.0.0.0 dewalhoeve.nl
 0.0.0.0 dewapisang.com
-0.0.0.0 dewarejeki.info
 0.0.0.0 dewarejeki.link
 0.0.0.0 dewibebaris.com
 0.0.0.0 dewide.com.br
@@ -18847,7 +18848,6 @@
 0.0.0.0 dfc33.xyz
 0.0.0.0 dfcf.91756.cn
 0.0.0.0 dfcvbrtwe.ug
-0.0.0.0 dfd.zhzy999.net
 0.0.0.0 dfddfg4df.ru
 0.0.0.0 dffdds.club
 0.0.0.0 dffieo8ieo0380ieovsddsdff89r309ieo89334.com
@@ -19806,9 +19806,6 @@
 0.0.0.0 dobrojutrodjevojke.com
 0.0.0.0 dobroviz.com.ua
 0.0.0.0 dobrovorot.su
-0.0.0.0 doc-04-cc-docs.googleusercontent.com
-0.0.0.0 doc-08-5o-docs.googleusercontent.com
-0.0.0.0 doc-0s-c8-docs.googleusercontent.com
 0.0.0.0 doc-hub.healthycheapfast.com
 0.0.0.0 doc-japan.com
 0.0.0.0 doc.albaspizzaastoria.com
@@ -20222,7 +20219,6 @@
 0.0.0.0 dosttours.com
 0.0.0.0 dosya.tc
 0.0.0.0 dosyproperties.info
-0.0.0.0 dot.state.mn.us
 0.0.0.0 dota2-down.club
 0.0.0.0 dota2-down.site
 0.0.0.0 dotactive.com.au
@@ -20429,7 +20425,6 @@
 0.0.0.0 dpack365-my.sharepoint.com
 0.0.0.0 dpacorp.org
 0.0.0.0 dparmm1.wci.com.ph
-0.0.0.0 dpaste.com
 0.0.0.0 dpbh.info
 0.0.0.0 dpbusinessportal.ro
 0.0.0.0 dpe.com.tw
@@ -20580,6 +20575,7 @@
 0.0.0.0 dreamluxuryhairco.com
 0.0.0.0 dreammakerselitefitness.com
 0.0.0.0 dreammaster-uae.com
+0.0.0.0 dreammergeconsult.com
 0.0.0.0 dreammotokolkata.com
 0.0.0.0 dreams-innovations.com
 0.0.0.0 dreamsfashion.com.vn
@@ -21570,6 +21566,7 @@
 0.0.0.0 ecitytanduclongan.com
 0.0.0.0 eckdor.de
 0.0.0.0 ecker.aidnet.at
+0.0.0.0 ecklund.no
 0.0.0.0 eclairesuits.com
 0.0.0.0 eclatpro.com
 0.0.0.0 eclecticelectronics.net
@@ -22025,6 +22022,7 @@
 0.0.0.0 eitworld.com
 0.0.0.0 eiuh9r8fhr98fh.top
 0.0.0.0 eiuwowqwpeoeirwpei.com
+0.0.0.0 ejadarabia.com
 0.0.0.0 ejadvertising.com
 0.0.0.0 ejanlele.design
 0.0.0.0 ejdelapena.com
@@ -22247,6 +22245,7 @@
 0.0.0.0 elevateducation.agreatidea.studio
 0.0.0.0 elevationshairboutique.com
 0.0.0.0 elevatorbracket.com
+0.0.0.0 elevennevele.com
 0.0.0.0 eleventhcapital.com
 0.0.0.0 elevituc.vn
 0.0.0.0 elezioni-oggi.it
@@ -23562,7 +23561,6 @@
 0.0.0.0 etxse.xyz
 0.0.0.0 eu-easy.com
 0.0.0.0 eu.wildfire.paloaltonetworks.com
-0.0.0.0 eu1.salesforce.com
 0.0.0.0 eu283iwoqodjspqisjdf.com
 0.0.0.0 eu5-cdn.devid.info
 0.0.0.0 eubankphoto.com
@@ -24012,6 +24010,7 @@
 0.0.0.0 exportcommunity.in
 0.0.0.0 exportef.info
 0.0.0.0 exposicaoceramicaearte.com.br
+0.0.0.0 exposvision.com
 0.0.0.0 expovitrinadelvalle.com
 0.0.0.0 expresi.club
 0.0.0.0 expresodeportivo.com
@@ -25081,6 +25080,7 @@
 0.0.0.0 file546456.com
 0.0.0.0 filebase.duckdns.org
 0.0.0.0 filebase.mogelgott.de
+0.0.0.0 filebin.net
 0.0.0.0 filebox.hiworks.com
 0.0.0.0 filebr.com
 0.0.0.0 fileco.jobkorea.co.kr
@@ -25912,7 +25912,6 @@
 0.0.0.0 forexaddictt.com
 0.0.0.0 forexbrokeracademy.com
 0.0.0.0 forexpedia.tradewithrobbie.com
-0.0.0.0 forexpf.ru
 0.0.0.0 forexproservice.com
 0.0.0.0 forexrobot.youralgo.com
 0.0.0.0 forextradingfrx.org
@@ -28373,6 +28372,7 @@
 0.0.0.0 goji-actives.net
 0.0.0.0 gojukai.co
 0.0.0.0 gokceozagar.com
+0.0.0.0 goker.com.tr
 0.0.0.0 gokhancakmak.com.tr
 0.0.0.0 gokjerijk.nl
 0.0.0.0 gokkastennl.com
@@ -28668,7 +28668,6 @@
 0.0.0.0 gourmandd.com
 0.0.0.0 gourmetlab.pe
 0.0.0.0 gourmetreats.in
-0.0.0.0 gov.kr
 0.0.0.0 gov.rsmart-testsolutions.watchdogdns.duckdns.org
 0.0.0.0 govche.in
 0.0.0.0 goveboatclub.com.au
@@ -29185,7 +29184,6 @@
 0.0.0.0 grupodpi.pe
 0.0.0.0 grupodreyer.com
 0.0.0.0 grupoembatec.com
-0.0.0.0 grupoeq.com
 0.0.0.0 grupoesparta.com.ve
 0.0.0.0 grupofabiamce.com.br
 0.0.0.0 grupofischermineracao.com.br
@@ -29195,6 +29193,7 @@
 0.0.0.0 grupoinalen.com
 0.0.0.0 grupoinfonet.com
 0.0.0.0 grupojg.com.br
+0.0.0.0 grupolainmaculada.com
 0.0.0.0 grupolaplace.com.br
 0.0.0.0 grupoloang.com
 0.0.0.0 grupolorena.com.sv
@@ -29293,6 +29292,7 @@
 0.0.0.0 gtidae.com.pl
 0.0.0.0 gtim.agency
 0.0.0.0 gtiperu.com
+0.0.0.0 gtm-au.com
 0.0.0.0 gtminas.com.br
 0.0.0.0 gtnaidu.com
 0.0.0.0 gtomeconquista.com
@@ -29556,6 +29556,7 @@
 0.0.0.0 h-w-c.net
 0.0.0.0 h.eurotrading.com.pl
 0.0.0.0 h.j990981.ru
+0.0.0.0 h.top4top.io
 0.0.0.0 h.valerana44.ru
 0.0.0.0 h1.iwakalong.ru
 0.0.0.0 h112321.s08.test-hf.su
@@ -31207,7 +31208,6 @@
 0.0.0.0 home-spy-shop.com
 0.0.0.0 home.99eurowebsite.ie
 0.0.0.0 home.barley-plus.com
-0.0.0.0 home.earthlink.net
 0.0.0.0 home.evrstudio.com
 0.0.0.0 home.healthiestu.com
 0.0.0.0 home.isdes.com
@@ -31680,6 +31680,7 @@
 0.0.0.0 how-to-nampa.com
 0.0.0.0 how-to-tech.com
 0.0.0.0 how.ph
+0.0.0.0 howalshafikings.com
 0.0.0.0 howardbenz.com
 0.0.0.0 howardbragman.com
 0.0.0.0 howardgfranklin.com
@@ -31781,7 +31782,6 @@
 0.0.0.0 hthaher.com
 0.0.0.0 hthindustrial.com
 0.0.0.0 hthttp
-0.0.0.0 htl.li
 0.0.0.0 htl.ru
 0.0.0.0 htlinternational.org
 0.0.0.0 htlvn.com
@@ -32104,7 +32104,6 @@
 0.0.0.0 i-supportcharity.com
 0.0.0.0 i-vnsweyu.pl
 0.0.0.0 i-voda.com
-0.0.0.0 i.cubeupload.com
 0.0.0.0 i.fiery.me
 0.0.0.0 i.fluffy.cc
 0.0.0.0 i.funtourspt.eu
@@ -32141,6 +32140,7 @@
 0.0.0.0 iacp-od.org
 0.0.0.0 iadeca.es
 0.0.0.0 iadigital.com.br
+0.0.0.0 iaecconsultants.com
 0.0.0.0 iain-padangsidimpuan.ac.id
 0.0.0.0 iais.ac.id
 0.0.0.0 iakah.pw
@@ -32889,6 +32889,7 @@
 0.0.0.0 imemmw.org
 0.0.0.0 imenbazr.com
 0.0.0.0 imenergo.com
+0.0.0.0 imenizeh.ir
 0.0.0.0 imensanatsi.com
 0.0.0.0 imensandogh.com
 0.0.0.0 imersiongis.com
@@ -33054,6 +33055,7 @@
 0.0.0.0 in365.vn
 0.0.0.0 in8.keton8.com
 0.0.0.0 in9cm.com.br
+0.0.0.0 inac-americas.com
 0.0.0.0 inacioferros.com
 0.0.0.0 inaczasie.pl
 0.0.0.0 inadmin.convshop.com
@@ -33137,7 +33139,6 @@
 0.0.0.0 indian-escorts-qatar.com
 0.0.0.0 indian-escorts-rak.com
 0.0.0.0 indian-escorts-sharjah.com
-0.0.0.0 indianagoods.club
 0.0.0.0 indianblog.info
 0.0.0.0 indianceramicsourcing.com
 0.0.0.0 indianescortsabudhabi.com
@@ -33704,6 +33705,7 @@
 0.0.0.0 integracooperativa.com
 0.0.0.0 integrafika.co.uk
 0.0.0.0 integraga.com
+0.0.0.0 integralc.com
 0.0.0.0 integralcs.com.br
 0.0.0.0 integralestates.in
 0.0.0.0 integralmakeup.com
@@ -33801,7 +33803,6 @@
 0.0.0.0 internaut.in
 0.0.0.0 internetcasinoweblog.com
 0.0.0.0 internetjogasz.hu
-0.0.0.0 internetlink.com.mx
 0.0.0.0 internetmarketing4pros.com
 0.0.0.0 internetofsmell.com
 0.0.0.0 internetordbogen.dk
@@ -33968,6 +33969,7 @@
 0.0.0.0 ioffe-soft.ru
 0.0.0.0 ioffexpert.com
 0.0.0.0 ioi3.com
+0.0.0.0 iol.ie
 0.0.0.0 iolandagazzerro.it
 0.0.0.0 ion-consulting.com
 0.0.0.0 ioncaresindia.in
@@ -34049,6 +34051,7 @@
 0.0.0.0 iphonessuckballs.life
 0.0.0.0 iphoneteknikservisim.net
 0.0.0.0 iphonewin.website
+0.0.0.0 iphotoalot.com
 0.0.0.0 iphys-hypoxia.kz
 0.0.0.0 ipisu.ru
 0.0.0.0 ipjem.com.br
@@ -34675,6 +34678,7 @@
 0.0.0.0 iyle.co.uk
 0.0.0.0 iyycqg.bn.files.1drv.com
 0.0.0.0 iz.owak-kmyt.ru
+0.0.0.0 iz.poznan.pl
 0.0.0.0 izabelatrojanowska.pl
 0.0.0.0 izavu.com
 0.0.0.0 izbetalia.com
@@ -35614,7 +35618,6 @@
 0.0.0.0 joegie.nl
 0.0.0.0 joeing.duckdns.org
 0.0.0.0 joeing.rapiddns.ru
-0.0.0.0 joeing.warzonedns.com
 0.0.0.0 joeing2.duckdns.org
 0.0.0.0 joeksdj.nl
 0.0.0.0 joelanguell.com
@@ -35783,6 +35786,7 @@
 0.0.0.0 josenutricion.com
 0.0.0.0 joseph.gergis.net
 0.0.0.0 josephalavi.com
+0.0.0.0 josephdutton.com
 0.0.0.0 josephreynolds.net
 0.0.0.0 josephsaadeh.me
 0.0.0.0 josepsullca.com
@@ -36955,6 +36959,7 @@
 0.0.0.0 kedaijuara.com
 0.0.0.0 kedaimadu.net
 0.0.0.0 kedi-russian.ru
+0.0.0.0 kedisons.com
 0.0.0.0 keelsoft.com
 0.0.0.0 keenpreps.co.uk
 0.0.0.0 keepchest.hopto.org
@@ -38614,6 +38619,7 @@
 0.0.0.0 kyokushinmiddleeast.com
 0.0.0.0 kyoman.vn
 0.0.0.0 kyoto-shikakeya.com
+0.0.0.0 kyotoforum.or.jp
 0.0.0.0 kyouei.co.th
 0.0.0.0 kypa.or.ke
 0.0.0.0 kyrmedia.com
@@ -39166,6 +39172,7 @@
 0.0.0.0 latinannualmeeting.com
 0.0.0.0 latinaradio.cl
 0.0.0.0 latinbeat.com
+0.0.0.0 latinigroup.com
 0.0.0.0 latinos-latins.online
 0.0.0.0 latinovoicesmn.org
 0.0.0.0 latiprantz.com
@@ -39540,7 +39547,6 @@
 0.0.0.0 legpnnldy.cf
 0.0.0.0 legrand-boutique.com
 0.0.0.0 legrand.ba
-0.0.0.0 legrand.us
 0.0.0.0 legrandmaghrebconsulting.com
 0.0.0.0 legrandreve.pt
 0.0.0.0 legsgoshop.com
@@ -40055,6 +40061,7 @@
 0.0.0.0 lightvalleyprune.com
 0.0.0.0 lightwerq.com
 0.0.0.0 lightyard.com
+0.0.0.0 lignar.com
 0.0.0.0 lignarium.se
 0.0.0.0 lignumpolska.com
 0.0.0.0 liguebretagnebillard.fr
@@ -40196,7 +40203,6 @@
 0.0.0.0 link.gocrazyflower.com
 0.0.0.0 link.mx
 0.0.0.0 link.nocomplaintsday.info
-0.0.0.0 link.zixcentral.com
 0.0.0.0 link100.cc
 0.0.0.0 link17.by
 0.0.0.0 link2bio.ir
@@ -40274,6 +40280,7 @@
 0.0.0.0 lirave.bplaced.net
 0.0.0.0 lis-consult.dk
 0.0.0.0 lisab.se
+0.0.0.0 lisagirl.net
 0.0.0.0 lisans.boxnet.com.tr
 0.0.0.0 lisansustu.info
 0.0.0.0 lisaraeswan.com
@@ -40385,7 +40392,6 @@
 0.0.0.0 livecigarevent.com
 0.0.0.0 livecricketscorecard.info
 0.0.0.0 livedaynews.com
-0.0.0.0 livedemo00.template-help.com
 0.0.0.0 livedownload.in
 0.0.0.0 livedrumtracks.com
 0.0.0.0 livehasa.com
@@ -40412,6 +40418,7 @@
 0.0.0.0 livetesting.xyz
 0.0.0.0 livetotry.com
 0.0.0.0 livetours.cl
+0.0.0.0 livetrack.in
 0.0.0.0 livetvsports.ml
 0.0.0.0 liveu.lk
 0.0.0.0 liviavicentini.com
@@ -42058,6 +42065,7 @@
 0.0.0.0 mail.optiua.com
 0.0.0.0 mail.oregonwinerental.net
 0.0.0.0 mail.outboundnat.com
+0.0.0.0 mail.pallejabcn.com
 0.0.0.0 mail.paracep.com
 0.0.0.0 mail.paramountstudiosholidayvillas.com
 0.0.0.0 mail.parkernetworks.com
@@ -43105,6 +43113,7 @@
 0.0.0.0 masseur.es
 0.0.0.0 masseyatnandina.com
 0.0.0.0 massimopintus.com
+0.0.0.0 massivedynamicks.com
 0.0.0.0 massivesales.co.uk
 0.0.0.0 massivewebtech.com
 0.0.0.0 massomsadarpuri.com
@@ -44258,7 +44267,6 @@
 0.0.0.0 mfomjr.com
 0.0.0.0 mfotovideo.ro
 0.0.0.0 mfpburundi.bi
-0.0.0.0 mfpc.org.my
 0.0.0.0 mfppanel.xyz
 0.0.0.0 mfpvision.com
 0.0.0.0 mfronza.com.br
@@ -44409,7 +44417,6 @@
 0.0.0.0 microratings.tk
 0.0.0.0 micros0ft1.ddns.net
 0.0.0.0 microservicesmonitor.com
-0.0.0.0 microsfotgooglegmailoutlook365mailallaregoodformailing.warzonedns.com
 0.0.0.0 microsoft-01.dynamic-dns.net
 0.0.0.0 microsoft-dl.com.br.md-43.webhostbox.net
 0.0.0.0 microsoft-frameworkseguro.com
@@ -45542,6 +45549,7 @@
 0.0.0.0 mooipilates.com
 0.0.0.0 mooithailand.nl
 0.0.0.0 moolchi.com
+0.0.0.0 moolo.pl
 0.0.0.0 moomi-daeri.com
 0.0.0.0 moomicos.com
 0.0.0.0 moommam.fr
@@ -45851,6 +45859,7 @@
 0.0.0.0 mpgestaodepessoas.com.br
 0.0.0.0 mpii.tech
 0.0.0.0 mpinteligente.com
+0.0.0.0 mpkglobaltrainingcorp.net
 0.0.0.0 mplmodapk.site
 0.0.0.0 mpls.foodiecycle.com
 0.0.0.0 mpn.vn
@@ -46922,6 +46931,7 @@
 0.0.0.0 nakshadekho.com
 0.0.0.0 nakshatrajoshi.com
 0.0.0.0 nal.com.ua
+0.0.0.0 nalahotel.com
 0.0.0.0 nalcalar.com
 0.0.0.0 nalfonsotriston.city
 0.0.0.0 nalmac.com
@@ -47244,7 +47254,6 @@
 0.0.0.0 nbgcpa.net
 0.0.0.0 nbgcpa.org
 0.0.0.0 nbhgroup.in
-0.0.0.0 nbigfile.mail.naver.com
 0.0.0.0 nbiyan.vn
 0.0.0.0 nbj.engaged.it
 0.0.0.0 nbn-nrc.org
@@ -47483,6 +47492,7 @@
 0.0.0.0 netasarim.com
 0.0.0.0 netbenfey.ciprudential.com.watchdogdns.duckdns.org
 0.0.0.0 netcity1.net
+0.0.0.0 netck.pl
 0.0.0.0 netcom-soft.com
 0.0.0.0 netcomp.lizave.store
 0.0.0.0 netcorpsgroup.com
@@ -47503,7 +47513,6 @@
 0.0.0.0 netizennepal.com
 0.0.0.0 netkafem.org
 0.0.0.0 netking.duckdns.org
-0.0.0.0 netlink.com
 0.0.0.0 netm.club
 0.0.0.0 netmaffia.net
 0.0.0.0 netmansoft.com
@@ -47970,6 +47979,7 @@
 0.0.0.0 nguyenthituyet.org
 0.0.0.0 nguyenthuyhanh.com.vn
 0.0.0.0 nguyentrongkha.com
+0.0.0.0 ngyusa.com
 0.0.0.0 nhacchoquangcao24h.com
 0.0.0.0 nhadaiphat.com
 0.0.0.0 nhadatbaria.asia
@@ -47980,7 +47990,6 @@
 0.0.0.0 nhadatquan2.xyz
 0.0.0.0 nhadatthienthoi.com
 0.0.0.0 nhadephungyen.com
-0.0.0.0 nhadepkientruc.net
 0.0.0.0 nhahangdaihung.com
 0.0.0.0 nhahanghaivuong.vn
 0.0.0.0 nhahanglegiang.vn
@@ -48067,6 +48076,7 @@
 0.0.0.0 nicklaslj.se
 0.0.0.0 nickpeets.com
 0.0.0.0 nickycooperhomes.co.nz
+0.0.0.0 nicolaisen.de
 0.0.0.0 nicolasbaldoma.com
 0.0.0.0 nicolasgalvez.com
 0.0.0.0 nicolaskohen.com
@@ -48457,7 +48467,6 @@
 0.0.0.0 nongnghiepgiaphat.com
 0.0.0.0 nongsan24h.com
 0.0.0.0 nongsananhnguyen.com
-0.0.0.0 nongsandungha.com
 0.0.0.0 nonlocality.com
 0.0.0.0 nonnemacher.com.br
 0.0.0.0 nonnewspaper.com
@@ -48689,6 +48698,7 @@
 0.0.0.0 novosibirsk.quadrotek-logistic.ru
 0.0.0.0 novostack.net
 0.0.0.0 novotravel.ir
+0.0.0.0 nowak-meble.eu
 0.0.0.0 nowkh.com
 0.0.0.0 nowley-rus.ru
 0.0.0.0 nowley-rus.ruadministrator
@@ -49330,7 +49340,6 @@
 0.0.0.0 ohscrane.com
 0.0.0.0 ohters.de
 0.0.0.0 ohyellow.nl
-0.0.0.0 oi68.tinypic.com
 0.0.0.0 oiainbtaea38.silverabout.ml
 0.0.0.0 oiasdnqweqasd.com
 0.0.0.0 oiflddw.gq
@@ -49584,6 +49593,7 @@
 0.0.0.0 ominix.com
 0.0.0.0 omitkyspisar.cz
 0.0.0.0 omiwnusantara.com
+0.0.0.0 omlinux.com
 0.0.0.0 ommar.ps
 0.0.0.0 ommienetwork.000webhostapp.com
 0.0.0.0 omni-anela.com
@@ -50548,6 +50558,7 @@
 0.0.0.0 pabloteixeira.com
 0.0.0.0 pablotrabucchelli.com
 0.0.0.0 pabnainfo.com
+0.0.0.0 paboard.com
 0.0.0.0 pabrik-tenda.id
 0.0.0.0 pabx-uae.com
 0.0.0.0 pacbest.org
@@ -50613,6 +50624,7 @@
 0.0.0.0 pahanlab.com
 0.0.0.0 paht.nuph.edu.ua
 0.0.0.0 pai.fai.umj.ac.id
+0.0.0.0 paides.com
 0.0.0.0 paidtv.siaraya.com
 0.0.0.0 paifi.net
 0.0.0.0 paigeplacements.co.uk
@@ -50943,6 +50955,7 @@
 0.0.0.0 parkklead.com
 0.0.0.0 parkourschool.ru
 0.0.0.0 parkradio.ca
+0.0.0.0 parksfo.com
 0.0.0.0 parkside-mi.com
 0.0.0.0 parksteals.com
 0.0.0.0 parkwaygames.com
@@ -51069,6 +51082,7 @@
 0.0.0.0 pastavadese.com
 0.0.0.0 paste.ee
 0.0.0.0 paste.makomk.com
+0.0.0.0 pasteboard.co
 0.0.0.0 pastecode.xyz
 0.0.0.0 pastelcolors.in
 0.0.0.0 pastilepentruslabit.ro
@@ -51312,6 +51326,7 @@
 0.0.0.0 pd0rt.nl
 0.0.0.0 pdedas.com
 0.0.0.0 pdesaa.cimaa.pt
+0.0.0.0 pdf-archive.com
 0.0.0.0 pdf-archive.press
 0.0.0.0 pdf-archive.store
 0.0.0.0 pdf-compare.site
@@ -51347,6 +51362,7 @@
 0.0.0.0 peacemed.e-nformation.ro
 0.0.0.0 peaceseedlings.org
 0.0.0.0 peacesprit.ir
+0.0.0.0 peacewatch.ch
 0.0.0.0 peach-slovenija.si
 0.0.0.0 peachgirl.ru
 0.0.0.0 peacock.dating
@@ -51396,6 +51412,7 @@
 0.0.0.0 pedslovo.ru
 0.0.0.0 pedulirakyataceh.org
 0.0.0.0 peechproperties.com
+0.0.0.0 peekaboobubba.com.au
 0.0.0.0 peekaboorevue.com
 0.0.0.0 peekend.com
 0.0.0.0 peer2travel.com
@@ -51577,7 +51594,6 @@
 0.0.0.0 peritofinanceiro.tk
 0.0.0.0 perkasa.ddns.net
 0.0.0.0 perkasa.undiksha.ac.id
-0.0.0.0 perkasa.warzonedns.com
 0.0.0.0 perkfix.com
 0.0.0.0 perkim.bondowosokab.go.id
 0.0.0.0 perlage.net
@@ -51668,6 +51684,7 @@
 0.0.0.0 petanisukses.club
 0.0.0.0 petcarepass.cz
 0.0.0.0 peteivs.co.nz
+0.0.0.0 petendereruk.pro
 0.0.0.0 peterantennas.bid
 0.0.0.0 peterbeckundpartner.cporsgrunn.folkbjnrwwww.watchdogdns.duckdns.org
 0.0.0.0 petercottontailmovie.com
@@ -51851,6 +51868,7 @@
 0.0.0.0 phillipjohnson.co.uk
 0.0.0.0 philomenabar.com.br
 0.0.0.0 philpaisley.com
+0.0.0.0 phimhdonline.tv
 0.0.0.0 phimmoinhat.online
 0.0.0.0 phimphot.tk
 0.0.0.0 phitemntech.com
@@ -52230,6 +52248,7 @@
 0.0.0.0 pixel.mobycare.website
 0.0.0.0 pixelcrush.net
 0.0.0.0 pixeldra.in
+0.0.0.0 pixeldrain.com
 0.0.0.0 pixelerp.com
 0.0.0.0 pixelfactorysolutions.xyz
 0.0.0.0 pixelguru.info
@@ -52333,6 +52352,7 @@
 0.0.0.0 planktonik.hu
 0.0.0.0 planmyfurnitureinterior.com
 0.0.0.0 planningportal.semblueinc.com
+0.0.0.0 planningtravel.es
 0.0.0.0 plannpick.com
 0.0.0.0 plano.xoom.it
 0.0.0.0 planodeobrasdeilhabela.com.br
@@ -52386,6 +52406,7 @@
 0.0.0.0 play-movie.xyz
 0.0.0.0 play0.revosales.ru
 0.0.0.0 play2.revosales.ru
+0.0.0.0 play2win.buzz
 0.0.0.0 play4fitness.co.uk
 0.0.0.0 playalongmusic.net
 0.0.0.0 playasrivieramaya.com
@@ -52395,6 +52416,7 @@
 0.0.0.0 playden.in
 0.0.0.0 playfire.online
 0.0.0.0 playgrounds.tumo.org
+0.0.0.0 playgroupsrl.com
 0.0.0.0 playhard.ru
 0.0.0.0 playitforwardnashville.com
 0.0.0.0 playkey.ga
@@ -52467,6 +52489,7 @@
 0.0.0.0 plurallider.com.br
 0.0.0.0 plus.mn
 0.0.0.0 plus1interactive.com
+0.0.0.0 plushshow.com
 0.0.0.0 plusjop.nl
 0.0.0.0 plusmicrotd.kz
 0.0.0.0 plussizeall.net
@@ -52706,7 +52729,6 @@
 0.0.0.0 pontotocdistrictba.com
 0.0.0.0 pontus-euxinus.ro
 0.0.0.0 pony.s-p-y.ml
-0.0.0.0 pony.warzonedns.com
 0.0.0.0 ponytales.nostalgicbookshelf.com
 0.0.0.0 poojasingh.me
 0.0.0.0 pool.ug
@@ -52866,6 +52888,7 @@
 0.0.0.0 positiveconvention.co.za
 0.0.0.0 positiveid.org
 0.0.0.0 positiverne.dk
+0.0.0.0 positronicsindia.com
 0.0.0.0 posizionareunsito.it
 0.0.0.0 poslovni-oglasi.com
 0.0.0.0 poslovno-pregovaranje.com
@@ -53329,6 +53352,7 @@
 0.0.0.0 pristineglassmirror.com
 0.0.0.0 pristinequill.com
 0.0.0.0 prith-hauts-de-france.org
+0.0.0.0 prithvigroup.net
 0.0.0.0 pritsep56.ru
 0.0.0.0 prittworldproperties.co.ke
 0.0.0.0 privacydesignstudio.com
@@ -53819,6 +53843,7 @@
 0.0.0.0 proxy.qualtrics.com
 0.0.0.0 proxygrnd.xyz
 0.0.0.0 proxyholding.com
+0.0.0.0 proxyresume.com
 0.0.0.0 proxysis.com.br
 0.0.0.0 proyectocithara.org
 0.0.0.0 proyectoin.com
@@ -53931,6 +53956,7 @@
 0.0.0.0 psymonkee.com
 0.0.0.0 psynchro.org
 0.0.0.0 ptb.com.mx
+0.0.0.0 ptbsda.com
 0.0.0.0 ptci-md.org
 0.0.0.0 ptdtech.tk
 0.0.0.0 pte.vn
@@ -54445,7 +54471,6 @@
 0.0.0.0 qe-zz.top
 0.0.0.0 qeba.win
 0.0.0.0 qeducacional.com.br
-0.0.0.0 qeeeeewwswsweerwwerwerwrwerwerwerwere.warzonedns.com
 0.0.0.0 qelie.com
 0.0.0.0 qeoficial.es
 0.0.0.0 qeshmsport.ir
@@ -55046,6 +55071,7 @@
 0.0.0.0 radheshyamcityhomes.com
 0.0.0.0 radi.org.ng
 0.0.0.0 radiantdates.com
+0.0.0.0 radiantqatar.com
 0.0.0.0 radiantservices.com
 0.0.0.0 radicocinas.com.mx
 0.0.0.0 radienten.com
@@ -55120,6 +55146,7 @@
 0.0.0.0 rafa-craftsman.com
 0.0.0.0 rafaat.ir
 0.0.0.0 rafaelcarvalho.com.br
+0.0.0.0 rafaelospizzeria.com
 0.0.0.0 rafaelvieira.com.br
 0.0.0.0 rafatelles.com
 0.0.0.0 raffaelli.com.br
@@ -55714,6 +55741,7 @@
 0.0.0.0 redhorsetile.com
 0.0.0.0 redic.co.uk
 0.0.0.0 redilmatt.biz
+0.0.0.0 redingtonpost.com
 0.0.0.0 redinktattoo.net
 0.0.0.0 redirectiontest.basezap.com
 0.0.0.0 redironmarketing.com
@@ -55740,6 +55768,7 @@
 0.0.0.0 redsseammgt.com
 0.0.0.0 redtek0.com
 0.0.0.0 redtv.top
+0.0.0.0 redvalidator.com
 0.0.0.0 redvelvetpatisserie.co.uk
 0.0.0.0 redwing.com.eg
 0.0.0.0 redwingdemo.dukaafrica.com
@@ -56267,6 +56296,7 @@
 0.0.0.0 reward.uta.edu.ec
 0.0.0.0 rewitek.nl
 0.0.0.0 rexhagis.nl
+0.0.0.0 rexindototeknik.com
 0.0.0.0 rexpc.dk
 0.0.0.0 rexpronecorpllc.com
 0.0.0.0 rexprosealers.com
@@ -56551,6 +56581,7 @@
 0.0.0.0 rivesam.com
 0.0.0.0 rivesandrives.com
 0.0.0.0 rivestiti.com
+0.0.0.0 rivoltaponteggi.com
 0.0.0.0 riyafisheries.com.cp-51.webhostbox.net
 0.0.0.0 riyanenterprise.com
 0.0.0.0 riyanshoppingbags.com
@@ -57142,6 +57173,7 @@
 0.0.0.0 rssansani.com
 0.0.0.0 rssdefense.com
 0.0.0.0 rstarserver17km.xyz
+0.0.0.0 rstelectricals.com
 0.0.0.0 rsterlingzmyrtice.xyz
 0.0.0.0 rstrading.in
 0.0.0.0 rsudpbari.palembang.go.id
@@ -57623,6 +57655,7 @@
 0.0.0.0 safa.205dundas.com
 0.0.0.0 safakteknoloji.com
 0.0.0.0 safaniru.com
+0.0.0.0 safarbekish.com
 0.0.0.0 safari7.devitsandbox.com
 0.0.0.0 safariet-zarzis.com
 0.0.0.0 safarigold.com
@@ -57646,7 +57679,6 @@
 0.0.0.0 safelinks-protection.com
 0.0.0.0 safemedicinaonline.com
 0.0.0.0 safemoneyamerica.com
-0.0.0.0 safentrix.com
 0.0.0.0 saferoomreviews.com
 0.0.0.0 safesalesnembutal.com
 0.0.0.0 safesandsecurity.co.za
@@ -57725,12 +57757,14 @@
 0.0.0.0 sagiri.org
 0.0.0.0 saglikbakanli-hediyeinternet.org
 0.0.0.0 saglikbakanligi-destek.org
+0.0.0.0 saglikbakanligi-destekportal.org
 0.0.0.0 saglikbakanligi20gbinternet.com
 0.0.0.0 saglikbakanligindanhediye20gb.com
 0.0.0.0 saglikgoalapp.site
 0.0.0.0 saglikliapp.live
 0.0.0.0 sagliklibedenim.com
 0.0.0.0 saglikodemelerinial.org
+0.0.0.0 saglikramazan20bgb.net
 0.0.0.0 sagrathi.com
 0.0.0.0 sagunpapers.com
 0.0.0.0 sahabathasyim.com
@@ -58458,6 +58492,7 @@
 0.0.0.0 sbsbe.co.uk
 0.0.0.0 sbspro.in
 0.0.0.0 sbtabank.in
+0.0.0.0 sbtasimacilik.com
 0.0.0.0 sbtextiles.com
 0.0.0.0 sbwellness.org
 0.0.0.0 sc-tuning.de
@@ -59094,6 +59129,7 @@
 0.0.0.0 semassi.com
 0.0.0.0 semayakas.com
 0.0.0.0 sembako.manaira.store
+0.0.0.0 semcoe.com
 0.0.0.0 semenfedosov.ru
 0.0.0.0 semengresik.co.id
 0.0.0.0 semestr.by
@@ -59451,6 +59487,7 @@
 0.0.0.0 setfireltd.com
 0.0.0.0 sethoresg.com.br
 0.0.0.0 sethpgoldstein.com
+0.0.0.0 setiamanggalaabadi.com
 0.0.0.0 setimosacramento.com.br
 0.0.0.0 setincon.com
 0.0.0.0 setit.ro
@@ -60256,7 +60293,6 @@
 0.0.0.0 sia-gmbh.de
 0.0.0.0 siairport.com
 0.0.0.0 siakad.brawijaya.ac.id
-0.0.0.0 siakad.ub.ac.id
 0.0.0.0 sial-healthcare.co.uk
 0.0.0.0 sialkotgoods.com
 0.0.0.0 sialkotmart.net
@@ -61788,6 +61824,7 @@
 0.0.0.0 sophiebarthelemy.fr
 0.0.0.0 sophieguaremas.com
 0.0.0.0 sophiethomasartist.com
+0.0.0.0 sophis.biz
 0.0.0.0 sophistproduction.com
 0.0.0.0 sophro-zara.com
 0.0.0.0 sophrologie-untempspourmoi.fr
@@ -62622,6 +62659,7 @@
 0.0.0.0 staging.wolseleyfamilyplace.com
 0.0.0.0 staging.xdigitalstudio.com
 0.0.0.0 staging1.xamadu.com
+0.0.0.0 staging2.lifebiotic.com
 0.0.0.0 staging3.agencyh.com
 0.0.0.0 stagingmcr.cloudkami.com
 0.0.0.0 stagingmcs.cloudkami.com
@@ -62655,6 +62693,7 @@
 0.0.0.0 stamp2u.com.my
 0.0.0.0 stampa3dplus.com
 0.0.0.0 stampile-sibiu.ro
+0.0.0.0 standardalloysindia.com
 0.0.0.0 standardchartfinance.com.cp-45.webhostbox.net
 0.0.0.0 standardpen.id
 0.0.0.0 standardpopulation.icu
@@ -63801,6 +63840,7 @@
 0.0.0.0 sunshinevn.vn
 0.0.0.0 sunshinewebsite.club
 0.0.0.0 sunshinewondervillas.biz
+0.0.0.0 sunsquare.fr
 0.0.0.0 suntour.com.vn
 0.0.0.0 suntreebearing.com
 0.0.0.0 sunucuo.com
@@ -63909,7 +63949,6 @@
 0.0.0.0 support.imaitaly.biz
 0.0.0.0 support.jbrueggemann.com
 0.0.0.0 support.m2mservices.com
-0.0.0.0 support.mdsol.com
 0.0.0.0 support.nordenrecycling.com
 0.0.0.0 support.pubg.com
 0.0.0.0 support.redbook.aero
@@ -64326,7 +64365,6 @@
 0.0.0.0 systemandcode.com
 0.0.0.0 systematicsarl.com
 0.0.0.0 systematm.com
-0.0.0.0 systemgooglegooglegooglegooglegooglegoole.warzonedns.com
 0.0.0.0 systemintergrafileexchangeserverprotocol.duckdns.org
 0.0.0.0 systemmasterpage.com
 0.0.0.0 systemmicroupdate.com
@@ -65903,6 +65941,7 @@
 0.0.0.0 textilessudamericanos.com
 0.0.0.0 textilesunrise.com
 0.0.0.0 textilkopruch.com.br
+0.0.0.0 texum-me.com
 0.0.0.0 teyouhao.com
 0.0.0.0 tfhvccny.com
 0.0.0.0 tfile.7to.cn
@@ -65934,7 +65973,6 @@
 0.0.0.0 thacci.com.br
 0.0.0.0 thachastew.com
 0.0.0.0 thaddeusarmstrong.com
-0.0.0.0 thadinnoo.co
 0.0.0.0 thagreymatter.com
 0.0.0.0 thai-pub.com
 0.0.0.0 thaiascobrake.com
@@ -65998,7 +66036,6 @@
 0.0.0.0 thatavilellaoficial.com.br
 0.0.0.0 thatoilchick.com
 0.0.0.0 thats-amazing.com
-0.0.0.0 thaus.to
 0.0.0.0 thawani-pay.neomeric.us
 0.0.0.0 thayvoiphone.vn
 0.0.0.0 thc-annex.com
@@ -66056,6 +66093,7 @@
 0.0.0.0 thebackyardat60nyc.com
 0.0.0.0 thebagforum.com
 0.0.0.0 thebakingtree.com
+0.0.0.0 theballardhouse.org
 0.0.0.0 theballoon.asia
 0.0.0.0 thebandofrivals.dreamhosters.com
 0.0.0.0 thebaptistfoundationofca.com
@@ -66132,6 +66170,7 @@
 0.0.0.0 theclinicabarros.com
 0.0.0.0 theclown.ca
 0.0.0.0 theclub5.com
+0.0.0.0 theclubmumbai.com
 0.0.0.0 thecoachinglounge.net
 0.0.0.0 thecoastaltimes.media
 0.0.0.0 thecoastofhelpfoundation.org
@@ -66313,6 +66352,7 @@
 0.0.0.0 theinspireddrive.com
 0.0.0.0 theintelligencer.com.ng
 0.0.0.0 theinvestmentinvestigator.com
+0.0.0.0 theipgenerators.com
 0.0.0.0 theirishhouse.dk
 0.0.0.0 theiro.com
 0.0.0.0 theisel.de
@@ -66433,6 +66473,7 @@
 0.0.0.0 themorgandollarcoin.com
 0.0.0.0 themortgagefirm.ca
 0.0.0.0 themortgagemom.co.uk
+0.0.0.0 themotorcenter.com
 0.0.0.0 themrimidnightclub.com
 0.0.0.0 themuertitos.com
 0.0.0.0 themusae.com
@@ -67573,6 +67614,7 @@
 0.0.0.0 torbat-h.persiangig.com
 0.0.0.0 toresu.net
 0.0.0.0 torfinn.com
+0.0.0.0 torfsgebroeders.eu
 0.0.0.0 torg-master.pro
 0.0.0.0 torginvest.ru.com
 0.0.0.0 torishima-qa.com
@@ -68040,6 +68082,7 @@
 0.0.0.0 treesguru.com
 0.0.0.0 treesurveys.infrontdesigns.com
 0.0.0.0 trefiart.com.br
+0.0.0.0 trefzer-it.de
 0.0.0.0 trehoada2.ballybeauty.vn
 0.0.0.0 trehoadatoanthan.info
 0.0.0.0 trehoadatoanthan.net
@@ -68481,6 +68524,7 @@
 0.0.0.0 tunerg.com
 0.0.0.0 tunerl.cn
 0.0.0.0 tuneup.ibk.me
+0.0.0.0 tunggalmandiri.com
 0.0.0.0 tuningshop.ro
 0.0.0.0 tunisia-school.com
 0.0.0.0 tunisiagulf.com
@@ -68570,6 +68614,7 @@
 0.0.0.0 tuttimare.com.br
 0.0.0.0 tuttoirc.net
 0.0.0.0 tuttopizzas.cl
+0.0.0.0 tuttosteopatia.it
 0.0.0.0 tuttotenda.it
 0.0.0.0 tuttoutu.com
 0.0.0.0 tuttyguru.com
@@ -68583,6 +68628,7 @@
 0.0.0.0 tuvandoanhnghiep.org
 0.0.0.0 tuvanduhocdaiviet.com.vn
 0.0.0.0 tuvanduhocduc.org
+0.0.0.0 tuvanduhocmap.com
 0.0.0.0 tuvangamenet.com
 0.0.0.0 tuvangioitinh.com
 0.0.0.0 tuvanluat.vn
@@ -69600,11 +69646,9 @@
 0.0.0.0 urzedniczatv.pl
 0.0.0.0 us-defense-department.ml
 0.0.0.0 us-trans.ru
-0.0.0.0 us-west-2.protection.sophos.com
 0.0.0.0 us.cdn.persiangig.com
 0.0.0.0 us.gsearch.com.de
 0.0.0.0 us.hostiso.cloud
-0.0.0.0 us2.campaign-archive.com
 0.0.0.0 us5interclub.cba.pl
 0.0.0.0 usa-lenders.com
 0.0.0.0 usa-market.org
@@ -70203,6 +70247,7 @@
 0.0.0.0 velassantos.com.br
 0.0.0.0 velatoursrls.com
 0.0.0.0 veldhuizenwonen.nl
+0.0.0.0 velerobeach.com
 0.0.0.0 velerosa.it
 0.0.0.0 velimir-grgic.com
 0.0.0.0 velisnackindonesia.com
@@ -70788,7 +70833,6 @@
 0.0.0.0 vip-watch.store
 0.0.0.0 vip.lijinxi.com
 0.0.0.0 vip.maohuagong.com
-0.0.0.0 vip.muabannhanh.com
 0.0.0.0 vip.recommendedtoyoo.com
 0.0.0.0 vip.zbfcxx.cn
 0.0.0.0 vip163.cf
@@ -71061,6 +71105,7 @@
 0.0.0.0 viztarinfotech.com
 0.0.0.0 vjarenouy.email
 0.0.0.0 vjencanjazagreb.hr
+0.0.0.0 vjhascv.ru
 0.0.0.0 vjjb.cn
 0.0.0.0 vjqsdq.am.files.1drv.com
 0.0.0.0 vjsingh.info
@@ -71424,7 +71469,6 @@
 0.0.0.0 w.amendserver.com
 0.0.0.0 w.lazer-n.com
 0.0.0.0 w.outletonline-michaelkors.com
-0.0.0.0 w.zhzy999.net
 0.0.0.0 w04.jujingdao.com
 0.0.0.0 w077775.blob2.ge.tt
 0.0.0.0 w0alqa.dm.files.1drv.com
@@ -71634,7 +71678,6 @@
 0.0.0.0 wartini.de
 0.0.0.0 warunknasakita.co.id
 0.0.0.0 warwickvalleyliving.com
-0.0.0.0 warzonedns.com
 0.0.0.0 warzonesecure.com
 0.0.0.0 was-studio.com
 0.0.0.0 wasama.org
@@ -71821,6 +71864,7 @@
 0.0.0.0 web.gotham.com.au
 0.0.0.0 web.hfsistemas.com
 0.0.0.0 web.ismt.pt
+0.0.0.0 web.lavishsupplystore.com
 0.0.0.0 web.muasam360.com
 0.0.0.0 web.pa-cirebon.go.id
 0.0.0.0 web.plf.vn
@@ -72218,7 +72262,6 @@
 0.0.0.0 wertios.com
 0.0.0.0 werwrewrkv.ru
 0.0.0.0 werycloud.website
-0.0.0.0 wesco.com
 0.0.0.0 wesconsultants.com
 0.0.0.0 weseleopole.pl
 0.0.0.0 weservehosting.net
@@ -72259,6 +72302,7 @@
 0.0.0.0 westnilepress.org
 0.0.0.0 westonslidingdoorrepair.com
 0.0.0.0 westpalmbeachgaragedoorrepair.com
+0.0.0.0 westportshipping.com
 0.0.0.0 westseattlenailsalon.com
 0.0.0.0 westsideresources.org
 0.0.0.0 weststop.ro
@@ -72542,7 +72586,6 @@
 0.0.0.0 wimpiebarnard.co.za
 0.0.0.0 win-best.com.hk
 0.0.0.0 win-speed.com
-0.0.0.0 win.tue.nl
 0.0.0.0 win1more.com
 0.0.0.0 win32.x10host.com
 0.0.0.0 winactive.host
@@ -72558,7 +72601,6 @@
 0.0.0.0 wind0wsactivator.host
 0.0.0.0 wind7.ru
 0.0.0.0 windailygh.com
-0.0.0.0 windefenderprotectedwindefendergooglegmail.warzonedns.com
 0.0.0.0 windfarmdevelopments.co.nz
 0.0.0.0 windmedbiolife.com
 0.0.0.0 windmillhill.school
@@ -72593,6 +72635,7 @@
 0.0.0.0 winecorkartist.com
 0.0.0.0 winefly.net
 0.0.0.0 winefriend.co.za
+0.0.0.0 winenews.it
 0.0.0.0 wineswap.com.au
 0.0.0.0 winetourism.soprexdev.com
 0.0.0.0 winett.net
@@ -72751,7 +72794,6 @@
 0.0.0.0 wmebbiz.co.za
 0.0.0.0 wmf.desevens.com.ng
 0.0.0.0 wmg128.com
-0.0.0.0 wmi.1217bye.host
 0.0.0.0 wmkatz.com
 0.0.0.0 wmo-raad.inov.me
 0.0.0.0 wmpatagonia.cl
@@ -72805,6 +72847,7 @@
 0.0.0.0 womenhealth.aureliusconferences.com
 0.0.0.0 womenindeed.org
 0.0.0.0 womeninwealthinc.com
+0.0.0.0 womenofimpactt.com
 0.0.0.0 womenofthebibleonline.com
 0.0.0.0 womensbathingsuit.com
 0.0.0.0 womenshospital.in
@@ -72924,7 +72967,6 @@
 0.0.0.0 work.vexacom.com
 0.0.0.0 work4sales.com
 0.0.0.0 work707.work
-0.0.0.0 workbigfinetonychuckgoodallarefinezynovaexploitgood.warzonedns.com
 0.0.0.0 workbus.ru
 0.0.0.0 workcompoptions.com
 0.0.0.0 workd.ru
@@ -73135,7 +73177,6 @@
 0.0.0.0 wpdev.strativ-support.se
 0.0.0.0 wpdev.ted.solutions
 0.0.0.0 wpdev.ztickerz.io
-0.0.0.0 wpengine.zendesk.com
 0.0.0.0 wpgtxdtgifr.ga
 0.0.0.0 wpldjxxxua.ga
 0.0.0.0 wpmagian.com
@@ -73348,6 +73389,7 @@
 0.0.0.0 wz6.com.cn
 0.0.0.0 wzgysg.com
 0.0.0.0 wzjp.boyuberq.ru
+0.0.0.0 wzlegal.com
 0.0.0.0 wzry173.com
 0.0.0.0 wzrysp.com
 0.0.0.0 wzsfkq.dm.files.1drv.com
@@ -75192,7 +75234,6 @@
 0.0.0.0 zhwaike.com
 0.0.0.0 zhwq1216.com
 0.0.0.0 zhycron.com.br
-0.0.0.0 zhzy999.net
 0.0.0.0 ziadonline.com
 0.0.0.0 ziancontinental.ro
 0.0.0.0 ziarulrevolutionarul.ro
@@ -75338,7 +75379,6 @@
 0.0.0.0 zonadeseguridad.mx
 0.0.0.0 zonadeseguridad.net
 0.0.0.0 zonamarketingdigital.online
-0.0.0.0 zonamusicex.com
 0.0.0.0 zonaykan.com
 0.0.0.0 zone-812.ml
 0.0.0.0 zone3.de
@@ -75473,7 +75513,6 @@
 0.0.0.0 zykj.shop
 0.0.0.0 zylokk.000webhostapp.com
 0.0.0.0 zymogen.net
-0.0.0.0 zyncxxcciidiiudfisuifsiufusdfisdisifidfisuifisfisifisu.warzonedns.com
 0.0.0.0 zypeujun.ru
 0.0.0.0 zyr.co.jp
 0.0.0.0 zyrstststzzxccxccddfgdd.duckdns.org
diff --git a/urlhaus-filter-online.txt b/urlhaus-filter-online.txt
index 1365c25c..d35e9af2 100644
--- a/urlhaus-filter-online.txt
+++ b/urlhaus-filter-online.txt
@@ -1,5 +1,5 @@
 ! Title: abuse.ch URLhaus Online Malicious URL Blocklist
-! Updated: Tue, 05 May 2020 00:09:52 UTC
+! Updated: Tue, 05 May 2020 12:09:42 UTC
 ! Expires: 1 day (update frequency)
 ! Repo: https://gitlab.com/curben/urlhaus-filter
 ! License: https://creativecommons.org/publicdomain/zero/1.0/
@@ -9,14 +9,15 @@
 1.246.222.105
 1.246.222.113
 1.246.222.123
-1.246.222.134
 1.246.222.138
 1.246.222.14
 1.246.222.153
 1.246.222.165
 1.246.222.174
 1.246.222.20
+1.246.222.228
 1.246.222.232
+1.246.222.234
 1.246.222.237
 1.246.222.245
 1.246.222.36
@@ -54,7 +55,6 @@
 1.246.223.58
 1.246.223.6
 1.246.223.60
-1.246.223.61
 1.246.223.64
 1.246.223.71
 1.246.223.94
@@ -72,15 +72,16 @@
 102.141.240.139
 102.141.241.14
 102.182.126.91
+102.68.153.66
 103.139.219.9
 103.16.145.25
 103.204.168.34
 103.214.6.199
 103.221.254.130
 103.230.62.146
+103.234.226.133
 103.237.173.218
 103.240.249.121
-103.247.217.147
 103.254.205.135
 103.255.235.219
 103.31.47.214
@@ -90,6 +91,7 @@
 103.51.249.64
 103.60.110.111
 103.76.20.197
+103.77.157.11
 103.79.112.254
 103.80.210.9
 103.92.101.178
@@ -105,13 +107,7 @@
 106.104.115.213
 106.105.197.111
 106.105.218.18
-106.110.129.163
 106.110.205.207
-106.110.69.24
-106.110.71.236
-106.110.79.230
-106.111.41.140
-106.124.188.160
 106.242.20.219
 106.248.202.245
 107.158.154.94
@@ -128,12 +124,14 @@
 109.185.26.178
 109.233.196.232
 109.235.7.228
+109.248.58.238
 109.86.168.132
 109.86.85.253
 109.88.185.119
+109.95.15.210
 109.96.57.246
 110.154.250.225
-110.155.54.100
+110.156.65.88
 110.179.30.218
 110.179.5.188
 110.179.50.161
@@ -164,35 +162,34 @@
 111.38.30.47
 111.38.9.115
 111.40.79.79
+111.42.102.131
 111.42.102.171
-111.42.103.6
+111.42.102.72
 111.42.103.77
 111.42.67.49
-111.43.223.27
+111.43.223.112
 111.61.52.53
 111.90.150.64
 111.90.187.162
 111.93.169.90
 112.123.109.196
 112.123.109.59
-112.123.62.200
-112.133.195.58
 112.156.36.178
 112.160.193.57
 112.160.56.81
 112.163.80.114
+112.165.97.124
 112.166.251.121
 112.167.14.237
 112.167.148.70
 112.167.218.221
-112.17.104.45
-112.17.123.56
+112.17.78.163
 112.17.78.186
+112.170.165.71
 112.170.205.16
 112.170.205.85
