diff --git a/src/URLhaus.csv b/src/URLhaus.csv
index 5e55d0b1..78aa2fe3 100644
--- a/src/URLhaus.csv
+++ b/src/URLhaus.csv
@@ -1,42 +1,420 @@
-"355949","2020-05-02 00:04:51","http://111.43.223.167:38692/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355949/","Gandylyan1"
+"356327","2020-05-02 11:46:06","http://212.154.51.216:30312/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/356327/","geenensp"
+"356326","2020-05-02 11:05:04","http://178.62.250.195/lmaoWTF/loligang.arm7","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356326/","zbetcheckin"
+"356325","2020-05-02 11:04:32","http://178.62.250.195/lmaoWTF/loligang.spc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356325/","zbetcheckin"
+"356324","2020-05-02 11:00:21","http://178.62.250.195/lmaoWTF/loligang.arm6","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356324/","zbetcheckin"
+"356323","2020-05-02 11:00:19","http://178.62.250.195/lmaoWTF/loligang.mpsl","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356323/","zbetcheckin"
+"356322","2020-05-02 11:00:16","http://178.62.250.195/lmaoWTF/loligang.arm","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356322/","zbetcheckin"
+"356321","2020-05-02 11:00:14","http://178.62.250.195/lmaoWTF/loligang.ppc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356321/","zbetcheckin"
+"356320","2020-05-02 11:00:11","http://178.62.250.195/lmaoWTF/loligang.m68k","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356320/","zbetcheckin"
+"356319","2020-05-02 11:00:09","http://178.62.250.195/lmaoWTF/loligang.sh4","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356319/","zbetcheckin"
+"356318","2020-05-02 11:00:06","http://178.62.250.195/lmaoWTF/loligang.arm5","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356318/","zbetcheckin"
+"356317","2020-05-02 10:56:03","http://178.62.250.195/lmaoWTF/loligang.mips","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356317/","zbetcheckin"
+"356316","2020-05-02 10:45:03","http://45.154.1.58/bins/Gummy.mpsl","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356316/","zbetcheckin