 112.170.23.21
 112.184.221.213
-112.184.231.90
 112.185.140.99
 112.187.143.180
 112.187.217.80
@@ -208,11 +205,14 @@
 112.27.91.247
 112.78.45.158
 113.102.205.189
+113.103.57.153
 113.11.95.254
 113.133.224.80
+113.133.230.134
 113.219.81.166
 113.221.50.64
 113.240.186.132
+113.240.219.238
 113.243.74.89
 113.245.186.38
 113.254.169.251
@@ -220,46 +220,44 @@
 114.168.158.117
 114.226.139.37
 114.226.234.139
-114.226.234.153
-114.226.81.92
 114.226.84.3
 114.227.1.22
+114.228.25.50
 114.228.63.106
-114.229.18.229
 114.229.42.210
-114.234.104.158
 114.234.150.187
 114.234.69.205
 114.235.202.95
 114.235.208.243
+114.235.222.245
 114.235.246.18
-114.236.152.230
-114.239.1.105
 114.239.112.118
-114.239.128.231
 114.239.180.198
-114.239.37.159
-114.239.46.132
 114.239.80.42
 114.79.172.42
+115.216.208.162
 115.230.80.192
 115.48.34.1
+115.49.146.138
 115.49.147.197
-115.49.249.110
 115.49.37.132
 115.50.0.131
-115.59.17.176
+115.53.52.233
+115.58.134.107
+115.63.186.148
 115.77.186.182
 115.85.65.211
 116.100.249.121
 116.103.218.57
 116.110.18.194
+116.114.95.204
 116.149.247.146
 116.177.178.206
 116.177.179.202
 116.206.164.46
-116.26.114.202
+117.123.171.105
 117.206.159.20
+117.55.133.56
 117.63.51.128
 117.86.24.209
 117.87.44.106
@@ -269,18 +267,18 @@
 117.93.176.207
 117.93.216.98
 117.95.173.64
-117.95.226.223
 118.127.210.136
 118.151.220.206
 118.232.208.215
 118.232.209.108
 118.232.96.150
 118.233.39.25
-118.233.39.9
 118.32.199.219
 118.33.41.227
 118.35.65.115
 118.37.91.137
+118.38.143.102
+118.38.242.167
 118.40.183.176
 118.42.208.62
 118.46.36.186
@@ -288,6 +286,7 @@
 118.99.179.164
 118.99.239.217
 119.102.153.184
+119.136.88.217
 119.194.91.157
 119.2.48.159
 119.203.9.192
@@ -313,7 +312,9 @@
 120.52.33.2
 120.69.89.50
 121.121.117.190
+121.121.121.76
 121.122.104.75
+121.135.146.40
 121.136.137.7
 121.140.141.73
 121.148.122.219
@@ -323,6 +324,7 @@
 121.154.43.105
 121.155.233.13
 121.155.233.159
+121.159.208.28
 121.163.48.30
 121.165.140.117
 121.168.227.85
@@ -335,30 +337,29 @@
 121.184.131.249
 121.186.105.200
 121.186.74.53
-121.231.100.43
-121.231.164.108
 121.232.179.201
 121.233.103.163
 121.233.116.232
-121.233.117.174
 121.233.127.156
 121.233.68.89
-121.236.142.86
 121.86.113.254
 122.176.72.49
 123.0.198.186
 123.0.209.88
 123.10.137.138
 123.10.152.230
+123.10.223.91
 123.10.51.127
 123.11.25.254
 123.11.5.184
 123.113.102.36
+123.12.44.253
 123.194.235.37
 123.194.60.105
 123.194.60.238
 123.202.118.92
 123.241.112.94
+123.4.223.123
 123.51.152.54
 124.119.138.243
 124.67.89.40
@@ -369,15 +370,16 @@
 125.136.94.85
 125.137.120.38
 125.18.28.170
-125.209.71.6
+125.26.165.244
+125.40.234.73
 125.42.233.154
 125.44.116.149
-125.45.123.104
 125.45.52.161
-125.69.86.192
+125.71.148.155
 128.65.187.123
 129.121.176.89
 129.126.204.40
+133.167.105.83
 138.117.6.232
 138.197.153.117
 139.5.177.10
@@ -385,15 +387,12 @@
 13pope.com
 14.141.175.107
 14.161.4.53
-14.33.86.236
 14.34.165.243
-14.37.6.148
 14.41.57.152
 14.45.167.58
 14.46.209.82
 14.46.51.53
 14.48.245.16
-14.48.88.250
 14.49.212.151
 14.53.20.41
 14.54.95.158
@@ -409,8 +408,8 @@
 144.132.166.70
 144.136.155.166
 144.217.117.146
+145.255.26.115
 146.71.79.230
-147.91.212.250
 149.56.79.215
 150.co.il
 151.232.56.134
@@ -418,19 +417,16 @@
 152.249.225.24
 152.250.250.194
 154.91.144.44
+156.96.48.220
 159.224.74.112
 162.194.28.60
-162.212.113.149
 162.212.113.70
 162.212.114.196
-162.212.114.32
 162.212.115.189
 162.212.115.219
-162.212.115.80
 162.250.126.186
 163.13.182.105
 163.22.51.1
-163.47.145.202
 164.132.92.180
 165.227.220.53
 165.73.60.72
@@ -459,9 +455,8 @@
 175.200.153.48
 175.202.162.120
 175.210.50.4
-175.211.16.150
 175.212.31.241
-175.212.95.112
+175.212.52.9
 175.213.134.89
 175.215.226.31
 176.108.58.123
@@ -477,7 +472,6 @@
 176.113.161.129
 176.113.161.131
 176.113.161.133
-176.113.161.136
 176.113.161.138
 176.113.161.37
 176.113.161.41
@@ -488,13 +482,12 @@
 176.113.161.66
 176.113.161.68
 176.113.161.86
-176.113.161.87
 176.113.161.88
+176.113.161.89
 176.113.161.92
 176.113.161.93
 176.12.117.70
 176.14.234.5
-176.178.184.124
 176.214.78.192
 177.128.126.70
 177.137.107.131
@@ -504,7 +497,6 @@
 177.37.163.174
 177.38.176.22
 177.46.86.65
-177.54.82.154
 177.54.83.22
 177.67.8.11
 177.72.2.186
@@ -513,7 +505,6 @@
 178.134.248.74
 178.134.61.94
 178.136.195.90
-178.151.143.2
 178.165.122.141
 178.169.165.90
 178.19.183.14
@@ -534,16 +525,12 @@
 179.99.210.161
 180.104.182.79
 180.104.183.200
-180.104.195.10
 180.104.214.33
 180.104.59.28
 180.104.9.150
-180.115.66.239
-180.116.17.37
 180.116.20.254
 180.116.210.174
 180.116.224.151
-180.116.224.91
 180.116.96.229
 180.117.89.28
 180.117.91.251
@@ -555,14 +542,9 @@
 180.124.174.33
 180.124.214.4
 180.124.235.240
-180.124.6.47
 180.176.105.41
 180.176.110.243
-180.176.211.171
-180.177.104.65
-180.177.242.73
 180.189.104.106
-180.218.105.80
 180.218.161.128
 180.248.80.38
 180.43.82.186
@@ -589,13 +571,11 @@
 181.224.242.131
 181.40.117.138
 181.48.187.146
-182.113.221.17
+181.49.241.50
 182.114.249.171
 182.120.217.177
 182.124.173.124
-182.126.183.47
 182.126.214.208
-182.127.242.93
 182.127.67.155
 182.160.101.51
 182.160.125.229
@@ -606,12 +586,13 @@
 183.105.206.26
 183.106.201.118
 183.107.57.170
+183.109.5.228
 183.130.63.13
 183.151.121.12
-183.215.188.47
 183.221.125.206
 183.4.28.24
 183.4.30.251
+183.87.255.182
 184.163.2.58
 185.10.165.62
 185.12.78.161
@@ -619,18 +600,17 @@
 185.138.123.179
 185.14.250.199
 185.153.196.209
-185.172.110.214
+185.172.110.208
 185.172.110.216
 185.172.110.224
 185.172.110.232
-185.172.110.234
 185.172.110.238
-185.172.110.241
 185.172.110.243
 185.172.110.250
 185.181.10.234
 185.227.64.59
 185.242.104.98
+185.244.39.251
 185.34.16.231
 185.43.19.151
 185.5.229.8
@@ -648,8 +628,6 @@
 186.251.253.134
 186.34.4.40
 186.42.255.230
-186.73.188.132
-187.107.191.197
 187.12.10.98
 187.172.68.247
 187.183.213.88
@@ -678,7 +656,6 @@
 188.83.202.25
 189.126.70.222
 189.252.214.199
-189.45.44.86
 190.0.42.106
 190.110.161.252
 190.119.207.58
@@ -708,7 +685,6 @@
 190.99.117.10
 191.102.123.132
 191.103.252.116
-191.13.184.58
 191.209.53.113
 191.223.54.151
 191.255.248.220
@@ -717,9 +693,7 @@
 192.119.87.242
 192.236.146.53
 192.236.147.189
-192.236.147.67
 193.106.57.83
-193.142.146.30
 193.228.135.144
 193.248.246.94
 193.38.51.25
@@ -744,12 +718,12 @@
 196.221.144.149
 196.32.106.85
 197.155.66.202
+197.210.214.11
+197.51.235.38
 198.24.75.52
 199.36.76.2
 199.83.203.104
-199.83.203.115
 199.83.203.137
-199.83.203.229
 199.83.203.85
 199.83.204.244
 199.83.204.89
@@ -765,7 +739,7 @@
 2.55.103.71
 2.55.89.188
 2.82.28.27
-2.indexsinas.me
+2.indexsinas.me:811/c64.exe
 200.105.167.98
 200.107.7.242
 200.111.189.70
@@ -802,6 +776,7 @@
 202.4.124.58
 202.51.191.174
 202.74.236.9
+202.79.46.30
 203.114.116.37
 203.129.254.50
 203.163.211.46
@@ -879,7 +854,6 @@
 217.145.193.216
 217.218.218.196
 217.26.162.115
-217.61.22.186
 217.8.117.23
 217.8.117.76
 218.144.252.19
@@ -887,11 +861,9 @@
 218.156.132.7
 218.156.26.85
 218.157.214.219
-218.159.238.10
 218.203.206.137
 218.21.170.239
 218.21.170.6
-218.21.170.96
 218.255.247.58
 218.31.2.125
 218.32.118.1
@@ -904,6 +876,7 @@
 219.68.1.148
 219.68.245.63
 219.68.251.32
+219.70.238.66
 219.70.63.196
 219.80.217.209
 21robo.com
@@ -911,24 +884,23 @@
 220.122.180.53
 220.80.136.75
 220.82.140.17
+221.13.236.180
 221.144.153.139
+221.15.11.116
 221.155.253.61
 221.155.30.60
-221.155.68.193
+221.158.124.81
 221.159.171.90
 221.166.254.127
 221.167.18.122
-221.210.211.16
-221.210.211.8
-221.210.211.9
-221.226.86.151
-222.105.26.35
 222.113.138.43
 222.116.70.13
 222.118.213.93
+222.138.150.1
+222.138.150.125
+222.139.222.59
 222.139.30.106
 222.140.37.5
-222.185.161.165
 222.185.199.202
 222.185.73.210
 222.187.159.223
@@ -945,7 +917,6 @@
 23.254.211.179
 23.254.226.60
 23.94.154.115
-23.95.89.78
 24.0.252.145
 24.10.116.43
 24.103.74.180
@@ -958,26 +929,23 @@
 24.165.41.55
 24.187.204.102
 24.228.16.207
-24.72.128.195
 24.99.99.166
 27.113.29.218
 27.116.48.102
 27.116.84.57
-27.147.29.52
 27.147.40.128
 27.155.87.120
 27.238.33.39
-27.41.135.19
 27.41.177.145
-27.41.225.96
+27.41.187.108
 27.41.227.6
 27.48.138.13
-3.zhzy999.net
-3.zhzy999.net3.zhzy999.net
-31.128.173.853.zhzy999.net
-31.128.173.853.zhzy999.net31.128.173.853.zhzy999.net
-31.13.23.180
+3.zhzy999.net/images/n.exe
+3.zhzy999.net3.zhzy999.net/images/n.exe
+31.128.173.853.zhzy999.net/images/n.exe
+31.128.173.853.zhzy999.net31.128.173.853.zhzy999.net/images/n.exe
 31.132.143.21
+31.146.124.188
 31.146.212.197
 31.146.212.252
 31.146.229.140
@@ -1005,7 +973,6 @@
 31.27.128.108
 31.30.119.23
 31.44.54.110
-31639.xc.mieseng.com
 35.141.217.189
 35.221.223.15
 36.107.211.17
@@ -1013,13 +980,12 @@
 36.33.139.64
 36.33.248.102
 36.33.248.208
-36.35.160.240
+36.39.47.194
 36.66.105.159
 36.66.133.125
 36.66.139.36
 36.66.168.45
 36.66.190.11
-36.67.152.161
 36.67.223.231
 36.67.42.193
 36.74.74.99
@@ -1032,22 +998,24 @@
 37.142.138.126
 37.17.21.242
 37.222.98.51
-37.232.98.103
+37.235.162.131
 37.29.67.145
 37.34.250.243
 37.49.226.160
 37.49.226.162
 37.49.226.209
 37.49.226.210
+37.49.226.228
 37.49.226.230
+37.49.230.103
 37.49.230.141
 37.49.230.234
 37.54.14.36
 3mandatesmedia.com
 3ypackaging.com
-40.85.183.45
 402musicfest.com
 41.139.209.46
+41.165.130.43
 41.190.63.174
 41.190.70.238
 41.211.112.82
@@ -1059,33 +1027,46 @@
 41.64.170.241
 41.67.137.162
 41.72.203.82
+41.76.157.2
 41.79.234.90
+41.86.19.200
 42.115.25.55
+42.115.86.142
+42.225.203.189
 42.227.121.217
+42.227.145.119
+42.227.147.234
+42.227.166.214
 42.227.184.46
+42.227.201.91
+42.227.202.11
 42.230.252.207
-42.230.51.38
-42.235.49.199
-42.238.149.21
-42.239.91.19
+42.231.170.22
+42.239.96.146
 42.61.99.155
 42.82.191.105
 43.252.8.94
 45.114.68.156
+45.115.253.82
 45.118.165.115
 45.138.97.46
 45.139.236.14
 45.14.150.29
 45.14.151.249
+45.163.149.85
 45.19.201.181
 45.221.78.166
+45.221.78.38
 45.229.22.195
+45.32.234.129
 45.49.113.70
 45.50.228.207
 45.95.168.202
 45.95.168.251
 45.95.168.97
+45.95.169.249
 45.95.169.254
+45.95.55.58
 46.100.251.72
 46.100.56.152
 46.100.57.58
@@ -1102,7 +1083,6 @@
 46.236.65.83
 46.241.120.165
 46.36.74.43
-46.39.247.65
 46.47.106.63
 46.6.1.167
 46.97.76.242
@@ -1127,16 +1107,13 @@
 49.213.179.129
 49.236.213.248
 49.246.91.131
-49.68.129.106
 49.68.154.84
 49.68.213.49
 49.68.226.132
-49.68.235.19
 49.68.250.118
-49.68.54.141
 49.70.127.10
-49.70.137.78
 49.70.234.20
+49.70.34.196
 49.81.134.147
 49.81.91.113
 49.82.14.191
@@ -1144,9 +1121,7 @@
 49.82.228.87
 49.82.249.71
 49.82.250.152
-49.82.252.63
 49.82.50.209
-49.84.125.254
 49.84.93.106
 49.89.115.124
 49.89.139.161
@@ -1159,11 +1134,12 @@
 5.101.196.90
 5.101.213.234
 5.128.62.127
+5.185.85.122
 5.19.248.85
+5.198.241.29
 5.201.130.125
 5.206.227.18
 5.238.110.62
-5.252.179.60
 5.29.175.150
 5.57.133.136
 5.8.208.49
@@ -1182,28 +1158,23 @@
 58.243.121.118
 58.243.122.144
 58.243.123.161
-58.243.190.127
 58.243.20.165
 58.40.122.158
 59.0.224.88
 59.0.78.18
 59.1.81.1
 59.12.134.224
-59.127.31.71
 59.174.151.114
+59.19.231.31
 59.2.40.1
 59.22.144.136
 59.23.208.62
 59.3.253.82
-59.4.104.15
 59.7.40.82
 60.184.172.193
-61.168.45.178
 61.247.224.66
 61.52.100.115
 61.53.254.152
-61.54.249.180
-61.56.182.218
 61.58.174.253
 61.58.55.226
 61.60.204.178
@@ -1240,7 +1211,6 @@
 66.70.225.220
 66.90.187.191
 66.96.252.2
-67.245.47.15
 67.8.138.101
 68.134.186.196
 68.174.119.7
@@ -1277,6 +1247,7 @@
 74.113.230.55
 74.66.217.253
 74.75.165.81
+75.127.0.11
 75.3.198.176
 75.55.248.20
 76.108.23.131
@@ -1323,6 +1294,7 @@
 80.19.101.218
 80.191.250.164
 80.210.19.69
+80.210.28.73
 80.211.102.87
 80.224.107.163
 80.235.214.123
@@ -1404,21 +1376,21 @@
 86.107.167.93
 86.18.117.139
 86.35.43.220
+86.7.86.4
 87.120.235.164
 87.241.175.89
 87.66.219.63
 87.97.154.37
+87du.vip
 88.102.33.14
 88.201.34.243
-88.218.16.118
-88.218.16.37
 88.218.16.38
 88.218.17.197
 88.218.17.222
+88.220.80.210
 88.225.222.128
 88.247.194.52
 88.248.121.238
-88.249.120.216
 88.250.196.101
 88.250.85.219
 887sconline.com
@@ -1433,16 +1405,16 @@
 89.208.105.18
 89.216.122.78
 89.22.152.244
-89.235.98.60
-89.32.41.87
 89.40.85.166
 89.40.87.5
+89.46.237.89
 91.134.252.221
 91.149.191.182
 91.177.139.132
 91.187.103.32
 91.187.119.26
 91.191.32.34
+91.196.36.84
 91.215.126.208
 91.216.149.130
 91.217.2.120
@@ -1461,9 +1433,7 @@
 92.45.198.60
 92.51.127.94
 92.55.124.64
-93.102.193.254
 93.116.166.51
-93.119.236.72
 93.122.213.217
 93.122.225.34
 93.171.33.234
@@ -1484,6 +1454,7 @@
 94.230.152.192
 94.244.113.217
 94.244.25.21
+94.41.0.174
 94.53.120.109
 94.64.246.247
 95.132.129.250
@@ -1494,6 +1465,7 @@
 95.170.201.34
 95.210.1.42
 95.231.116.118
+95.243.30.86
 95.86.56.174
 96.75.90.185
 96.77.17.146
@@ -1505,19 +1477,19 @@
 98.238.122.130
 99.121.0.96
 99.50.211.58
+SnackFreebie.com
 a-reality.co.uk
-a.xiazai163.com/DOWN/RUOKUAIDAMA_ITMOP.COM.ZIP
 aaasolution.co.th
 aaload05.top
 accessyouraudience.com
 acdesignhub.com
 acteon.com.ar
 activecost.com.au
+adamtcarruthers.com
 adnquocte.com
 aelogica.com
 agiandsam.com
 agipasesores.com
-agsir.com
 aite.me
 ajibolarilwan.com
 ak.imgfarm.com/images/nocache/vicinio/100000417/19562-111117113753/j2ffxtbr-bs@SoccerInferno.com.xpi
@@ -1536,20 +1508,19 @@ alexbase.com
 alexwacker.com
 algorithmshargh.com
 allloveseries.com
-alnahrainfilminstitute.com
 alohasoftware.net
 alphaconsumer.net
 am-concepts.ca
 amd.alibuf.com
+amedeoscognamiglio.329263.com
 amemarine.co.th
 americanrange.com
 anadolutatili.com
-anamikaindanegas.in
 andreelapeyre.com
 andremaraisbeleggings.co.za
 angiathinh.com
+angthong.nfe.go.th
 ansarihospital.in
-anuragsharma.co.in
 anvietpro.com
 anysbergbiltong.co.za
 aoujlift.ir
@@ -1557,12 +1528,12 @@ apartdelpinar.com.ar
 apoolcondo.com
 apware.co.kr
 archiv.bg
-arcticprospectus.com
 areac-agr.com
 aresorganics.com
+arowanafishforsale.com
 ascentive.com
-ashoakacharya.com
 askarindo.or.id
+askmufti.org
 atfile.com
 atomlines.com
 attach.66rpg.com
@@ -1576,29 +1547,29 @@ aznetsolutions.com
 azureautomation.co.uk
 azzd.co.kr
 babaroadways.in
-backlinksale.com
-badgesforbullies.org
 bamakobleach.free.fr
 bangkok-orchids.com
 banzaimonkey.com
 bapo.granudan.cn
+baritaco.com
 baybars.xyz
 bbs.sunwy.org
 bbs1.marisfrolg.com
 bd11.52lishi.com
 bd12.52lishi.com
 bd18.52lishi.com
-bd19.52lishi.com
 beibei.xx007.cc
 bepgroup.com.hk
 besserblok-ufa.ru
 besttasimacilik.com.tr
+beta.pterosol.com
 bflow.security-portal.cz
 bigdealist.com
 bildeboks.no
 bilim-pavlodar.gov.kz
 billieellish.org
 bingxiong.vip
+bistlearn.ir
 bitbucket.org/destek21/3reklam/downloads/20gbhediyesi.apk
 bitbucket.org/destek21/3reklam/downloads/androidsecurity.apk
 bitbucket.org/shobaka420/222333/downloads/usb.exe
@@ -1614,9 +1585,11 @@ brbs.customer.netspace.net.au
 brewmethods.com
 btlocum.pl
 bugansavings.com
+bxbx28.cn
 byqkdy.com
 c.vvvvvvvvv.ga
 cameli.vn
+campana20gb.com
 canaan.io
 canmivback.biz
 caravella.com.br
@@ -1624,6 +1597,7 @@ cassovia.sk
 castmart.ga
 cbk.m.dodo52.com
 ccnn.xiaomier.cn
+cdn-10049480.file.myqcloud.com
 cdn.discordapp.com/attachments/422956597141307392/520711166608015380/PFPX-Keygen.zip
 cdn.speedof.me/sample4096k.bin?r=0.1570982201
 cdn.truelife.vn
@@ -1646,7 +1620,6 @@ chipmarkets.com
 chiptune.com
 chj.m.dodo52.com
 chuckweiss.com
-cista-dobra-voda.com
 clareiamente.clareiamente.com
 clearwaterriveroutfitting.com
 client.yaap.co.uk
@@ -1656,11 +1629,12 @@ codeload.github.com/MeteorAdminz/hidden-tear/zip/master
 codeload.github.com/Visgean/Zeus/zip/translation
 codeload.github.com/beefproject/beef/zip/beef-0.4.6.1
 codeload.github.com/beefproject/beef/zip/master
-compesat.com
+colourcreative.co.za
 complan.hu
 complanbt.hu
 comtechadsl.com
 config.kuaisousou.top
+config.wwmhdq.com
 consultingcy.com
 counciloflight.bravepages.com
 cqjcc.org
@@ -1668,12 +1642,9 @@ crittersbythebay.com
 cryline.net
 csnserver.com
 csw.hu
-cuacuonsieure.com
 cvc.com.pl
 cyclomove.com
 czsl.91756.cn
-d3.99ddd.com
-d9.99ddd.com
 da.alibuf.com
 daithanhphung.com
 danielbastos.com
@@ -1697,10 +1668,11 @@ dev1.xicom.us
 dev5.mypagevn.com
 dezcom.com
 dfcf.91756.cn
-dfd.zhzy999.net
+dfd.zhzy999.net/images/m.exe
 dfzm.91756.cn
 dgecolesdepolice.bf
 dgnj.cn
+dhlservices.duckdns.org
 diazavendano.cl
 dichvuvesinhcongnghiep.top
 dienmaycu.vn
@@ -1712,11 +1684,9 @@ ditec.com.my
 divinevacations.in
 dkw-engineering.net
 dl-gameplayer.dmm.com
-dl.1003b.56a.com
 dl.198424.com
 dl.dzqzd.com
-dl.kuaile-u.com
-dl2.soft-lenta.ru
+dl.iqilie.com
 dlist.iqilie.com
 dmresor.se
 dnn.alibuf.com
@@ -1726,15 +1696,16 @@ docs.google.com/uc?export=download&id=1ia3WELHtRhs0Fe4ag2_O0aVkyzi_zUpx
 docs.google.com/uc?id=1R0ybQzfybvmes2v71jwlMHBvFe8-MVMy
 dodsonimaging.com
 don.viameventos.com.br
+dongiln.co
 donmago.com
 donoffermaster.best
 doostansocks.ir
 doransky.info
-dosame.com
 down.ancamera.co.kr
 down.gogominer.com
 down.haote.com
 down.pcclear.com
+down.pdflist.cqhbkjzx.com
 down.startools.co.kr
 down.tgjkbx.cn
 down.upzxt.com
@@ -1751,12 +1722,10 @@ download.pdf00.cn
 download.skycn.com
 download.ttz3.cn
 download.ware.ru
-download.xp666.com/xzqswf/AppConSer.exe
 download.xp666.com/xzqswf/DTPageSet.exe
 download.xp666.com/xzqswf/SerModel.exe
 download.xp666.com/xzqswf/WebConSer.exe
 download.xp666.com/xzqswf/WebConneSer.exe
-download.xp666.com/xzqswf/iniser.exe
 download.xp666.com/xzqswf/setpagetools.exe
 download.zjsyawqj.cn
 download301.wanmei.com
@@ -1773,9 +1742,9 @@ dreamtrips.cheap/dreamtrips_us3.exe
 dreamtrips.cheap/dreamtrips_us4.exe
 dreamtrips.cheap/dreamtrips_us5.exe
 drive.google.com.it-barcelona.com/frm0reseen/PrntScrnOfAMZOrderID.jpg.exe
+drive.google.com/file/d/1ZMLxU2euibP6ElBffRDd3lGs9Yyc2Q44
 drive.google.com/u/0/uc?id=12iFCPIkFttDepyF-50TP5ToEO5PUJTkl&export=download
 drive.google.com/u/0/uc?id=14478IMd3BD6V_Igv0a4E6gV_rPgeIMI4&export=download
-drive.google.com/u/0/uc?id=17MK_rc41hpFJXpVYtF8tkeWaczBfoDTK&export=download
 drive.google.com/u/0/uc?id=1I0-c_3_PA4CFUVxQuWatIce-YMim6K1F&export=download
 drive.google.com/u/0/uc?id=1lf5uj0OZtEz0Da4uloCglElnO0cqqaJ7&export=download
 drive.google.com/u/0/uc?id=1rFX0WSnjWfD_S-CsbnECFidz0FIpqaYm&export=download
@@ -1865,7 +1834,6 @@ drive.google.com/uc?id=1cn5ISDc2CQeyenvhyQxd2IHPIMBqleRG&export=download
 drive.google.com/uc?id=1dIfbX6Le_594WZUuWY3eYsNL12_-jRVP&export=download
 drive.google.com/uc?id=1e18RJ3xLqJPL5A_FTe1PtFDORun5h_Jl&export=download
 drive.google.com/uc?id=1eOzacxbxvlB9F9nInX3fdP8sjjlthi3W&export=download
-drive.google.com/uc?id=1eRTPmoUTpVVU19aONDr-yo0-RNkG5l07&export=download
 drive.google.com/uc?id=1eh3cqzgCx2RPJmKMJ9qJwZVYDf5oKI6R&export=download
 drive.google.com/uc?id=1emlap-VVjPLvplwk1BlUfZPCZmwDnIcR&export=download
 drive.google.com/uc?id=1er-HsVxQERfsHnK-TYAQWzE6_TO55yj-&export=download
@@ -1910,14 +1878,12 @@ drive.google.com/uc?id=1wc4G7ZYZTplMHtG2IkWU57fskmLHy1tf&export=download
 drive.google.com/uc?id=1zLQBgYxBZpj1A34ub4EUnahIFX2a4Ytp&export=download
 drive.google.com/uc?id=1zOAa0crJJyjs3DTQk_M_ZqG9gStxV2FG&export=download
 drive.google.com/uc?id=1zpS--8sfyN8bSD4ghtmaXu3yzha6apH6&export=download
-drivolani.us
 drools-moved.46999.n3.nabble.com
 druzim.freewww.biz
 dsiun.com
 dtsay.xyz
 dudulm.com
 dusdn.mireene.com
-dw.58wangdun.com
 dx.qqyewu.com
 dx1.qqtn.com
 dx2.qqtn.com
@@ -1926,7 +1892,9 @@ dx60.siweidaoxiang.com
 dzinestudio87.co.uk
 e.dangeana.com
 easydown.workday360.cn
+ebook.w3wvg.com
 edicolanazionale.it
+elokshinproperty.co.za
 emir-elbahr.com
 enc-tech.com
 energisegroup.com
@@ -1935,23 +1903,22 @@ er-bulisguvenligi.com
 ermekanik.com
 esolvent.pl
 esteteam.org
+exposvision.com
 ezfintechcorp.com
 fafhoafouehfuh.su
-fairyqueenstore.com
 fastsoft.onlinedown.net
 fazi.pl
-fedsfmr.ru
 fenoma.net
 ffv322.ru
 ffv32223.ru
 fidiag.kymco.com
+fifa555easy.329263.com
 figuig.net
 fileco.jobkorea.co.kr
 filen3.utengine.co.kr
 filen5.utengine.co.kr
 files.constantcontact.com/0996938c001/6e8a2a4f-40ac-464f-9a70-7c67f0a0da19.pdf
 files.constantcontact.com/ee304de9001/7e533e73-e272-4a44-9d9e-138cab64bf19.docx
-files.fqapps.com
 files.gamebanana.com/tools/tagconverter.exe
 files.rakbot.ru
 files6.uludagbilisim.com
@@ -1962,7 +1929,6 @@ fitmanacademy.com
 fkd.derpcity.ru
 flex.ru
 flood-protection.org
-fmjstorage.com
 fordlamdong.com.vn
 foreverprecious.org
 foxfennecs.com
@@ -1979,21 +1945,20 @@ fte.m.dodo52.com
 ftpcnc-p2sp.pconline.com.cn
 ftpftpftp.com
 funletters.net
+funpartyrent.com
 futuregraphics.com.ar
-g.7230.com
 g0ogle.free.fr
+gainsdirectory.com
 galuhtea.com
 gamee.top
+garage.themebuffets.com
 garenanow.myvnc.com
 garenanow4.myvnc.com
 gargiulo.com.ar
 gateway-heide.de
 gateway.ethlqd.com
-gd2.greenxf.com
 genesisconstruction.co.za
 germistonmiraclecentre.co.za
-getfashionmania.com
-ghislain.dartois.pagesperso-orange.fr
 ghwls44.gabia.io
 gimscompany.com
 gist.githubusercontent.com/Zibri/19f9838ffd12349bb2c6c3afddc9388f/raw/01977fd3c7e036c3a38f062f626fd189ba1e1aa3/UEFIVAR.EXE
@@ -2004,8 +1969,7 @@ gnimelf.net
 go.xsuad.com
 gocanada.vn
 google.ghststr.com
-gopala.es
-gov.kr
+gov.kr/main?d=AA100DataDownApp&SAVE_FILE_NM=38500.exe
 govhotel.us
 grafchekloder.rebatesrule.net
 granportale.com.br
@@ -2013,7 +1977,6 @@ green100.cn
 greenfood.sa.com
 greenleaveperu.com
 gssgroups.com
-gx-10012947.file.myqcloud.com
 habbotips.free.fr
 hagebakken.no
 halcat.com
@@ -2021,7 +1984,6 @@ hanaphoto.co.kr
 handrush.com
 hanoihub.vn
 hazel-azure.co.th
-hdxa.net
 healtina.com
 heavenif.co.za
 hediyeinternetpaket.com
@@ -2034,9 +1996,7 @@ hoayeuthuong-my.sharepoint.com
 hostzaa.com
 hotart.co.nz
 hotel-le-relais-des-moulins.com
-hotelbharatpurpalace.com
 housewifes.co
-hqsistemas.com.ar
 hseda.com
 hsmwebapp.com
 htxl.cn
@@ -2051,14 +2011,15 @@ ideadom.pl
 ihpmed.ae
 ileolaherbalcare.com.ng
 imellda.com
+imenizeh.ir
 img1.wsimg.com/blobby/go/716ce6c5-e07c-43a7-a685-6d934b9f51c3/downloads/1cqdpmlgu_930218.doc
 impression-gobelet.com
 in-sect.com
 inapadvance.com
 incrediblepixels.com
 incredicole.com
+indonesias.me:9998/64.exe
 indonesias.me:9998/c64.exe
-ini.egkj.com
 innovation4crisis.org
 instanttechnology.com.au
 intelicasa.ro
@@ -2076,6 +2037,7 @@ itrigger.cn
 itsnixielou.com
 ixlonbcc.com
 izu.co.jp
+jahesa.com
 jaincakes.xyz
 jamiekaylive.com
 jansen-heesch.nl
@@ -2104,6 +2066,7 @@ k3.etfiber.net
 kabiru.ru
 kachsurf.mylftv.com
 kamasu11.cafe24.com
+kamisecurity.com.my
 kanok.co.th
 kar.big-pro.com
 karavantekstil.com
@@ -2111,22 +2074,20 @@ kassohome.com.tr
 kdsp.co.kr
 kejpa.com
 kenareh-gostare-aras.ir
+kgfs3.329263.com
 khunnapap.com
 kiencuonghotel.vn
-kimyen.net/upload/CTCKeoxe2.exe
 kimyen.net/upload/CTCTanthu.exe
 kimyen.net/upload/VLMPLogin.exe
 kimyen.net/upload/VLTKBacdau.exe
 kimyen.net/upload/VLTKNhatRac.exe
 kjbm9.mof.gov.cn
 kleinendeli.co.za
-knightsbridgeenergy.com.ng
 koppemotta.com.br
 koralli.if.ua
 kqq.kz
 kristofferdaniels.com
 kuaizip.com/down/affiliate/KuaiZip_setup_10029.exe
-kupaliskohs.sk
 kuznetsov.ca
 kwanfromhongkong.com
 kwikomfi-lab.com
@@ -2145,14 +2106,14 @@ learningcomputing.org
 lebedyn.info
 lecafedesartistes.com
 lengendryme.com
-leukkado.be
+lesa.at.true.by
 lhbfirst.com
 libya-info.com
 lifeapt.biz
 linx.li
 lists.ibiblio.org
 lists.mplayerhq.hu
-livetrack.in/EmployeeMasterImages/qace.jpg
+livetrack.in
 lodergord.com
 log.yundabao.cn
 lsyr.net
@@ -2167,11 +2128,10 @@ mackleyn.com
 magda.zelentourism.com
 makosoft.hu
 malin-akerman.net
-mangawt.com
 margopassadorestylist.com
-maringareservas.com.br
 marketprice.com.ng
 marksidfgs.ug
+marocaji.com
 matt-e.it
 mattayom31.go.th
 mazury4x4.pl
@@ -2180,7 +2140,6 @@ mecbox.cn
 media.easycashcode.com.s3.amazonaws.com/downloads/Indexanator.exe
 mediamatkat.fi
 medianews.ge
-medicacademic.com
 medreg.uz
 meert.org
 meeweb.com
@@ -2191,7 +2150,7 @@ metallexs.com
 mettaanand.org
 mettek.com.tr
 mfevr.com
-mfpc.org.my
+mfpc.org.my//wp-content/plugins/formcraft3/STUB2_encrypted_BA9409F.bin
 mhkdhotbot.myvnc.com
 mhkdhotbot80.myvnc.com
 micahproducts.com
@@ -2200,7 +2159,6 @@ mirror.mypage.sk
 mis.nbcc.ac.th
 misterson.com
 mistydeblasiophotography.com
-mitonegbh.xyz
 mkk09.kr
 mkontakt.az
 mmc.ru.com
@@ -2208,6 +2166,7 @@ mobiadnews.com
 mobilier-modern.ro
 modcloudserver.eu
 moha-group.com
+monmariage.info
 moscow11.at
 mountveederwines.com
 moyo.co.kr
@@ -2217,16 +2176,12 @@ msecurity.ro
 mteng.mmj7.com
 mtfelektroteknik.com
 mueblesjcp.cl
-mv360.net
 mvb.kz
-mvdrepair.com
 mxpiqw.am.files.1drv.com
-myexpertca.in
+mydesign.thinkeraibirds.com
 myhood.cl
 myo.net.au
 myofficeplus.com
-myonlinepokiesblog.com
-mytex.pe
 mytrains.net
 mywp.asia
 myyttilukukansasta.fi
@@ -2242,14 +2197,12 @@ nebraskacharters.com.au
 nemo.herc.ws
 neocity1.free.fr
 nerve.untergrund.net
-new.tristatehs.com
 news.abfakerman.ir
 news.omumusic.net
 newsun-shop.com
 newxing.com
 nexity.me
 nfbio.com
-ngoaingu.garage.com.vn
 nofound.000webhostapp.com
 norperuinge.com.pe
 note.youdao.com/yws/api/personal/file/WEB3a243b322cf83ca7cae587a92916bac7?method=download&inline=true&shareKey=649ac0bb5d5b13d15cbf50b2609e193a
@@ -2260,6 +2213,7 @@ oa.fnysw.com
 oa.hys.cn
 obnova.zzux.com
 obseques-conseils.com
+ohe.ie
 oknoplastik.sk
 omega.az
 omsk-osma.ru
@@ -2282,7 +2236,6 @@ onedrive.live.com/download?cid=0153C2A7092EE91C&resid=153C2A7092EE91C%21111&auth
 onedrive.live.com/download?cid=01F191D863B4D5A4&resid=1F191D863B4D5A4!157&authkey=AAGcSM7CHqEZ6UU
 onedrive.live.com/download?cid=01F191D863B4D5A4&resid=1F191D863B4D5A4!158&authkey=AMsoii5Nr6PomHc
 onedrive.live.com/download?cid=01F191D863B4D5A4&resid=1F191D863B4D5A4%21157&authkey=AAGcSM7CHqEZ6UU
-onedrive.live.com/download?cid=01F191D863B4D5A4&resid=1F191D863B4D5A4%21158&authkey=AMsoii5Nr6PomHc
 onedrive.live.com/download?cid=0489C74DE4FACB30&resid=489C74DE4FACB30!109&authkey=AJo32arrzl_VWDQ
 onedrive.live.com/download?cid=052BCF630286E980&resid=52BCF630286E980!110&authkey=ANzSd8lJ7P0rj0Q
 onedrive.live.com/download?cid=052BCF630286E980&resid=52BCF630286E980!113&authkey=AH3RaTLEdBMNuaY
@@ -2306,7 +2259,6 @@ onedrive.live.com/download?cid=165468846F076EE7&resid=165468846F076EE7%21118&aut
 onedrive.live.com/download?cid=174A158B69387A7E&resid=174A158B69387A7E!348&authkey=AHnjOxA4uFoxa54
 onedrive.live.com/download?cid=174A158B69387A7E&resid=174A158B69387A7E%21348&authkey=AHnjOxA4uFoxa54
 onedrive.live.com/download?cid=18418ADACEFED6E2&resid=18418ADACEFED6E2!126&authkey=AD4yflRiSq6d82g
-onedrive.live.com/download?cid=18418ADACEFED6E2&resid=18418ADACEFED6E2!129&authkey=APQOONsrCe0ArI4
 onedrive.live.com/download?cid=18418ADACEFED6E2&resid=18418ADACEFED6E2%21126&authkey=AD4yflRiSq6d82g
 onedrive.live.com/download?cid=18418ADACEFED6E2&resid=18418ADACEFED6E2%21129&authkey=APQOONsrCe0ArI4
 onedrive.live.com/download?cid=1C14977B48A91558&resid=1C14977B48A91558%218182&authkey=AAUTw8TVZXr5v3A
@@ -2413,11 +2365,7 @@ onedrive.live.com/download?cid=72EF66C14DF86B76&resid=72EF66C14DF86B76%21190&aut
 onedrive.live.com/download?cid=72EF66C14DF86B76&resid=72EF66C14DF86B76%21191&authkey=AOumzH6K1KEmsCU
 onedrive.live.com/download?cid=72EF66C14DF86B76&resid=72EF66C14DF86B76%21193&authkey=ADq3v72povhBjzQ
 onedrive.live.com/download?cid=72EF66C14DF86B76&resid=72EF66C14DF86B76%21196&authkey=AEIZSuDu2mLHlHU
-onedrive.live.com/download?cid=7366FEFC2190D2E3&resid=7366FEFC2190D2E3!195&authkey=AG9WIgSqvGrNwdI
-onedrive.live.com/download?cid=7366FEFC2190D2E3&resid=7366FEFC2190D2E3!207&authkey=AKdm-uaXR7N96rk
-onedrive.live.com/download?cid=7366FEFC2190D2E3&resid=7366FEFC2190D2E3%21195&authkey=AG9WIgSqvGrNwdI
 onedrive.live.com/download?cid=7366FEFC2190D2E3&resid=7366FEFC2190D2E3%21205&authkey=AMEjuC4BPMI-KM4
-onedrive.live.com/download?cid=7366FEFC2190D2E3&resid=7366FEFC2190D2E3%21207&authkey=AKdm-uaXR7N96rk
 onedrive.live.com/download?cid=7A5E689DD1DC641F&resid=7A5E689DD1DC641F!119&authkey=AOzJAi26IzpRqto
 onedrive.live.com/download?cid=7A5E689DD1DC641F&resid=7A5E689DD1DC641F!120&authkey=AJj7uEqJvobgFUM
 onedrive.live.com/download?cid=7A5E689DD1DC641F&resid=7A5E689DD1DC641F%21119&authkey=AOzJAi26IzpRqto
@@ -2494,6 +2442,7 @@ onedrive.live.com/download?cid=D06D60404544FB85&resid=D06D60404544FB85!872&authk
 onedrive.live.com/download?cid=D06D60404544FB85&resid=D06D60404544FB85!874&authkey=ALKzCbXZ-dSCGuM
 onedrive.live.com/download?cid=D06D60404544FB85&resid=D06D60404544FB85!875&authkey=AKa55YbDhQNOC6c
 onedrive.live.com/download?cid=D06D60404544FB85&resid=D06D60404544FB85%21872&authkey=AP9HcHZTYWO8ZUo
+onedrive.live.com/download?cid=D06D60404544FB85&resid=D06D60404544FB85%21874&authkey=ALKzCbXZ-dSCGuM
 onedrive.live.com/download?cid=D06D60404544FB85&resid=D06D60404544FB85%21875&authkey=AKa55YbDhQNOC6c
 onedrive.live.com/download?cid=D718E3C8E3BC53C0&resid=D718E3C8E3BC53C0!191&authkey=AJL2UegQunSGC3Q
 onedrive.live.com/download?cid=D718E3C8E3BC53C0&resid=D718E3C8E3BC53C0!192&authkey=ACD_Hx4BkA3z0Nw
@@ -2513,11 +2462,6 @@ onedrive.live.com/download?cid=DDE26285195864B8&resid=DDE26285195864B8%21366&aut
 onedrive.live.com/download?cid=DDE26285195864B8&resid=DDE26285195864B8%21379&authkey=AI9JeFVwfv5qi4M
 onedrive.live.com/download?cid=E4B1E1072DC91F5C&resid=E4B1E1072DC91F5C!509&authkey=AKmDyQKzcsUf_Gg
 onedrive.live.com/download?cid=E4B1E1072DC91F5C&resid=E4B1E1072DC91F5C%21511&authkey=AGfS0Q7DZ7oS1LU
-onedrive.live.com/download?cid=E61E5F3F655316FA&resid=E61E5F3F655316FA!124&authkey=ADKlC5yRN_vbmt8
-onedrive.live.com/download?cid=E61E5F3F655316FA&resid=E61E5F3F655316FA!125&authkey=AB5cY3xSz3aDDbE
-onedrive.live.com/download?cid=E61E5F3F655316FA&resid=E61E5F3F655316FA%21124&authkey=ADKlC5yRN_vbmt8
-onedrive.live.com/download?cid=E61E5F3F655316FA&resid=E61E5F3F655316FA%21125&authkey=AB5cY3xSz3aDDbE
-onedrive.live.com/download?cid=E61E5F3F655316FA&resid=E61E5F3F655316FA%21127&authkey=ADuW61iLvQd_15w
 onedrive.live.com/download?cid=E859DA0F2C81D5F2&resid=E859DA0F2C81D5F2!142&authkey=AIS88UaD5AOm6qU
 onedrive.live.com/download?cid=E859DA0F2C81D5F2&resid=E859DA0F2C81D5F2%21142&authkey=AIS88UaD5AOm6qU
 onedrive.live.com/download?cid=EAE9B5435CFAEBAA&resid=EAE9B5435CFAEBAA!232&authkey=AAuY9sGJCcGPZX8
@@ -2536,7 +2480,6 @@ onedrive.live.com/download?cid=FB607A99940C799A&resid=FB607A99940C799A!183&authk
 onedrive.live.com/download?cid=FB607A99940C799A&resid=FB607A99940C799A%21183&authkey=ABKHbsYu4lG_blg
 onedrive.live.com/download?cid=FB654BF91D1A9765&resid=FB654BF91D1A9765!1134&authkey=AHxTuKw3uEmyi1E
 onedrive.live.com/download?cid=FD50774E5CE0E314&resid=FD50774E5CE0E314%21778&authkey=AOXB2VhHZ3QOdIU
-onedrive.live.com/download?cid=FE8464CFA794DA31&resid=FE8464CFA794DA31!377&authkey=AAu9JE4OqfFRyD4
 onedrive.live.com/download?cid=FEDBE7305E742A3E&resid=FEDBE7305E742A3E!149&authkey=AHdtniVa1oS_iBw
 onedrive.live.com/download?cid=FEDBE7305E742A3E&resid=FEDBE7305E742A3E%21149&authkey=AHdtniVa1oS_iBw
 onedrive.live.com/download?cid=FF1D187273DFBF73&resid=FF1D187273DFBF73!693&authkey=AGcpKHnEWFTE_Yc
@@ -2550,7 +2493,6 @@ ophtalmiccenter.com
 opolis.io
 osdsoft.com
 osheoufhusheoghuesd.ru/1.exe
-osheoufhusheoghuesd.ru/m.exe
 osheoufhusheoghuesd.ru/o.exe
 osheoufhusheoghuesd.ru/t.exe
 otanityre.in
@@ -2595,12 +2537,12 @@ pastebin.com/raw/e8kSryaf
 pastebin.com/raw/fDpf4JYj
 pastebin.com/raw/fWbdHjTH
 pastebin.com/raw/m3Gkz6As
+pastebin.com/raw/mqzVZBBm
 pastebin.com/raw/qsVVM0xt
 pastebin.com/raw/rWWytiGk
 pastebin.com/raw/vJrm3cs2
 pastebin.com/raw/vbzLQ1Dz
 pastebin.com/raw/xGXyTALF
-pat4.jetos.com
 pat4.qpoe.com
 patch2.51lg.com
 patch2.99ddd.com
@@ -2611,6 +2553,7 @@ pcginsure.com
 pcsoori.com
 pedidoslalacteo.com.ar
 peterssandmay.com
+petromltd.com
 ph4s.ru
 phamchilong.com
 phudieusongma.com
@@ -2624,7 +2567,6 @@ podrska.com.hr
 ponto50.com.br
 poolbook.ir
 ppl.ac.id
-prabhuandsons.com
 pratapnursery.com
 prepaenunsoloexamen.academiagalileoac.com
 probost.cz
@@ -2638,7 +2580,6 @@ qmsled.com
 qppl.angiang.gov.vn
 quantominds.com
 quartier-midi.be
-quehagoencartagena.com
 quickuploader.xyz
 raacts.in
 raifix.com.br
@@ -2663,7 +2604,6 @@ redesoftdownload.info
 renim.https443.net/restr.exe
 renim.https443.net/shaht64.exe
 renimin.mymom.info
-renovanorte.com
 res.uf1.cn
 res.yeshen.com/player/launch/2017/09/12/da5f9a1c23034353852750488feeaf36.exe
 ret.space
@@ -2681,12 +2621,11 @@ royalplusmobile.ir
 ruisgood.ru
 rusch.nu
 s.51shijuan.com
-s.kk30.com
-s14b.91danji.com
-s14b.groundyun.cn
 sabiupd.compress.to
 saboorjaam.ir
 sabupda.vizvaz.com
+saglikbakanligi-destekportal.org
+saglikramazan20bgb.net
 sahathaikasetpan.com
 salvationbd.com
 sandovalgraphics.com
@@ -2698,7 +2637,6 @@ sefp-boispro.fr
 selekture.com
 selvikoyunciftligi.com
 sendspace.com/pro/dl/dcvd2q
-sernayconsultores.com
 serpentrising.com
 servicemhkd.myvnc.com
 servicemhkd80.myvnc.com
@@ -2708,7 +2646,6 @@ sgm.pc6.com
 shacked.webdepot.co.il
 shahtoba.faqserv.com
 shaoxiaofei.cn
-share.dmca.gripe
 sharjahas.com
 shembefoundation.com
 simlun.com.ar
@@ -2737,7 +2674,6 @@ sophiaskyhotel.vn
 sota-france.fr
 souldancing.cn
 souq-aljwalat.com
-spdtextile.com
 speed.myz.info
 spurstogo.com
 sputnikmailru.cdnmail.ru
@@ -2747,11 +2683,11 @@ srvmanos.no-ip.info
 ss.cybersoft-vn.com
 sslv3.at
 staging.popclusive.asia
+staging2.lifebiotic.com
 starcountry.net
 starinfotechcollege.com
 static.3001.net
 static.ilclock.com
-static.topxgun.com
 stats.gov.cn/tjsj/tjzd/gjtjzd/201909/P020190909619147287331.doc
 stecit.nl
 stevewalker.com.au
@@ -2782,7 +2718,6 @@ t.honker.info
 tandenblekenhoofddorp.nl
 taraward.com
 taxpos.com
-tcy.198424.com
 teamtnt.red
 teardrop-productions.ro
 technoites.com
@@ -2803,11 +2738,11 @@ theprestige.ro
 theptiendat.com
 thepyramids.nl
 therecruiter.io
-thevision.ro
 thornadops.com
 thosewebbs.com
 thuong.bidiworks.com
 tianangdep.com
+tianzi8.cn
 tibinst.mefound.com
 tibok.lflink.com
 tinckorm.beget.tech
@@ -2815,24 +2750,19 @@ tishreycarmelim.co.il
 tldrbox.top/1.exe
 tldrbox.top/11.exe
 tldrbox.top/2
-tldrbox.top/3
 tmhfashionhouse.co.za
 toe.polinema.ac.id
-tomorrowearth.net
 tonghopgia.net
 tonydong.com
 tonyzone.com
-toulousa.com
 tsd.jxwan.com
 tsredco.telangana.gov.in
 tulli.info
 tumso.org
 tuneup.ibk.me
 tup.com.cn
-tuskanlehdms.ug
 tutuler.com
 uc-56.ru
-ucto-id.cz
 ufabet168168.329263.com
 ugc.wegame.com.cn
 ultimatelamborghiniexperience.com
@@ -2865,20 +2795,23 @@ vietducbio.com
 vigilar.com.br
 vip.recommendedtoyoo.com
 virustreatments.empeeevents.com
+visagepk.com
+vistanewsite.ir
 visualdata.ru
 vitinhvnt.com
 vitromed.ro
+vjhascv.ru
 voyageur.sisnettdesign.com
 vrrumover0.vrrum0.farted.net
 vvff.in
-w.zhzy999.net
+w.zhzy999.net/images/m.exe
 wangtong7.siweidaoxiang.com
 wangzonghang.cn
-wap.dosame.com
 ware.ru
 warriorllc.com
 wbd.5636.com
 wbkmt.com
+web.lavishsupplystore.com
 web.mit.edu/kolya/.f/root/net.mit.edu/net/user/chris/WinNT/MIT_Agenda2a.doc
 web.mit.edu/kolya/.f/root/net.mit.edu/sipb/user/kolya/afs/root.afs/net/user/chris/WinNT/MIT_Agenda2a.doc
 webarte.com.br
@@ -2891,7 +2824,7 @@ whgaty.com
 wiebe-sanitaer.de
 wikileaks.org/syria-files/attach/222/222051_instruction.zip
 wmd9e.a3i1vvv.feteboc.com
-wmi.1217bye.host
+wmi.1217bye.host/1.txt
 wnksupply.co.th
 wood-expert.net
 woodsytech.com
@@ -2905,12 +2838,12 @@ www2.recepty5.com
 x2vn.com
 xia.vzboot.com
 xiaidown.com
+xiaoma-10021647.file.myqcloud.com
 xiegushi.cn
 xirfad.com
 xn--20gb-hediyefrsati-nvc.com
 xn--transfgran-mgbbb600b.ro
 xtremeforumz.com
-xueha.fun
 xuhss.com
 xxwl.kuaiyunds.com
 xxxze.co.nu
@@ -2933,8 +2866,7 @@ zentealounge.com.au
 zethla.com
 zeytinyagisabun.com
 zhetysu360.kz
-zhzy999.net
-ziliao.yunkaodian.com
+zhzy999.net/images/m.exe
 zj.9553.com
 zmmore.com
 zoetermeerov.nl
diff --git a/urlhaus-filter-unbound-online.conf b/urlhaus-filter-unbound-online.conf
index 01401130..0a17df07 100644
--- a/urlhaus-filter-unbound-online.conf
+++ b/urlhaus-filter-unbound-online.conf
@@ -1,17 +1,13 @@
 # Title: abuse.ch URLhaus Malicious Domains Unbound Blocklist
-# Updated: Tue, 05 May 2020 00:09:52 UTC
+# Updated: Tue, 05 May 2020 12:09:42 UTC
 # Repo: https://gitlab.com/curben/urlhaus-filter
 # License: https://creativecommons.org/publicdomain/zero/1.0/
 # Source: https://urlhaus.abuse.ch/api/
 local-zone: "13pope.com" always_nxdomain
 local-zone: "150.co.il" always_nxdomain
-local-zone: "2.indexsinas.me" always_nxdomain
 local-zone: "2000kumdo.com" always_nxdomain
 local-zone: "21robo.com" always_nxdomain
 local-zone: "224001.selcdn.ru" always_nxdomain
-local-zone: "3.zhzy999.net" always_nxdomain
-local-zone: "3.zhzy999.net3.zhzy999.net" always_nxdomain
-local-zone: "31639.xc.mieseng.com" always_nxdomain
 local-zone: "3mandatesmedia.com" always_nxdomain
 local-zone: "3ypackaging.com" always_nxdomain
 local-zone: "402musicfest.com" always_nxdomain
@@ -19,8 +15,10 @@ local-zone: "49parallel.ca" always_nxdomain
 local-zone: "786suncity.com" always_nxdomain
 local-zone: "8133msc.com" always_nxdomain
 local-zone: "8200msc.com" always_nxdomain
+local-zone: "87du.vip" always_nxdomain
 local-zone: "887sconline.com" always_nxdomain
 local-zone: "88mscco.com" always_nxdomain
+local-zone: "SnackFreebie.com" always_nxdomain
 local-zone: "a-reality.co.uk" always_nxdomain
 local-zone: "aaasolution.co.th" always_nxdomain
 local-zone: "aaload05.top" always_nxdomain
@@ -28,11 +26,11 @@ local-zone: "accessyouraudience.com" always_nxdomain
 local-zone: "acdesignhub.com" always_nxdomain
 local-zone: "acteon.com.ar" always_nxdomain
 local-zone: "activecost.com.au" always_nxdomain
+local-zone: "adamtcarruthers.com" always_nxdomain
 local-zone: "adnquocte.com" always_nxdomain
 local-zone: "aelogica.com" always_nxdomain
 local-zone: "agiandsam.com" always_nxdomain
 local-zone: "agipasesores.com" always_nxdomain
-local-zone: "agsir.com" always_nxdomain
 local-zone: "aite.me" always_nxdomain
 local-zone: "ajibolarilwan.com" always_nxdomain
 local-zone: "al-wahd.com" always_nxdomain
@@ -43,20 +41,19 @@ local-zone: "alexbase.com" always_nxdomain
 local-zone: "alexwacker.com" always_nxdomain
 local-zone: "algorithmshargh.com" always_nxdomain
 local-zone: "allloveseries.com" always_nxdomain
-local-zone: "alnahrainfilminstitute.com" always_nxdomain
 local-zone: "alohasoftware.net" always_nxdomain
 local-zone: "alphaconsumer.net" always_nxdomain
 local-zone: "am-concepts.ca" always_nxdomain
 local-zone: "amd.alibuf.com" always_nxdomain
+local-zone: "amedeoscognamiglio.329263.com" always_nxdomain
 local-zone: "amemarine.co.th" always_nxdomain
 local-zone: "americanrange.com" always_nxdomain
 local-zone: "anadolutatili.com" always_nxdomain
-local-zone: "anamikaindanegas.in" always_nxdomain
 local-zone: "andreelapeyre.com" always_nxdomain
 local-zone: "andremaraisbeleggings.co.za" always_nxdomain
 local-zone: "angiathinh.com" always_nxdomain
+local-zone: "angthong.nfe.go.th" always_nxdomain
 local-zone: "ansarihospital.in" always_nxdomain
-local-zone: "anuragsharma.co.in" always_nxdomain
 local-zone: "anvietpro.com" always_nxdomain
 local-zone: "anysbergbiltong.co.za" always_nxdomain
 local-zone: "aoujlift.ir" always_nxdomain
@@ -64,12 +61,12 @@ local-zone: "apartdelpinar.com.ar" always_nxdomain
 local-zone: "apoolcondo.com" always_nxdomain
 local-zone: "apware.co.kr" always_nxdomain
 local-zone: "archiv.bg" always_nxdomain
-local-zone: "arcticprospectus.com" always_nxdomain
 local-zone: "areac-agr.com" always_nxdomain
 local-zone: "aresorganics.com" always_nxdomain
+local-zone: "arowanafishforsale.com" always_nxdomain
 local-zone: "ascentive.com" always_nxdomain
-local-zone: "ashoakacharya.com" always_nxdomain
 local-zone: "askarindo.or.id" always_nxdomain
+local-zone: "askmufti.org" always_nxdomain
 local-zone: "atfile.com" always_nxdomain
 local-zone: "atomlines.com" always_nxdomain
 local-zone: "attach.66rpg.com" always_nxdomain
@@ -83,29 +80,29 @@ local-zone: "aznetsolutions.com" always_nxdomain
 local-zone: "azureautomation.co.uk" always_nxdomain
 local-zone: "azzd.co.kr" always_nxdomain
 local-zone: "babaroadways.in" always_nxdomain
-local-zone: "backlinksale.com" always_nxdomain
-local-zone: "badgesforbullies.org" always_nxdomain
 local-zone: "bamakobleach.free.fr" always_nxdomain
 local-zone: "bangkok-orchids.com" always_nxdomain
 local-zone: "banzaimonkey.com" always_nxdomain
 local-zone: "bapo.granudan.cn" always_nxdomain
+local-zone: "baritaco.com" always_nxdomain
 local-zone: "baybars.xyz" always_nxdomain
 local-zone: "bbs.sunwy.org" always_nxdomain
 local-zone: "bbs1.marisfrolg.com" always_nxdomain
 local-zone: "bd11.52lishi.com" always_nxdomain
 local-zone: "bd12.52lishi.com" always_nxdomain
 local-zone: "bd18.52lishi.com" always_nxdomain
-local-zone: "bd19.52lishi.com" always_nxdomain
 local-zone: "beibei.xx007.cc" always_nxdomain
 local-zone: "bepgroup.com.hk" always_nxdomain
 local-zone: "besserblok-ufa.ru" always_nxdomain
 local-zone: "besttasimacilik.com.tr" always_nxdomain
+local-zone: "beta.pterosol.com" always_nxdomain
 local-zone: "bflow.security-portal.cz" always_nxdomain
 local-zone: "bigdealist.com" always_nxdomain
 local-zone: "bildeboks.no" always_nxdomain
 local-zone: "bilim-pavlodar.gov.kz" always_nxdomain
 local-zone: "billieellish.org" always_nxdomain
 local-zone: "bingxiong.vip" always_nxdomain
+local-zone: "bistlearn.ir" always_nxdomain
 local-zone: "bjkumdo.com" always_nxdomain
 local-zone: "blog.241optical.com" always_nxdomain
 local-zone: "blog.hanxe.com" always_nxdomain
@@ -118,9 +115,11 @@ local-zone: "brbs.customer.netspace.net.au" always_nxdomain
 local-zone: "brewmethods.com" always_nxdomain
 local-zone: "btlocum.pl" always_nxdomain
 local-zone: "bugansavings.com" always_nxdomain
+local-zone: "bxbx28.cn" always_nxdomain
 local-zone: "byqkdy.com" always_nxdomain
 local-zone: "c.vvvvvvvvv.ga" always_nxdomain
 local-zone: "cameli.vn" always_nxdomain
+local-zone: "campana20gb.com" always_nxdomain
 local-zone: "canaan.io" always_nxdomain
 local-zone: "canmivback.biz" always_nxdomain
 local-zone: "caravella.com.br" always_nxdomain
@@ -128,6 +127,7 @@ local-zone: "cassovia.sk" always_nxdomain
 local-zone: "castmart.ga" always_nxdomain
 local-zone: "cbk.m.dodo52.com" always_nxdomain
 local-zone: "ccnn.xiaomier.cn" always_nxdomain
+local-zone: "cdn-10049480.file.myqcloud.com" always_nxdomain
 local-zone: "cdn.truelife.vn" always_nxdomain
 local-zone: "cdn.xiaoduoai.com" always_nxdomain
 local-zone: "cdnus.laboratoryconecpttoday.com" always_nxdomain
@@ -148,17 +148,17 @@ local-zone: "chipmarkets.com" always_nxdomain
 local-zone: "chiptune.com" always_nxdomain
 local-zone: "chj.m.dodo52.com" always_nxdomain
 local-zone: "chuckweiss.com" always_nxdomain
-local-zone: "cista-dobra-voda.com" always_nxdomain
 local-zone: "clareiamente.clareiamente.com" always_nxdomain
 local-zone: "clearwaterriveroutfitting.com" always_nxdomain
 local-zone: "client.yaap.co.uk" always_nxdomain
 local-zone: "clinicamariademolina.com" always_nxdomain
 local-zone: "cloud-server-updater2.co.za" always_nxdomain
-local-zone: "compesat.com" always_nxdomain
+local-zone: "colourcreative.co.za" always_nxdomain
 local-zone: "complan.hu" always_nxdomain
 local-zone: "complanbt.hu" always_nxdomain
 local-zone: "comtechadsl.com" always_nxdomain
 local-zone: "config.kuaisousou.top" always_nxdomain
+local-zone: "config.wwmhdq.com" always_nxdomain
 local-zone: "consultingcy.com" always_nxdomain
 local-zone: "counciloflight.bravepages.com" always_nxdomain
 local-zone: "cqjcc.org" always_nxdomain
@@ -166,12 +166,9 @@ local-zone: "crittersbythebay.com" always_nxdomain
 local-zone: "cryline.net" always_nxdomain
 local-zone: "csnserver.com" always_nxdomain
 local-zone: "csw.hu" always_nxdomain
-local-zone: "cuacuonsieure.com" always_nxdomain
 local-zone: "cvc.com.pl" always_nxdomain
 local-zone: "cyclomove.com" always_nxdomain
 local-zone: "czsl.91756.cn" always_nxdomain
-local-zone: "d3.99ddd.com" always_nxdomain
-local-zone: "d9.99ddd.com" always_nxdomain
 local-zone: "da.alibuf.com" always_nxdomain
 local-zone: "daithanhphung.com" always_nxdomain
 local-zone: "danielbastos.com" always_nxdomain
@@ -195,10 +192,10 @@ local-zone: "dev1.xicom.us" always_nxdomain
 local-zone: "dev5.mypagevn.com" always_nxdomain
 local-zone: "dezcom.com" always_nxdomain
 local-zone: "dfcf.91756.cn" always_nxdomain
-local-zone: "dfd.zhzy999.net" always_nxdomain
 local-zone: "dfzm.91756.cn" always_nxdomain
 local-zone: "dgecolesdepolice.bf" always_nxdomain
 local-zone: "dgnj.cn" always_nxdomain
+local-zone: "dhlservices.duckdns.org" always_nxdomain
 local-zone: "diazavendano.cl" always_nxdomain
 local-zone: "dichvuvesinhcongnghiep.top" always_nxdomain
 local-zone: "dienmaycu.vn" always_nxdomain
@@ -210,26 +207,25 @@ local-zone: "ditec.com.my" always_nxdomain
 local-zone: "divinevacations.in" always_nxdomain
 local-zone: "dkw-engineering.net" always_nxdomain
 local-zone: "dl-gameplayer.dmm.com" always_nxdomain
-local-zone: "dl.1003b.56a.com" always_nxdomain
 local-zone: "dl.198424.com" always_nxdomain
 local-zone: "dl.dzqzd.com" always_nxdomain
-local-zone: "dl.kuaile-u.com" always_nxdomain
-local-zone: "dl2.soft-lenta.ru" always_nxdomain
+local-zone: "dl.iqilie.com" always_nxdomain
 local-zone: "dlist.iqilie.com" always_nxdomain
 local-zone: "dmresor.se" always_nxdomain
 local-zone: "dnn.alibuf.com" always_nxdomain
 local-zone: "dns.alibuf.com" always_nxdomain
 local-zone: "dodsonimaging.com" always_nxdomain
 local-zone: "don.viameventos.com.br" always_nxdomain
+local-zone: "dongiln.co" always_nxdomain
 local-zone: "donmago.com" always_nxdomain
 local-zone: "donoffermaster.best" always_nxdomain
 local-zone: "doostansocks.ir" always_nxdomain
 local-zone: "doransky.info" always_nxdomain
-local-zone: "dosame.com" always_nxdomain
 local-zone: "down.ancamera.co.kr" always_nxdomain
 local-zone: "down.gogominer.com" always_nxdomain
 local-zone: "down.haote.com" always_nxdomain
 local-zone: "down.pcclear.com" always_nxdomain
+local-zone: "down.pdflist.cqhbkjzx.com" always_nxdomain
 local-zone: "down.startools.co.kr" always_nxdomain
 local-zone: "down.tgjkbx.cn" always_nxdomain
 local-zone: "down.upzxt.com" always_nxdomain
@@ -251,14 +247,12 @@ local-zone: "dpeasesummithilltoppers.pbworks.com" always_nxdomain
 local-zone: "dr080.com" always_nxdomain
 local-zone: "dralpaslan.com" always_nxdomain
 local-zone: "dreamfile.club" always_nxdomain
-local-zone: "drivolani.us" always_nxdomain
 local-zone: "drools-moved.46999.n3.nabble.com" always_nxdomain
 local-zone: "druzim.freewww.biz" always_nxdomain
 local-zone: "dsiun.com" always_nxdomain
 local-zone: "dtsay.xyz" always_nxdomain
 local-zone: "dudulm.com" always_nxdomain
 local-zone: "dusdn.mireene.com" always_nxdomain
-local-zone: "dw.58wangdun.com" always_nxdomain
 local-zone: "dx.qqyewu.com" always_nxdomain
 local-zone: "dx1.qqtn.com" always_nxdomain
 local-zone: "dx2.qqtn.com" always_nxdomain
@@ -267,7 +261,9 @@ local-zone: "dx60.siweidaoxiang.com" always_nxdomain
 local-zone: "dzinestudio87.co.uk" always_nxdomain
 local-zone: "e.dangeana.com" always_nxdomain
 local-zone: "easydown.workday360.cn" always_nxdomain
+local-zone: "ebook.w3wvg.com" always_nxdomain
 local-zone: "edicolanazionale.it" always_nxdomain
+local-zone: "elokshinproperty.co.za" always_nxdomain
 local-zone: "emir-elbahr.com" always_nxdomain
 local-zone: "enc-tech.com" always_nxdomain
 local-zone: "energisegroup.com" always_nxdomain
@@ -276,21 +272,20 @@ local-zone: "er-bulisguvenligi.com" always_nxdomain
 local-zone: "ermekanik.com" always_nxdomain
 local-zone: "esolvent.pl" always_nxdomain
 local-zone: "esteteam.org" always_nxdomain
+local-zone: "exposvision.com" always_nxdomain
 local-zone: "ezfintechcorp.com" always_nxdomain
 local-zone: "fafhoafouehfuh.su" always_nxdomain
-local-zone: "fairyqueenstore.com" always_nxdomain
 local-zone: "fastsoft.onlinedown.net" always_nxdomain
 local-zone: "fazi.pl" always_nxdomain
-local-zone: "fedsfmr.ru" always_nxdomain
 local-zone: "fenoma.net" always_nxdomain
 local-zone: "ffv322.ru" always_nxdomain
 local-zone: "ffv32223.ru" always_nxdomain
 local-zone: "fidiag.kymco.com" always_nxdomain
+local-zone: "fifa555easy.329263.com" always_nxdomain
 local-zone: "figuig.net" always_nxdomain
 local-zone: "fileco.jobkorea.co.kr" always_nxdomain
 local-zone: "filen3.utengine.co.kr" always_nxdomain
 local-zone: "filen5.utengine.co.kr" always_nxdomain
-local-zone: "files.fqapps.com" always_nxdomain
 local-zone: "files.rakbot.ru" always_nxdomain
 local-zone: "files6.uludagbilisim.com" always_nxdomain
 local-zone: "fishingbigstore.com" always_nxdomain
@@ -298,7 +293,6 @@ local-zone: "fitmanacademy.com" always_nxdomain
 local-zone: "fkd.derpcity.ru" always_nxdomain
 local-zone: "flex.ru" always_nxdomain
 local-zone: "flood-protection.org" always_nxdomain
-local-zone: "fmjstorage.com" always_nxdomain
 local-zone: "fordlamdong.com.vn" always_nxdomain
 local-zone: "foreverprecious.org" always_nxdomain
 local-zone: "foxfennecs.com" always_nxdomain
@@ -307,21 +301,20 @@ local-zone: "fte.m.dodo52.com" always_nxdomain
 local-zone: "ftpcnc-p2sp.pconline.com.cn" always_nxdomain
 local-zone: "ftpftpftp.com" always_nxdomain
 local-zone: "funletters.net" always_nxdomain
+local-zone: "funpartyrent.com" always_nxdomain
 local-zone: "futuregraphics.com.ar" always_nxdomain
-local-zone: "g.7230.com" always_nxdomain
 local-zone: "g0ogle.free.fr" always_nxdomain
+local-zone: "gainsdirectory.com" always_nxdomain
 local-zone: "galuhtea.com" always_nxdomain
 local-zone: "gamee.top" always_nxdomain
+local-zone: "garage.themebuffets.com" always_nxdomain
 local-zone: "garenanow.myvnc.com" always_nxdomain
 local-zone: "garenanow4.myvnc.com" always_nxdomain
 local-zone: "gargiulo.com.ar" always_nxdomain
 local-zone: "gateway-heide.de" always_nxdomain
 local-zone: "gateway.ethlqd.com" always_nxdomain
-local-zone: "gd2.greenxf.com" always_nxdomain
 local-zone: "genesisconstruction.co.za" always_nxdomain
 local-zone: "germistonmiraclecentre.co.za" always_nxdomain
-local-zone: "getfashionmania.com" always_nxdomain
-local-zone: "ghislain.dartois.pagesperso-orange.fr" always_nxdomain
 local-zone: "ghwls44.gabia.io" always_nxdomain
 local-zone: "gimscompany.com" always_nxdomain
 local-zone: "glitzygal.net" always_nxdomain
@@ -331,8 +324,6 @@ local-zone: "gnimelf.net" always_nxdomain
 local-zone: "go.xsuad.com" always_nxdomain
 local-zone: "gocanada.vn" always_nxdomain
 local-zone: "google.ghststr.com" always_nxdomain
-local-zone: "gopala.es" always_nxdomain
-local-zone: "gov.kr" always_nxdomain
 local-zone: "govhotel.us" always_nxdomain
 local-zone: "grafchekloder.rebatesrule.net" always_nxdomain
 local-zone: "granportale.com.br" always_nxdomain
@@ -340,7 +331,6 @@ local-zone: "green100.cn" always_nxdomain
 local-zone: "greenfood.sa.com" always_nxdomain
 local-zone: "greenleaveperu.com" always_nxdomain
 local-zone: "gssgroups.com" always_nxdomain
-local-zone: "gx-10012947.file.myqcloud.com" always_nxdomain
 local-zone: "habbotips.free.fr" always_nxdomain
 local-zone: "hagebakken.no" always_nxdomain
 local-zone: "halcat.com" always_nxdomain
@@ -348,7 +338,6 @@ local-zone: "hanaphoto.co.kr" always_nxdomain
 local-zone: "handrush.com" always_nxdomain
 local-zone: "hanoihub.vn" always_nxdomain
 local-zone: "hazel-azure.co.th" always_nxdomain
-local-zone: "hdxa.net" always_nxdomain
 local-zone: "healtina.com" always_nxdomain
 local-zone: "heavenif.co.za" always_nxdomain
 local-zone: "hediyeinternetpaket.com" always_nxdomain
@@ -361,9 +350,7 @@ local-zone: "hoayeuthuong-my.sharepoint.com" always_nxdomain
 local-zone: "hostzaa.com" always_nxdomain
 local-zone: "hotart.co.nz" always_nxdomain
 local-zone: "hotel-le-relais-des-moulins.com" always_nxdomain
-local-zone: "hotelbharatpurpalace.com" always_nxdomain
 local-zone: "housewifes.co" always_nxdomain
-local-zone: "hqsistemas.com.ar" always_nxdomain
 local-zone: "hseda.com" always_nxdomain
 local-zone: "hsmwebapp.com" always_nxdomain
 local-zone: "htxl.cn" always_nxdomain
@@ -377,12 +364,12 @@ local-zone: "ideadom.pl" always_nxdomain
 local-zone: "ihpmed.ae" always_nxdomain
 local-zone: "ileolaherbalcare.com.ng" always_nxdomain
 local-zone: "imellda.com" always_nxdomain
+local-zone: "imenizeh.ir" always_nxdomain
 local-zone: "impression-gobelet.com" always_nxdomain
 local-zone: "in-sect.com" always_nxdomain
 local-zone: "inapadvance.com" always_nxdomain
 local-zone: "incrediblepixels.com" always_nxdomain
 local-zone: "incredicole.com" always_nxdomain
-local-zone: "ini.egkj.com" always_nxdomain
 local-zone: "innovation4crisis.org" always_nxdomain
 local-zone: "instanttechnology.com.au" always_nxdomain
 local-zone: "intelicasa.ro" always_nxdomain
@@ -400,6 +387,7 @@ local-zone: "itrigger.cn" always_nxdomain
 local-zone: "itsnixielou.com" always_nxdomain
 local-zone: "ixlonbcc.com" always_nxdomain
 local-zone: "izu.co.jp" always_nxdomain
+local-zone: "jahesa.com" always_nxdomain
 local-zone: "jaincakes.xyz" always_nxdomain
 local-zone: "jamiekaylive.com" always_nxdomain
 local-zone: "jansen-heesch.nl" always_nxdomain
@@ -428,6 +416,7 @@ local-zone: "k3.etfiber.net" always_nxdomain
 local-zone: "kabiru.ru" always_nxdomain
 local-zone: "kachsurf.mylftv.com" always_nxdomain
 local-zone: "kamasu11.cafe24.com" always_nxdomain
+local-zone: "kamisecurity.com.my" always_nxdomain
 local-zone: "kanok.co.th" always_nxdomain
 local-zone: "kar.big-pro.com" always_nxdomain
 local-zone: "karavantekstil.com" always_nxdomain
@@ -435,16 +424,15 @@ local-zone: "kassohome.com.tr" always_nxdomain
 local-zone: "kdsp.co.kr" always_nxdomain
 local-zone: "kejpa.com" always_nxdomain
 local-zone: "kenareh-gostare-aras.ir" always_nxdomain
+local-zone: "kgfs3.329263.com" always_nxdomain
 local-zone: "khunnapap.com" always_nxdomain
 local-zone: "kiencuonghotel.vn" always_nxdomain
 local-zone: "kjbm9.mof.gov.cn" always_nxdomain
 local-zone: "kleinendeli.co.za" always_nxdomain
-local-zone: "knightsbridgeenergy.com.ng" always_nxdomain
 local-zone: "koppemotta.com.br" always_nxdomain
 local-zone: "koralli.if.ua" always_nxdomain
 local-zone: "kqq.kz" always_nxdomain
 local-zone: "kristofferdaniels.com" always_nxdomain
-local-zone: "kupaliskohs.sk" always_nxdomain
 local-zone: "kuznetsov.ca" always_nxdomain
 local-zone: "kwanfromhongkong.com" always_nxdomain
 local-zone: "kwikomfi-lab.com" always_nxdomain
@@ -463,13 +451,14 @@ local-zone: "learningcomputing.org" always_nxdomain
 local-zone: "lebedyn.info" always_nxdomain
 local-zone: "lecafedesartistes.com" always_nxdomain
 local-zone: "lengendryme.com" always_nxdomain
-local-zone: "leukkado.be" always_nxdomain
+local-zone: "lesa.at.true.by" always_nxdomain
 local-zone: "lhbfirst.com" always_nxdomain
 local-zone: "libya-info.com" always_nxdomain
 local-zone: "lifeapt.biz" always_nxdomain
 local-zone: "linx.li" always_nxdomain
 local-zone: "lists.ibiblio.org" always_nxdomain
 local-zone: "lists.mplayerhq.hu" always_nxdomain
+local-zone: "livetrack.in" always_nxdomain
 local-zone: "lodergord.com" always_nxdomain
 local-zone: "log.yundabao.cn" always_nxdomain
 local-zone: "lsyr.net" always_nxdomain
@@ -484,11 +473,10 @@ local-zone: "mackleyn.com" always_nxdomain
 local-zone: "magda.zelentourism.com" always_nxdomain
 local-zone: "makosoft.hu" always_nxdomain
 local-zone: "malin-akerman.net" always_nxdomain
-local-zone: "mangawt.com" always_nxdomain
 local-zone: "margopassadorestylist.com" always_nxdomain
-local-zone: "maringareservas.com.br" always_nxdomain
 local-zone: "marketprice.com.ng" always_nxdomain
 local-zone: "marksidfgs.ug" always_nxdomain
+local-zone: "marocaji.com" always_nxdomain
 local-zone: "matt-e.it" always_nxdomain
 local-zone: "mattayom31.go.th" always_nxdomain
 local-zone: "mazury4x4.pl" always_nxdomain
@@ -496,7 +484,6 @@ local-zone: "mbgrm.com" always_nxdomain
 local-zone: "mecbox.cn" always_nxdomain
 local-zone: "mediamatkat.fi" always_nxdomain
 local-zone: "medianews.ge" always_nxdomain
-local-zone: "medicacademic.com" always_nxdomain
 local-zone: "medreg.uz" always_nxdomain
 local-zone: "meert.org" always_nxdomain
 local-zone: "meeweb.com" always_nxdomain
@@ -507,7 +494,6 @@ local-zone: "metallexs.com" always_nxdomain
 local-zone: "mettaanand.org" always_nxdomain
 local-zone: "mettek.com.tr" always_nxdomain
 local-zone: "mfevr.com" always_nxdomain
-local-zone: "mfpc.org.my" always_nxdomain
 local-zone: "mhkdhotbot.myvnc.com" always_nxdomain
 local-zone: "mhkdhotbot80.myvnc.com" always_nxdomain
 local-zone: "micahproducts.com" always_nxdomain
@@ -516,7 +502,6 @@ local-zone: "mirror.mypage.sk" always_nxdomain
 local-zone: "mis.nbcc.ac.th" always_nxdomain
 local-zone: "misterson.com" always_nxdomain
 local-zone: "mistydeblasiophotography.com" always_nxdomain
-local-zone: "mitonegbh.xyz" always_nxdomain
 local-zone: "mkk09.kr" always_nxdomain
 local-zone: "mkontakt.az" always_nxdomain
 local-zone: "mmc.ru.com" always_nxdomain
@@ -524,6 +509,7 @@ local-zone: "mobiadnews.com" always_nxdomain
 local-zone: "mobilier-modern.ro" always_nxdomain
 local-zone: "modcloudserver.eu" always_nxdomain
 local-zone: "moha-group.com" always_nxdomain
+local-zone: "monmariage.info" always_nxdomain
 local-zone: "moscow11.at" always_nxdomain
 local-zone: "mountveederwines.com" always_nxdomain
 local-zone: "moyo.co.kr" always_nxdomain
@@ -533,16 +519,12 @@ local-zone: "msecurity.ro" always_nxdomain
 local-zone: "mteng.mmj7.com" always_nxdomain
 local-zone: "mtfelektroteknik.com" always_nxdomain
 local-zone: "mueblesjcp.cl" always_nxdomain
-local-zone: "mv360.net" always_nxdomain
 local-zone: "mvb.kz" always_nxdomain
-local-zone: "mvdrepair.com" always_nxdomain
 local-zone: "mxpiqw.am.files.1drv.com" always_nxdomain
-local-zone: "myexpertca.in" always_nxdomain
+local-zone: "mydesign.thinkeraibirds.com" always_nxdomain
 local-zone: "myhood.cl" always_nxdomain
 local-zone: "myo.net.au" always_nxdomain
 local-zone: "myofficeplus.com" always_nxdomain
-local-zone: "myonlinepokiesblog.com" always_nxdomain
-local-zone: "mytex.pe" always_nxdomain
 local-zone: "mytrains.net" always_nxdomain
 local-zone: "mywp.asia" always_nxdomain
 local-zone: "myyttilukukansasta.fi" always_nxdomain
@@ -557,14 +539,12 @@ local-zone: "nebraskacharters.com.au" always_nxdomain
 local-zone: "nemo.herc.ws" always_nxdomain
 local-zone: "neocity1.free.fr" always_nxdomain
 local-zone: "nerve.untergrund.net" always_nxdomain
-local-zone: "new.tristatehs.com" always_nxdomain
 local-zone: "news.abfakerman.ir" always_nxdomain
 local-zone: "news.omumusic.net" always_nxdomain
 local-zone: "newsun-shop.com" always_nxdomain
 local-zone: "newxing.com" always_nxdomain
 local-zone: "nexity.me" always_nxdomain
 local-zone: "nfbio.com" always_nxdomain
-local-zone: "ngoaingu.garage.com.vn" always_nxdomain
 local-zone: "nofound.000webhostapp.com" always_nxdomain
 local-zone: "norperuinge.com.pe" always_nxdomain
 local-zone: "nprg.ru" always_nxdomain
@@ -574,6 +554,7 @@ local-zone: "oa.fnysw.com" always_nxdomain
 local-zone: "oa.hys.cn" always_nxdomain
 local-zone: "obnova.zzux.com" always_nxdomain
 local-zone: "obseques-conseils.com" always_nxdomain
+local-zone: "ohe.ie" always_nxdomain
 local-zone: "oknoplastik.sk" always_nxdomain
 local-zone: "omega.az" always_nxdomain
 local-zone: "omsk-osma.ru" always_nxdomain
@@ -599,7 +580,6 @@ local-zone: "pack301.bravepages.com" always_nxdomain
 local-zone: "pakdesighee.com" always_nxdomain
 local-zone: "palochusvet.szm.com" always_nxdomain
 local-zone: "partyflix.net" always_nxdomain
-local-zone: "pat4.jetos.com" always_nxdomain
 local-zone: "pat4.qpoe.com" always_nxdomain
 local-zone: "patch2.51lg.com" always_nxdomain
 local-zone: "patch2.99ddd.com" always_nxdomain
@@ -610,6 +590,7 @@ local-zone: "pcginsure.com" always_nxdomain
 local-zone: "pcsoori.com" always_nxdomain
 local-zone: "pedidoslalacteo.com.ar" always_nxdomain
 local-zone: "peterssandmay.com" always_nxdomain
+local-zone: "petromltd.com" always_nxdomain
 local-zone: "ph4s.ru" always_nxdomain
 local-zone: "phamchilong.com" always_nxdomain
 local-zone: "phudieusongma.com" always_nxdomain
@@ -623,7 +604,6 @@ local-zone: "podrska.com.hr" always_nxdomain
 local-zone: "ponto50.com.br" always_nxdomain
 local-zone: "poolbook.ir" always_nxdomain
 local-zone: "ppl.ac.id" always_nxdomain
-local-zone: "prabhuandsons.com" always_nxdomain
 local-zone: "pratapnursery.com" always_nxdomain
 local-zone: "prepaenunsoloexamen.academiagalileoac.com" always_nxdomain
 local-zone: "probost.cz" always_nxdomain
@@ -637,7 +617,6 @@ local-zone: "qmsled.com" always_nxdomain
 local-zone: "qppl.angiang.gov.vn" always_nxdomain
 local-zone: "quantominds.com" always_nxdomain
 local-zone: "quartier-midi.be" always_nxdomain
-local-zone: "quehagoencartagena.com" always_nxdomain
 local-zone: "quickuploader.xyz" always_nxdomain
 local-zone: "raacts.in" always_nxdomain
 local-zone: "raifix.com.br" always_nxdomain
@@ -651,7 +630,6 @@ local-zone: "recommendservices.com" always_nxdomain
 local-zone: "redeemerssports.com" always_nxdomain
 local-zone: "redesoftdownload.info" always_nxdomain
 local-zone: "renimin.mymom.info" always_nxdomain
-local-zone: "renovanorte.com" always_nxdomain
 local-zone: "res.uf1.cn" always_nxdomain
 local-zone: "ret.space" always_nxdomain
 local-zone: "rezaazizi.ir" always_nxdomain
@@ -668,12 +646,11 @@ local-zone: "royalplusmobile.ir" always_nxdomain
 local-zone: "ruisgood.ru" always_nxdomain
 local-zone: "rusch.nu" always_nxdomain
 local-zone: "s.51shijuan.com" always_nxdomain
-local-zone: "s.kk30.com" always_nxdomain
-local-zone: "s14b.91danji.com" always_nxdomain
-local-zone: "s14b.groundyun.cn" always_nxdomain
 local-zone: "sabiupd.compress.to" always_nxdomain
 local-zone: "saboorjaam.ir" always_nxdomain
 local-zone: "sabupda.vizvaz.com" always_nxdomain
+local-zone: "saglikbakanligi-destekportal.org" always_nxdomain
+local-zone: "saglikramazan20bgb.net" always_nxdomain
 local-zone: "sahathaikasetpan.com" always_nxdomain
 local-zone: "salvationbd.com" always_nxdomain
 local-zone: "sandovalgraphics.com" always_nxdomain
@@ -684,7 +661,6 @@ local-zone: "schollaert.eu" always_nxdomain
 local-zone: "sefp-boispro.fr" always_nxdomain
 local-zone: "selekture.com" always_nxdomain
 local-zone: "selvikoyunciftligi.com" always_nxdomain
-local-zone: "sernayconsultores.com" always_nxdomain
 local-zone: "serpentrising.com" always_nxdomain
 local-zone: "servicemhkd.myvnc.com" always_nxdomain
 local-zone: "servicemhkd80.myvnc.com" always_nxdomain
@@ -694,7 +670,6 @@ local-zone: "sgm.pc6.com" always_nxdomain
 local-zone: "shacked.webdepot.co.il" always_nxdomain
 local-zone: "shahtoba.faqserv.com" always_nxdomain
 local-zone: "shaoxiaofei.cn" always_nxdomain
-local-zone: "share.dmca.gripe" always_nxdomain
 local-zone: "sharjahas.com" always_nxdomain
 local-zone: "shembefoundation.com" always_nxdomain
 local-zone: "simlun.com.ar" always_nxdomain
@@ -720,7 +695,6 @@ local-zone: "sophiaskyhotel.vn" always_nxdomain
 local-zone: "sota-france.fr" always_nxdomain
 local-zone: "souldancing.cn" always_nxdomain
 local-zone: "souq-aljwalat.com" always_nxdomain
-local-zone: "spdtextile.com" always_nxdomain
 local-zone: "speed.myz.info" always_nxdomain
 local-zone: "spurstogo.com" always_nxdomain
 local-zone: "sputnikmailru.cdnmail.ru" always_nxdomain
@@ -730,11 +704,11 @@ local-zone: "srvmanos.no-ip.info" always_nxdomain
 local-zone: "ss.cybersoft-vn.com" always_nxdomain
 local-zone: "sslv3.at" always_nxdomain
 local-zone: "staging.popclusive.asia" always_nxdomain
+local-zone: "staging2.lifebiotic.com" always_nxdomain
 local-zone: "starcountry.net" always_nxdomain
 local-zone: "starinfotechcollege.com" always_nxdomain
 local-zone: "static.3001.net" always_nxdomain
 local-zone: "static.ilclock.com" always_nxdomain
-local-zone: "static.topxgun.com" always_nxdomain
 local-zone: "stecit.nl" always_nxdomain
 local-zone: "stevewalker.com.au" always_nxdomain
 local-zone: "story-maker.jp" always_nxdomain
@@ -754,7 +728,6 @@ local-zone: "t.honker.info" always_nxdomain
 local-zone: "tandenblekenhoofddorp.nl" always_nxdomain
 local-zone: "taraward.com" always_nxdomain
 local-zone: "taxpos.com" always_nxdomain
-local-zone: "tcy.198424.com" always_nxdomain
 local-zone: "teamtnt.red" always_nxdomain
 local-zone: "teardrop-productions.ro" always_nxdomain
 local-zone: "technoites.com" always_nxdomain
@@ -775,32 +748,28 @@ local-zone: "theprestige.ro" always_nxdomain
 local-zone: "theptiendat.com" always_nxdomain
 local-zone: "thepyramids.nl" always_nxdomain
 local-zone: "therecruiter.io" always_nxdomain
-local-zone: "thevision.ro" always_nxdomain
 local-zone: "thornadops.com" always_nxdomain
 local-zone: "thosewebbs.com" always_nxdomain
 local-zone: "thuong.bidiworks.com" always_nxdomain
 local-zone: "tianangdep.com" always_nxdomain
+local-zone: "tianzi8.cn" always_nxdomain
 local-zone: "tibinst.mefound.com" always_nxdomain
 local-zone: "tibok.lflink.com" always_nxdomain
 local-zone: "tinckorm.beget.tech" always_nxdomain
 local-zone: "tishreycarmelim.co.il" always_nxdomain
 local-zone: "tmhfashionhouse.co.za" always_nxdomain
 local-zone: "toe.polinema.ac.id" always_nxdomain
-local-zone: "tomorrowearth.net" always_nxdomain
 local-zone: "tonghopgia.net" always_nxdomain
 local-zone: "tonydong.com" always_nxdomain
 local-zone: "tonyzone.com" always_nxdomain
-local-zone: "toulousa.com" always_nxdomain
 local-zone: "tsd.jxwan.com" always_nxdomain
 local-zone: "tsredco.telangana.gov.in" always_nxdomain
 local-zone: "tulli.info" always_nxdomain
 local-zone: "tumso.org" always_nxdomain
 local-zone: "tuneup.ibk.me" always_nxdomain
 local-zone: "tup.com.cn" always_nxdomain
-local-zone: "tuskanlehdms.ug" always_nxdomain
 local-zone: "tutuler.com" always_nxdomain
 local-zone: "uc-56.ru" always_nxdomain
-local-zone: "ucto-id.cz" always_nxdomain
 local-zone: "ufabet168168.329263.com" always_nxdomain
 local-zone: "ugc.wegame.com.cn" always_nxdomain
 local-zone: "ultimatelamborghiniexperience.com" always_nxdomain
@@ -833,20 +802,22 @@ local-zone: "vietducbio.com" always_nxdomain
 local-zone: "vigilar.com.br" always_nxdomain
 local-zone: "vip.recommendedtoyoo.com" always_nxdomain
 local-zone: "virustreatments.empeeevents.com" always_nxdomain
+local-zone: "visagepk.com" always_nxdomain
+local-zone: "vistanewsite.ir" always_nxdomain
 local-zone: "visualdata.ru" always_nxdomain
 local-zone: "vitinhvnt.com" always_nxdomain
 local-zone: "vitromed.ro" always_nxdomain
+local-zone: "vjhascv.ru" always_nxdomain
 local-zone: "voyageur.sisnettdesign.com" always_nxdomain
 local-zone: "vrrumover0.vrrum0.farted.net" always_nxdomain
 local-zone: "vvff.in" always_nxdomain
-local-zone: "w.zhzy999.net" always_nxdomain
 local-zone: "wangtong7.siweidaoxiang.com" always_nxdomain
 local-zone: "wangzonghang.cn" always_nxdomain
-local-zone: "wap.dosame.com" always_nxdomain
 local-zone: "ware.ru" always_nxdomain
 local-zone: "warriorllc.com" always_nxdomain
 local-zone: "wbd.5636.com" always_nxdomain
 local-zone: "wbkmt.com" always_nxdomain
+local-zone: "web.lavishsupplystore.com" always_nxdomain
 local-zone: "webarte.com.br" always_nxdomain
 local-zone: "webq.wikaba.com" always_nxdomain
 local-zone: "webserverthai.com" always_nxdomain
@@ -856,7 +827,6 @@ local-zone: "welcometothefuture.com" always_nxdomain
 local-zone: "whgaty.com" always_nxdomain
 local-zone: "wiebe-sanitaer.de" always_nxdomain
 local-zone: "wmd9e.a3i1vvv.feteboc.com" always_nxdomain
-local-zone: "wmi.1217bye.host" always_nxdomain
 local-zone: "wnksupply.co.th" always_nxdomain
 local-zone: "wood-expert.net" always_nxdomain
 local-zone: "woodsytech.com" always_nxdomain
@@ -870,12 +840,12 @@ local-zone: "www2.recepty5.com" always_nxdomain
 local-zone: "x2vn.com" always_nxdomain
 local-zone: "xia.vzboot.com" always_nxdomain
 local-zone: "xiaidown.com" always_nxdomain
+local-zone: "xiaoma-10021647.file.myqcloud.com" always_nxdomain
 local-zone: "xiegushi.cn" always_nxdomain
 local-zone: "xirfad.com" always_nxdomain
 local-zone: "xn--20gb-hediyefrsati-nvc.com" always_nxdomain
 local-zone: "xn--transfgran-mgbbb600b.ro" always_nxdomain
 local-zone: "xtremeforumz.com" always_nxdomain
-local-zone: "xueha.fun" always_nxdomain
 local-zone: "xuhss.com" always_nxdomain
 local-zone: "xxwl.kuaiyunds.com" always_nxdomain
 local-zone: "xxxze.co.nu" always_nxdomain
@@ -898,8 +868,6 @@ local-zone: "zentealounge.com.au" always_nxdomain
 local-zone: "zethla.com" always_nxdomain
 local-zone: "zeytinyagisabun.com" always_nxdomain
 local-zone: "zhetysu360.kz" always_nxdomain
-local-zone: "zhzy999.net" always_nxdomain
-local-zone: "ziliao.yunkaodian.com" always_nxdomain
 local-zone: "zj.9553.com" always_nxdomain
 local-zone: "zmmore.com" always_nxdomain
 local-zone: "zoetermeerov.nl" always_nxdomain
diff --git a/urlhaus-filter-unbound.conf b/urlhaus-filter-unbound.conf
index c7785caa..652be855 100644
--- a/urlhaus-filter-unbound.conf
+++ b/urlhaus-filter-unbound.conf
@@ -1,5 +1,5 @@
 # Title: abuse.ch URLhaus Malicious Domains Unbound Blocklist
-# Updated: Tue, 05 May 2020 00:09:52 UTC
+# Updated: Tue, 05 May 2020 12:09:42 UTC
 # Repo: https://gitlab.com/curben/urlhaus-filter
 # License: https://creativecommons.org/publicdomain/zero/1.0/
 # Source: https://urlhaus.abuse.ch/api/
@@ -356,7 +356,6 @@ local-zone: "2.180site.org" always_nxdomain
 local-zone: "2.ak1ba.pro" always_nxdomain
 local-zone: "2.clcshop.online" always_nxdomain
 local-zone: "2.globalengine.ru" always_nxdomain
-local-zone: "2.indexsinas.me" always_nxdomain
 local-zone: "2.moulding.z8.ru" always_nxdomain
 local-zone: "2.spacepel.com" always_nxdomain
 local-zone: "2.toemobra.com.br" always_nxdomain
@@ -610,6 +609,7 @@ local-zone: "2ndoffice.ph" always_nxdomain
 local-zone: "2ndpub.com" always_nxdomain
 local-zone: "2ndscreensociety.com" always_nxdomain
 local-zone: "2nell.com" always_nxdomain
+local-zone: "2no.co" always_nxdomain
 local-zone: "2pjcza.db.files.1drv.com" always_nxdomain
 local-zone: "2q1wea3rdsf.000webhostapp.com" always_nxdomain
 local-zone: "2q3w.com" always_nxdomain
@@ -641,8 +641,6 @@ local-zone: "3.spacepel.com" always_nxdomain
 local-zone: "3.top4top.net" always_nxdomain
 local-zone: "3.u0135364.z8.ru" always_nxdomain
 local-zone: "3.unplugrevolution.com" always_nxdomain
-local-zone: "3.zhzy999.net" always_nxdomain
-local-zone: "3.zhzy999.net3.zhzy999.net" always_nxdomain
 local-zone: "30-by-30.com" always_nxdomain
 local-zone: "3000adaydomainer.com" always_nxdomain
 local-zone: "300miliardialberi.eu" always_nxdomain
@@ -950,7 +948,6 @@ local-zone: "4wereareyou.icu" always_nxdomain
 local-zone: "4you.by" always_nxdomain
 local-zone: "5-shampurov.ru" always_nxdomain
 local-zone: "5.fjwt1.crsky.com" always_nxdomain
-local-zone: "5.top4top.io" always_nxdomain
 local-zone: "5.u0148466.z8.ru" always_nxdomain
 local-zone: "5.unplugrevolution.com" always_nxdomain
 local-zone: "5003.arentuspecial.com" always_nxdomain
@@ -1303,7 +1300,6 @@ local-zone: "966.basinbultenigonderimi.com" always_nxdomain
 local-zone: "97762.prohoster.biz" always_nxdomain
 local-zone: "9796360.com" always_nxdomain
 local-zone: "97world.com" always_nxdomain
-local-zone: "98.ip-51-91-254.eu" always_nxdomain
 local-zone: "981775.com" always_nxdomain
 local-zone: "988f5c12.ngrok.io" always_nxdomain
 local-zone: "988sconline.com" always_nxdomain
@@ -2199,6 +2195,7 @@ local-zone: "adams-moore.com" always_nxdomain
 local-zone: "adamshop24.de" always_nxdomain
 local-zone: "adamsm.co.za" always_nxdomain
 local-zone: "adamsphotography.com.au" always_nxdomain
+local-zone: "adamtcarruthers.com" always_nxdomain
 local-zone: "adamthelawyer.com" always_nxdomain
 local-zone: "adamwilt15.com" always_nxdomain
 local-zone: "adan-hospital.com" always_nxdomain
@@ -2619,6 +2616,7 @@ local-zone: "affordsolartech.com" always_nxdomain
 local-zone: "affpp.ru" always_nxdomain
 local-zone: "affyboomy.ga" always_nxdomain
 local-zone: "afgeartechnology.com.mx" always_nxdomain
+local-zone: "afges.org" always_nxdomain
 local-zone: "afghanbazarrugs.com" always_nxdomain
 local-zone: "afghanistanpolicy.com" always_nxdomain
 local-zone: "afgsjkhaljfghadfje.ga" always_nxdomain
@@ -2658,7 +2656,6 @@ local-zone: "africaanalytics.tristargl.com" always_nxdomain
 local-zone: "africabluewebs.co.ke" always_nxdomain
 local-zone: "africabootcampacademy.influencetec.net" always_nxdomain
 local-zone: "africahousingawards.com" always_nxdomain
-local-zone: "africainnovates.org" always_nxdomain
 local-zone: "africamarket.shop" always_nxdomain
 local-zone: "africamissions.ca" always_nxdomain
 local-zone: "african-trips.com" always_nxdomain
@@ -2861,6 +2858,7 @@ local-zone: "agnieszkarojek.cba.pl" always_nxdomain
 local-zone: "agoam.bid" always_nxdomain
 local-zone: "agodatex.ga" always_nxdomain
 local-zone: "agogpharrna.com" always_nxdomain
+local-zone: "agorae.afges.org" always_nxdomain
 local-zone: "agoralbe.com" always_nxdomain
 local-zone: "agorapro.com.co" always_nxdomain
 local-zone: "agorlu02.azurewebsites.net" always_nxdomain
@@ -3059,7 +3057,6 @@ local-zone: "aigavicenza.it" always_nxdomain
 local-zone: "aigforms.myap.co.za" always_nxdomain
 local-zone: "aiglemovies.com" always_nxdomain
 local-zone: "aihealth.vn" always_nxdomain
-local-zone: "aiiaiafrzrueuedur.ru" always_nxdomain
 local-zone: "aiineh.com" always_nxdomain
 local-zone: "aiit.ahbys.com" always_nxdomain
 local-zone: "aijdjy.com" always_nxdomain
@@ -3128,7 +3125,6 @@ local-zone: "airgc.in" always_nxdomain
 local-zone: "airinovasi-indonesia.com" always_nxdomain
 local-zone: "airisu-syumikonparty.com" always_nxdomain
 local-zone: "airlife.bget.ru" always_nxdomain
-local-zone: "airliness.info" always_nxdomain
 local-zone: "airlinkcpl.net" always_nxdomain
 local-zone: "airmaildata.com" always_nxdomain
 local-zone: "airmanship.nl" always_nxdomain
@@ -3273,6 +3269,7 @@ local-zone: "akdkart.com" always_nxdomain
 local-zone: "akekartela.com" always_nxdomain
 local-zone: "akeswari.org" always_nxdomain
 local-zone: "akfoundationbd.xyz" always_nxdomain
+local-zone: "akg-eng.net" always_nxdomain
 local-zone: "akgemc.com" always_nxdomain
 local-zone: "akgiyimtekstil.com" always_nxdomain
 local-zone: "akh.ge" always_nxdomain
@@ -3462,6 +3459,7 @@ local-zone: "alberguetaull.com" always_nxdomain
 local-zone: "alberolandia.it" always_nxdomain
 local-zone: "albert.playground.mostar.id" always_nxdomain
 local-zone: "albertaalliance.ca" always_nxdomain
+local-zone: "albertabeef.ca" always_nxdomain
 local-zone: "albertacareers.com" always_nxdomain
 local-zone: "albertandyork.com" always_nxdomain
 local-zone: "albertgrafica.com.br" always_nxdomain
@@ -5537,6 +5535,7 @@ local-zone: "ara4konkatu.info" always_nxdomain
 local-zone: "araba.alabama-marketing.com" always_nxdomain
 local-zone: "arabaresmi.com" always_nxdomain
 local-zone: "arabcb.org" always_nxdomain
+local-zone: "arabcoegypt.com" always_nxdomain
 local-zone: "arabdubaisafari.com" always_nxdomain
 local-zone: "arabianbrother.com" always_nxdomain
 local-zone: "arabiantongue.net" always_nxdomain
@@ -5848,6 +5847,7 @@ local-zone: "arkifield.com" always_nxdomain
 local-zone: "arkist.ist" always_nxdomain
 local-zone: "arkiv.lillehammerartmuseum.com" always_nxdomain
 local-zone: "arkonziv.com" always_nxdomain
+local-zone: "arkshine.com" always_nxdomain
 local-zone: "arksoft.in" always_nxdomain
 local-zone: "arkworkspace.com" always_nxdomain
 local-zone: "arkyreyma.com" always_nxdomain
@@ -6387,6 +6387,7 @@ local-zone: "askibinyuk.myjino.ru" always_nxdomain
 local-zone: "askingpricerealty.com" always_nxdomain
 local-zone: "askjhdaskdhshjfhf.ru" always_nxdomain
 local-zone: "asklaizmir.com.tr" always_nxdomain
+local-zone: "askmufti.org" always_nxdomain
 local-zone: "askom-service.kz" always_nxdomain
 local-zone: "asksuze.com" always_nxdomain
 local-zone: "askthemadpoet.net" always_nxdomain
@@ -7006,7 +7007,6 @@ local-zone: "autodavid.hr" always_nxdomain
 local-zone: "autodetali-161.ru" always_nxdomain
 local-zone: "autodevices.topterra.ru" always_nxdomain
 local-zone: "autodrim.pl" always_nxdomain
-local-zone: "autodwg.com" always_nxdomain
 local-zone: "autoecole-hammamet.tn" always_nxdomain
 local-zone: "autoecole.inchtechs.com" always_nxdomain
 local-zone: "autoecolehophophop.com" always_nxdomain
@@ -7190,7 +7190,6 @@ local-zone: "avenue5.co.in.cp-in-10.webhostbox.net" always_nxdomain
 local-zone: "avenzis.nl" always_nxdomain
 local-zone: "averefiducia.com" always_nxdomain
 local-zone: "averfoodrs.eu" always_nxdomain
-local-zone: "averin.pro" always_nxdomain
 local-zone: "averson.by" always_nxdomain
 local-zone: "averybit.com" always_nxdomain
 local-zone: "aveslor.com" always_nxdomain
@@ -7401,6 +7400,7 @@ local-zone: "aydinmete.com.tr" always_nxdomain
 local-zone: "aydinvps.com" always_nxdomain
 local-zone: "aydosyazilim.com" always_nxdomain
 local-zone: "ayecargo.com" always_nxdomain
+local-zone: "ayefin.com" always_nxdomain
 local-zone: "ayeletbenyosef.co.il" always_nxdomain
 local-zone: "ayerstechnology.com" always_nxdomain
 local-zone: "ayeshashoukat.com" always_nxdomain
@@ -7654,7 +7654,6 @@ local-zone: "babystep.biz" always_nxdomain
 local-zone: "babysteps.ge" always_nxdomain
 local-zone: "babyvogel.nl" always_nxdomain
 local-zone: "babzon.club" always_nxdomain
-local-zone: "bac.edu.my" always_nxdomain
 local-zone: "bacamanect.com" always_nxdomain
 local-zone: "baccaosutritue.vn" always_nxdomain
 local-zone: "baceldeniz.com" always_nxdomain
@@ -7685,6 +7684,7 @@ local-zone: "backpage-inc.com" always_nxdomain
 local-zone: "backpinging.com" always_nxdomain
 local-zone: "backselfconfidence.xyz" always_nxdomain
 local-zone: "backstage-secrets.com" always_nxdomain
+local-zone: "backthenstuff.com" always_nxdomain
 local-zone: "backup-new.5kmdeal.my" always_nxdomain
 local-zone: "backup.goooogle.us" always_nxdomain
 local-zone: "backup.litcel.com" always_nxdomain
@@ -8503,6 +8503,7 @@ local-zone: "beachcondolife.tk" always_nxdomain
 local-zone: "beachview.co.za" always_nxdomain
 local-zone: "beachvillas.gr" always_nxdomain
 local-zone: "beachwoodproperty.com.au" always_nxdomain
+local-zone: "beaconacademy.net" always_nxdomain
 local-zone: "beaconhousediscovery.com" always_nxdomain
 local-zone: "beaconr.rungta.ac.in" always_nxdomain
 local-zone: "beactivedigital.com" always_nxdomain
@@ -8524,6 +8525,7 @@ local-zone: "bearholdings.co" always_nxdomain
 local-zone: "bearingspecs.com" always_nxdomain
 local-zone: "bearinmindstrategies.com" always_nxdomain
 local-zone: "bearriverhealth.org" always_nxdomain
+local-zone: "bearsselection.xyz" always_nxdomain
 local-zone: "beaskyshanoi.com" always_nxdomain
 local-zone: "beastmas.club" always_nxdomain
 local-zone: "beat.vision" always_nxdomain
@@ -9400,7 +9402,6 @@ local-zone: "bigdealist.com" always_nxdomain
 local-zone: "bigdev.top" always_nxdomain
 local-zone: "bigdiamondeals.com" always_nxdomain
 local-zone: "bigeyes.com.tw" always_nxdomain
-local-zone: "bigfile.mail.naver.com" always_nxdomain
 local-zone: "bigfishchain.com" always_nxdomain
 local-zone: "bigfoothospitality.com" always_nxdomain
 local-zone: "bigg-live.com" always_nxdomain
@@ -9427,7 +9428,6 @@ local-zone: "bigssearch.com" always_nxdomain
 local-zone: "bigstudio.photo" always_nxdomain
 local-zone: "bigsunshinebooks.com" always_nxdomain
 local-zone: "bigtech24.de" always_nxdomain
-local-zone: "bigtext.club" always_nxdomain
 local-zone: "bigtrading.ga" always_nxdomain
 local-zone: "bigtvjoblist.com" always_nxdomain
 local-zone: "biguwh.com" always_nxdomain
@@ -9576,6 +9576,7 @@ local-zone: "binmsk.ru" always_nxdomain
 local-zone: "binnayem.com" always_nxdomain
 local-zone: "binoculars-shop.ru" always_nxdomain
 local-zone: "binom-perm.cf" always_nxdomain
+local-zone: "binsuloomgroup.com" always_nxdomain
 local-zone: "binta.xyz" always_nxdomain
 local-zone: "bintangbarutama.co.id" always_nxdomain
 local-zone: "bintec.pe" always_nxdomain
@@ -9756,7 +9757,6 @@ local-zone: "biyunhui.com" always_nxdomain
 local-zone: "biz-shop.pro" always_nxdomain
 local-zone: "biz.creationcabin.com" always_nxdomain
 local-zone: "bizajans.com" always_nxdomain
-local-zone: "bizasiatrading.com" always_nxdomain
 local-zone: "bizbhutanevents.com" always_nxdomain
 local-zone: "bizbuilder.co.za" always_nxdomain
 local-zone: "bizcodedigital.in" always_nxdomain
@@ -10412,7 +10412,6 @@ local-zone: "bloodybits.com" always_nxdomain
 local-zone: "bloombrainz.com" always_nxdomain
 local-zone: "bloomcommunityproject.org" always_nxdomain
 local-zone: "bloomestatelitigation.ca" always_nxdomain
-local-zone: "bloomfire.com" always_nxdomain
 local-zone: "bloomflores.com" always_nxdomain
 local-zone: "bloomhomes.in" always_nxdomain
 local-zone: "bloomingbridal.com.au" always_nxdomain
@@ -11190,6 +11189,7 @@ local-zone: "breathtakerstours.com" always_nxdomain
 local-zone: "breazytrans.com" always_nxdomain
 local-zone: "breccioneserrande.com" always_nxdomain
 local-zone: "brechovip.com.br" always_nxdomain
+local-zone: "breda.com" always_nxdomain
 local-zone: "breebaart.net" always_nxdomain
 local-zone: "breed.wanttobea.com" always_nxdomain
 local-zone: "breedencomm.com" always_nxdomain
@@ -11322,6 +11322,7 @@ local-zone: "brittanyschoice.com" always_nxdomain
 local-zone: "britwind.tk" always_nxdomain
 local-zone: "brixxsites.com" always_nxdomain
 local-zone: "brizboy.com" always_nxdomain
+local-zone: "briztechnologies.com" always_nxdomain
 local-zone: "brj.sitedevlink.com" always_nxdomain
 local-zone: "brjsrwaco.watchdogdns.duckdns.org" always_nxdomain
 local-zone: "brkcakiroglu.com" always_nxdomain
@@ -12269,6 +12270,7 @@ local-zone: "camlikkamping.com" always_nxdomain
 local-zone: "camnangtrithuc.com" always_nxdomain
 local-zone: "campagnesms.info" always_nxdomain
 local-zone: "campaigns.actionable-science.com" always_nxdomain
+local-zone: "campana20gb.com" always_nxdomain
 local-zone: "campanus.cz" always_nxdomain
 local-zone: "campbellcheesegrocerybk.com" always_nxdomain
 local-zone: "campbellsbay.school.nz" always_nxdomain
@@ -12955,6 +12957,7 @@ local-zone: "cavalluindistella.com" always_nxdomain
 local-zone: "cavanasipontum.ru" always_nxdomain
 local-zone: "cavancameroon.com" always_nxdomain
 local-zone: "cavaticus.com" always_nxdomain
+local-zone: "caveaudelteatro.it" always_nxdomain
 local-zone: "caveaulechapeau.ch" always_nxdomain
 local-zone: "cavedimarmocarrara.com" always_nxdomain
 local-zone: "cavefashion.com" always_nxdomain
@@ -13713,7 +13716,6 @@ local-zone: "cheaperlounge.com" always_nxdomain
 local-zone: "cheapesthost.com.ng" always_nxdomain
 local-zone: "cheapgadgets-gq.000webhostapp.com" always_nxdomain
 local-zone: "cheapmlbjerseysmarlins.com" always_nxdomain
-local-zone: "cheapmusic.info" always_nxdomain
 local-zone: "cheapnikeairmaxshoes-online.com" always_nxdomain
 local-zone: "cheapoakleysunglasses.net" always_nxdomain
 local-zone: "cheappigeontraps.com" always_nxdomain
@@ -14489,6 +14491,7 @@ local-zone: "clcindy.com" always_nxdomain
 local-zone: "cld-net.com" always_nxdomain
 local-zone: "cld.persiangig.com" always_nxdomain
 local-zone: "cld.pt" always_nxdomain
+local-zone: "cle.ae" always_nxdomain
 local-zone: "clean.crypt24.in" always_nxdomain
 local-zone: "clean.olexandry.ru" always_nxdomain
 local-zone: "clean.vanzherke.ru" always_nxdomain
@@ -14782,7 +14785,6 @@ local-zone: "cmdaitexpo.com" always_nxdomain
 local-zone: "cmdez.ir" always_nxdomain
 local-zone: "cmdou.com" always_nxdomain
 local-zone: "cmeaststar.de" always_nxdomain
-local-zone: "cmg.asia" always_nxdomain
 local-zone: "cmgroup.com.ua" always_nxdomain
 local-zone: "cmhighschool.edu.bd" always_nxdomain
 local-zone: "cmhmfgoutbound.protection.sketchwefair-watduoliprudential.com.watchdogdns.duckdns.org" always_nxdomain
@@ -15325,7 +15327,6 @@ local-zone: "completervnc.com" always_nxdomain
 local-zone: "compliancewing.com" always_nxdomain
 local-zone: "complience.com" always_nxdomain
 local-zone: "compln.net" always_nxdomain
-local-zone: "components.technologymindz.com" always_nxdomain
 local-zone: "composecv.com" always_nxdomain
 local-zone: "composite.be" always_nxdomain
 local-zone: "compoundy.com" always_nxdomain
@@ -15797,6 +15798,7 @@ local-zone: "cordondating.xyz" always_nxdomain
 local-zone: "cordulaklein.de" always_nxdomain
 local-zone: "cordwells.com.au" always_nxdomain
 local-zone: "cordythaiproducts.com" always_nxdomain
+local-zone: "core-tech.com" always_nxdomain
 local-zone: "core.org.af" always_nxdomain
 local-zone: "corebodybrand.com" always_nxdomain
 local-zone: "corehealingmassage.com" always_nxdomain
@@ -16863,7 +16865,6 @@ local-zone: "cysis.cl" always_nxdomain
 local-zone: "cysyonetim.com" always_nxdomain
 local-zone: "cytecgroup.co.za" always_nxdomain
 local-zone: "cytf.coloradotennis.org" always_nxdomain
-local-zone: "cythia0805.com" always_nxdomain
 local-zone: "cythromatt.com" always_nxdomain
 local-zone: "cytotan.website" always_nxdomain
 local-zone: "cytotec-tabs.com" always_nxdomain
@@ -17688,6 +17689,7 @@ local-zone: "ddl7.data.hu" always_nxdomain
 local-zone: "ddmadrasah.com" always_nxdomain
 local-zone: "ddraiggoch.co.uk" always_nxdomain
 local-zone: "ddrcsangrur.com" always_nxdomain
+local-zone: "ddreciclaje.com" always_nxdomain
 local-zone: "dds.com.mx" always_nxdomain
 local-zone: "ddsandesh.com" always_nxdomain
 local-zone: "ddsolutions.pl" always_nxdomain
@@ -18817,7 +18819,6 @@ local-zone: "dewabarbeque.com" always_nxdomain
 local-zone: "dewakartu.info" always_nxdomain
 local-zone: "dewalhoeve.nl" always_nxdomain
 local-zone: "dewapisang.com" always_nxdomain
-local-zone: "dewarejeki.info" always_nxdomain
 local-zone: "dewarejeki.link" always_nxdomain
 local-zone: "dewibebaris.com" always_nxdomain
 local-zone: "dewide.com.br" always_nxdomain
@@ -18847,7 +18848,6 @@ local-zone: "dfafreezeclan.com" always_nxdomain
 local-zone: "dfc33.xyz" always_nxdomain
 local-zone: "dfcf.91756.cn" always_nxdomain
 local-zone: "dfcvbrtwe.ug" always_nxdomain
-local-zone: "dfd.zhzy999.net" always_nxdomain
 local-zone: "dfddfg4df.ru" always_nxdomain
 local-zone: "dffdds.club" always_nxdomain
 local-zone: "dffieo8ieo0380ieovsddsdff89r309ieo89334.com" always_nxdomain
@@ -19806,9 +19806,6 @@ local-zone: "dobro.co.ua" always_nxdomain
 local-zone: "dobrojutrodjevojke.com" always_nxdomain
 local-zone: "dobroviz.com.ua" always_nxdomain
 local-zone: "dobrovorot.su" always_nxdomain
-local-zone: "doc-04-cc-docs.googleusercontent.com" always_nxdomain
-local-zone: "doc-08-5o-docs.googleusercontent.com" always_nxdomain
-local-zone: "doc-0s-c8-docs.googleusercontent.com" always_nxdomain
 local-zone: "doc-hub.healthycheapfast.com" always_nxdomain
 local-zone: "doc-japan.com" always_nxdomain
 local-zone: "doc.albaspizzaastoria.com" always_nxdomain
@@ -20222,7 +20219,6 @@ local-zone: "dosti.webdesignhd.nl" always_nxdomain
 local-zone: "dosttours.com" always_nxdomain
 local-zone: "dosya.tc" always_nxdomain
 local-zone: "dosyproperties.info" always_nxdomain
-local-zone: "dot.state.mn.us" always_nxdomain
 local-zone: "dota2-down.club" always_nxdomain
 local-zone: "dota2-down.site" always_nxdomain
 local-zone: "dotactive.com.au" always_nxdomain
@@ -20429,7 +20425,6 @@ local-zone: "dpa.atos-nao.net" always_nxdomain
 local-zone: "dpack365-my.sharepoint.com" always_nxdomain
 local-zone: "dpacorp.org" always_nxdomain
 local-zone: "dparmm1.wci.com.ph" always_nxdomain
-local-zone: "dpaste.com" always_nxdomain
 local-zone: "dpbh.info" always_nxdomain
 local-zone: "dpbusinessportal.ro" always_nxdomain
 local-zone: "dpe.com.tw" always_nxdomain
@@ -20580,6 +20575,7 @@ local-zone: "dreamlife.com.br" always_nxdomain
 local-zone: "dreamluxuryhairco.com" always_nxdomain
 local-zone: "dreammakerselitefitness.com" always_nxdomain
 local-zone: "dreammaster-uae.com" always_nxdomain
+local-zone: "dreammergeconsult.com" always_nxdomain
 local-zone: "dreammotokolkata.com" always_nxdomain
 local-zone: "dreams-innovations.com" always_nxdomain
 local-zone: "dreamsfashion.com.vn" always_nxdomain
@@ -21570,6 +21566,7 @@ local-zone: "ecity.network" always_nxdomain
 local-zone: "ecitytanduclongan.com" always_nxdomain
 local-zone: "eckdor.de" always_nxdomain
 local-zone: "ecker.aidnet.at" always_nxdomain
+local-zone: "ecklund.no" always_nxdomain
 local-zone: "eclairesuits.com" always_nxdomain
 local-zone: "eclatpro.com" always_nxdomain
 local-zone: "eclecticelectronics.net" always_nxdomain
@@ -22025,6 +22022,7 @@ local-zone: "eitchendie.com" always_nxdomain
 local-zone: "eitworld.com" always_nxdomain
 local-zone: "eiuh9r8fhr98fh.top" always_nxdomain
 local-zone: "eiuwowqwpeoeirwpei.com" always_nxdomain
+local-zone: "ejadarabia.com" always_nxdomain
 local-zone: "ejadvertising.com" always_nxdomain
 local-zone: "ejanlele.design" always_nxdomain
 local-zone: "ejdelapena.com" always_nxdomain
@@ -22247,6 +22245,7 @@ local-zone: "elevatedigitalma.com" always_nxdomain
 local-zone: "elevateducation.agreatidea.studio" always_nxdomain
 local-zone: "elevationshairboutique.com" always_nxdomain
 local-zone: "elevatorbracket.com" always_nxdomain
+local-zone: "elevennevele.com" always_nxdomain
 local-zone: "eleventhcapital.com" always_nxdomain
 local-zone: "elevituc.vn" always_nxdomain
 local-zone: "elezioni-oggi.it" always_nxdomain
@@ -23562,7 +23561,6 @@ local-zone: "etwowsharing.com" always_nxdomain
 local-zone: "etxse.xyz" always_nxdomain
 local-zone: "eu-easy.com" always_nxdomain
 local-zone: "eu.wildfire.paloaltonetworks.com" always_nxdomain
-local-zone: "eu1.salesforce.com" always_nxdomain
 local-zone: "eu283iwoqodjspqisjdf.com" always_nxdomain
 local-zone: "eu5-cdn.devid.info" always_nxdomain
 local-zone: "eubankphoto.com" always_nxdomain
@@ -24012,6 +24010,7 @@ local-zone: "exportaly.com" always_nxdomain
 local-zone: "exportcommunity.in" always_nxdomain
 local-zone: "exportef.info" always_nxdomain
 local-zone: "exposicaoceramicaearte.com.br" always_nxdomain
+local-zone: "exposvision.com" always_nxdomain
 local-zone: "expovitrinadelvalle.com" always_nxdomain
 local-zone: "expresi.club" always_nxdomain
 local-zone: "expresodeportivo.com" always_nxdomain
@@ -25081,6 +25080,7 @@ local-zone: "file2yu.com" always_nxdomain
 local-zone: "file546456.com" always_nxdomain
 local-zone: "filebase.duckdns.org" always_nxdomain
 local-zone: "filebase.mogelgott.de" always_nxdomain
+local-zone: "filebin.net" always_nxdomain
 local-zone: "filebox.hiworks.com" always_nxdomain
 local-zone: "filebr.com" always_nxdomain
 local-zone: "fileco.jobkorea.co.kr" always_nxdomain
@@ -25912,7 +25912,6 @@ local-zone: "forex4pips.com" always_nxdomain
 local-zone: "forexaddictt.com" always_nxdomain
 local-zone: "forexbrokeracademy.com" always_nxdomain
 local-zone: "forexpedia.tradewithrobbie.com" always_nxdomain
-local-zone: "forexpf.ru" always_nxdomain
 local-zone: "forexproservice.com" always_nxdomain
 local-zone: "forexrobot.youralgo.com" always_nxdomain
 local-zone: "forextradingfrx.org" always_nxdomain
@@ -28373,6 +28372,7 @@ local-zone: "goitsoluciones.com" always_nxdomain
 local-zone: "goji-actives.net" always_nxdomain
 local-zone: "gojukai.co" always_nxdomain
 local-zone: "gokceozagar.com" always_nxdomain
+local-zone: "goker.com.tr" always_nxdomain
 local-zone: "gokhancakmak.com.tr" always_nxdomain
 local-zone: "gokjerijk.nl" always_nxdomain
 local-zone: "gokkastennl.com" always_nxdomain
@@ -28668,7 +28668,6 @@ local-zone: "goudu.club" always_nxdomain
 local-zone: "gourmandd.com" always_nxdomain
 local-zone: "gourmetlab.pe" always_nxdomain
 local-zone: "gourmetreats.in" always_nxdomain
-local-zone: "gov.kr" always_nxdomain
 local-zone: "gov.rsmart-testsolutions.watchdogdns.duckdns.org" always_nxdomain
 local-zone: "govche.in" always_nxdomain
 local-zone: "goveboatclub.com.au" always_nxdomain
@@ -29185,7 +29184,6 @@ local-zone: "grupocrecer.org" always_nxdomain
 local-zone: "grupodpi.pe" always_nxdomain
 local-zone: "grupodreyer.com" always_nxdomain
 local-zone: "grupoembatec.com" always_nxdomain
-local-zone: "grupoeq.com" always_nxdomain
 local-zone: "grupoesparta.com.ve" always_nxdomain
 local-zone: "grupofabiamce.com.br" always_nxdomain
 local-zone: "grupofischermineracao.com.br" always_nxdomain
@@ -29195,6 +29193,7 @@ local-zone: "grupoiesp.tk" always_nxdomain
 local-zone: "grupoinalen.com" always_nxdomain
 local-zone: "grupoinfonet.com" always_nxdomain
 local-zone: "grupojg.com.br" always_nxdomain
+local-zone: "grupolainmaculada.com" always_nxdomain
 local-zone: "grupolaplace.com.br" always_nxdomain
 local-zone: "grupoloang.com" always_nxdomain
 local-zone: "grupolorena.com.sv" always_nxdomain
@@ -29293,6 +29292,7 @@ local-zone: "gthtech.com" always_nxdomain
 local-zone: "gtidae.com.pl" always_nxdomain
 local-zone: "gtim.agency" always_nxdomain
 local-zone: "gtiperu.com" always_nxdomain
+local-zone: "gtm-au.com" always_nxdomain
 local-zone: "gtminas.com.br" always_nxdomain
 local-zone: "gtnaidu.com" always_nxdomain
 local-zone: "gtomeconquista.com" always_nxdomain
@@ -29556,6 +29556,7 @@ local-zone: "h-surgeon.info" always_nxdomain
 local-zone: "h-w-c.net" always_nxdomain
 local-zone: "h.eurotrading.com.pl" always_nxdomain
 local-zone: "h.j990981.ru" always_nxdomain
+local-zone: "h.top4top.io" always_nxdomain
 local-zone: "h.valerana44.ru" always_nxdomain
 local-zone: "h1.iwakalong.ru" always_nxdomain
 local-zone: "h112321.s08.test-hf.su" always_nxdomain
@@ -31207,7 +31208,6 @@ local-zone: "home-racing.com" always_nxdomain
 local-zone: "home-spy-shop.com" always_nxdomain
 local-zone: "home.99eurowebsite.ie" always_nxdomain
 local-zone: "home.barley-plus.com" always_nxdomain
-local-zone: "home.earthlink.net" always_nxdomain
 local-zone: "home.evrstudio.com" always_nxdomain
 local-zone: "home.healthiestu.com" always_nxdomain
 local-zone: "home.isdes.com" always_nxdomain
@@ -31680,6 +31680,7 @@ local-zone: "houzess.com" always_nxdomain
 local-zone: "how-to-nampa.com" always_nxdomain
 local-zone: "how-to-tech.com" always_nxdomain
 local-zone: "how.ph" always_nxdomain
+local-zone: "howalshafikings.com" always_nxdomain
 local-zone: "howardbenz.com" always_nxdomain
 local-zone: "howardbragman.com" always_nxdomain
 local-zone: "howardgfranklin.com" always_nxdomain
@@ -31781,7 +31782,6 @@ local-zone: "htepl.com" always_nxdomain
 local-zone: "hthaher.com" always_nxdomain
 local-zone: "hthindustrial.com" always_nxdomain
 local-zone: "hthttp" always_nxdomain
-local-zone: "htl.li" always_nxdomain
 local-zone: "htl.ru" always_nxdomain
 local-zone: "htlinternational.org" always_nxdomain
 local-zone: "htlvn.com" always_nxdomain
@@ -32104,7 +32104,6 @@ local-zone: "i-sharecloud.com" always_nxdomain
 local-zone: "i-supportcharity.com" always_nxdomain
 local-zone: "i-vnsweyu.pl" always_nxdomain
 local-zone: "i-voda.com" always_nxdomain
-local-zone: "i.cubeupload.com" always_nxdomain
 local-zone: "i.fiery.me" always_nxdomain
 local-zone: "i.fluffy.cc" always_nxdomain
 local-zone: "i.funtourspt.eu" always_nxdomain
@@ -32141,6 +32140,7 @@ local-zone: "iaconsultafrica.com" always_nxdomain
 local-zone: "iacp-od.org" always_nxdomain
 local-zone: "iadeca.es" always_nxdomain
 local-zone: "iadigital.com.br" always_nxdomain
+local-zone: "iaecconsultants.com" always_nxdomain
 local-zone: "iain-padangsidimpuan.ac.id" always_nxdomain
 local-zone: "iais.ac.id" always_nxdomain
 local-zone: "iakah.pw" always_nxdomain
@@ -32889,6 +32889,7 @@ local-zone: "imellda.com" always_nxdomain
 local-zone: "imemmw.org" always_nxdomain
 local-zone: "imenbazr.com" always_nxdomain
 local-zone: "imenergo.com" always_nxdomain
+local-zone: "imenizeh.ir" always_nxdomain
 local-zone: "imensanatsi.com" always_nxdomain
 local-zone: "imensandogh.com" always_nxdomain
 local-zone: "imersiongis.com" always_nxdomain
@@ -33054,6 +33055,7 @@ local-zone: "in100tive.com" always_nxdomain
 local-zone: "in365.vn" always_nxdomain
 local-zone: "in8.keton8.com" always_nxdomain
 local-zone: "in9cm.com.br" always_nxdomain
+local-zone: "inac-americas.com" always_nxdomain
 local-zone: "inacioferros.com" always_nxdomain
 local-zone: "inaczasie.pl" always_nxdomain
 local-zone: "inadmin.convshop.com" always_nxdomain
@@ -33137,7 +33139,6 @@ local-zone: "indian-escorts-dubai.com" always_nxdomain
 local-zone: "indian-escorts-qatar.com" always_nxdomain
 local-zone: "indian-escorts-rak.com" always_nxdomain
 local-zone: "indian-escorts-sharjah.com" always_nxdomain
-local-zone: "indianagoods.club" always_nxdomain
 local-zone: "indianblog.info" always_nxdomain
 local-zone: "indianceramicsourcing.com" always_nxdomain
 local-zone: "indianescortsabudhabi.com" always_nxdomain
@@ -33704,6 +33705,7 @@ local-zone: "integraciontotal.com.mx" always_nxdomain
 local-zone: "integracooperativa.com" always_nxdomain
 local-zone: "integrafika.co.uk" always_nxdomain
 local-zone: "integraga.com" always_nxdomain
+local-zone: "integralc.com" always_nxdomain
 local-zone: "integralcs.com.br" always_nxdomain
 local-zone: "integralestates.in" always_nxdomain
 local-zone: "integralmakeup.com" always_nxdomain
@@ -33801,7 +33803,6 @@ local-zone: "internationalmscareerseminar.com" always_nxdomain
 local-zone: "internaut.in" always_nxdomain
 local-zone: "internetcasinoweblog.com" always_nxdomain
 local-zone: "internetjogasz.hu" always_nxdomain
-local-zone: "internetlink.com.mx" always_nxdomain
 local-zone: "internetmarketing4pros.com" always_nxdomain
 local-zone: "internetofsmell.com" always_nxdomain
 local-zone: "internetordbogen.dk" always_nxdomain
@@ -33968,6 +33969,7 @@ local-zone: "ioe-learning.com" always_nxdomain
 local-zone: "ioffe-soft.ru" always_nxdomain
 local-zone: "ioffexpert.com" always_nxdomain
 local-zone: "ioi3.com" always_nxdomain
+local-zone: "iol.ie" always_nxdomain
 local-zone: "iolandagazzerro.it" always_nxdomain
 local-zone: "ion-consulting.com" always_nxdomain
 local-zone: "ioncaresindia.in" always_nxdomain
@@ -34049,6 +34051,7 @@ local-zone: "iphones.bid" always_nxdomain
 local-zone: "iphonessuckballs.life" always_nxdomain
 local-zone: "iphoneteknikservisim.net" always_nxdomain
 local-zone: "iphonewin.website" always_nxdomain
+local-zone: "iphotoalot.com" always_nxdomain
 local-zone: "iphys-hypoxia.kz" always_nxdomain
 local-zone: "ipisu.ru" always_nxdomain
 local-zone: "ipjem.com.br" always_nxdomain
@@ -34675,6 +34678,7 @@ local-zone: "iykelinksyuiop.5gbfree.com" always_nxdomain
 local-zone: "iyle.co.uk" always_nxdomain
 local-zone: "iyycqg.bn.files.1drv.com" always_nxdomain
 local-zone: "iz.owak-kmyt.ru" always_nxdomain
+local-zone: "iz.poznan.pl" always_nxdomain
 local-zone: "izabelatrojanowska.pl" always_nxdomain
 local-zone: "izavu.com" always_nxdomain
 local-zone: "izbetalia.com" always_nxdomain
@@ -35614,7 +35618,6 @@ local-zone: "joedee.co.za" always_nxdomain
 local-zone: "joegie.nl" always_nxdomain
 local-zone: "joeing.duckdns.org" always_nxdomain
 local-zone: "joeing.rapiddns.ru" always_nxdomain
-local-zone: "joeing.warzonedns.com" always_nxdomain
 local-zone: "joeing2.duckdns.org" always_nxdomain
 local-zone: "joeksdj.nl" always_nxdomain
 local-zone: "joelanguell.com" always_nxdomain
@@ -35783,6 +35786,7 @@ local-zone: "josemoo.com" always_nxdomain
 local-zone: "josenutricion.com" always_nxdomain
 local-zone: "joseph.gergis.net" always_nxdomain
 local-zone: "josephalavi.com" always_nxdomain
+local-zone: "josephdutton.com" always_nxdomain
 local-zone: "josephreynolds.net" always_nxdomain
 local-zone: "josephsaadeh.me" always_nxdomain
 local-zone: "josepsullca.com" always_nxdomain
@@ -36955,6 +36959,7 @@ local-zone: "kedaicetakklang.com" always_nxdomain
 local-zone: "kedaijuara.com" always_nxdomain
 local-zone: "kedaimadu.net" always_nxdomain
 local-zone: "kedi-russian.ru" always_nxdomain
+local-zone: "kedisons.com" always_nxdomain
 local-zone: "keelsoft.com" always_nxdomain
 local-zone: "keenpreps.co.uk" always_nxdomain
 local-zone: "keepchest.hopto.org" always_nxdomain
@@ -38614,6 +38619,7 @@ local-zone: "kynmandesign.co.uk" always_nxdomain
 local-zone: "kyokushinmiddleeast.com" always_nxdomain
 local-zone: "kyoman.vn" always_nxdomain
 local-zone: "kyoto-shikakeya.com" always_nxdomain
+local-zone: "kyotoforum.or.jp" always_nxdomain
 local-zone: "kyouei.co.th" always_nxdomain
 local-zone: "kypa.or.ke" always_nxdomain
 local-zone: "kyrmedia.com" always_nxdomain
@@ -39166,6 +39172,7 @@ local-zone: "latiendita.miradiols.cl" always_nxdomain
 local-zone: "latinannualmeeting.com" always_nxdomain
 local-zone: "latinaradio.cl" always_nxdomain
 local-zone: "latinbeat.com" always_nxdomain
+local-zone: "latinigroup.com" always_nxdomain
 local-zone: "latinos-latins.online" always_nxdomain
 local-zone: "latinovoicesmn.org" always_nxdomain
 local-zone: "latiprantz.com" always_nxdomain
@@ -39540,7 +39547,6 @@ local-zone: "legphelhotel.com" always_nxdomain
 local-zone: "legpnnldy.cf" always_nxdomain
 local-zone: "legrand-boutique.com" always_nxdomain
 local-zone: "legrand.ba" always_nxdomain
-local-zone: "legrand.us" always_nxdomain
 local-zone: "legrandmaghrebconsulting.com" always_nxdomain
 local-zone: "legrandreve.pt" always_nxdomain
 local-zone: "legsgoshop.com" always_nxdomain
@@ -40055,6 +40061,7 @@ local-zone: "lightswitchmarketing.biz" always_nxdomain
 local-zone: "lightvalleyprune.com" always_nxdomain
 local-zone: "lightwerq.com" always_nxdomain
 local-zone: "lightyard.com" always_nxdomain
+local-zone: "lignar.com" always_nxdomain
 local-zone: "lignarium.se" always_nxdomain
 local-zone: "lignumpolska.com" always_nxdomain
 local-zone: "liguebretagnebillard.fr" always_nxdomain
@@ -40196,7 +40203,6 @@ local-zone: "link.fivetier.com" always_nxdomain
 local-zone: "link.gocrazyflower.com" always_nxdomain
 local-zone: "link.mx" always_nxdomain
 local-zone: "link.nocomplaintsday.info" always_nxdomain
-local-zone: "link.zixcentral.com" always_nxdomain
 local-zone: "link100.cc" always_nxdomain
 local-zone: "link17.by" always_nxdomain
 local-zone: "link2bio.ir" always_nxdomain
@@ -40274,6 +40280,7 @@ local-zone: "liragec.org" always_nxdomain
 local-zone: "lirave.bplaced.net" always_nxdomain
 local-zone: "lis-consult.dk" always_nxdomain
 local-zone: "lisab.se" always_nxdomain
+local-zone: "lisagirl.net" always_nxdomain
 local-zone: "lisans.boxnet.com.tr" always_nxdomain
 local-zone: "lisansustu.info" always_nxdomain
 local-zone: "lisaraeswan.com" always_nxdomain
@@ -40385,7 +40392,6 @@ local-zone: "livechallenge.fr" always_nxdomain
 local-zone: "livecigarevent.com" always_nxdomain
 local-zone: "livecricketscorecard.info" always_nxdomain
 local-zone: "livedaynews.com" always_nxdomain
-local-zone: "livedemo00.template-help.com" always_nxdomain
 local-zone: "livedownload.in" always_nxdomain
 local-zone: "livedrumtracks.com" always_nxdomain
 local-zone: "livehasa.com" always_nxdomain
@@ -40412,6 +40418,7 @@ local-zone: "livetechsupport.ca" always_nxdomain
 local-zone: "livetesting.xyz" always_nxdomain
 local-zone: "livetotry.com" always_nxdomain
 local-zone: "livetours.cl" always_nxdomain
+local-zone: "livetrack.in" always_nxdomain
 local-zone: "livetvsports.ml" always_nxdomain
 local-zone: "liveu.lk" always_nxdomain
 local-zone: "liviavicentini.com" always_nxdomain
@@ -42058,6 +42065,7 @@ local-zone: "mail.openscholarly.com" always_nxdomain
 local-zone: "mail.optiua.com" always_nxdomain
 local-zone: "mail.oregonwinerental.net" always_nxdomain
 local-zone: "mail.outboundnat.com" always_nxdomain
+local-zone: "mail.pallejabcn.com" always_nxdomain
 local-zone: "mail.paracep.com" always_nxdomain
 local-zone: "mail.paramountstudiosholidayvillas.com" always_nxdomain
 local-zone: "mail.parkernetworks.com" always_nxdomain
@@ -43105,6 +43113,7 @@ local-zone: "massdev.co" always_nxdomain
 local-zone: "masseur.es" always_nxdomain
 local-zone: "masseyatnandina.com" always_nxdomain
 local-zone: "massimopintus.com" always_nxdomain
+local-zone: "massivedynamicks.com" always_nxdomain
 local-zone: "massivesales.co.uk" always_nxdomain
 local-zone: "massivewebtech.com" always_nxdomain
 local-zone: "massomsadarpuri.com" always_nxdomain
@@ -44258,7 +44267,6 @@ local-zone: "mfmr.gov.sl" always_nxdomain
 local-zone: "mfomjr.com" always_nxdomain
 local-zone: "mfotovideo.ro" always_nxdomain
 local-zone: "mfpburundi.bi" always_nxdomain
-local-zone: "mfpc.org.my" always_nxdomain
 local-zone: "mfppanel.xyz" always_nxdomain
 local-zone: "mfpvision.com" always_nxdomain
 local-zone: "mfronza.com.br" always_nxdomain
@@ -44409,7 +44417,6 @@ local-zone: "micropcsystem.com" always_nxdomain
 local-zone: "microratings.tk" always_nxdomain
 local-zone: "micros0ft1.ddns.net" always_nxdomain
 local-zone: "microservicesmonitor.com" always_nxdomain
-local-zone: "microsfotgooglegmailoutlook365mailallaregoodformailing.warzonedns.com" always_nxdomain
 local-zone: "microsoft-01.dynamic-dns.net" always_nxdomain
 local-zone: "microsoft-dl.com.br.md-43.webhostbox.net" always_nxdomain
 local-zone: "microsoft-frameworkseguro.com" always_nxdomain
@@ -45542,6 +45549,7 @@ local-zone: "mooi-trade.com" always_nxdomain
 local-zone: "mooipilates.com" always_nxdomain
 local-zone: "mooithailand.nl" always_nxdomain
 local-zone: "moolchi.com" always_nxdomain
+local-zone: "moolo.pl" always_nxdomain
 local-zone: "moomi-daeri.com" always_nxdomain
 local-zone: "moomicos.com" always_nxdomain
 local-zone: "moommam.fr" always_nxdomain
@@ -45851,6 +45859,7 @@ local-zone: "mpgbss.com" always_nxdomain
 local-zone: "mpgestaodepessoas.com.br" always_nxdomain
 local-zone: "mpii.tech" always_nxdomain
 local-zone: "mpinteligente.com" always_nxdomain
+local-zone: "mpkglobaltrainingcorp.net" always_nxdomain
 local-zone: "mplmodapk.site" always_nxdomain
 local-zone: "mpls.foodiecycle.com" always_nxdomain
 local-zone: "mpn.vn" always_nxdomain
@@ -46922,6 +46931,7 @@ local-zone: "nakhlmarket.com" always_nxdomain
 local-zone: "nakshadekho.com" always_nxdomain
 local-zone: "nakshatrajoshi.com" always_nxdomain
 local-zone: "nal.com.ua" always_nxdomain
+local-zone: "nalahotel.com" always_nxdomain
 local-zone: "nalcalar.com" always_nxdomain
 local-zone: "nalfonsotriston.city" always_nxdomain
 local-zone: "nalmac.com" always_nxdomain
@@ -47244,7 +47254,6 @@ local-zone: "nbfghreqww.ug" always_nxdomain
 local-zone: "nbgcpa.net" always_nxdomain
 local-zone: "nbgcpa.org" always_nxdomain
 local-zone: "nbhgroup.in" always_nxdomain
-local-zone: "nbigfile.mail.naver.com" always_nxdomain
 local-zone: "nbiyan.vn" always_nxdomain
 local-zone: "nbj.engaged.it" always_nxdomain
 local-zone: "nbn-nrc.org" always_nxdomain
@@ -47483,6 +47492,7 @@ local-zone: "netafix.com" always_nxdomain
 local-zone: "netasarim.com" always_nxdomain
 local-zone: "netbenfey.ciprudential.com.watchdogdns.duckdns.org" always_nxdomain
 local-zone: "netcity1.net" always_nxdomain
+local-zone: "netck.pl" always_nxdomain
 local-zone: "netcom-soft.com" always_nxdomain
 local-zone: "netcomp.lizave.store" always_nxdomain
 local-zone: "netcorpsgroup.com" always_nxdomain
@@ -47503,7 +47513,6 @@ local-zone: "netin.vn" always_nxdomain
 local-zone: "netizennepal.com" always_nxdomain
 local-zone: "netkafem.org" always_nxdomain
 local-zone: "netking.duckdns.org" always_nxdomain
-local-zone: "netlink.com" always_nxdomain
 local-zone: "netm.club" always_nxdomain
 local-zone: "netmaffia.net" always_nxdomain
 local-zone: "netmansoft.com" always_nxdomain
@@ -47970,6 +47979,7 @@ local-zone: "nguyenthanhriori.com" always_nxdomain
 local-zone: "nguyenthituyet.org" always_nxdomain
 local-zone: "nguyenthuyhanh.com.vn" always_nxdomain
 local-zone: "nguyentrongkha.com" always_nxdomain
+local-zone: "ngyusa.com" always_nxdomain
 local-zone: "nhacchoquangcao24h.com" always_nxdomain
 local-zone: "nhadaiphat.com" always_nxdomain
 local-zone: "nhadatbaria.asia" always_nxdomain
@@ -47980,7 +47990,6 @@ local-zone: "nhadatphonglinh.com" always_nxdomain
 local-zone: "nhadatquan2.xyz" always_nxdomain
 local-zone: "nhadatthienthoi.com" always_nxdomain
 local-zone: "nhadephungyen.com" always_nxdomain
-local-zone: "nhadepkientruc.net" always_nxdomain
 local-zone: "nhahangdaihung.com" always_nxdomain
 local-zone: "nhahanghaivuong.vn" always_nxdomain
 local-zone: "nhahanglegiang.vn" always_nxdomain
@@ -48067,6 +48076,7 @@ local-zone: "nickelaction.com" always_nxdomain
 local-zone: "nicklaslj.se" always_nxdomain
 local-zone: "nickpeets.com" always_nxdomain
 local-zone: "nickycooperhomes.co.nz" always_nxdomain
+local-zone: "nicolaisen.de" always_nxdomain
 local-zone: "nicolasbaldoma.com" always_nxdomain
 local-zone: "nicolasgalvez.com" always_nxdomain
 local-zone: "nicolaskohen.com" always_nxdomain
@@ -48457,7 +48467,6 @@ local-zone: "nonglek.net" always_nxdomain
 local-zone: "nongnghiepgiaphat.com" always_nxdomain
 local-zone: "nongsan24h.com" always_nxdomain
 local-zone: "nongsananhnguyen.com" always_nxdomain
-local-zone: "nongsandungha.com" always_nxdomain
 local-zone: "nonlocality.com" always_nxdomain
 local-zone: "nonnemacher.com.br" always_nxdomain
 local-zone: "nonnewspaper.com" always_nxdomain
@@ -48689,6 +48698,7 @@ local-zone: "novoselica.dp.ua" always_nxdomain
 local-zone: "novosibirsk.quadrotek-logistic.ru" always_nxdomain
 local-zone: "novostack.net" always_nxdomain
 local-zone: "novotravel.ir" always_nxdomain
+local-zone: "nowak-meble.eu" always_nxdomain
 local-zone: "nowkh.com" always_nxdomain
 local-zone: "nowley-rus.ru" always_nxdomain
 local-zone: "nowley-rus.ruadministrator" always_nxdomain
@@ -49330,7 +49340,6 @@ local-zone: "ohotnicom.com" always_nxdomain
 local-zone: "ohscrane.com" always_nxdomain
 local-zone: "ohters.de" always_nxdomain
 local-zone: "ohyellow.nl" always_nxdomain
-local-zone: "oi68.tinypic.com" always_nxdomain
 local-zone: "oiainbtaea38.silverabout.ml" always_nxdomain
 local-zone: "oiasdnqweqasd.com" always_nxdomain
 local-zone: "oiflddw.gq" always_nxdomain
@@ -49584,6 +49593,7 @@ local-zone: "ominenergo.gov.rsmart-testsolutions.watchdogdns.duckdns.org" always
 local-zone: "ominix.com" always_nxdomain
 local-zone: "omitkyspisar.cz" always_nxdomain
 local-zone: "omiwnusantara.com" always_nxdomain
+local-zone: "omlinux.com" always_nxdomain
 local-zone: "ommar.ps" always_nxdomain
 local-zone: "ommienetwork.000webhostapp.com" always_nxdomain
 local-zone: "omni-anela.com" always_nxdomain
@@ -50548,6 +50558,7 @@ local-zone: "pablorub-cp38.wordpresstemporal.com" always_nxdomain
 local-zone: "pabloteixeira.com" always_nxdomain
 local-zone: "pablotrabucchelli.com" always_nxdomain
 local-zone: "pabnainfo.com" always_nxdomain
+local-zone: "paboard.com" always_nxdomain
 local-zone: "pabrik-tenda.id" always_nxdomain
 local-zone: "pabx-uae.com" always_nxdomain
 local-zone: "pacbest.org" always_nxdomain
@@ -50613,6 +50624,7 @@ local-zone: "pahahome.com" always_nxdomain
 local-zone: "pahanlab.com" always_nxdomain
 local-zone: "paht.nuph.edu.ua" always_nxdomain
 local-zone: "pai.fai.umj.ac.id" always_nxdomain
+local-zone: "paides.com" always_nxdomain
 local-zone: "paidtv.siaraya.com" always_nxdomain
 local-zone: "paifi.net" always_nxdomain
 local-zone: "paigeplacements.co.uk" always_nxdomain
@@ -50943,6 +50955,7 @@ local-zone: "parkinsoncsra.org" always_nxdomain
 local-zone: "parkklead.com" always_nxdomain
 local-zone: "parkourschool.ru" always_nxdomain
 local-zone: "parkradio.ca" always_nxdomain
+local-zone: "parksfo.com" always_nxdomain
 local-zone: "parkside-mi.com" always_nxdomain
 local-zone: "parksteals.com" always_nxdomain
 local-zone: "parkwaygames.com" always_nxdomain
@@ -51069,6 +51082,7 @@ local-zone: "past.com.tr" always_nxdomain
 local-zone: "pastavadese.com" always_nxdomain
 local-zone: "paste.ee" always_nxdomain
 local-zone: "paste.makomk.com" always_nxdomain
+local-zone: "pasteboard.co" always_nxdomain
 local-zone: "pastecode.xyz" always_nxdomain
 local-zone: "pastelcolors.in" always_nxdomain
 local-zone: "pastilepentruslabit.ro" always_nxdomain
@@ -51312,6 +51326,7 @@ local-zone: "pd.ibigcse.net" always_nxdomain
 local-zone: "pd0rt.nl" always_nxdomain
 local-zone: "pdedas.com" always_nxdomain
 local-zone: "pdesaa.cimaa.pt" always_nxdomain
+local-zone: "pdf-archive.com" always_nxdomain
 local-zone: "pdf-archive.press" always_nxdomain
 local-zone: "pdf-archive.store" always_nxdomain
 local-zone: "pdf-compare.site" always_nxdomain
@@ -51347,6 +51362,7 @@ local-zone: "peacegreetings.com" always_nxdomain
 local-zone: "peacemed.e-nformation.ro" always_nxdomain
 local-zone: "peaceseedlings.org" always_nxdomain
 local-zone: "peacesprit.ir" always_nxdomain
+local-zone: "peacewatch.ch" always_nxdomain
 local-zone: "peach-slovenija.si" always_nxdomain
 local-zone: "peachgirl.ru" always_nxdomain
 local-zone: "peacock.dating" always_nxdomain
@@ -51396,6 +51412,7 @@ local-zone: "pedsassociates.com" always_nxdomain
 local-zone: "pedslovo.ru" always_nxdomain
 local-zone: "pedulirakyataceh.org" always_nxdomain
 local-zone: "peechproperties.com" always_nxdomain
+local-zone: "peekaboobubba.com.au" always_nxdomain
 local-zone: "peekaboorevue.com" always_nxdomain
 local-zone: "peekend.com" always_nxdomain
 local-zone: "peer2travel.com" always_nxdomain
@@ -51577,7 +51594,6 @@ local-zone: "periscope.es" always_nxdomain
 local-zone: "peritofinanceiro.tk" always_nxdomain
 local-zone: "perkasa.ddns.net" always_nxdomain
 local-zone: "perkasa.undiksha.ac.id" always_nxdomain
-local-zone: "perkasa.warzonedns.com" always_nxdomain
 local-zone: "perkfix.com" always_nxdomain
 local-zone: "perkim.bondowosokab.go.id" always_nxdomain
 local-zone: "perlage.net" always_nxdomain
@@ -51668,6 +51684,7 @@ local-zone: "petalsnbones.com" always_nxdomain
 local-zone: "petanisukses.club" always_nxdomain
 local-zone: "petcarepass.cz" always_nxdomain
 local-zone: "peteivs.co.nz" always_nxdomain
+local-zone: "petendereruk.pro" always_nxdomain
 local-zone: "peterantennas.bid" always_nxdomain
 local-zone: "peterbeckundpartner.cporsgrunn.folkbjnrwwww.watchdogdns.duckdns.org" always_nxdomain
 local-zone: "petercottontailmovie.com" always_nxdomain
@@ -51851,6 +51868,7 @@ local-zone: "phillbecker.com" always_nxdomain
 local-zone: "phillipjohnson.co.uk" always_nxdomain
 local-zone: "philomenabar.com.br" always_nxdomain
 local-zone: "philpaisley.com" always_nxdomain
+local-zone: "phimhdonline.tv" always_nxdomain
 local-zone: "phimmoinhat.online" always_nxdomain
 local-zone: "phimphot.tk" always_nxdomain
 local-zone: "phitemntech.com" always_nxdomain
@@ -52230,6 +52248,7 @@ local-zone: "pixel.as" always_nxdomain
 local-zone: "pixel.mobycare.website" always_nxdomain
 local-zone: "pixelcrush.net" always_nxdomain
 local-zone: "pixeldra.in" always_nxdomain
+local-zone: "pixeldrain.com" always_nxdomain
 local-zone: "pixelerp.com" always_nxdomain
 local-zone: "pixelfactorysolutions.xyz" always_nxdomain
 local-zone: "pixelguru.info" always_nxdomain
@@ -52333,6 +52352,7 @@ local-zone: "planitsolutions.co.nz" always_nxdomain
 local-zone: "planktonik.hu" always_nxdomain
 local-zone: "planmyfurnitureinterior.com" always_nxdomain
 local-zone: "planningportal.semblueinc.com" always_nxdomain
+local-zone: "planningtravel.es" always_nxdomain
 local-zone: "plannpick.com" always_nxdomain
 local-zone: "plano.xoom.it" always_nxdomain
 local-zone: "planodeobrasdeilhabela.com.br" always_nxdomain
@@ -52386,6 +52406,7 @@ local-zone: "plaxury.com" always_nxdomain
 local-zone: "play-movie.xyz" always_nxdomain
 local-zone: "play0.revosales.ru" always_nxdomain
 local-zone: "play2.revosales.ru" always_nxdomain
+local-zone: "play2win.buzz" always_nxdomain
 local-zone: "play4fitness.co.uk" always_nxdomain
 local-zone: "playalongmusic.net" always_nxdomain
 local-zone: "playasrivieramaya.com" always_nxdomain
@@ -52395,6 +52416,7 @@ local-zone: "playcoin.game" always_nxdomain
 local-zone: "playden.in" always_nxdomain
 local-zone: "playfire.online" always_nxdomain
 local-zone: "playgrounds.tumo.org" always_nxdomain
+local-zone: "playgroupsrl.com" always_nxdomain
 local-zone: "playhard.ru" always_nxdomain
 local-zone: "playitforwardnashville.com" always_nxdomain
 local-zone: "playkey.ga" always_nxdomain
@@ -52467,6 +52489,7 @@ local-zone: "plunatavan.com" always_nxdomain
 local-zone: "plurallider.com.br" always_nxdomain
 local-zone: "plus.mn" always_nxdomain
 local-zone: "plus1interactive.com" always_nxdomain
+local-zone: "plushshow.com" always_nxdomain
 local-zone: "plusjop.nl" always_nxdomain
 local-zone: "plusmicrotd.kz" always_nxdomain
 local-zone: "plussizeall.net" always_nxdomain
@@ -52706,7 +52729,6 @@ local-zone: "pontosat.com.br" always_nxdomain
 local-zone: "pontotocdistrictba.com" always_nxdomain
 local-zone: "pontus-euxinus.ro" always_nxdomain
 local-zone: "pony.s-p-y.ml" always_nxdomain
-local-zone: "pony.warzonedns.com" always_nxdomain
 local-zone: "ponytales.nostalgicbookshelf.com" always_nxdomain
 local-zone: "poojasingh.me" always_nxdomain
 local-zone: "pool.ug" always_nxdomain
@@ -52866,6 +52888,7 @@ local-zone: "positivechangesok.com" always_nxdomain
 local-zone: "positiveconvention.co.za" always_nxdomain
 local-zone: "positiveid.org" always_nxdomain
 local-zone: "positiverne.dk" always_nxdomain
+local-zone: "positronicsindia.com" always_nxdomain
 local-zone: "posizionareunsito.it" always_nxdomain
 local-zone: "poslovni-oglasi.com" always_nxdomain
 local-zone: "poslovno-pregovaranje.com" always_nxdomain
@@ -53329,6 +53352,7 @@ local-zone: "prismware.ml" always_nxdomain
 local-zone: "pristineglassmirror.com" always_nxdomain
 local-zone: "pristinequill.com" always_nxdomain
 local-zone: "prith-hauts-de-france.org" always_nxdomain
+local-zone: "prithvigroup.net" always_nxdomain
 local-zone: "pritsep56.ru" always_nxdomain
 local-zone: "prittworldproperties.co.ke" always_nxdomain
 local-zone: "privacydesignstudio.com" always_nxdomain
@@ -53819,6 +53843,7 @@ local-zone: "proxy-ipv4.com" always_nxdomain
 local-zone: "proxy.qualtrics.com" always_nxdomain
 local-zone: "proxygrnd.xyz" always_nxdomain
 local-zone: "proxyholding.com" always_nxdomain
+local-zone: "proxyresume.com" always_nxdomain
 local-zone: "proxysis.com.br" always_nxdomain
 local-zone: "proyectocithara.org" always_nxdomain
 local-zone: "proyectoin.com" always_nxdomain
@@ -53931,6 +53956,7 @@ local-zone: "psychprofiler.com" always_nxdomain
 local-zone: "psymonkee.com" always_nxdomain
 local-zone: "psynchro.org" always_nxdomain
 local-zone: "ptb.com.mx" always_nxdomain
+local-zone: "ptbsda.com" always_nxdomain
 local-zone: "ptci-md.org" always_nxdomain
 local-zone: "ptdtech.tk" always_nxdomain
 local-zone: "pte.vn" always_nxdomain
@@ -54445,7 +54471,6 @@ local-zone: "qe-zw.top" always_nxdomain
 local-zone: "qe-zz.top" always_nxdomain
 local-zone: "qeba.win" always_nxdomain
 local-zone: "qeducacional.com.br" always_nxdomain
-local-zone: "qeeeeewwswsweerwwerwerwrwerwerwerwere.warzonedns.com" always_nxdomain
 local-zone: "qelie.com" always_nxdomain
 local-zone: "qeoficial.es" always_nxdomain
 local-zone: "qeshmsport.ir" always_nxdomain
@@ -55046,6 +55071,7 @@ local-zone: "radheenterpriseonline.com" always_nxdomain
 local-zone: "radheshyamcityhomes.com" always_nxdomain
 local-zone: "radi.org.ng" always_nxdomain
 local-zone: "radiantdates.com" always_nxdomain
+local-zone: "radiantqatar.com" always_nxdomain
 local-zone: "radiantservices.com" always_nxdomain
 local-zone: "radicocinas.com.mx" always_nxdomain
 local-zone: "radienten.com" always_nxdomain
@@ -55120,6 +55146,7 @@ local-zone: "raf-dv.ru" always_nxdomain
 local-zone: "rafa-craftsman.com" always_nxdomain
 local-zone: "rafaat.ir" always_nxdomain
 local-zone: "rafaelcarvalho.com.br" always_nxdomain
+local-zone: "rafaelospizzeria.com" always_nxdomain
 local-zone: "rafaelvieira.com.br" always_nxdomain
 local-zone: "rafatelles.com" always_nxdomain
 local-zone: "raffaelli.com.br" always_nxdomain
@@ -55714,6 +55741,7 @@ local-zone: "redhorsebatteries.com" always_nxdomain
 local-zone: "redhorsetile.com" always_nxdomain
 local-zone: "redic.co.uk" always_nxdomain
 local-zone: "redilmatt.biz" always_nxdomain
+local-zone: "redingtonpost.com" always_nxdomain
 local-zone: "redinktattoo.net" always_nxdomain
 local-zone: "redirectiontest.basezap.com" always_nxdomain
 local-zone: "redironmarketing.com" always_nxdomain
@@ -55740,6 +55768,7 @@ local-zone: "redsnowball.com" always_nxdomain
 local-zone: "redsseammgt.com" always_nxdomain
 local-zone: "redtek0.com" always_nxdomain
 local-zone: "redtv.top" always_nxdomain
+local-zone: "redvalidator.com" always_nxdomain
 local-zone: "redvelvetpatisserie.co.uk" always_nxdomain
 local-zone: "redwing.com.eg" always_nxdomain
 local-zone: "redwingdemo.dukaafrica.com" always_nxdomain
@@ -56267,6 +56296,7 @@ local-zone: "rewal.ch" always_nxdomain
 local-zone: "reward.uta.edu.ec" always_nxdomain
 local-zone: "rewitek.nl" always_nxdomain
 local-zone: "rexhagis.nl" always_nxdomain
+local-zone: "rexindototeknik.com" always_nxdomain
 local-zone: "rexpc.dk" always_nxdomain
 local-zone: "rexpronecorpllc.com" always_nxdomain
 local-zone: "rexprosealers.com" always_nxdomain
@@ -56551,6 +56581,7 @@ local-zone: "riverwalkmb.com" always_nxdomain
 local-zone: "rivesam.com" always_nxdomain
 local-zone: "rivesandrives.com" always_nxdomain
 local-zone: "rivestiti.com" always_nxdomain
+local-zone: "rivoltaponteggi.com" always_nxdomain
 local-zone: "riyafisheries.com.cp-51.webhostbox.net" always_nxdomain
 local-zone: "riyanenterprise.com" always_nxdomain
 local-zone: "riyanshoppingbags.com" always_nxdomain
@@ -57142,6 +57173,7 @@ local-zone: "rsquareandco.com" always_nxdomain
 local-zone: "rssansani.com" always_nxdomain
 local-zone: "rssdefense.com" always_nxdomain
 local-zone: "rstarserver17km.xyz" always_nxdomain
+local-zone: "rstelectricals.com" always_nxdomain
 local-zone: "rsterlingzmyrtice.xyz" always_nxdomain
 local-zone: "rstrading.in" always_nxdomain
 local-zone: "rsudpbari.palembang.go.id" always_nxdomain
@@ -57623,6 +57655,7 @@ local-zone: "saepedra.com" always_nxdomain
 local-zone: "safa.205dundas.com" always_nxdomain
 local-zone: "safakteknoloji.com" always_nxdomain
 local-zone: "safaniru.com" always_nxdomain
+local-zone: "safarbekish.com" always_nxdomain
 local-zone: "safari7.devitsandbox.com" always_nxdomain
 local-zone: "safariet-zarzis.com" always_nxdomain
 local-zone: "safarigold.com" always_nxdomain
@@ -57646,7 +57679,6 @@ local-zone: "safelink.themeson.review" always_nxdomain
 local-zone: "safelinks-protection.com" always_nxdomain
 local-zone: "safemedicinaonline.com" always_nxdomain
 local-zone: "safemoneyamerica.com" always_nxdomain
-local-zone: "safentrix.com" always_nxdomain
 local-zone: "saferoomreviews.com" always_nxdomain
 local-zone: "safesalesnembutal.com" always_nxdomain
 local-zone: "safesandsecurity.co.za" always_nxdomain
@@ -57725,12 +57757,14 @@ local-zone: "sageth.net" always_nxdomain
 local-zone: "sagiri.org" always_nxdomain
 local-zone: "saglikbakanli-hediyeinternet.org" always_nxdomain
 local-zone: "saglikbakanligi-destek.org" always_nxdomain
+local-zone: "saglikbakanligi-destekportal.org" always_nxdomain
 local-zone: "saglikbakanligi20gbinternet.com" always_nxdomain
 local-zone: "saglikbakanligindanhediye20gb.com" always_nxdomain
 local-zone: "saglikgoalapp.site" always_nxdomain
 local-zone: "saglikliapp.live" always_nxdomain
 local-zone: "sagliklibedenim.com" always_nxdomain
 local-zone: "saglikodemelerinial.org" always_nxdomain
+local-zone: "saglikramazan20bgb.net" always_nxdomain
 local-zone: "sagrathi.com" always_nxdomain
 local-zone: "sagunpapers.com" always_nxdomain
 local-zone: "sahabathasyim.com" always_nxdomain
@@ -58458,6 +58492,7 @@ local-zone: "sbs.ipeary.com" always_nxdomain
 local-zone: "sbsbe.co.uk" always_nxdomain
 local-zone: "sbspro.in" always_nxdomain
 local-zone: "sbtabank.in" always_nxdomain
+local-zone: "sbtasimacilik.com" always_nxdomain
 local-zone: "sbtextiles.com" always_nxdomain
 local-zone: "sbwellness.org" always_nxdomain
 local-zone: "sc-tuning.de" always_nxdomain
@@ -59094,6 +59129,7 @@ local-zone: "semashur10s.org" always_nxdomain
 local-zone: "semassi.com" always_nxdomain
 local-zone: "semayakas.com" always_nxdomain
 local-zone: "sembako.manaira.store" always_nxdomain
+local-zone: "semcoe.com" always_nxdomain
 local-zone: "semenfedosov.ru" always_nxdomain
 local-zone: "semengresik.co.id" always_nxdomain
 local-zone: "semestr.by" always_nxdomain
@@ -59451,6 +59487,7 @@ local-zone: "setfalc.com" always_nxdomain
 local-zone: "setfireltd.com" always_nxdomain
 local-zone: "sethoresg.com.br" always_nxdomain
 local-zone: "sethpgoldstein.com" always_nxdomain
+local-zone: "setiamanggalaabadi.com" always_nxdomain
 local-zone: "setimosacramento.com.br" always_nxdomain
 local-zone: "setincon.com" always_nxdomain
 local-zone: "setit.ro" always_nxdomain
@@ -60256,7 +60293,6 @@ local-zone: "si-hao.cn" always_nxdomain
 local-zone: "sia-gmbh.de" always_nxdomain
 local-zone: "siairport.com" always_nxdomain
 local-zone: "siakad.brawijaya.ac.id" always_nxdomain
-local-zone: "siakad.ub.ac.id" always_nxdomain
 local-zone: "sial-healthcare.co.uk" always_nxdomain
 local-zone: "sialkotgoods.com" always_nxdomain
 local-zone: "sialkotmart.net" always_nxdomain
@@ -61788,6 +61824,7 @@ local-zone: "sophiasuites-santorini.com" always_nxdomain
 local-zone: "sophiebarthelemy.fr" always_nxdomain
 local-zone: "sophieguaremas.com" always_nxdomain
 local-zone: "sophiethomasartist.com" always_nxdomain
+local-zone: "sophis.biz" always_nxdomain
 local-zone: "sophistproduction.com" always_nxdomain
 local-zone: "sophro-zara.com" always_nxdomain
 local-zone: "sophrologie-untempspourmoi.fr" always_nxdomain
@@ -62622,6 +62659,7 @@ local-zone: "staging.westlondon-musictutors.co.uk" always_nxdomain
 local-zone: "staging.wolseleyfamilyplace.com" always_nxdomain
 local-zone: "staging.xdigitalstudio.com" always_nxdomain
 local-zone: "staging1.xamadu.com" always_nxdomain
+local-zone: "staging2.lifebiotic.com" always_nxdomain
 local-zone: "staging3.agencyh.com" always_nxdomain
 local-zone: "stagingmcr.cloudkami.com" always_nxdomain
 local-zone: "stagingmcs.cloudkami.com" always_nxdomain
@@ -62655,6 +62693,7 @@ local-zone: "staminaoptimism.co.kr" always_nxdomain
 local-zone: "stamp2u.com.my" always_nxdomain
 local-zone: "stampa3dplus.com" always_nxdomain
 local-zone: "stampile-sibiu.ro" always_nxdomain
+local-zone: "standardalloysindia.com" always_nxdomain
 local-zone: "standardchartfinance.com.cp-45.webhostbox.net" always_nxdomain
 local-zone: "standardpen.id" always_nxdomain
 local-zone: "standardpopulation.icu" always_nxdomain
@@ -63801,6 +63840,7 @@ local-zone: "sunshinemarketing.biz" always_nxdomain
 local-zone: "sunshinevn.vn" always_nxdomain
 local-zone: "sunshinewebsite.club" always_nxdomain
 local-zone: "sunshinewondervillas.biz" always_nxdomain
+local-zone: "sunsquare.fr" always_nxdomain
 local-zone: "suntour.com.vn" always_nxdomain
 local-zone: "suntreebearing.com" always_nxdomain
 local-zone: "sunucuo.com" always_nxdomain
@@ -63909,7 +63949,6 @@ local-zone: "support.homemakerideas.com" always_nxdomain
 local-zone: "support.imaitaly.biz" always_nxdomain
 local-zone: "support.jbrueggemann.com" always_nxdomain
 local-zone: "support.m2mservices.com" always_nxdomain
-local-zone: "support.mdsol.com" always_nxdomain
 local-zone: "support.nordenrecycling.com" always_nxdomain
 local-zone: "support.pubg.com" always_nxdomain
 local-zone: "support.redbook.aero" always_nxdomain
@@ -64326,7 +64365,6 @@ local-zone: "systemagically.com" always_nxdomain
 local-zone: "systemandcode.com" always_nxdomain
 local-zone: "systematicsarl.com" always_nxdomain
 local-zone: "systematm.com" always_nxdomain
-local-zone: "systemgooglegooglegooglegooglegooglegoole.warzonedns.com" always_nxdomain
 local-zone: "systemintergrafileexchangeserverprotocol.duckdns.org" always_nxdomain
 local-zone: "systemmasterpage.com" always_nxdomain
 local-zone: "systemmicroupdate.com" always_nxdomain
@@ -65903,6 +65941,7 @@ local-zone: "textilesld.cluster020.hosting.ovh.net" always_nxdomain
 local-zone: "textilessudamericanos.com" always_nxdomain
 local-zone: "textilesunrise.com" always_nxdomain
 local-zone: "textilkopruch.com.br" always_nxdomain
+local-zone: "texum-me.com" always_nxdomain
 local-zone: "teyouhao.com" always_nxdomain
 local-zone: "tfhvccny.com" always_nxdomain
 local-zone: "tfile.7to.cn" always_nxdomain
@@ -65934,7 +65973,6 @@ local-zone: "thaarcoffee.com" always_nxdomain
 local-zone: "thacci.com.br" always_nxdomain
 local-zone: "thachastew.com" always_nxdomain
 local-zone: "thaddeusarmstrong.com" always_nxdomain
-local-zone: "thadinnoo.co" always_nxdomain
 local-zone: "thagreymatter.com" always_nxdomain
 local-zone: "thai-pub.com" always_nxdomain
 local-zone: "thaiascobrake.com" always_nxdomain
@@ -65998,7 +66036,6 @@ local-zone: "tharsisfilms.com" always_nxdomain
 local-zone: "thatavilellaoficial.com.br" always_nxdomain
 local-zone: "thatoilchick.com" always_nxdomain
 local-zone: "thats-amazing.com" always_nxdomain
-local-zone: "thaus.to" always_nxdomain
 local-zone: "thawani-pay.neomeric.us" always_nxdomain
 local-zone: "thayvoiphone.vn" always_nxdomain
 local-zone: "thc-annex.com" always_nxdomain
@@ -66056,6 +66093,7 @@ local-zone: "thebackslant.com" always_nxdomain
 local-zone: "thebackyardat60nyc.com" always_nxdomain
 local-zone: "thebagforum.com" always_nxdomain
 local-zone: "thebakingtree.com" always_nxdomain
+local-zone: "theballardhouse.org" always_nxdomain
 local-zone: "theballoon.asia" always_nxdomain
 local-zone: "thebandofrivals.dreamhosters.com" always_nxdomain
 local-zone: "thebaptistfoundationofca.com" always_nxdomain
@@ -66132,6 +66170,7 @@ local-zone: "theclaridge.org" always_nxdomain
 local-zone: "theclinicabarros.com" always_nxdomain
 local-zone: "theclown.ca" always_nxdomain
 local-zone: "theclub5.com" always_nxdomain
+local-zone: "theclubmumbai.com" always_nxdomain
 local-zone: "thecoachinglounge.net" always_nxdomain
 local-zone: "thecoastaltimes.media" always_nxdomain
 local-zone: "thecoastofhelpfoundation.org" always_nxdomain
@@ -66313,6 +66352,7 @@ local-zone: "theinspiredblogger.com" always_nxdomain
 local-zone: "theinspireddrive.com" always_nxdomain
 local-zone: "theintelligencer.com.ng" always_nxdomain
 local-zone: "theinvestmentinvestigator.com" always_nxdomain
+local-zone: "theipgenerators.com" always_nxdomain
 local-zone: "theirishhouse.dk" always_nxdomain
 local-zone: "theiro.com" always_nxdomain
 local-zone: "theisel.de" always_nxdomain
@@ -66433,6 +66473,7 @@ local-zone: "themoonplease.com" always_nxdomain
 local-zone: "themorgandollarcoin.com" always_nxdomain
 local-zone: "themortgagefirm.ca" always_nxdomain
 local-zone: "themortgagemom.co.uk" always_nxdomain
+local-zone: "themotorcenter.com" always_nxdomain
 local-zone: "themrimidnightclub.com" always_nxdomain
 local-zone: "themuertitos.com" always_nxdomain
 local-zone: "themusae.com" always_nxdomain
@@ -67573,6 +67614,7 @@ local-zone: "toramanlar.com.tr" always_nxdomain
 local-zone: "torbat-h.persiangig.com" always_nxdomain
 local-zone: "toresu.net" always_nxdomain
 local-zone: "torfinn.com" always_nxdomain
+local-zone: "torfsgebroeders.eu" always_nxdomain
 local-zone: "torg-master.pro" always_nxdomain
 local-zone: "torginvest.ru.com" always_nxdomain
 local-zone: "torishima-qa.com" always_nxdomain
@@ -68040,6 +68082,7 @@ local-zone: "treehugginpussy.de" always_nxdomain
 local-zone: "treesguru.com" always_nxdomain
 local-zone: "treesurveys.infrontdesigns.com" always_nxdomain
 local-zone: "trefiart.com.br" always_nxdomain
+local-zone: "trefzer-it.de" always_nxdomain
 local-zone: "trehoada2.ballybeauty.vn" always_nxdomain
 local-zone: "trehoadatoanthan.info" always_nxdomain
 local-zone: "trehoadatoanthan.net" always_nxdomain
@@ -68481,6 +68524,7 @@ local-zone: "tuneldeviento.es" always_nxdomain
 local-zone: "tunerg.com" always_nxdomain
 local-zone: "tunerl.cn" always_nxdomain
 local-zone: "tuneup.ibk.me" always_nxdomain
+local-zone: "tunggalmandiri.com" always_nxdomain
 local-zone: "tuningshop.ro" always_nxdomain
 local-zone: "tunisia-school.com" always_nxdomain
 local-zone: "tunisiagulf.com" always_nxdomain
@@ -68570,6 +68614,7 @@ local-zone: "tutranquilo.com.co" always_nxdomain
 local-zone: "tuttimare.com.br" always_nxdomain
 local-zone: "tuttoirc.net" always_nxdomain
 local-zone: "tuttopizzas.cl" always_nxdomain
+local-zone: "tuttosteopatia.it" always_nxdomain
 local-zone: "tuttotenda.it" always_nxdomain
 local-zone: "tuttoutu.com" always_nxdomain
 local-zone: "tuttyguru.com" always_nxdomain
@@ -68583,6 +68628,7 @@ local-zone: "tuvandauthau.net" always_nxdomain
 local-zone: "tuvandoanhnghiep.org" always_nxdomain
 local-zone: "tuvanduhocdaiviet.com.vn" always_nxdomain
 local-zone: "tuvanduhocduc.org" always_nxdomain
+local-zone: "tuvanduhocmap.com" always_nxdomain
 local-zone: "tuvangamenet.com" always_nxdomain
 local-zone: "tuvangioitinh.com" always_nxdomain
 local-zone: "tuvanluat.vn" always_nxdomain
@@ -69600,11 +69646,9 @@ local-zone: "ury8297ridowoury833oe.com" always_nxdomain
 local-zone: "urzedniczatv.pl" always_nxdomain
 local-zone: "us-defense-department.ml" always_nxdomain
 local-zone: "us-trans.ru" always_nxdomain
-local-zone: "us-west-2.protection.sophos.com" always_nxdomain
 local-zone: "us.cdn.persiangig.com" always_nxdomain
 local-zone: "us.gsearch.com.de" always_nxdomain
 local-zone: "us.hostiso.cloud" always_nxdomain
-local-zone: "us2.campaign-archive.com" always_nxdomain
 local-zone: "us5interclub.cba.pl" always_nxdomain
 local-zone: "usa-lenders.com" always_nxdomain
 local-zone: "usa-market.org" always_nxdomain
@@ -70203,6 +70247,7 @@ local-zone: "velasmeralda.it" always_nxdomain
 local-zone: "velassantos.com.br" always_nxdomain
 local-zone: "velatoursrls.com" always_nxdomain
 local-zone: "veldhuizenwonen.nl" always_nxdomain
+local-zone: "velerobeach.com" always_nxdomain
 local-zone: "velerosa.it" always_nxdomain
 local-zone: "velimir-grgic.com" always_nxdomain
 local-zone: "velisnackindonesia.com" always_nxdomain
@@ -70788,7 +70833,6 @@ local-zone: "vip-rocket.net" always_nxdomain
 local-zone: "vip-watch.store" always_nxdomain
 local-zone: "vip.lijinxi.com" always_nxdomain
 local-zone: "vip.maohuagong.com" always_nxdomain
-local-zone: "vip.muabannhanh.com" always_nxdomain
 local-zone: "vip.recommendedtoyoo.com" always_nxdomain
 local-zone: "vip.zbfcxx.cn" always_nxdomain
 local-zone: "vip163.cf" always_nxdomain
@@ -71061,6 +71105,7 @@ local-zone: "vizk2.ug" always_nxdomain
 local-zone: "viztarinfotech.com" always_nxdomain
 local-zone: "vjarenouy.email" always_nxdomain
 local-zone: "vjencanjazagreb.hr" always_nxdomain
+local-zone: "vjhascv.ru" always_nxdomain
 local-zone: "vjjb.cn" always_nxdomain
 local-zone: "vjqsdq.am.files.1drv.com" always_nxdomain
 local-zone: "vjsingh.info" always_nxdomain
@@ -71424,7 +71469,6 @@ local-zone: "w-wolf.de" always_nxdomain
 local-zone: "w.amendserver.com" always_nxdomain
 local-zone: "w.lazer-n.com" always_nxdomain
 local-zone: "w.outletonline-michaelkors.com" always_nxdomain
-local-zone: "w.zhzy999.net" always_nxdomain
 local-zone: "w04.jujingdao.com" always_nxdomain
 local-zone: "w077775.blob2.ge.tt" always_nxdomain
 local-zone: "w0alqa.dm.files.1drv.com" always_nxdomain
@@ -71634,7 +71678,6 @@ local-zone: "wartazone.com" always_nxdomain
 local-zone: "wartini.de" always_nxdomain
 local-zone: "warunknasakita.co.id" always_nxdomain
 local-zone: "warwickvalleyliving.com" always_nxdomain
-local-zone: "warzonedns.com" always_nxdomain
 local-zone: "warzonesecure.com" always_nxdomain
 local-zone: "was-studio.com" always_nxdomain
 local-zone: "wasama.org" always_nxdomain
@@ -71821,6 +71864,7 @@ local-zone: "web.emsfabrik.de" always_nxdomain
 local-zone: "web.gotham.com.au" always_nxdomain
 local-zone: "web.hfsistemas.com" always_nxdomain
 local-zone: "web.ismt.pt" always_nxdomain
+local-zone: "web.lavishsupplystore.com" always_nxdomain
 local-zone: "web.muasam360.com" always_nxdomain
 local-zone: "web.pa-cirebon.go.id" always_nxdomain
 local-zone: "web.plf.vn" always_nxdomain
@@ -72218,7 +72262,6 @@ local-zone: "wertedits.com" always_nxdomain
 local-zone: "wertios.com" always_nxdomain
 local-zone: "werwrewrkv.ru" always_nxdomain
 local-zone: "werycloud.website" always_nxdomain
-local-zone: "wesco.com" always_nxdomain
 local-zone: "wesconsultants.com" always_nxdomain
 local-zone: "weseleopole.pl" always_nxdomain
 local-zone: "weservehosting.net" always_nxdomain
@@ -72259,6 +72302,7 @@ local-zone: "westminster.edu.vn" always_nxdomain
 local-zone: "westnilepress.org" always_nxdomain
 local-zone: "westonslidingdoorrepair.com" always_nxdomain
 local-zone: "westpalmbeachgaragedoorrepair.com" always_nxdomain
+local-zone: "westportshipping.com" always_nxdomain
 local-zone: "westseattlenailsalon.com" always_nxdomain
 local-zone: "westsideresources.org" always_nxdomain
 local-zone: "weststop.ro" always_nxdomain
@@ -72542,7 +72586,6 @@ local-zone: "wimkegravestein.nl" always_nxdomain
 local-zone: "wimpiebarnard.co.za" always_nxdomain
 local-zone: "win-best.com.hk" always_nxdomain
 local-zone: "win-speed.com" always_nxdomain
-local-zone: "win.tue.nl" always_nxdomain
 local-zone: "win1more.com" always_nxdomain
 local-zone: "win32.x10host.com" always_nxdomain
 local-zone: "winactive.host" always_nxdomain
@@ -72558,7 +72601,6 @@ local-zone: "wincoair.com" always_nxdomain
 local-zone: "wind0wsactivator.host" always_nxdomain
 local-zone: "wind7.ru" always_nxdomain
 local-zone: "windailygh.com" always_nxdomain
-local-zone: "windefenderprotectedwindefendergooglegmail.warzonedns.com" always_nxdomain
 local-zone: "windfarmdevelopments.co.nz" always_nxdomain
 local-zone: "windmedbiolife.com" always_nxdomain
 local-zone: "windmillhill.school" always_nxdomain
@@ -72593,6 +72635,7 @@ local-zone: "winebiddingthailand.com" always_nxdomain
 local-zone: "winecorkartist.com" always_nxdomain
 local-zone: "winefly.net" always_nxdomain
 local-zone: "winefriend.co.za" always_nxdomain
+local-zone: "winenews.it" always_nxdomain
 local-zone: "wineswap.com.au" always_nxdomain
 local-zone: "winetourism.soprexdev.com" always_nxdomain
 local-zone: "winett.net" always_nxdomain
@@ -72751,7 +72794,6 @@ local-zone: "wmdcustoms.com" always_nxdomain
 local-zone: "wmebbiz.co.za" always_nxdomain
 local-zone: "wmf.desevens.com.ng" always_nxdomain
 local-zone: "wmg128.com" always_nxdomain
-local-zone: "wmi.1217bye.host" always_nxdomain
 local-zone: "wmkatz.com" always_nxdomain
 local-zone: "wmo-raad.inov.me" always_nxdomain
 local-zone: "wmpatagonia.cl" always_nxdomain
@@ -72805,6 +72847,7 @@ local-zone: "womenempowermentpakistan.com" always_nxdomain
 local-zone: "womenhealth.aureliusconferences.com" always_nxdomain
 local-zone: "womenindeed.org" always_nxdomain
 local-zone: "womeninwealthinc.com" always_nxdomain
+local-zone: "womenofimpactt.com" always_nxdomain
 local-zone: "womenofthebibleonline.com" always_nxdomain
 local-zone: "womensbathingsuit.com" always_nxdomain
 local-zone: "womenshospital.in" always_nxdomain
@@ -72924,7 +72967,6 @@ local-zone: "work.kromedout.com" always_nxdomain
 local-zone: "work.vexacom.com" always_nxdomain
 local-zone: "work4sales.com" always_nxdomain
 local-zone: "work707.work" always_nxdomain
-local-zone: "workbigfinetonychuckgoodallarefinezynovaexploitgood.warzonedns.com" always_nxdomain
 local-zone: "workbus.ru" always_nxdomain
 local-zone: "workcompoptions.com" always_nxdomain
 local-zone: "workd.ru" always_nxdomain
@@ -73135,7 +73177,6 @@ local-zone: "wpdev.hooshmarketing.com" always_nxdomain
 local-zone: "wpdev.strativ-support.se" always_nxdomain
 local-zone: "wpdev.ted.solutions" always_nxdomain
 local-zone: "wpdev.ztickerz.io" always_nxdomain
-local-zone: "wpengine.zendesk.com" always_nxdomain
 local-zone: "wpgtxdtgifr.ga" always_nxdomain
 local-zone: "wpldjxxxua.ga" always_nxdomain
 local-zone: "wpmagian.com" always_nxdomain
@@ -73348,6 +73389,7 @@ local-zone: "wz-architekten.de" always_nxdomain
 local-zone: "wz6.com.cn" always_nxdomain
 local-zone: "wzgysg.com" always_nxdomain
 local-zone: "wzjp.boyuberq.ru" always_nxdomain
+local-zone: "wzlegal.com" always_nxdomain
 local-zone: "wzry173.com" always_nxdomain
 local-zone: "wzrysp.com" always_nxdomain
 local-zone: "wzsfkq.dm.files.1drv.com" always_nxdomain
@@ -75192,7 +75234,6 @@ local-zone: "zhuti.freexulai.com" always_nxdomain
 local-zone: "zhwaike.com" always_nxdomain
 local-zone: "zhwq1216.com" always_nxdomain
 local-zone: "zhycron.com.br" always_nxdomain
-local-zone: "zhzy999.net" always_nxdomain
 local-zone: "ziadonline.com" always_nxdomain
 local-zone: "ziancontinental.ro" always_nxdomain
 local-zone: "ziarulrevolutionarul.ro" always_nxdomain
@@ -75338,7 +75379,6 @@ local-zone: "zonacomforta.com" always_nxdomain
 local-zone: "zonadeseguridad.mx" always_nxdomain
 local-zone: "zonadeseguridad.net" always_nxdomain
 local-zone: "zonamarketingdigital.online" always_nxdomain
-local-zone: "zonamusicex.com" always_nxdomain
 local-zone: "zonaykan.com" always_nxdomain
 local-zone: "zone-812.ml" always_nxdomain
 local-zone: "zone3.de" always_nxdomain
@@ -75473,7 +75513,6 @@ local-zone: "zyd1.com" always_nxdomain
 local-zone: "zykj.shop" always_nxdomain
 local-zone: "zylokk.000webhostapp.com" always_nxdomain
 local-zone: "zymogen.net" always_nxdomain
-local-zone: "zyncxxcciidiiudfisuifsiufusdfisdisifidfisuifisfisifisu.warzonedns.com" always_nxdomain
 local-zone: "zypeujun.ru" always_nxdomain
 local-zone: "zyr.co.jp" always_nxdomain
 local-zone: "zyrstststzzxccxccddfgdd.duckdns.org" always_nxdomain
diff --git a/urlhaus-filter.txt b/urlhaus-filter.txt
index b2971fea..0327b7ab 100644
--- a/urlhaus-filter.txt
+++ b/urlhaus-filter.txt
@@ -1,5 +1,5 @@
 ! Title: abuse.ch URLhaus Malicious URL Blocklist
-! Updated: Tue, 05 May 2020 00:09:52 UTC
+! Updated: Tue, 05 May 2020 12:09:42 UTC
 ! Expires: 1 day (update frequency)
 ! Repo: https://gitlab.com/curben/urlhaus-filter
 ! License: https://creativecommons.org/publicdomain/zero/1.0/
@@ -258,6 +258,7 @@
 1.34.165.65
 1.34.166.137
 1.34.168.211
+1.34.17.215
 1.34.170.168
 1.34.173.15
 1.34.180.128
@@ -2343,6 +2344,7 @@
 110.156.60.73
 110.156.62.196
 110.156.65.177
+110.156.65.88
 110.156.66.65
 110.156.67.205
 110.156.81.73
@@ -3030,6 +3032,7 @@
 112.164.95.47
 112.165.11.115
 112.165.170.131
+112.165.97.124
 112.166.251.121
 112.167.14.237
 112.167.148.70
@@ -3165,6 +3168,7 @@
 113.103.56.104
 113.103.56.242
 113.103.57.152
+113.103.57.153
 113.103.58.202
 113.103.58.235
 113.109.52.111
@@ -3234,6 +3238,7 @@
 113.133.230.114
 113.133.230.120
 113.133.230.129
+113.133.230.134
 113.133.230.156
 113.133.230.225
 113.133.230.227
@@ -3343,6 +3348,7 @@
 113.240.216.136
 113.240.216.87
 113.240.218.195
+113.240.219.238
 113.240.219.47
 113.243.0.76
 113.243.1.166
@@ -3767,6 +3773,7 @@
 114.228.248.138
 114.228.248.59
 114.228.25.5
+114.228.25.50
 114.228.27.34
 114.228.27.92
 114.228.28.212
@@ -3966,6 +3973,7 @@
 114.235.211.16
 114.235.22.32
 114.235.222.230
+114.235.222.245
 114.235.230.5
 114.235.231.35
 114.235.232.20
@@ -4367,6 +4375,7 @@
 114.34.185.143
 114.34.195.231
 114.34.222.71
+114.34.226.203
 114.34.228.175
 114.34.25.132
 114.34.37.36
@@ -4548,6 +4557,7 @@
 115.216.111.23
 115.216.115.122
 115.216.118.218
+115.216.208.162
 115.216.210.105
 115.216.214.215
 115.216.24.55
@@ -4696,6 +4706,7 @@
 115.49.144.191
 115.49.144.46
 115.49.144.51
+115.49.146.138
 115.49.146.192
 115.49.147.108
 115.49.147.197
@@ -5134,6 +5145,7 @@
 115.53.29.19
 115.53.31.10
 115.53.39.133
+115.53.52.233
 115.53.55.137
 115.53.63.184
 115.53.85.87
@@ -5197,6 +5209,7 @@
 115.55.137.49
 115.55.138.161
 115.55.138.235
+115.55.140.206
 115.55.140.92
 115.55.141.235
 115.55.142.188
@@ -5486,6 +5499,7 @@
 115.58.133.41
 115.58.133.53
 115.58.133.70
+115.58.134.107
 115.58.134.187
 115.58.134.198
 115.58.134.21
@@ -5823,6 +5837,7 @@
 115.63.140.32
 115.63.141.174
 115.63.176.199
+115.63.186.148
 115.63.186.53
 115.63.188.223
 115.63.189.151
@@ -7400,6 +7415,7 @@
 119.129.203.251
 119.129.203.29
 119.134.202.157
+119.136.88.217
 119.145.61.159
 119.15.92.126
 119.155.43.38
@@ -7788,6 +7804,7 @@
 121.101.185.126
 121.102.114.222
 121.121.117.190
+121.121.121.76
 121.121.129.87
 121.121.42.75
 121.121.81.191
@@ -8514,6 +8531,7 @@
 123.10.22.53
 123.10.222.107
 123.10.222.129
+123.10.223.91
 123.10.229.210
 123.10.23.171
 123.10.23.194
@@ -9113,6 +9131,7 @@
 123.12.42.108
 123.12.42.117
 123.12.44.174
+123.12.44.253
 123.12.45.160
 123.12.45.179
 123.12.45.37
@@ -9340,6 +9359,7 @@
 123.4.216.84
 123.4.217.29
 123.4.220.192
+123.4.223.123
 123.4.223.253
 123.4.240.235
 123.4.241.230
@@ -9952,6 +9972,7 @@
 125.26.165.244
 125.26.169.151
 125.26.169.191
+125.26.40.94
 125.27.147.92
 125.27.148.103
 125.27.187.233
@@ -9970,6 +9991,7 @@
 125.40.210.202
 125.40.211.109
 125.40.234.169
+125.40.234.73
 125.40.235.80
 125.40.33.61
 125.40.72.149
@@ -10446,6 +10468,7 @@
 125.70.118.65
 125.70.118.95
 125.70.39.147
+125.71.148.155
 125.72.173.103
 125.77.30.21
 125.77.30.31
@@ -10686,6 +10709,7 @@
 132.255.21.50
 132.255.253.64
 13207303642.aircq.com
+133.167.105.83
 133.18.169.9
 133.18.201.42
 133.18.202.74
@@ -12646,6 +12670,7 @@
 159.65.169.108
 159.65.170.120
 159.65.170.44
+159.65.171.28
 159.65.171.79
 159.65.172.17
 159.65.177.158
@@ -13653,6 +13678,7 @@
 167.71.101.10
 167.71.102.73
 167.71.103.48
+167.71.107.14
 167.71.107.219
 167.71.107.86
 167.71.109.81
@@ -14909,6 +14935,7 @@
 172.36.56.27
 172.36.56.55
 172.36.56.65
+172.36.57.100
 172.36.57.107
 172.36.57.117
 172.36.57.143
@@ -15477,6 +15504,7 @@
 172.39.72.131
 172.39.72.142
 172.39.72.227
+172.39.72.32
 172.39.72.45
 172.39.72.63
 172.39.73.155
@@ -15647,6 +15675,7 @@
 172.45.2.115
 172.45.20.164
 172.45.20.220
+172.45.24.42
 172.45.25.197
 172.45.25.91
 172.45.26.71
@@ -19606,6 +19635,7 @@
 183.107.136.8
 183.107.57.170
 183.108.170.41
+183.109.5.228
 183.110.79.42
 183.128.140.241
 183.128.143.249
@@ -20623,6 +20653,7 @@
 185.244.39.19
 185.244.39.198
 185.244.39.201
+185.244.39.251
 185.244.39.45
 185.244.39.47
 185.244.39.51
@@ -21217,6 +21248,7 @@
 188.166.24.72
 188.166.25.58
 188.166.27.168
+188.166.3.147
 188.166.31.61
 188.166.36.43
 188.166.37.28
@@ -22347,6 +22379,7 @@
 194.5.250.114
 194.5.250.181
 194.5.250.45
+194.5.79.166
 194.5.98.158
 194.5.98.70
 194.5.99.229
@@ -23227,7 +23260,7 @@
 2.ak1ba.pro
 2.clcshop.online
 2.globalengine.ru
-2.indexsinas.me
+2.indexsinas.me:811/c64.exe
 2.moulding.z8.ru
 2.spacepel.com
 2.toemobra.com.br
@@ -25715,6 +25748,7 @@
 221.13.235.220
 221.13.235.239
 221.13.236.137
+221.13.236.180
 221.13.237.113
 221.13.237.244
 221.13.239.203
@@ -25753,6 +25787,7 @@
 221.15.103.138
 221.15.108.33
 221.15.109.175
+221.15.11.116
 221.15.11.167
 221.15.11.23
 221.15.11.53
@@ -26106,6 +26141,8 @@
 222.138.149.179
 222.138.149.207
 222.138.149.236
+222.138.150.1
+222.138.150.125
 222.138.150.177
 222.138.150.235
 222.138.150.236
@@ -26260,6 +26297,7 @@
 222.139.222.249
 222.139.222.251
 222.139.222.39
+222.139.222.59
 222.139.222.76
 222.139.222.82
 222.139.223.0
@@ -26687,6 +26725,7 @@
 222.242.158.161
 222.242.159.200
 222.242.159.77
+222.242.182.187
 222.242.182.26
 222.242.182.75
 222.242.183.201
@@ -27587,6 +27626,7 @@
 27.41.182.54
 27.41.184.39
 27.41.186.140
+27.41.187.108
 27.41.187.214
 27.41.204.118
 27.41.204.37
@@ -27727,7 +27767,7 @@
 2ndpub.com
 2ndscreensociety.com
 2nell.com
-2no.co/2amqu5
+2no.co
 2pjcza.db.files.1drv.com
 2q1wea3rdsf.000webhostapp.com
 2q3w.com
@@ -27798,8 +27838,8 @@
 3.top4top.net
 3.u0135364.z8.ru
 3.unplugrevolution.com
-3.zhzy999.net
-3.zhzy999.net3.zhzy999.net
+3.zhzy999.net/images/n.exe
+3.zhzy999.net3.zhzy999.net/images/n.exe
 30-by-30.com
 3000adaydomainer.com
 300miliardialberi.eu
@@ -27810,8 +27850,8 @@
 30gb-internet.com
 30plusbootcamp.com
 30undertennis.com
-31.128.173.853.zhzy999.net
-31.128.173.853.zhzy999.net31.128.173.853.zhzy999.net
+31.128.173.853.zhzy999.net/images/n.exe
+31.128.173.853.zhzy999.net31.128.173.853.zhzy999.net/images/n.exe
 31.129.171.138
 31.129.70.65
 31.13.136.116
@@ -29200,6 +29240,7 @@
 37.49.226.209
 37.49.226.21
 37.49.226.210
+37.49.226.228
 37.49.226.230
 37.49.226.43
 37.49.226.5
@@ -29533,6 +29574,7 @@
 41.84.131.222
 41.86.18.137
 41.86.18.20
+41.86.19.200
 41.86.21.56
 41.86.251.38
 41.89.94.30
@@ -29680,6 +29722,7 @@
 42.225.202.67
 42.225.203.143
 42.225.203.144
+42.225.203.189
 42.225.203.238
 42.225.203.5
 42.225.204.1
@@ -29810,9 +29853,11 @@
 42.227.130.224
 42.227.134.220
 42.227.144.26
+42.227.145.119
 42.227.145.251
 42.227.146.134
 42.227.147.116
+42.227.147.234
 42.227.150.207
 42.227.150.64
 42.227.153.234
@@ -29850,6 +29895,7 @@
 42.227.165.40
 42.227.165.55
 42.227.166.197
+42.227.166.214
 42.227.166.251
 42.227.166.252
 42.227.166.33
@@ -29910,6 +29956,8 @@
 42.227.200.230
 42.227.201.132
 42.227.201.165
+42.227.201.91
+42.227.202.11
 42.227.202.186
 42.227.202.209
 42.227.202.34
@@ -30342,6 +30390,7 @@
 42.231.166.245
 42.231.167.181
 42.231.167.230
+42.231.170.22
 42.231.172.115
 42.231.172.237
 42.231.172.252
@@ -31049,6 +31098,7 @@
 42.239.135.135
 42.239.135.196
 42.239.136.130
+42.239.137.2
 42.239.139.152
 42.239.14.14
 42.239.14.60
@@ -31266,6 +31316,7 @@
 42.239.95.33
 42.239.95.6
 42.239.96.109
+42.239.96.146
 42.239.96.176
 42.239.96.250
 42.239.97.103
@@ -31692,6 +31743,7 @@
 45.32.222.62
 45.32.226.191
 45.32.230.13
+45.32.234.129
 45.32.24.207
 45.32.245.156
 45.32.25.30
@@ -31952,6 +32004,7 @@
 45.95.169.233
 45.95.169.234
 45.95.169.238
+45.95.169.249
 45.95.169.254
 45.95.55.110
 45.95.55.121
@@ -33129,6 +33182,7 @@
 49.70.33.178
 49.70.34.12
 49.70.34.180
+49.70.34.196
 49.70.34.223
 49.70.36.49
 49.70.38.214
@@ -33934,7 +33988,11 @@
 5.95.226.79
 5.95.59.66
 5.fjwt1.crsky.com
-5.top4top.io
+5.top4top.io/p_1407uniqi1.jpg
+5.top4top.io/p_14113kfwh1.jpg
+5.top4top.io/p_1419z76nh1.jpg
+5.top4top.io/p_1422aptvc1.jpg
+5.top4top.io/p_1446kvcut1.jpg
 5.u0148466.z8.ru
 5.unplugrevolution.com
 50.115.165.107
@@ -34657,6 +34715,7 @@
 59.175.83.212
 59.18.157.62
 59.188.255.217
+59.19.231.31
 59.2.130.197
 59.2.145.43
 59.2.151.157
@@ -37242,6 +37301,7 @@
 77.43.198.253
 77.43.199.201
 77.43.205.175
+77.43.206.170
 77.43.207.236
 77.43.207.41
 77.43.208.172
@@ -38469,6 +38529,7 @@
 86.35.43.220
 86.5.70.142
 86.63.78.214
+86.7.86.4
 86.82.137.79
 86.91.10.91
 860259.com
@@ -39774,7 +39835,15 @@
 98.238.122.130
 98.253.113.227
 98.254.125.18
-98.ip-51-91-254.eu
+98.ip-51-91-254.eu/swrgiuhguhwrguiwetu/arm
+98.ip-51-91-254.eu/swrgiuhguhwrguiwetu/arm5
+98.ip-51-91-254.eu/swrgiuhguhwrguiwetu/arm6
+98.ip-51-91-254.eu/swrgiuhguhwrguiwetu/arm7
+98.ip-51-91-254.eu/swrgiuhguhwrguiwetu/mips
+98.ip-51-91-254.eu/swrgiuhguhwrguiwetu/mpsl
+98.ip-51-91-254.eu/swrgiuhguhwrguiwetu/spc
+98.ip-51-91-254.eu/swrgiuhguhwrguiwetu/x86
+98.ip-51-91-254.eu/swrgiuhguhwrguiwetu/x86_64
 981775.com
 988f5c12.ngrok.io
 988sconline.com
@@ -40692,6 +40761,7 @@ adams-moore.com
 adamshop24.de
 adamsm.co.za
 adamsphotography.com.au
+adamtcarruthers.com
 adamthelawyer.com
 adamwilt15.com
 adan-hospital.com
@@ -41119,9 +41189,7 @@ affordsolartech.com
 affpp.ru
 affyboomy.ga
 afgeartechnology.com.mx
-afges.org/onlineservicewellsfargo/closed_h50q3o2y_k3rgxm6jdw0m/091763285906_7finwQSAif35wxB_portal/4bx68_1xux8z8/
-afges.org/wp-admin/Scan/
-afges.org/wp-admin/kXtCXPB/
+afges.org
 afghanbazarrugs.com
 afghanistanpolicy.com
 afgsjkhaljfghadfje.ga
@@ -41161,7 +41229,8 @@ africaanalytics.tristargl.com
 africabluewebs.co.ke
 africabootcampacademy.influencetec.net
 africahousingawards.com
-africainnovates.org
+africainnovates.org/87/WUCLLV0ZHHGN/47irmaau9ffl/
+africainnovates.org/wp-admin/rpoaw-oa-607/
 africamarket.shop
 africamissions.ca
 african-trips.com
@@ -41370,7 +41439,7 @@ agnieszkarojek.cba.pl
 agoam.bid
 agodatex.ga
 agogpharrna.com
-agorae.afges.org/private_I3BYH0Tn_Po4f0wn7n/guarded_profile/0910435353922_K4vyaYn0zf3j7/
+agorae.afges.org
 agoralbe.com
 agorapro.com.co
 agorlu02.azurewebsites.net
@@ -41571,7 +41640,8 @@ aigavicenza.it
 aigforms.myap.co.za
 aiglemovies.com
 aihealth.vn
-aiiaiafrzrueuedur.ru
+aiiaiafrzrueuedur.ru/o.exe
+aiiaiafrzrueuedur.ru/t.exe
 aiineh.com
 aiit.ahbys.com
 aijdjy.com
@@ -41640,7 +41710,7 @@ airgc.in
 airinovasi-indonesia.com
 airisu-syumikonparty.com
 airlife.bget.ru
-airliness.info
+airliness.info/app.exe
 airlinkcpl.net
 airmaildata.com
 airmanship.nl
@@ -41793,7 +41863,7 @@ akdkart.com
 akekartela.com
 akeswari.org
 akfoundationbd.xyz
-akg-eng.net/dre/SP2.exe
+akg-eng.net
 akgemc.com
 akgiyimtekstil.com
 akh.ge
@@ -41986,7 +42056,7 @@ alberguetaull.com
 alberolandia.it
 albert.playground.mostar.id
 albertaalliance.ca
-albertabeef.ca/yak.exe
+albertabeef.ca
 albertacareers.com
 albertandyork.com
 albertgrafica.com.br
@@ -44078,10 +44148,7 @@ ara4konkatu.info
 araba.alabama-marketing.com
 arabaresmi.com
 arabcb.org
-arabcoegypt.com/wp-content/upgrade/Balance%20payment%20with%20invoice.zip
-arabcoegypt.com/wp-content/upgrade/Demurrage.zip
-arabcoegypt.com/wp-content/upgrade/Revised%20final%20invoice%20and%20Bank%20details.zip
-arabcoegypt.com/wp-includes/js/nri.exe
+arabcoegypt.com
 arabdubaisafari.com
 arabianbrother.com
 arabiantongue.net
@@ -44394,7 +44461,7 @@ arkifield.com
 arkist.ist
 arkiv.lillehammerartmuseum.com
 arkonziv.com
-arkshine.com/country/US/Statement_Arkshine_319460835734_Apr_05_2019.doc
+arkshine.com
 arksoft.in
 arkworkspace.com
 arkyreyma.com
@@ -44957,6 +45024,7 @@ askibinyuk.myjino.ru
 askingpricerealty.com
 askjhdaskdhshjfhf.ru
 asklaizmir.com.tr
+askmufti.org
 askom-service.kz
 asksuze.com
 askthemadpoet.net
@@ -45583,7 +45651,7 @@ autodavid.hr
 autodetali-161.ru
 autodevices.topterra.ru
 autodrim.pl
-autodwg.com
+autodwg.com/download/dwfinpro.exe
 autoecole-hammamet.tn
 autoecole.inchtechs.com
 autoecolehophophop.com
@@ -45767,7 +45835,13 @@ avenue5.co.in.cp-in-10.webhostbox.net
 avenzis.nl
 averefiducia.com
 averfoodrs.eu
-averin.pro
+averin.pro/EC2UKr
+averin.pro/EC2UKr/
+averin.pro/KGZN4tJaS/
+averin.pro/Ml8GR/
+averin.pro/fonts/IRS-Transcripts-June-2018-04/0/
+averin.pro/iofR/
+averin.pro/j7oL/
 averson.by
 averybit.com
 aveslor.com
@@ -45979,9 +46053,7 @@ aydinmete.com.tr
 aydinvps.com
 aydosyazilim.com
 ayecargo.com
-ayefin.com/cgi-bin/browse/oi7xbw/
-ayefin.com/financial-statement/DOC/ykmlxhtcm46/
-ayefin.com/sms.ayefin.com/multifunctional-array/interior-cloud/xLmHKU6ig-5u53kcoawGa/
+ayefin.com
 ayeletbenyosef.co.il
 ayerstechnology.com
 ayeshashoukat.com
@@ -46235,7 +46307,7 @@ babystep.biz
 babysteps.ge
 babyvogel.nl
 babzon.club
-bac.edu.my
+bac.edu.my/wp-admin/tijNv-w6GM2qA7hkcpFDO_udnPnVoN-tI/
 bacamanect.com
 baccaosutritue.vn
 baceldeniz.com
@@ -46266,7 +46338,7 @@ backpage-inc.com
 backpinging.com
 backselfconfidence.xyz
 backstage-secrets.com
-backthenstuff.com/documentview
+backthenstuff.com
 backup-new.5kmdeal.my
 backup-new.5kmdeal.my/wp-content/plugins/really-simple-ssl/testssl/serverhttpson/kQPb/
 backup.goooogle.us
@@ -47165,8 +47237,7 @@ beachcondolife.tk
 beachview.co.za
 beachvillas.gr
 beachwoodproperty.com.au
-beaconacademy.net/default/En/Client/Invoice-460979
-beaconacademy.net/default/En/Client/Invoice-460979/
+beaconacademy.net
 beaconhousediscovery.com
 beaconr.rungta.ac.in
 beactivedigital.com
@@ -47188,6 +47259,7 @@ bearholdings.co
 bearingspecs.com
 bearinmindstrategies.com
 bearriverhealth.org
+bearsselection.xyz
 beaskyshanoi.com
 beastmas.club
 beat.vision
@@ -48066,7 +48138,7 @@ bigdealist.com
 bigdev.top
 bigdiamondeals.com
 bigeyes.com.tw
-bigfile.mail.naver.com
+bigfile.mail.naver.com/bigfileupload/download?fid=V/R91zFlpzEwaAbjK3e5KqUwHqUmKx2maxuXKxMdFoudHqu9KqvXaA2qaxvja6iopoUXKrumKrMqFrKmFxkCK6M/FruqpxIvFrJ4a6U=
 bigfishchain.com
 bigfoothospitality.com
 bigg-live.com
@@ -48096,7 +48168,17 @@ bigssearch.com
 bigstudio.photo
 bigsunshinebooks.com
 bigtech24.de
-bigtext.club
+bigtext.club/app/collectchromefingerprint.exe
+bigtext.club/app/deps.zip?t=2019-08-20
+bigtext.club/app/e7.exe
+bigtext.club/app/updateprofile-0321.exe
+bigtext.club/app/updateprofile-3.exe
+bigtext.club/app/updateprofile-4.exe
+bigtext.club/app/updateprofile-srv1-0520.exe
+bigtext.club/app/vc.exe
+bigtext.club/app/watchdog.exe
+bigtext.club/app/winboxls-0712.exe
+bigtext.club/app/winboxscan-0702.exe
 bigtrading.ga
 bigtvjoblist.com
 biguwh.com
@@ -48246,8 +48328,7 @@ binnayem.com
 binoculars-shop.ru
 binom-perm.cf
 binsammar.com/US/STATUS/Payment/
-binsuloomgroup.com/wp-content/uploads/NefRZe_crlN072r_S/
-binsuloomgroup.com/wp-content/uploads/TyUg_qOsCOz4O_5uPw9YSbO/
+binsuloomgroup.com
 binta.xyz
 bintangbarutama.co.id
 bintec.pe
@@ -48697,7 +48778,8 @@ biyunhui.com
 biz-shop.pro
 biz.creationcabin.com
 bizajans.com
-bizasiatrading.com
+bizasiatrading.com/nxa7v/8wnaa-91zx-4804/
+bizasiatrading.com/nxa7v/ZBRthoZ/
 bizbhutanevents.com
 bizbuilder.co.za
 bizcodedigital.in
@@ -49399,7 +49481,7 @@ bloodybits.com
 bloombrainz.com
 bloomcommunityproject.org
 bloomestatelitigation.ca
-bloomfire.com
+bloomfire.com/wp-content/plugins/DOC/FoQojoiYS/
 bloomflores.com
 bloomhomes.in
 bloomingbridal.com.au
@@ -50181,7 +50263,7 @@ breathtakerstours.com
 breazytrans.com
 breccioneserrande.com
 brechovip.com.br
-breda.com/dev/fik18-wuv0r-anbecvrmr/
+breda.com
 breebaart.net
 breed.wanttobea.com
 breedencomm.com
@@ -50314,6 +50396,7 @@ brittanyschoice.com
 britwind.tk
 brixxsites.com
 brizboy.com
+briztechnologies.com
 brj.sitedevlink.com
 brjsrwaco.watchdogdns.duckdns.org
 brkcakiroglu.com
@@ -51267,6 +51350,7 @@ cammi.it/components/UPS-View/Mar-13-18-03-33-51/
 camnangtrithuc.com
 campagnesms.info
 campaigns.actionable-science.com
+campana20gb.com
 campanus.cz
 campbellcheesegrocerybk.com
 campbellsbay.school.nz
@@ -51953,9 +52037,7 @@ cavalluindistella.com
 cavanasipontum.ru
 cavancameroon.com
 cavaticus.com
-caveaudelteatro.it/ser0410.bin
-caveaudelteatro.it/ser0412.bin
-caveaudelteatro.it/traur.bin
+caveaudelteatro.it
 caveaulechapeau.ch
 cavedimarmocarrara.com
 cavefashion.com
@@ -53123,7 +53205,7 @@ cheaperlounge.com
 cheapesthost.com.ng
 cheapgadgets-gq.000webhostapp.com
 cheapmlbjerseysmarlins.com
-cheapmusic.info
+cheapmusic.info/cloudnet.exe
 cheapnikeairmaxshoes-online.com
 cheapoakleysunglasses.net
 cheappigeontraps.com
@@ -53901,7 +53983,7 @@ cld-net.com
 cld.persiangig.com
 cld.pt
 cldup.com/AxUrK0vRFk.doc?REDACTED
-cle.ae/auth/x_encrypted_1DDF3C0.bin
+cle.ae
 clean.crypt24.in
 clean.olexandry.ru
 clean.vanzherke.ru
@@ -54202,7 +54284,9 @@ cmdaitexpo.com
 cmdez.ir
 cmdou.com
 cmeaststar.de
-cmg.asia
+cmg.asia/wp-content/uploads/DOK/bkmrGzXzIEZODqVCVwBTcQiNn/
+cmg.asia/wp-content/uploads/INC/RVVM3rAgsF/
+cmg.asia/wp-content/uploads/asIFB-0wxsmXdAVKvdu2_okCqpxAWS-NK/
 cmgroup.com.ua
 cmhighschool.edu.bd
 cmhmfgoutbound.protection.sketchwefair-watduoliprudential.com.watchdogdns.duckdns.org
@@ -54761,7 +54845,7 @@ completervnc.com
 compliancewing.com
 complience.com
 compln.net
-components.technologymindz.com
+components.technologymindz.com/INV/AMM-7394405/
 composecv.com
 composite.be
 compoundy.com
@@ -55238,8 +55322,7 @@ cordondating.xyz
 cordulaklein.de
 cordwells.com.au
 cordythaiproducts.com
-core-tech.com/Corporation/En_us/Invoices-attached
-core-tech.com/Corporation/En_us/Invoices-attached/
+core-tech.com
 core.org.af
 corebodybrand.com
 corehealingmassage.com
@@ -56308,7 +56391,8 @@ cysis.cl
 cysyonetim.com
 cytecgroup.co.za
 cytf.coloradotennis.org
-cythia0805.com
+cythia0805.com/wp-content/invoice/7g1gdvyjxe/
+cythia0805.com/wp-content/rQi/
 cythromatt.com
 cytotan.website
 cytotec-tabs.com
@@ -57167,9 +57251,7 @@ ddl7.data.hu
 ddmadrasah.com
 ddraiggoch.co.uk
 ddrcsangrur.com
-ddreciclaje.com/oll/2183738995703_bG2QMYsVpZskj_section/close_g6kpvzbst1nfu9_8w0hv1swllu/ocjcp6cwr2b4ru_770t6/
-ddreciclaje.com/oll/DOC/z5irnz36tn6/
-ddreciclaje.com/oll/jGDv721/
+ddreciclaje.com
 dds.com.mx
 ddsandesh.com
 ddsolutions.pl
@@ -58366,7 +58448,7 @@ dewabarbeque.com
 dewakartu.info
 dewalhoeve.nl
 dewapisang.com
-dewarejeki.info
+dewarejeki.info/wp-includes/up58jauc-pum2w-630352/
 dewarejeki.link
 dewibebaris.com
 dewide.com.br
@@ -58396,7 +58478,7 @@ dfafreezeclan.com
 dfc33.xyz
 dfcf.91756.cn
 dfcvbrtwe.ug
-dfd.zhzy999.net
+dfd.zhzy999.net/images/m.exe
 dfddfg4df.ru
 dffdds.club
 dffieo8ieo0380ieovsddsdff89r309ieo89334.com
@@ -59738,7 +59820,8 @@ doc-04-as-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7m
 doc-04-b0-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/o42qeo6k8lvl39cgbupulhh845m870b2/1579680000000/04030556528523873889/*/1YTE9HtF42Gdu6lt4IKEW44ADmBEb9b06?e=download
 doc-04-b0-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/te61pmlt3oljg9c1855mc6oj5t0n0b20/1579665600000/04030556528523873889/*/1YTE9HtF42Gdu6lt4IKEW44ADmBEb9b06?e=download
 doc-04-bo-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/uttvbtorfth7mo06i8i0ltg9846dp1e6/1547798400000/11292720886455874376/*/11_dFDGDfb87740EqpD3pOHyVdLb8ihWa?e=download
-doc-04-cc-docs.googleusercontent.com
+doc-04-cc-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/19em69mspp9qdabgg1c7am7gp0fgoro2/1580277600000/12083231441189428138/*/1SpRm2o27dyh1mPUqdz1aWgolT1xNMYcP?e=download
+doc-04-cc-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/1ch5loimis42ejlse4p5h11n96ca25pu/1579500000000/12083231441189428138/*/1SpRm2o27dyh1mPUqdz1aWgolT1xNMYcP?e=download
 doc-08-0c-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/rfc39g930d3jafoqmp4ldtipcfn1sdiq/1578909600000/12370833727692906739/*/1c65x99eQdWQIq_zSHtOhKHNeMY1StZhZ?e=download
 doc-08-1g-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/pbg6e6rt43qpj13q3kr0aup1eldndqsv/1579168800000/10334134496650755259/*/1O95cInjSy-Mar7EUIOX0L55147xnILlQ?e=download
 doc-08-1k-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/763ihfavo56en6dvltu9ibalil8igrd0/1537416000000/01121010560865514304/*/1VuP56Vo_yTbawgVzwNDnbDzPw6qOaj_n?e=download
@@ -59758,7 +59841,7 @@ doc-08-4g-docs.googleusercontent.com/docs/securesc/rkn6r0vls0v6oguli70jl422obqdv
 doc-08-4o-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/u9vdm3qpoksj74nm18ugg0tahau63np7/1579672800000/05813336793650387620/*/19pwn7l3AiMN7-OS21t42ZZyBIrG2rQx7?e=download
 doc-08-50-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/ckk4ucprg8p0o3uvf0c2kn0srstlfko8/1580277600000/01481728461725447762/*/1eURSTKj1K69WOo7DuCX_o7Vi7lr-FLwK?e=download
 doc-08-5k-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/4vrk2l6v169g4evmsai20mgpit8h11on/1551376800000/01716522472954494626/*/1KmxzG01LoqqkfHtiBjwbndOgVkLwnQdK
-doc-08-5o-docs.googleusercontent.com
+doc-08-5o-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/qprf5u74nk596hbfob5221gvj7io1kam/1551376800000/04770910300063749024/*/1dBiCd1kZ3SSlerUewodBjP4ULFUMAKlk
 doc-08-5s-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/24un7374ti09ptiivq1vvkub6dkl2l50/1582699500000/02088505118235088740/*/1TpiLI-aNG8g9BAwuBckFbl-BhMxLxWTh?e=download
 doc-08-64-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/ovd8j8r6k1b9e80fuhl6djeo7bdfl472/1580788800000/10931362592423811314/*/1fmm1TXmqKQx44KO8ZnsfvZ4jhho8mvzA?e=download/
 doc-08-68-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/buv0vhmren7s98hp716sntbeuv51n9a1/1544781600000/05984462313861663074/*/1YSNuJRuRQKJdKB-7p0gtKc4x-VZQQ29b
@@ -59996,7 +60079,7 @@ doc-0s-ag-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7m
 doc-0s-b4-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/hb4s7ihj1272flhk5nfh7s3p1ob0ul7a/1552564800000/16809504021460568252/*/1N-7n1MQA__0WM9DqIPqCcKeH9BLliAb4
 doc-0s-b8-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/pk3v91ih1q7q842d1psjds546fnsltvh/1580112000000/11800121626658863812/*/1MrswboBfHCFBgfzp0WzsPL2OXS1JLNLR?e=download
 doc-0s-bs-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/ene3b5nenits168gjf4lnni1kuie3jnr/1552039200000/11569688848916399575/*/1HgNjD29QwsMeorT3zpfpWXxM8fdD3Ygq?e=download
-doc-0s-c8-docs.googleusercontent.com
+doc-0s-c8-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/4b7n6eqfl7n5boc61bjf0q7b5mksc6lp/1555516800000/16964281332718813838/*/1qErKWklBB2tcMXSQRvylgWn7viz4xhhY
 doc-10-0c-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/gc8dsf1456d9gmibfmg7o25gs6ectrmo/1551816000000/14063452590226117103/*/1_jO_VXwcKb1CbtTkzgD7nMqEzfUUjvHB?e=download
 doc-10-0c-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/nhbo71cjafudtbkd3ls3bismqvuj8ig6/1549828800000/14063452590226117103/*/1_jO_VXwcKb1CbtTkzgD7nMqEzfUUjvHB?e=download
 doc-10-28-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/r5fjotq4qok8a7pk9sain44inha7ocft/1580104800000/13535128519197762172/*/1TOPkMO_EAWLXsKMPgmJBHSgRJUSoj8kc?e=download
@@ -60797,7 +60880,7 @@ dosti.webdesignhd.nl
 dosttours.com
 dosya.tc
 dosyproperties.info
-dot.state.mn.us
+dot.state.mn.us/materials/software/MnPAVE-Rigid.exe
 dota2-down.club
 dota2-down.site
 dotactive.com.au
@@ -61047,7 +61130,7 @@ dpa.atos-nao.net
 dpack365-my.sharepoint.com
 dpacorp.org
 dparmm1.wci.com.ph
-dpaste.com
+dpaste.com/2PYZNZK.txt
 dpbh.info
 dpbusinessportal.ro
 dpe.com.tw
@@ -61199,8 +61282,7 @@ dreamlife.com.br
 dreamluxuryhairco.com
 dreammakerselitefitness.com
 dreammaster-uae.com
-dreammergeconsult.com/wp-content/uploads/doc/EN_en/Purchase/Invoice-596591/
-dreammergeconsult.com/wp-content/uploads/files/US_us/Jul2018/Invoice-100375/
+dreammergeconsult.com
 dreammotokolkata.com
 dreams-innovations.com
 dreamsfashion.com.vn
@@ -73710,7 +73792,7 @@ ecity.network
 ecitytanduclongan.com
 eckdor.de
 ecker.aidnet.at
-ecklund.no/pdf/NS89IQMMUCSS/jFcOZtnMxKGeacejiwMwAlDzKeQNGa/
+ecklund.no
 eclairesuits.com
 eclatpro.com
 eclecticelectronics.net
@@ -74167,10 +74249,7 @@ eitchendie.com
 eitworld.com
 eiuh9r8fhr98fh.top
 eiuwowqwpeoeirwpei.com
-ejadarabia.com/OneNote/OneNote.pdf
-ejadarabia.com/a/ab.msi
-ejadarabia.com/a/bb.exe
-ejadarabia.com/a/dd.exe
+ejadarabia.com
 ejadvertising.com
 ejanlele.design
 ejdelapena.com
@@ -74393,6 +74472,7 @@ elevatedigitalma.com
 elevateducation.agreatidea.studio
 elevationshairboutique.com
 elevatorbracket.com
+elevennevele.com
 eleventhcapital.com
 elevituc.vn
 elezioni-oggi.it
@@ -75720,7 +75800,7 @@ etwowsharing.com
 etxse.xyz
 eu-easy.com
 eu.wildfire.paloaltonetworks.com
-eu1.salesforce.com
+eu1.salesforce.com/servlet/servlet.ImageServer?id=015D0000001U567&oid=00D20000000LuKU/
 eu283iwoqodjspqisjdf.com
 eu5-cdn.devid.info
 eubankphoto.com
@@ -76175,6 +76255,7 @@ exportaly.com
 exportcommunity.in
 exportef.info
 exposicaoceramicaearte.com.br
+exposvision.com
 expovitrinadelvalle.com
 expresi.club
 expresodeportivo.com
@@ -77271,8 +77352,7 @@ file2yu.com
 file546456.com
 filebase.duckdns.org
 filebase.mogelgott.de
-filebin.net/8bkcbggjs6uevaiu/_NEW__GiftCard_Generator_V.1.9.0___12_Modules_Supports____2020_.zip?t=xt0ysf0k
-filebin.net/ypk0yfjkb2pbxyz6/NFE-comprovante-190.exe?t=a6jkgn96
+filebin.net
 filebox.hiworks.com
 filebr.com
 fileco.jobkorea.co.kr
@@ -78168,7 +78248,19 @@ forex4pips.com
 forexaddictt.com
 forexbrokeracademy.com
 forexpedia.tradewithrobbie.com
-forexpf.ru
+forexpf.ru/click/?url=http://searchselfstoragequote.com/ALFMxWqfaU?fPd=6
+forexpf.ru/click/?url=http://searchselfstoragequote.com/EGmnkFXfr?rnm=2
+forexpf.ru/click/?url=http://searchselfstoragequote.com/HwPkLt?nHm=6
+forexpf.ru/click/?url=http://searchselfstoragequote.com/LRdUsIFA?BweG=9
+forexpf.ru/click/?url=http://searchselfstoragequote.com/VbvkSqUwCi?qBv=3
+forexpf.ru/click/?url=http://searchselfstoragequote.com/WkDqmB?ruTYM=1
+forexpf.ru/click/?url=http://searchselfstoragequote.com/YTqXEuhn?PMBK=2
+forexpf.ru/click/?url=http://searchselfstoragequote.com/lMWs?eiRI=2
+forexpf.ru/click/?url=http://searchselfstoragequote.com/nYVfFrL?vVFCn=2
+forexpf.ru/click/?url=http://searchselfstoragequote.com/oYozDrMf?QJw=8
+forexpf.ru/click/?url=http://searchselfstoragequote.com/rywzMAc?VMX=9
+forexpf.ru/click/?url=http://searchselfstoragequote.com/wyKVIzM?FrUbh=8
+forexpf.ru/click/?url=http://searchselfstoragequote.com/zIcO?yKrPm=0
 forexproservice.com
 forexrobot.youralgo.com
 forextradingfrx.org
@@ -80859,7 +80951,7 @@ goitsoluciones.com
 goji-actives.net
 gojukai.co
 gokceozagar.com
-goker.com.tr/Remittance-Advice.doc
+goker.com.tr
 gokhancakmak.com.tr
 gokjerijk.nl
 gokkastennl.com
@@ -81156,7 +81248,7 @@ goudu.club
 gourmandd.com
 gourmetlab.pe
 gourmetreats.in
-gov.kr
+gov.kr/main?d=AA100DataDownApp&SAVE_FILE_NM=38500.exe
 gov.rsmart-testsolutions.watchdogdns.duckdns.org
 govche.in
 goveboatclub.com.au
@@ -81675,7 +81767,7 @@ grupocrecer.org
 grupodpi.pe
 grupodreyer.com
 grupoembatec.com
-grupoeq.com
+grupoeq.com/leds/dal52301/
 grupoesparta.com.ve
 grupofabiamce.com.br
 grupofischermineracao.com.br
@@ -81686,7 +81778,7 @@ grupoiesp.tk
 grupoinalen.com
 grupoinfonet.com
 grupojg.com.br
-grupolainmaculada.com/Oct2018/En/ACH-form
+grupolainmaculada.com
 grupolaplace.com.br
 grupoloang.com
 grupolorena.com.sv
@@ -81785,9 +81877,7 @@ gthtech.com
 gtidae.com.pl
 gtim.agency
 gtiperu.com
-gtm-au.com/Aug2018/US/Due-balance-paid
-gtm-au.com/Aug2018/US/Due-balance-paid/
-gtm-au.com/DHL-number/US/
+gtm-au.com
 gtminas.com.br
 gtnaidu.com
 gtomeconquista.com
@@ -82058,7 +82148,7 @@ h-surgeon.info
 h-w-c.net
 h.eurotrading.com.pl
 h.j990981.ru
-h.top4top.io/p_14754cwzr1.jpg
+h.top4top.io
 h.valerana44.ru
 h1.iwakalong.ru
 h112321.s08.test-hf.su
@@ -83711,7 +83801,160 @@ home-racing.com
 home-spy-shop.com
 home.99eurowebsite.ie
 home.barley-plus.com
-home.earthlink.net
+home.earthlink.net/~4winds1/Dec3th.exe
+home.earthlink.net/~4winds1/ImortantDocument.exe
+home.earthlink.net/~Davidtrojan/UPS/ecopy.jar
+home.earthlink.net/~KMC2READ/paypal/ecopy.jar
+home.earthlink.net/~KMC2READ/ups/ups.jar
+home.earthlink.net/~Lorrainebubar/USPS-shipping-label.jar
+home.earthlink.net/~Ngardels/112220188.exe
+home.earthlink.net/~Ngardels/26112018.exe
+home.earthlink.net/~Rsellsema/FedEx/FedEx.jar
+home.earthlink.net/~Rsellsema/UPS/ups.jar
+home.earthlink.net/~adminawg/usps/Shipping-Label/Shipping-Label(e-copy).jar
+home.earthlink.net/~archbarrett/Amazon-order-copy.jar
+home.earthlink.net/~archbarrett/adobe/0.37646700%201523567821.jar
+home.earthlink.net/~archbarrett/donation/donation.jar
+home.earthlink.net/~archbarrett/dropbox/reference~ecopy.jar
+home.earthlink.net/~archbarrett/file2018.jar
+home.earthlink.net/~banderso1066/e~label.jar
+home.earthlink.net/~baysidejetdrive/Shipment-label.jar
+home.earthlink.net/~bigrose26/12-21-2017.jar
+home.earthlink.net/~bigrose26/shipment/shipment-label.jar
+home.earthlink.net/~captaindiego/amazon/amazon.jar
+home.earthlink.net/~captaindiego/ecopy/ecopy.jar
+home.earthlink.net/~captaindiego/fedex/Fedex-Shipping-Label.jar
+home.earthlink.net/~captaindiego/fedex/ecopy.jar
+home.earthlink.net/~captaindiego/software/ecopy.jar
+home.earthlink.net/~carwashregional/ship/ups~label.jar
+home.earthlink.net/~cathygrellet/data/saved/order.jar
+home.earthlink.net/~cathygrellet/dropbox/saved/artwork.jar
+home.earthlink.net/~cathygrellet/filemanager/order.jar
+home.earthlink.net/~cathygrellet/javto/print.jar
+home.earthlink.net/~cathygrellet/ship/info/USPS%20Order.jar
+home.earthlink.net/~craigbayhi/1-9-2018.jar
+home.earthlink.net/~craigslane/FedEx-Shipment~label.jar
+home.earthlink.net/~cvaleallen/UPS-shipping-details.jar
+home.earthlink.net/~cvaleallen/delivery-report.jar
+home.earthlink.net/~cvaleallen/your-shipping-details.jar
+home.earthlink.net/~dalegibson/Shipping-Label.jar
+home.earthlink.net/~dalegibson/shipping_details.jar
+home.earthlink.net/~damturney/invoice/Invoice_05122017_outputCCA6AAF.scr
+home.earthlink.net/~damturney/invoice27112017/Invoice_output68CF6B0.scr
+home.earthlink.net/~damturney/invoice27112017/newinvoice/invoice_04122017_output7BCA030.scr
+home.earthlink.net/~damturney/specification/invoice04122017_output13026B0.scr
+home.earthlink.net/~dcamjr/Invoice20180205.exe
+home.earthlink.net/~dcmusicbox/usp/tracking~details.jar
+home.earthlink.net/~decalgene/UPS_Tracking.jar
+home.earthlink.net/~dvidmar1/shipment-label.jar
+home.earthlink.net/~ebony319/ShippingLabel(e-copy).jar
+home.earthlink.net/~edclarkortho/label/e~label.jar
+home.earthlink.net/~edclarkortho/shipmentlabel.jar
+home.earthlink.net/~ellenweiss/New_message.jar
+home.earthlink.net/~ersinc/0.06213400%201521213842.jar
+home.earthlink.net/~ersinc/directory/ecopy.jar
+home.earthlink.net/~ersinc/ebay/ecopy00017717.jar
+home.earthlink.net/~ersinc/ecopy/ups.jar
+home.earthlink.net/~ersinc/order/order.jar
+home.earthlink.net/~ersinc/usps/order.jar
+home.earthlink.net/~fahertydoc/Return-label.jar
+home.earthlink.net/~fahertydoc/Usps~Label.jar
+home.earthlink.net/~fahertydoc/data/qrypted.Janvy.jar
+home.earthlink.net/~flajobs/Fedex~e~label.jar
+home.earthlink.net/~flajobs/e~label.jar
+home.earthlink.net/~flajobs/fedex/ecopy.jar
+home.earthlink.net/~flajobs/shipment~label.jar
+home.earthlink.net/~freshourglen/5-2-2018.jar
+home.earthlink.net/~g.rhoads/DHL(View_shipping_label).jar
+home.earthlink.net/~g.rhoads/FedEx/FedEx.jar
+home.earthlink.net/~g.rhoads/UPS(View-Delivery-Copy).jar
+home.earthlink.net/~georgejagels/usps-shipment-label.jar
+home.earthlink.net/~gouette/%20Corel%20Digital/%20license.jar
+home.earthlink.net/~gouette/DocuSign/DOCUMENTFILE.jar
+home.earthlink.net/~gouette/Invoice/Document.jar
+home.earthlink.net/~gouette/data/license.jar
+home.earthlink.net/~gouette/fedex/fedexcopy.jar
+home.earthlink.net/~gouette/trade/tradecopy.jar
+home.earthlink.net/~gouette/trade/tradecopy.zip
+home.earthlink.net/~grabanski/CVE2017jar.zip
+home.earthlink.net/~itshq/USPS_Tracking.jar
+home.earthlink.net/~james.pender/shipping-label.jar
+home.earthlink.net/~jmzegan/your-order.jar
+home.earthlink.net/~joserealty/ecopy/ecopy.jar
+home.earthlink.net/~joserealty/webdocs/01/11-28-2017.jar
+home.earthlink.net/~joserealty/webdocs/02/11-30-2017.jar
+home.earthlink.net/~joserealty/webdocs/03/12-8-2017.jar
+home.earthlink.net/~kentscott4643/Trk_FedEx_46866461644881255.jar
+home.earthlink.net/~ksak/FedEx/Shipping-Label(e-copy).jar
+home.earthlink.net/~ksak/FedEx/tobeused300.jar_JavaCrypt2.jar
+home.earthlink.net/~loubill/ups.jar
+home.earthlink.net/~macjanutol/01-29-2019.jar
+home.earthlink.net/~macjanutol/01-29-20199.jar
+home.earthlink.net/~macjanutol/02-2-2019.jar
+home.earthlink.net/~macjanutol/CDV%20BOOK%20K-2%20PAG47.ZIP
+home.earthlink.net/~margolisme/12.16.17.jar
+home.earthlink.net/~margolisme/eopy/e-copy.jar
+home.earthlink.net/~michlee/Trk_FedEx_46866461644881255.jar
+home.earthlink.net/~mkramer65/dropbox_upgrade.jar
+home.earthlink.net/~mkramer65/fedex_shippinglabel.jar
+home.earthlink.net/~mkramer65/scan-copy.exe
+home.earthlink.net/~mnludvik/01-21-2019.jar
+home.earthlink.net/~mnludvik/1-21-2019.jar
+home.earthlink.net/~morrisonb/date/FedEx.jar
+home.earthlink.net/~morrisonb/ecopy/FedEx.jar
+home.earthlink.net/~morrisonb/softcopy/e-copy.jar
+home.earthlink.net/~narcisocortez/Shipping_Verification.1.0.1.1.1.1.0.jar
+home.earthlink.net/~ncfire/usps-shipping-label.jar
+home.earthlink.net/~ncgreen2/E-log.jar
+home.earthlink.net/~p3nd3r/Shipment~label.jar
+home.earthlink.net/~p3nd3r/Shipping-label.jar
+home.earthlink.net/~palmermusic/1-04-2018.jar
+home.earthlink.net/~peggylegault/june-25-2018.jar
+home.earthlink.net/~pepper12/UPS_invoice.jar
+home.earthlink.net/~pepper12/shipping-label.jar
+home.earthlink.net/~pgregory2/ups/upstracker.jar
+home.earthlink.net/~phwilson/Paypal_Credit_Info.Jar
+home.earthlink.net/~phwilson/case_details.jar
+home.earthlink.net/~phwilson/e~label.jar
+home.earthlink.net/~prislen/UPS_Z10023838484.exe
+home.earthlink.net/~rclaws35/245646572983677974505708.jar
+home.earthlink.net/~rclaws35/61234567.jar
+home.earthlink.net/~rclaws35/package~label.jar
+home.earthlink.net/~rclaws35/re/shipment~label.jar
+home.earthlink.net/~rclaws35/shipment~label.jar
+home.earthlink.net/~roib/usps/usps~order~copy.jar
+home.earthlink.net/~roib/usps/usps~tracking~receipt.jar
+home.earthlink.net/~ruthtraa/shipment-label.jar
+home.earthlink.net/~rwhall38/01/3-28-2018.jar
+home.earthlink.net/~sallyhansen1/Usps-Shipment~Label.jar
+home.earthlink.net/~sallyhansen1/Usps_Delivery.jar
+home.earthlink.net/~sherylhagen/Usps~Label.jar
+home.earthlink.net/~sherylhagen/usps-shipment-label.jar
+home.earthlink.net/~sidewinder4/Comfirm(Delivery-details).jar
+home.earthlink.net/~sidewinder4/ecopy/ups.jar
+home.earthlink.net/~sltdmd/Ebay01.jar
+home.earthlink.net/~sltdmd/ups-shipping-label.jar
+home.earthlink.net/~suzystar/Ups~costomer~service.jar
+home.earthlink.net/~suzystar/brief/invoice/order/ratata.qrypted.jar
+home.earthlink.net/~suzystar/cgggihfdyjojok/ecopy.jar
+home.earthlink.net/~suzystar/ecopy/e-copy.jar
+home.earthlink.net/~suzystar/pp/luv.qrypted.jar
+home.earthlink.net/~suzystar/usps-shipment-label.jar
+home.earthlink.net/~thfenner/Shipping-label-ecopy.jar
+home.earthlink.net/~timstaacke/FedEx(eFile).jar
+home.earthlink.net/~timstaacke/ecopy/ecopy.jar
+home.earthlink.net/~tom12345678/return-label.jar
+home.earthlink.net/~tom12345678/shipment~label.jar
+home.earthlink.net/~tom12345678/shipping-label.jar
+home.earthlink.net/~twwjr/Usps_Delivery.jar
+home.earthlink.net/~vehanes/12-20-17.jar
+home.earthlink.net/~veteransmemorial/usps/Trackingorder.jar
+home.earthlink.net/~wisebob/Shipment~e~label.jar
+home.earthlink.net/~wisebob/shipping-label.jar
+home.earthlink.net/~youngcl/shipping-label101.jar
+home.earthlink.net/~zrippeto/invoice.jar
+home.earthlink.net/~zrippeto/order-comfirmation.jar
+home.earthlink.net/~zrippeto/pal/payment~details.jar
 home.evrstudio.com
 home.healthiestu.com
 home.isdes.com
@@ -84198,7 +84441,7 @@ houzess.com
 how-to-nampa.com
 how-to-tech.com
 how.ph
-howalshafikings.com/images/g7p08692/
+howalshafikings.com
 howardbenz.com
 howardbragman.com
 howardgfranklin.com
@@ -84301,7 +84544,7 @@ hthaher.com
 hthindustrial.com
 hthttp
 hthttp://jkue.myftp.biz/mx/H1K7R4Y9I5E9b3cnShl/kk/H1K7R4Y9I5E9b3cnShltps://github.com/chama1020
-htl.li
+htl.li/gm6y30lvnkN
 htl.ru
 htlinternational.org
 htlvn.com
@@ -84629,7 +84872,9 @@ i-sharecloud.com
 i-supportcharity.com
 i-vnsweyu.pl
 i-voda.com
-i.cubeupload.com
+i.cubeupload.com/eZ3vpT.jpg
+i.cubeupload.com/euEv6N.jpg
+i.cubeupload.com/gmEtap.jpg
 i.fiery.me
 i.fluffy.cc
 i.funtourspt.eu
@@ -84698,7 +84943,7 @@ iaconsultafrica.com
 iacp-od.org
 iadeca.es
 iadigital.com.br
-iaecconsultants.com/news.bin
+iaecconsultants.com
 iain-padangsidimpuan.ac.id
 iais.ac.id
 iakah.pw
@@ -85460,6 +85705,7 @@ imellda.com
 imemmw.org
 imenbazr.com
 imenergo.com
+imenizeh.ir
 imensanatsi.com
 imensandogh.com
 imersiongis.com
@@ -85630,8 +85876,7 @@ in100tive.com
 in365.vn
 in8.keton8.com
 in9cm.com.br
-inac-americas.com/21M/PAY/US
-inac-americas.com/21M/PAY/US/
+inac-americas.com
 inacioferros.com
 inaczasie.pl
 inadmin.convshop.com
@@ -85717,7 +85962,7 @@ indian-escorts-dubai.com
 indian-escorts-qatar.com
 indian-escorts-rak.com
 indian-escorts-sharjah.com
-indianagoods.club
+indianagoods.club/cl.exe
 indianblog.info
 indianceramicsourcing.com
 indianescortsabudhabi.com
@@ -86288,7 +86533,7 @@ integraciontotal.com.mx
 integracooperativa.com
 integrafika.co.uk
 integraga.com
-integralc.com/tpmsydq/EI0/
+integralc.com
 integralcs.com.br
 integralestates.in
 integralmakeup.com
@@ -86386,7 +86631,7 @@ internationalmscareerseminar.com
 internaut.in
 internetcasinoweblog.com
 internetjogasz.hu
-internetlink.com.mx
+internetlink.com.mx/wp/FILE/rpvni8o8ixy9gf19yk1j0sy6tixd_y4teg7cp-03364579593295/
 internetmarketing4pros.com
 internetofsmell.com
 internetordbogen.dk
@@ -86555,7 +86800,7 @@ ioe-learning.com
 ioffe-soft.ru
 ioffexpert.com
 ioi3.com
-iol.ie/~woodlawn/dpp1.exe
+iol.ie
 iolandagazzerro.it
 ion-consulting.com
 ioncaresindia.in
@@ -86644,7 +86889,7 @@ iphones.bid
 iphonessuckballs.life
 iphoneteknikservisim.net
 iphonewin.website
-iphotoalot.com/wp-content/mu-plugins/DEPOSIT%20RECEIPT.jar
+iphotoalot.com
 iphys-hypoxia.kz
 ipisu.ru
 ipjem.com.br
@@ -87283,7 +87528,7 @@ iykelinksyuiop.5gbfree.com
 iyle.co.uk
 iyycqg.bn.files.1drv.com
 iz.owak-kmyt.ru
-iz.poznan.pl/application/eTrac/zolmv12l6ne/
+iz.poznan.pl
 izabelatrojanowska.pl
 izavu.com
 izbetalia.com
@@ -88227,7 +88472,8 @@ joedee.co.za
 joegie.nl
 joeing.duckdns.org
 joeing.rapiddns.ru
-joeing.warzonedns.com
+joeing.warzonedns.com/j/f.msi
+joeing.warzonedns.com/j/t.msi
 joeing2.duckdns.org
 joeksdj.nl
 joelanguell.com
@@ -88396,11 +88642,7 @@ josemoo.com
 josenutricion.com
 joseph.gergis.net
 josephalavi.com
-josephdutton.com/ACCOUNT/Invoice/
-josephdutton.com/Client/Emailing-H667564FV-45577/
-josephdutton.com/JxFlHTi5S/
-josephdutton.com/fOQoZ6/
-josephdutton.com/ups.com/WebTracking/YCQ-268099560540/
+josephdutton.com
 josephreynolds.net
 josephsaadeh.me
 josepsullca.com
@@ -89585,7 +89827,7 @@ kedaicetakklang.com
 kedaijuara.com
 kedaimadu.net
 kedi-russian.ru
-kedisons.com/xg2.exe
+kedisons.com
 keelsoft.com
 keenpreps.co.uk
 keepchest.hopto.org
@@ -91265,7 +91507,7 @@ kynmandesign.co.uk
 kyokushinmiddleeast.com
 kyoman.vn
 kyoto-shikakeya.com
-kyotoforum.or.jp/RECHNUNG-55272/PXAV2OMHQVEB/
+kyotoforum.or.jp
 kyouei.co.th
 kypa.or.ke
 kyrmedia.com
@@ -91820,9 +92062,7 @@ latiendita.miradiols.cl
 latinannualmeeting.com
 latinaradio.cl
 latinbeat.com
-latinigroup.com/bin/common_array/common_array/verifiable_area/rhAKj_2dggKGqw4s3w/
-latinigroup.com/bin/lm/dkz9q6gw/
-latinigroup.com/bin/zihf3k/49is8co-8922-79554-lz3g4tnop9z-vrvr3/
+latinigroup.com
 latinos-latins.online
 latinovoicesmn.org
 latiprantz.com
@@ -92197,7 +92437,7 @@ legphelhotel.com
 legpnnldy.cf
 legrand-boutique.com
 legrand.ba
-legrand.us
+legrand.us/-/media/brands/wattstopper/resources/software/ws-software-download-lmcs100v462xxsetup.ashx
 legrandmaghrebconsulting.com
 legrandreve.pt
 legsgoshop.com
@@ -92713,7 +92953,7 @@ lightswitchmarketing.biz
 lightvalleyprune.com
 lightwerq.com
 lightyard.com
-lignar.com/wp-admin/nmzwqzx_3oszpk-84359/
+lignar.com
 lignarium.se
 lignumpolska.com
 liguebretagnebillard.fr
@@ -92855,7 +93095,6 @@ link.fivetier.com
 link.gocrazyflower.com
 link.mx
 link.nocomplaintsday.info
-link.zixcentral.com
 link.zixcentral.com/u/3d978f9f/5O23bZxn6RGPtafmBm1nPA?u=https%3A%2F%2Fvensys.es%2Fblogs%2FDocument%2FHH8n8fewY35E%2F/
 link100.cc
 link17.by
@@ -92943,7 +93182,7 @@ liragec.org
 lirave.bplaced.net
 lis-consult.dk
 lisab.se
-lisagirl.net/share
+lisagirl.net
 lisans.boxnet.com.tr
 lisansustu.info
 lisaraeswan.com
@@ -93056,7 +93295,7 @@ livechallenge.fr
 livecigarevent.com
 livecricketscorecard.info
 livedaynews.com
-livedemo00.template-help.com
+livedemo00.template-help.com/28736_site/HoeflerText.font.com
 livedownload.in
 livedrumtracks.com
 livehasa.com
@@ -93083,7 +93322,7 @@ livetechsupport.ca
 livetesting.xyz
 livetotry.com
 livetours.cl
-livetrack.in/EmployeeMasterImages/qace.jpg
+livetrack.in
 livetvsports.ml
 liveu.lk
 liviavicentini.com
@@ -94733,9 +94972,7 @@ mail.openscholarly.com
 mail.optiua.com
 mail.oregonwinerental.net
 mail.outboundnat.com
-mail.pallejabcn.com/1
-mail.pallejabcn.com/2
-mail.pallejabcn.com/3
+mail.pallejabcn.com
 mail.paracep.com
 mail.paramountstudiosholidayvillas.com
 mail.parkernetworks.com
@@ -95868,8 +96105,7 @@ masseur.es
 masseyatnandina.com
 massimopintus.com
 massiveart.info/app/app.exe
-massivedynamicks.com/dewise_encrypted_8F7F64F.bin
-massivedynamicks.com/dewise_encrypted_954109F.bin
+massivedynamicks.com
 massivesales.co.uk
 massivewebtech.com
 massomsadarpuri.com
@@ -97082,7 +97318,9 @@ mfmr.gov.sl
 mfomjr.com
 mfotovideo.ro
 mfpburundi.bi
-mfpc.org.my
+mfpc.org.my//wp-content/plugins/formcraft3/STUB2_encrypted_BA9409F.bin
+mfpc.org.my/wp-admin/images/STB_encrypted_5B6E930.bin
+mfpc.org.my/wp-admin/meta/STB_encrypted_A322E7F.bin
 mfppanel.xyz
 mfpvision.com
 mfronza.com.br
@@ -97234,7 +97472,9 @@ micropcsystem.com
 microratings.tk
 micros0ft1.ddns.net
 microservicesmonitor.com
-microsfotgooglegmailoutlook365mailallaregoodformailing.warzonedns.com
+microsfotgooglegmailoutlook365mailallaregoodformailing.warzonedns.com/big/vbc.exe
+microsfotgooglegmailoutlook365mailallaregoodformailing.warzonedns.com/major/nass.xml
+microsfotgooglegmailoutlook365mailallaregoodformailing.warzonedns.com/major/patto.xml
 microsoft-01.dynamic-dns.net
 microsoft-dl.com.br.md-43.webhostbox.net
 microsoft-frameworkseguro.com
@@ -98368,13 +98608,7 @@ mooi-trade.com
 mooipilates.com
 mooithailand.nl
 moolchi.com
-moolo.pl//oIx1UAV0k
-moolo.pl/Telekom/RechnungOnline/112018/
-moolo.pl/oIx1UAV0k
-moolo.pl/oIx1UAV0k/
-moolo.pl/pub/INC/Rkw4RGtmAx/
-moolo.pl/pub/LLC/SvLMHTEK/
-moolo.pl/pub/NauVcJcbPH/
+moolo.pl
 moomi-daeri.com
 moomicos.com
 moommam.fr
@@ -98684,11 +98918,7 @@ mpgbss.com
 mpgestaodepessoas.com.br
 mpii.tech
 mpinteligente.com
-mpkglobaltrainingcorp.net/cryptedmonni.exe
-mpkglobaltrainingcorp.net/izu.exe
-mpkglobaltrainingcorp.net/monni.exe
-mpkglobaltrainingcorp.net/morito.exe
-mpkglobaltrainingcorp.net/moritocryp.exe
+mpkglobaltrainingcorp.net
 mplmodapk.site
 mpls.foodiecycle.com
 mpn.vn
@@ -99776,6 +100006,7 @@ nakhlmarket.com
 nakshadekho.com
 nakshatrajoshi.com
 nal.com.ua
+nalahotel.com
 nalcalar.com
 nalfonsotriston.city
 nalmac.com
@@ -100098,7 +100329,8 @@ nbfghreqww.ug
 nbgcpa.net
 nbgcpa.org
 nbhgroup.in
-nbigfile.mail.naver.com
+nbigfile.mail.naver.com/bigfileupload/download?fid=9YRcMrkd162jK6J0b4eOK3YwFA2raxUmHqUmKx2maAUZKxuwFqtwHqu9Kqb9FAulaxvjFxbmaztrpxvqKqvXFAUraxtrKqb/MoJvMx3Spx2/M4U=
+nbigfile.mail.naver.com/bigfileupload/download?fid=VPeqW60cW4KZFovXHqujKoUjKogwaAgXKoMmFqUXKxKjKxEqFxUmaxula3YqKogqKzMwFrU9KxkCM4M/KzJSFqt/KqbXpo2lKoEZat==
 nbiyan.vn
 nbj.engaged.it
 nbn-nrc.org
@@ -100338,7 +100570,7 @@ netafix.com
 netasarim.com
 netbenfey.ciprudential.com.watchdogdns.duckdns.org
 netcity1.net
-netck.pl/wp-content/themes/twentyseventeen/inc/msg.jpg
+netck.pl
 netcom-soft.com
 netcomp.lizave.store
 netcorpsgroup.com
@@ -100359,7 +100591,7 @@ netin.vn
 netizennepal.com
 netkafem.org
 netking.duckdns.org
-netlink.com
+netlink.com/wp-content/plugins/all-in-one-wp-migration/storage/doc/Copy_Invoice/469302181479406/FHoLy-13a_ZIEFBA-gXE/
 netlux.in/av/bi.hta
 netm.club
 netmaffia.net
@@ -100840,16 +101072,7 @@ nguyenthanhriori.com
 nguyenthituyet.org
 nguyenthuyhanh.com.vn
 nguyentrongkha.com
-ngyusa.com/catalog/htarg2.hta
-ngyusa.com/catalog/rginvoice.exe
-ngyusa.com/customer/anyi.exe
-ngyusa.com/payment/htaallofus.hta
-ngyusa.com/payment/htanelson.hta
-ngyusa.com/payment/htazeco.hta
-ngyusa.com/systems/bukas.exe
-ngyusa.com/systems/htabukas.hta
-ngyusa.com/systems/htanelson.hta
-ngyusa.com/systems/htazeco.hta
+ngyusa.com
 nhacchoquangcao24h.com
 nhadaiphat.com
 nhadatbaria.asia
@@ -100860,7 +101083,7 @@ nhadatphonglinh.com
 nhadatquan2.xyz
 nhadatthienthoi.com
 nhadephungyen.com
-nhadepkientruc.net
+nhadepkientruc.net/wp-content/ogi3nl90/
 nhahangdaihung.com
 nhahanghaivuong.vn
 nhahanglegiang.vn
@@ -100947,9 +101170,7 @@ nickelaction.com
 nicklaslj.se
 nickpeets.com
 nickycooperhomes.co.nz
-nicolaisen.de/554ZPGXCAFF/oamo/Smallbusiness
-nicolaisen.de/FILE/US/Document-needed
-nicolaisen.de/FILE/US/Document-needed/
+nicolaisen.de
 nicolasbaldoma.com
 nicolasgalvez.com
 nicolaskohen.com
@@ -101350,7 +101571,8 @@ nonglek.net
 nongnghiepgiaphat.com
 nongsan24h.com
 nongsananhnguyen.com
-nongsandungha.com
+nongsandungha.com/wp-content/uploads/FILE/ho9fvb3zs1t/
+nongsandungha.com/wp-content/uploads/report/uy5upbmh/
 nonlocality.com
 nonnemacher.com.br
 nonnewspaper.com
@@ -101586,7 +101808,7 @@ novoselica.dp.ua
 novosibirsk.quadrotek-logistic.ru
 novostack.net
 novotravel.ir
-nowak-meble.eu/INFO/Invoice-number-8512351243/
+nowak-meble.eu
 nowkh.com
 nowley-rus.ru
 nowley-rus.ruadministrator
@@ -102242,7 +102464,7 @@ ohscrane.com
 ohters.de
 ohyellow.nl
 oi65.tinypic.com/2z8thcz.jpg
-oi68.tinypic.com
+oi68.tinypic.com/2saxhrc.jpg
 oiainbtaea38.silverabout.ml
 oiasdnqweqasd.com
 oiflddw.gq
@@ -102497,40 +102719,7 @@ ominenergo.gov.rsmart-testsolutions.watchdogdns.duckdns.org
 ominix.com
 omitkyspisar.cz
 omiwnusantara.com
-omlinux.com/0
-omlinux.com/137124NX/identity/Business
-omlinux.com/19RECorporation/UI047338412NOP/68470091618/SVG-YMHRT
-omlinux.com/19RECorporation/UI047338412NOP/68470091618/SVG-YMHRT/
-omlinux.com/39E/PAYMENT/US
-omlinux.com/39E/PAYMENT/US/
-omlinux.com/716DCEWP/PAY/Business
-omlinux.com/716DCEWP/PAY/Business/
-omlinux.com/836775O/oamo/Commercial
-omlinux.com/836775O/oamo/Commercial/
-omlinux.com/889YJN/PAYROLL/Personal
-omlinux.com/889YJN/PAYROLL/Personal/
-omlinux.com/DHL-number/US_us/
-omlinux.com/DOC/Past-Due-invoice/
-omlinux.com/EjgPh
-omlinux.com/IRS-Accounts-Transcipts-062018-427
-omlinux.com/IRS-Accounts-Transcipts-062018-427/
-omlinux.com/Internal-Revenue-Service-Online-Center/Verification-of-Non-filing-Letter/December-06-2018
-omlinux.com/Internal-Revenue-Service-Online-Center/Verification-of-Non-filing-Letter/December-06-2018/
-omlinux.com/PAY/MWA7477623588N/7386911688/YOO-PBQIK
-omlinux.com/PAY/MWA7477623588N/7386911688/YOO-PBQIK/
-omlinux.com/SGNChoG
-omlinux.com/SGNChoG/
-omlinux.com/Wellsfargo/US/Aug-15-2018
-omlinux.com/Wellsfargo/US/Aug-15-2018/
-omlinux.com/XBbKZ
-omlinux.com/newsletter/US_us/Statement/Invoices/
-omlinux.com/ups.com/WebTracking/NIP-807813880/
-omlinux.com/wp-admin/files/En/INVOICES/INV879643659
-omlinux.com/wp-admin/files/En/INVOICES/INV879643659/
-omlinux.com/xerox/En/Past-Due-Invoice
-omlinux.com/xerox/En/Past-Due-Invoice/
-omlinux.com/xerox/En/Past-Due-Invoices
-omlinux.com/xerox/En/Past-Due-Invoices/
+omlinux.com
 ommar.ps
 ommienetwork.000webhostapp.com
 omni-anela.com
@@ -104378,8 +104567,7 @@ pablorub-cp38.wordpresstemporal.com
 pabloteixeira.com
 pablotrabucchelli.com
 pabnainfo.com
-paboard.com/6AR/ACH/Smallbusiness
-paboard.com/6AR/ACH/Smallbusiness/
+paboard.com
 pabrik-tenda.id
 pabx-uae.com
 pacbest.org
@@ -104446,7 +104634,7 @@ pahahome.com
 pahanlab.com
 paht.nuph.edu.ua
 pai.fai.umj.ac.id
-paides.com/error-docs/bQzwz-nDFFlQTKJ5nTsm_iMLAfstmA-Xp/
+paides.com
 paidtv.siaraya.com
 paifi.net
 paigeplacements.co.uk
@@ -104777,7 +104965,7 @@ parkinsoncsra.org
 parkklead.com
 parkourschool.ru
 parkradio.ca
-parksfo.com/reserve_send.exe
+parksfo.com
 parkside-mi.com
 parksteals.com
 parkwaygames.com
@@ -105133,6 +105321,7 @@ pastebin.com/raw/2acHNH97
 pastebin.com/raw/2ar9XUJJ
 pastebin.com/raw/2awwS2uK
 pastebin.com/raw/2biKUawc
+pastebin.com/raw/2cfxmdLE
 pastebin.com/raw/2dCxVfWC
 pastebin.com/raw/2eTEEpZL
 pastebin.com/raw/2esy3jas
@@ -105874,6 +106063,7 @@ pastebin.com/raw/DjpQp3eC
 pastebin.com/raw/DkGpiAw4
 pastebin.com/raw/DkhnZKPy
 pastebin.com/raw/Dma7yZ8K
+pastebin.com/raw/DnRWHnp4
 pastebin.com/raw/DnUcgm5F
 pastebin.com/raw/DnW9bZ0H
 pastebin.com/raw/DsKnXwxU
@@ -105977,6 +106167,7 @@ pastebin.com/raw/FEyX79KN
 pastebin.com/raw/FFgjW5sW
 pastebin.com/raw/FGVHVwnL
 pastebin.com/raw/FJJFtEPJ
+pastebin.com/raw/FKMpjvpM
 pastebin.com/raw/FKW81kBN
 pastebin.com/raw/FKtkGETB
 pastebin.com/raw/FLp8AYET
@@ -106132,6 +106323,7 @@ pastebin.com/raw/HdTYxj0A
 pastebin.com/raw/HejAcJVz
 pastebin.com/raw/HfTMg9mN
 pastebin.com/raw/HhhMPyv2
+pastebin.com/raw/HicPnquY
 pastebin.com/raw/HjqWUVqB
 pastebin.com/raw/HkCBa7Yb
 pastebin.com/raw/HmttZL9U
@@ -106398,6 +106590,7 @@ pastebin.com/raw/MfHHYebX
 pastebin.com/raw/MfxhSTnA
 pastebin.com/raw/MgBminTT
 pastebin.com/raw/MgaKnSuT
+pastebin.com/raw/MgumbPGq
 pastebin.com/raw/MiCtF86w
 pastebin.com/raw/MkWmsbFC
 pastebin.com/raw/Mkxh2i9V
@@ -106430,6 +106623,7 @@ pastebin.com/raw/NF38qh10
 pastebin.com/raw/NFQKsrk3
 pastebin.com/raw/NGZZPV3X
 pastebin.com/raw/NHE7VNcH
+pastebin.com/raw/NJD2NnVm
 pastebin.com/raw/NK31BKg7
 pastebin.com/raw/NKg9bQQA
 pastebin.com/raw/NKmygGP7
@@ -106491,6 +106685,7 @@ pastebin.com/raw/P8jwNFLR
 pastebin.com/raw/P9tqewbE
 pastebin.com/raw/PAKuwpgV
 pastebin.com/raw/PB1FpQkH
+pastebin.com/raw/PDr6aV1b
 pastebin.com/raw/PDzp6VSN
 pastebin.com/raw/PFQKFtvd
 pastebin.com/raw/PGEcvceN
@@ -106719,6 +106914,7 @@ pastebin.com/raw/ST09efbi
 pastebin.com/raw/SV8zB3q7
 pastebin.com/raw/SZpSy2vg
 pastebin.com/raw/SZxfx0qZ
+pastebin.com/raw/SaGMT3DP
 pastebin.com/raw/SaXxQCCb
 pastebin.com/raw/SaiGL9YP
 pastebin.com/raw/SbPAScYJ
@@ -106926,6 +107122,7 @@ pastebin.com/raw/VdMZcVpV
 pastebin.com/raw/VdbzRGKa
 pastebin.com/raw/Vegf8KZQ
 pastebin.com/raw/VfjBa48P
+pastebin.com/raw/VguPZ6pp
 pastebin.com/raw/Vinu5r0B
 pastebin.com/raw/VjFC3VCM
 pastebin.com/raw/VmMfekji
@@ -107094,6 +107291,7 @@ pastebin.com/raw/Ygm3TaZL
 pastebin.com/raw/Ygv1PF5P
 pastebin.com/raw/YhLYpFYJ
 pastebin.com/raw/Yi93BRdu
+pastebin.com/raw/YixGJwLe
 pastebin.com/raw/YjQUTwW4
 pastebin.com/raw/Yjavv18Z
 pastebin.com/raw/YkcbCrpt
@@ -107264,6 +107462,7 @@ pastebin.com/raw/asWe7Bj7
 pastebin.com/raw/asgx33Ly
 pastebin.com/raw/atW5J1U4
 pastebin.com/raw/av0gsDC5
+pastebin.com/raw/avv6UQri
 pastebin.com/raw/awC9U3C4
 pastebin.com/raw/awS6Apzz
 pastebin.com/raw/axJbfjbW
@@ -107476,6 +107675,7 @@ pastebin.com/raw/eAb4MHA0
 pastebin.com/raw/eBNbdjvU
 pastebin.com/raw/eCZRZ1Ga
 pastebin.com/raw/eDMbNCxE
+pastebin.com/raw/eEaNyid2
 pastebin.com/raw/eEqGBFWD
 pastebin.com/raw/eFL5ufx9
 pastebin.com/raw/eGBhuZCy
@@ -107981,6 +108181,7 @@ pastebin.com/raw/mjD6We8b
 pastebin.com/raw/mn3bK6iJ
 pastebin.com/raw/mntBKGW9
 pastebin.com/raw/mqBMxrXW
+pastebin.com/raw/mqzVZBBm
 pastebin.com/raw/ms28Dz9h
 pastebin.com/raw/mts8YDHq
 pastebin.com/raw/mu5dXAez
@@ -108027,6 +108228,7 @@ pastebin.com/raw/nTf21C1y
 pastebin.com/raw/nVDPPEq7
 pastebin.com/raw/nWyuL56c
 pastebin.com/raw/nZDQEzW9
+pastebin.com/raw/nZFESHA7
 pastebin.com/raw/nasJMseX
 pastebin.com/raw/nbDNeJhh
 pastebin.com/raw/ncSuYE4p
@@ -108146,6 +108348,7 @@ pastebin.com/raw/qAHFaPsn
 pastebin.com/raw/qB8ihs78
 pastebin.com/raw/qBiWX5i5
 pastebin.com/raw/qC5SD7AK
+pastebin.com/raw/qCLRR5Bj
 pastebin.com/raw/qCnCy5Jj
 pastebin.com/raw/qDqcgiMK
 pastebin.com/raw/qFJYr7kU
@@ -108744,25 +108947,7 @@ pastebin.com/wysTXHiw
 pastebin.com/yMKUGdpn
 pastebin.com/ykG1At58
 pastebin.com/zP4AAbau
-pasteboard.co/images/HHKrjPX.jpg/download
-pasteboard.co/images/HIzhg49.jpg/download
-pasteboard.co/images/HLNMUsd.png/download
-pasteboard.co/images/HLoGpNO.jpg/download
-pasteboard.co/images/HMTQPDK.jpg/download
-pasteboard.co/images/HSAFBZI.jpg/download
-pasteboard.co/images/HSALBfU.jpg/download
-pasteboard.co/images/HSk9gWK.jpg/download
-pasteboard.co/images/HT2ugQA.jpg/download
-pasteboard.co/images/HTp1oKY.jpg/download
-pasteboard.co/images/HVTFIvR.jpg/download
-pasteboard.co/images/HVb42Yz.jpg/download
-pasteboard.co/images/HVbB1pM.jpg/download
-pasteboard.co/images/HVjbP3R.jpg/download
-pasteboard.co/images/HWfviIm.jpg/download
-pasteboard.co/images/HWgDFYp.png/download
-pasteboard.co/images/HWyr6Hm.jpg/download
-pasteboard.co/images/HXunzx0.jpg/download
-pasteboard.co/images/HXurHEL.jpg/download
+pasteboard.co
 pastecode.xyz
 pastelcolors.in
 pastermaster2020.s3.us-east-2.amazonaws.com/Gfunfinytr3.iso
@@ -109009,7 +109194,7 @@ pd.ibigcse.net
 pd0rt.nl
 pdedas.com
 pdesaa.cimaa.pt
-pdf-archive.com/2017/06/29/fmb/fmb.pdf
+pdf-archive.com
 pdf-archive.press
 pdf-archive.store
 pdf-compare.site
@@ -109045,9 +109230,7 @@ peacegreetings.com
 peacemed.e-nformation.ro
 peaceseedlings.org
 peacesprit.ir
-peacewatch.ch/fileadmin/LLC/FQYIXuVbIXvWgoJW/
-peacewatch.ch/fileadmin/ONCC-J2W6jolNJZufTX_gwOdJdkBl-k8M/
-peacewatch.ch/fileadmin/QFrCq-BNjgFDkho661Do4_SiwYYxPv-dH/
+peacewatch.ch
 peach-slovenija.si
 peachgirl.ru
 peacock.dating
@@ -109097,7 +109280,7 @@ pedsassociates.com
 pedslovo.ru
 pedulirakyataceh.org
 peechproperties.com
-peekaboobubba.com.au/wp-admin/open-b4o3g518rlba-xm7wbeintyx0h/verifiable-space/QCjeA-7qetota2u/
+peekaboobubba.com.au
 peekaboorevue.com
 peekend.com
 peer2travel.com
@@ -109279,7 +109462,8 @@ periscope.es
 peritofinanceiro.tk
 perkasa.ddns.net
 perkasa.undiksha.ac.id
-perkasa.warzonedns.com
+perkasa.warzonedns.com:8080/bin/chiefo.exe
+perkasa.warzonedns.com:8080/bin/pdf.exe
 perkfix.com
 perkim.bondowosokab.go.id
 perlage.net
@@ -109370,7 +109554,7 @@ petalsnbones.com
 petanisukses.club
 petcarepass.cz
 peteivs.co.nz
-petendereruk.pro/?cid=b0793433-480e-4f7c-ad66-4dafe4940cac&tid=714041&sid1=2193760523248792889&sid2=&fn=Your%20File%20Is%20Ready%20To%20Download&uid=2193760523248792889&lp=blank
+petendereruk.pro
 peterantennas.bid
 peterbeckundpartner.cporsgrunn.folkbjnrwwww.watchdogdns.duckdns.org
 petercottontailmovie.com
@@ -109554,7 +109738,7 @@ phillbecker.com
 phillipjohnson.co.uk
 philomenabar.com.br
 philpaisley.com
-phimhdonline.tv/wp-admin/Wwjli/
+phimhdonline.tv
 phimmoinhat.online
 phimphot.tk
 phitemntech.com
@@ -109935,8 +110119,7 @@ pixel.as
 pixel.mobycare.website
 pixelcrush.net
 pixeldra.in
-pixeldrain.com/api/file/HFEe1v15
-pixeldrain.com/api/file/RitNQ5lb
+pixeldrain.com
 pixelerp.com
 pixelfactorysolutions.xyz
 pixelguru.info
@@ -110042,7 +110225,7 @@ planitsolutions.co.nz
 planktonik.hu
 planmyfurnitureinterior.com
 planningportal.semblueinc.com
-planningtravel.es/wp-content/themes/flatsome/js/index.html
+planningtravel.es
 plannpick.com
 plano.xoom.it
 planodeobrasdeilhabela.com.br
@@ -110096,7 +110279,7 @@ plaxury.com
 play-movie.xyz
 play0.revosales.ru
 play2.revosales.ru
-play2win.buzz/files/chrome-update.apk
+play2win.buzz
 play4fitness.co.uk
 playalongmusic.net
 playasrivieramaya.com
@@ -110106,7 +110289,7 @@ playcoin.game
 playden.in
 playfire.online
 playgrounds.tumo.org
-playgroupsrl.com/creodeo/documents.php
+playgroupsrl.com
 playhard.ru
 playitforwardnashville.com
 playkey.ga
@@ -110182,7 +110365,7 @@ plurallider.com.br
 pluralsight-static.s3.amazonaws.com/course-materials/go/CD3141BD2E/20130215014520/go.zip
 plus.mn
 plus1interactive.com
-plushshow.com/US/Payments/12_18/
+plushshow.com
 plusjop.nl
 plusmicrotd.kz
 plussizeall.net
@@ -110422,7 +110605,7 @@ pontosat.com.br
 pontotocdistrictba.com
 pontus-euxinus.ro
 pony.s-p-y.ml
-pony.warzonedns.com
+pony.warzonedns.com/RFQ/RFQ-TC002651.zip
 ponytales.nostalgicbookshelf.com
 poojasingh.me
 pool.ug
@@ -110583,14 +110766,7 @@ positivechangesok.com
 positiveconvention.co.za
 positiveid.org
 positiverne.dk
-positronicsindia.com/eph/aba/mor.exe
-positronicsindia.com/eph/ari/oki.exe
-positronicsindia.com/eph/cok/chi.exe
-positronicsindia.com/eph/di/aro.exe
-positronicsindia.com/eph/jo/jeo.exe
-positronicsindia.com/eph/newg/guy.exe
-positronicsindia.com/eph/pla/sin.exe
-positronicsindia.com/eph/uru/oguy.exe
+positronicsindia.com
 posizionareunsito.it
 poslovni-oglasi.com
 poslovno-pregovaranje.com
@@ -111054,8 +111230,7 @@ prismware.ml
 pristineglassmirror.com
 pristinequill.com
 prith-hauts-de-france.org
-prithvigroup.net/QDK/ODK%2016X.exe
-prithvigroup.net/idn/1x7824632.png
+prithvigroup.net
 pritsep56.ru
 prittworldproperties.co.ke
 privacydesignstudio.com
@@ -111557,7 +111732,7 @@ proxy.qualtrics.com
 proxy.qualtrics.com/proxy/?url=https%3A%2F%2Fuark.qualtrics.com%2FCP%2FFile.php%3FF%3DF_0ImYT11IuwAOVeZ&token=VaZKFD%2BFsRcUYx5fyuNAX24ZXgk5dXrGqSzM%2BPOz8fw%3D
 proxygrnd.xyz
 proxyholding.com
-proxyresume.com/notifications
+proxyresume.com
 proxysis.com.br
 proyectocithara.org
 proyectoin.com
@@ -111671,7 +111846,7 @@ psymonkee.com
 psynchro.org
 pt-gbij8sdfj8wsd0-19.s3.amazonaws.com/P19.dll
 ptb.com.mx
-ptbsda.com/wp-includes/cs4uz68285/
+ptbsda.com
 ptci-md.org
 ptdtech.tk
 pte.vn
@@ -112197,7 +112372,25 @@ qe-zw.top
 qe-zz.top
 qeba.win
 qeducacional.com.br
-qeeeeewwswsweerwwerwerwrwerwerwerwere.warzonedns.com
+qeeeeewwswsweerwwerwerwrwerwerwerwere.warzonedns.com/ace/v.exe
+qeeeeewwswsweerwwerwerwrwerwerwerwere.warzonedns.com/ace/vbc.exe
+qeeeeewwswsweerwwerwerwrwerwerwerwere.warzonedns.com/big/MT103........MT103........MT103.......MT103......doc
+qeeeeewwswsweerwwerwerwrwerwerwerwere.warzonedns.com/big/v.exe
+qeeeeewwswsweerwwerwerwrwerwerwerwere.warzonedns.com/big/vnc.exe
+qeeeeewwswsweerwwerwerwrwerwerwerwere.warzonedns.com/deking/v.exe
+qeeeeewwswsweerwwerwerwrwerwerwerwere.warzonedns.com/deking/vbc.exe
+qeeeeewwswsweerwwerwerwrwerwerwerwere.warzonedns.com/jack/v.exe
+qeeeeewwswsweerwwerwerwrwerwerwerwere.warzonedns.com/jack/vbc.exe
+qeeeeewwswsweerwwerwerwrwerwerwerwere.warzonedns.com/king/v.exe
+qeeeeewwswsweerwwerwerwrwerwerwerwere.warzonedns.com/king/vbc.exe
+qeeeeewwswsweerwwerwerwrwerwerwerwere.warzonedns.com/noah/v.exe
+qeeeeewwswsweerwwerwerwrwerwerwerwere.warzonedns.com/noah/vnc.exe
+qeeeeewwswsweerwwerwerwrwerwerwerwere.warzonedns.com/sammy/invoce.....invocie.....invoice....invoice.doc
+qeeeeewwswsweerwwerwerwrwerwerwerwere.warzonedns.com/sammy/v.exe
+qeeeeewwswsweerwwerwerwrwerwerwerwere.warzonedns.com/sammy/vbc.exe
+qeeeeewwswsweerwwerwerwrwerwerwerwere.warzonedns.com/sammy/vnc.exe
+qeeeeewwswsweerwwerwerwrwerwerwerwere.warzonedns.com/tony/V.exe
+qeeeeewwswsweerwwerwerwrwerwerwerwere.warzonedns.com/tony/vnc.exe
 qelie.com
 qeoficial.es
 qeshmsport.ir
@@ -112800,8 +112993,7 @@ radheenterpriseonline.com
 radheshyamcityhomes.com
 radi.org.ng
 radiantdates.com
-radiantqatar.com/uploads/media/f.jpg
-radiantqatar.com/uploads/media/y.jpg
+radiantqatar.com
 radiantservices.com
 radicocinas.com.mx
 radienten.com
@@ -112876,7 +113068,7 @@ raf-dv.ru
 rafa-craftsman.com
 rafaat.ir
 rafaelcarvalho.com.br
-rafaelospizzeria.com/digital
+rafaelospizzeria.com
 rafaelvieira.com.br
 rafatelles.com
 raffaelli.com.br
@@ -113546,6 +113738,7 @@ redhorsebatteries.com
 redhorsetile.com
 redic.co.uk
 redilmatt.biz
+redingtonpost.com
 redinktattoo.net
 redirectiontest.basezap.com
 redironmarketing.com
@@ -113572,7 +113765,7 @@ redsnowball.com
 redsseammgt.com
 redtek0.com
 redtv.top
-redvalidator.com/files/gift/brr.exe
+redvalidator.com
 redvelvetpatisserie.co.uk
 redwing.com.eg
 redwingdemo.dukaafrica.com
@@ -114112,7 +114305,7 @@ rewal.ch
 reward.uta.edu.ec
 rewitek.nl
 rexhagis.nl
-rexindototeknik.com/Contracts/
+rexindototeknik.com
 rexpc.dk
 rexpronecorpllc.com
 rexprosealers.com
@@ -114402,7 +114595,7 @@ riverwalkmb.com
 rivesam.com
 rivesandrives.com
 rivestiti.com
-rivoltaponteggi.com/pdf/NrEXyVsSMiXbGRIMqaRxatUcwrfZZZ/
+rivoltaponteggi.com
 riyafisheries.com.cp-51.webhostbox.net
 riyanenterprise.com
 riyanshoppingbags.com
@@ -114997,7 +115190,7 @@ rsquareandco.com
 rssansani.com
 rssdefense.com
 rstarserver17km.xyz
-rstelectricals.com/F.01-730265721782007603731.zip
+rstelectricals.com
 rsterlingzmyrtice.xyz
 rstrading.in
 rsudpbari.palembang.go.id
@@ -115686,7 +115879,7 @@ saepedra.com
 safa.205dundas.com
 safakteknoloji.com
 safaniru.com
-safarbekish.com/ticket_pdf/gjb1kj16/
+safarbekish.com
 safari7.devitsandbox.com
 safariet-zarzis.com
 safarigold.com
@@ -115710,7 +115903,7 @@ safelink.themeson.review
 safelinks-protection.com
 safemedicinaonline.com
 safemoneyamerica.com
-safentrix.com
+safentrix.com/adlink?cid=0
 saferoomreviews.com
 safesalesnembutal.com
 safesandsecurity.co.za
@@ -115789,12 +115982,14 @@ sageth.net
 sagiri.org
 saglikbakanli-hediyeinternet.org
 saglikbakanligi-destek.org
+saglikbakanligi-destekportal.org
 saglikbakanligi20gbinternet.com
 saglikbakanligindanhediye20gb.com
 saglikgoalapp.site
 saglikliapp.live
 sagliklibedenim.com
 saglikodemelerinial.org
+saglikramazan20bgb.net
 sagrathi.com
 sagunpapers.com
 sahabathasyim.com
@@ -116532,7 +116727,7 @@ sbs.ipeary.com
 sbsbe.co.uk
 sbspro.in
 sbtabank.in
-sbtasimacilik.com/H3PmH
+sbtasimacilik.com
 sbtextiles.com
 sbwellness.org
 sc-tuning.de
@@ -117179,7 +117374,7 @@ semashur10s.org
 semassi.com
 semayakas.com
 sembako.manaira.store
-semcoe.com/mg/doc_attached.exe
+semcoe.com
 semenfedosov.ru
 semengresik.co.id
 semestr.by
@@ -117568,7 +117763,7 @@ setfalc.com
 setfireltd.com
 sethoresg.com.br
 sethpgoldstein.com
-setiamanggalaabadi.com/sites/default/files/gree.exe
+setiamanggalaabadi.com
 setimosacramento.com.br
 setincon.com
 setit.ro
@@ -118377,7 +118572,7 @@ si-hao.cn
 sia-gmbh.de
 siairport.com
 siakad.brawijaya.ac.id
-siakad.ub.ac.id
+siakad.ub.ac.id/update/siakad.exe_new
 sial-healthcare.co.uk
 sialkotgoods.com
 sialkotmart.net
@@ -119946,14 +120141,7 @@ sophiasuites-santorini.com
 sophiebarthelemy.fr
 sophieguaremas.com
 sophiethomasartist.com
-sophis.biz/823TGEDQNLZ/SWIFT/Personal
-sophis.biz/823TGEDQNLZ/SWIFT/Personal/
-sophis.biz/8YCOXH/PAYMENT/Commercial
-sophis.biz/8YCOXH/PAYMENT/Commercial/
-sophis.biz/LLC/EN_en/Invoice-for-s/b-08/23/2018
-sophis.biz/default/En/Available-invoices/Invoice-681672146-072418/
-sophis.biz/scan/EN_en/Outstanding-Invoices
-sophis.biz/scan/EN_en/Sales-Invoice
+sophis.biz
 sophistproduction.com
 sophro-zara.com
 sophrologie-untempspourmoi.fr
@@ -120796,6 +120984,7 @@ staging.westlondon-musictutors.co.uk
 staging.wolseleyfamilyplace.com
 staging.xdigitalstudio.com
 staging1.xamadu.com
+staging2.lifebiotic.com
 staging3.agencyh.com
 stagingmcr.cloudkami.com
 stagingmcs.cloudkami.com
@@ -120829,6 +121018,7 @@ staminaoptimism.co.kr
 stamp2u.com.my
 stampa3dplus.com
 stampile-sibiu.ro
+standardalloysindia.com
 standardchartfinance.com.cp-45.webhostbox.net
 standardpen.id
 standardpopulation.icu
@@ -123593,7 +123783,7 @@ sunshinemarketing.biz
 sunshinevn.vn
 sunshinewebsite.club
 sunshinewondervillas.biz
-sunsquare.fr/_old_formation/Facture_CREA_FR798PKL2.zip
+sunsquare.fr
 suntour.com.vn
 suntreebearing.com
 sunucuo.com
@@ -123705,7 +123895,10 @@ support.imaitaly.biz
 support.indeed.com/attachments/token/RVDXKCofCmEb1PdT1WRikfMxN/
 support.jbrueggemann.com
 support.m2mservices.com
-support.mdsol.com
+support.mdsol.com/attachments/token/H6YLkuGzQ4TB0Eu3WmzZGcwN4/
+support.mdsol.com/attachments/token/H6YLkuGzQ4TB0Eu3WmzZGcwN4/?name=WGY-709010.doc
+support.mdsol.com/attachments/token/PnCg6A0UiLcjvS1lwsK1RgAXQ/
+support.mdsol.com/attachments/token/PnCg6A0UiLcjvS1lwsK1RgAXQ/?name=WGY-709010.doc
 support.nordenrecycling.com
 support.pubg.com
 support.redbook.aero
@@ -124126,7 +124319,28 @@ systemagically.com
 systemandcode.com
 systematicsarl.com
 systematm.com
-systemgooglegooglegooglegooglegooglegoole.warzonedns.com
+systemgooglegooglegooglegooglegooglegoole.warzonedns.com/lovetrue/ach.exe
+systemgooglegooglegooglegooglegooglegoole.warzonedns.com/lovetrue/alu.exe
+systemgooglegooglegooglegooglegooglegoole.warzonedns.com/lovetrue/b.exe
+systemgooglegooglegooglegooglegooglegoole.warzonedns.com/lovetrue/c.exe
+systemgooglegooglegooglegooglegooglegoole.warzonedns.com/lovetrue/file.exe
+systemgooglegooglegooglegooglegooglegoole.warzonedns.com/lovetrue/image.png
+systemgooglegooglegooglegooglegooglegoole.warzonedns.com/lovetrue/lov.exe
+systemgooglegooglegooglegooglegooglegoole.warzonedns.com/lovetrue/love.bat
+systemgooglegooglegooglegooglegooglegoole.warzonedns.com/lovetrue/love.doc
+systemgooglegooglegooglegooglegooglegoole.warzonedns.com/lovetrue/love.exe
+systemgooglegooglegooglegooglegooglegoole.warzonedns.com/lovetrue/luv.exe
+systemgooglegooglegooglegooglegooglegoole.warzonedns.com/lovetrue/mori.exe
+systemgooglegooglegooglegooglegooglegoole.warzonedns.com/lovetrue/v.doc
+systemgooglegooglegooglegooglegooglegoole.warzonedns.com/lovetrue/v.exe
+systemgooglegooglegooglegooglegooglegoole.warzonedns.com/lovetrue/vbc.hta
+systemgooglegooglegooglegooglegooglegoole.warzonedns.com/lovetrue/vv.exe
+systemgooglegooglegooglegooglegooglegoole.warzonedns.com/noahg/vbc.exe
+systemgooglegooglegooglegooglegooglegoole.warzonedns.com/noahg/win32.exe
+systemgooglegooglegooglegooglegooglegoole.warzonedns.com/noahg/winrar.exe
+systemgooglegooglegooglegooglegooglegoole.warzonedns.com/sammy/vbc.exe
+systemgooglegooglegooglegooglegooglegoole.warzonedns.com/stsan/sddsdddsdsdsdsd.doc
+systemgooglegooglegooglegooglegooglegoole.warzonedns.com/stsan/stsan.doc
 systemintergrafileexchangeserverprotocol.duckdns.org
 systemmasterpage.com
 systemmicroupdate.com
@@ -125707,7 +125921,7 @@ textilesld.cluster020.hosting.ovh.net
 textilessudamericanos.com
 textilesunrise.com
 textilkopruch.com.br
-texum-me.com/wp-admin/da5tfh48/
+texum-me.com
 teyouhao.com
 tfhvccny.com
 tfile.7to.cn
@@ -125839,7 +126053,7 @@ thaarcoffee.com
 thacci.com.br
 thachastew.com
 thaddeusarmstrong.com
-thadinnoo.co
+thadinnoo.co/wp-includes/paclm/end1pfmm5dj9x84bmha4ntl43_n1kg9ewm3-17387884/
 thagreymatter.com
 thai-pub.com
 thaiascobrake.com
@@ -125903,7 +126117,8 @@ tharsisfilms.com
 thatavilellaoficial.com.br
 thatoilchick.com
 thats-amazing.com
-thaus.to
+thaus.to/1.exe
+thaus.to/2.exe
 thaus.top/wat.exe
 thawani-pay.neomeric.us
 thayvoiphone.vn
@@ -125963,7 +126178,7 @@ thebackslant.com
 thebackyardat60nyc.com
 thebagforum.com
 thebakingtree.com
-theballardhouse.org/tbh/XkJHnnIzi/
+theballardhouse.org
 theballoon.asia
 thebandofrivals.dreamhosters.com
 thebaptistfoundationofca.com
@@ -126040,8 +126255,7 @@ theclaridge.org
 theclinicabarros.com
 theclown.ca
 theclub5.com
-theclubmumbai.com/document4753.zip
-theclubmumbai.com/document7806.zip
+theclubmumbai.com
 thecoachinglounge.net
 thecoastaltimes.media
 thecoastofhelpfoundation.org
@@ -126223,19 +126437,7 @@ theinspiredblogger.com
 theinspireddrive.com
 theintelligencer.com.ng
 theinvestmentinvestigator.com
-theipgenerators.com/0.msi
-theipgenerators.com/Adobe.exe
-theipgenerators.com/App.exe
-theipgenerators.com/INVOICE.exe
-theipgenerators.com/Orders.exe
-theipgenerators.com/PC.exe
-theipgenerators.com/POS.exe
-theipgenerators.com/apps.exe
-theipgenerators.com/dwm.exe
-theipgenerators.com/smss.exe
-theipgenerators.com/svchost.exe
-theipgenerators.com/winlogon.exe
-theipgenerators.com/winlogonn.exe
+theipgenerators.com
 theirishhouse.dk
 theiro.com
 theisel.de
@@ -126356,7 +126558,7 @@ themoonplease.com
 themorgandollarcoin.com
 themortgagefirm.ca
 themortgagemom.co.uk
-themotorcenter.com/New_invoice/3769329120/ptEOA-eZD_qN-L8l/
+themotorcenter.com
 themrimidnightclub.com
 themuertitos.com
 themusae.com
@@ -127513,7 +127715,7 @@ toramanlar.com.tr
 torbat-h.persiangig.com
 toresu.net
 torfinn.com
-torfsgebroeders.eu/jxvcW-5j7_FfHbDoyE-Zb/INVOICE/En/Document-needed/
+torfsgebroeders.eu
 torg-master.pro
 torginvest.ru.com
 torishima-qa.com
@@ -127990,7 +128192,7 @@ treehugginpussy.de
 treesguru.com
 treesurveys.infrontdesigns.com
 trefiart.com.br
-trefzer-it.de/templates/trefzerit_n_2/css/1c.jpg
+trefzer-it.de
 trehoada2.ballybeauty.vn
 trehoadatoanthan.info
 trehoadatoanthan.net
@@ -128460,8 +128662,7 @@ tuneldeviento.es
 tunerg.com
 tunerl.cn
 tuneup.ibk.me
-tunggalmandiri.com/cj/ms2.pdf
-tunggalmandiri.com/cl/ms.pdf
+tunggalmandiri.com
 tuningshop.ro
 tunisia-school.com
 tunisiagulf.com
@@ -128551,7 +128752,7 @@ tutranquilo.com.co
 tuttimare.com.br
 tuttoirc.net
 tuttopizzas.cl
-tuttosteopatia.it/wp-admin/66mtu-qm2-122/
+tuttosteopatia.it
 tuttotenda.it
 tuttoutu.com
 tuttyguru.com
@@ -128565,7 +128766,7 @@ tuvandauthau.net
 tuvandoanhnghiep.org
 tuvanduhocdaiviet.com.vn
 tuvanduhocduc.org
-tuvanduhocmap.com/wp-includes/invoice/
+tuvanduhocmap.com
 tuvangamenet.com
 tuvangioitinh.com
 tuvanluat.vn
@@ -129962,12 +130163,13 @@ ury8297ridowoury833oe.com
 urzedniczatv.pl
 us-defense-department.ml
 us-trans.ru
-us-west-2.protection.sophos.com
+us-west-2.protection.sophos.com/?d=fergus.vn&u=aHR0cDovL2Zlcmd1cy52bi9UcmFuc2FjdGlvbl9kZXRhaWxzLzAxMjAxOQ==&e=bGhpY2tleUBtaXNzb3VsYWNvdW50eS51cw==&t=SW9UZyszNFBzSGZwOTZraUtENzJORnc2MWdEMm1ucVVwbUwxTmRVZStyUT0=/
+us-west-2.protection.sophos.com/?d=toools.es&u=aHR0cDovL3Rvb29scy5lcy9iYW5raW50ZXJfL3hEc2EtQzUxU0w4SXpCVGdMN2kxX3RyQllLS1ZqWS1WNS8=&e=c2tvZXBrZUBtaXNzb3VsYWNvdW50eS51cw==&t=QlZHM2FiNzVhbjFld3d5dVJWdnlDMXp6dHpxMU8vVW1FQlhLSTdremUxVT0=/
 us.cdn.persiangig.com
 us.gsearch.com.de
 us.hostiso.cloud
 us15.campaign-archive.com/pages?u=cd5e2bf0aa684eff0aeb54377&id=030032cee1f0
-us2.campaign-archive.com
+us2.campaign-archive.com/pages?u=035496fc182d3cf5353219b28&id=03009ec6e1f0
 us5interclub.cba.pl
 usa-lenders.com
 usa-market.org
@@ -130570,7 +130772,7 @@ velasmeralda.it
 velassantos.com.br
 velatoursrls.com
 veldhuizenwonen.nl
-velerobeach.com/cgi-bin/1252478867022048/qtybtfxx2wrhkj_cg66zs-66166420863/
+velerobeach.com
 velerosa.it
 velimir-grgic.com
 velisnackindonesia.com
@@ -131158,7 +131360,7 @@ vip-rocket.net
 vip-watch.store
 vip.lijinxi.com
 vip.maohuagong.com
-vip.muabannhanh.com
+vip.muabannhanh.com/wp-admin/FILE/mkg7rmymjr_ibrls0nrj-411618777016/
 vip.recommendedtoyoo.com
 vip.zbfcxx.cn
 vip163.cf
@@ -131431,6 +131633,7 @@ vizk2.ug
 viztarinfotech.com
 vjarenouy.email
 vjencanjazagreb.hr
+vjhascv.ru
 vjjb.cn
 vjqsdq.am.files.1drv.com
 vjsingh.info
@@ -131806,7 +132009,7 @@ w-wolf.de
 w.amendserver.com
 w.lazer-n.com
 w.outletonline-michaelkors.com
-w.zhzy999.net
+w.zhzy999.net/images/m.exe
 w04.jujingdao.com
 w077775.blob2.ge.tt
 w0alqa.dm.files.1drv.com
@@ -132016,7 +132219,8 @@ wartazone.com
 wartini.de
 warunknasakita.co.id
 warwickvalleyliving.com
-warzonedns.com
+warzonedns.com/dll/upnp.exe
+warzonedns.com/upnp.exe
 warzonesecure.com
 was-studio.com
 wasama.org
@@ -132206,6 +132410,7 @@ web.emsfabrik.de
 web.gotham.com.au
 web.hfsistemas.com
 web.ismt.pt
+web.lavishsupplystore.com
 web.mit.edu/kolya/.f/root/net.mit.edu/net/user/chris/WinNT/MIT_Agenda2a.doc
 web.mit.edu/kolya/.f/root/net.mit.edu/sipb/user/kolya/afs/root.afs/net/user/chris/WinNT/MIT_Agenda2a.doc
 web.muasam360.com
@@ -132620,7 +132825,7 @@ wertedits.com
 wertios.com
 werwrewrkv.ru
 werycloud.website
-wesco.com
+wesco.com/canada_terms_and_conditions_of_sale_english.pdf/
 wesconsultants.com
 weseleopole.pl
 weservehosting.net
@@ -132661,7 +132866,7 @@ westminster.edu.vn
 westnilepress.org
 westonslidingdoorrepair.com
 westpalmbeachgaragedoorrepair.com
-westportshipping.com/Po.doc
+westportshipping.com
 westseattlenailsalon.com
 westsideresources.org
 weststop.ro
@@ -132947,7 +133152,7 @@ wimkegravestein.nl
 wimpiebarnard.co.za
 win-best.com.hk
 win-speed.com
-win.tue.nl
+win.tue.nl/~aeb/linux/hh/Message.zip
 win1more.com
 win32.x10host.com
 winactive.host
@@ -132963,7 +133168,9 @@ wincoair.com
 wind0wsactivator.host
 wind7.ru
 windailygh.com
-windefenderprotectedwindefendergooglegmail.warzonedns.com
+windefenderprotectedwindefendergooglegmail.warzonedns.com/maj.......................................................0/svchost.vbs
+windefenderprotectedwindefendergooglegmail.warzonedns.com/maj.......................................................0/v.vbs
+windefenderprotectedwindefendergooglegmail.warzonedns.com/maj.......................................................0/vbc.vbs
 windfarmdevelopments.co.nz
 windmedbiolife.com
 windmillhill.school
@@ -132998,8 +133205,7 @@ winebiddingthailand.com
 winecorkartist.com
 winefly.net
 winefriend.co.za
-winenews.it/figo/samara.exe
-winenews.it/panel/zophy.exe
+winenews.it
 wineswap.com.au
 winetourism.soprexdev.com
 winett.net
@@ -133159,7 +133365,8 @@ wmdcustoms.com
 wmebbiz.co.za
 wmf.desevens.com.ng
 wmg128.com
-wmi.1217bye.host
+wmi.1217bye.host/1.txt
+wmi.1217bye.host/2.txt
 wmi.4i7i.com/11.exe
 wmkatz.com
 wmo-raad.inov.me
@@ -133214,7 +133421,7 @@ womenempowermentpakistan.com
 womenhealth.aureliusconferences.com
 womenindeed.org
 womeninwealthinc.com
-womenofimpactt.com/notifications
+womenofimpactt.com
 womenofthebibleonline.com
 womensbathingsuit.com
 womenshospital.in
@@ -133334,7 +133541,15 @@ work.kromedout.com
 work.vexacom.com
 work4sales.com
 work707.work
-workbigfinetonychuckgoodallarefinezynovaexploitgood.warzonedns.com
+workbigfinetonychuckgoodallarefinezynovaexploitgood.warzonedns.com/0................................................................0/c.doc
+workbigfinetonychuckgoodallarefinezynovaexploitgood.warzonedns.com/ac..........................c/....................exe
+workbigfinetonychuckgoodallarefinezynovaexploitgood.warzonedns.com/alk...........................al/win32.exe
+workbigfinetonychuckgoodallarefinezynovaexploitgood.warzonedns.com/alk...........................al/x.exe
+workbigfinetonychuckgoodallarefinezynovaexploitgood.warzonedns.com/bigb/c.exe
+workbigfinetonychuckgoodallarefinezynovaexploitgood.warzonedns.com/bigb/win32.exe
+workbigfinetonychuckgoodallarefinezynovaexploitgood.warzonedns.com/bigb/x..x.exe
+workbigfinetonychuckgoodallarefinezynovaexploitgood.warzonedns.com/lovess/llv.exe
+workbigfinetonychuckgoodallarefinezynovaexploitgood.warzonedns.com/nho/win33.exe
 workbus.ru
 workcompoptions.com
 workd.ru
@@ -133546,7 +133761,7 @@ wpdev.hooshmarketing.com
 wpdev.strativ-support.se
 wpdev.ted.solutions
 wpdev.ztickerz.io
-wpengine.zendesk.com
+wpengine.zendesk.com/attachments/token/QiGBj5OV2VIK5lcGBzKwa3wzH/?name=LY7995522-693.doc
 wpgtxdtgifr.ga
 wpldjxxxua.ga
 wpmagian.com
@@ -133761,7 +133976,7 @@ wz-architekten.de
 wz6.com.cn
 wzgysg.com
 wzjp.boyuberq.ru
-wzlegal.com/wp-content/themes/bridge/vc_templates/msg.jpg
+wzlegal.com
 wzry173.com
 wzrysp.com
 wzsfkq.dm.files.1drv.com
@@ -135633,7 +135848,7 @@ zhuti.freexulai.com
 zhwaike.com
 zhwq1216.com
 zhycron.com.br
-zhzy999.net
+zhzy999.net/images/m.exe
 ziadonline.com
 ziancontinental.ro
 ziarulrevolutionarul.ro
@@ -135782,7 +135997,7 @@ zonacomforta.com
 zonadeseguridad.mx
 zonadeseguridad.net
 zonamarketingdigital.online
-zonamusicex.com
+zonamusicex.com/cloudnet.exe
 zonaykan.com
 zone-812.ml
 zone3.de
@@ -135919,7 +136134,14 @@ zyd1.com
 zykj.shop
 zylokk.000webhostapp.com
 zymogen.net
-zyncxxcciidiiudfisuifsiufusdfisdisifidfisuifisfisifisu.warzonedns.com
+zyncxxcciidiiudfisuifsiufusdfisdisifidfisuifisfisifisu.warzonedns.com/big/mine.exe
+zyncxxcciidiiudfisuifsiufusdfisdisifidfisuifisfisifisu.warzonedns.com/big/vc.exe
+zyncxxcciidiiudfisuifsiufusdfisdisifidfisuifisfisifisu.warzonedns.com/big/win.exe
+zyncxxcciidiiudfisuifsiufusdfisdisifidfisuifisfisifisu.warzonedns.com/deking/v.exe
+zyncxxcciidiiudfisuifsiufusdfisdisifidfisuifisfisifisu.warzonedns.com/deking/vbc.exe
+zyncxxcciidiiudfisuifsiufusdfisdisifidfisuifisfisifisu.warzonedns.com/king/v.exe
+zyncxxcciidiiudfisuifsiufusdfisdisifidfisuifisfisifisu.warzonedns.com/king/vbc.exe
+zyncxxcciidiiudfisuifsiufusdfisdisifidfisuifisfisifisu.warzonedns.com/workf/vbc.exe
 zypeujun.ru
 zyr.co.jp
 zyrstststzzxccxccddfgdd.duckdns.org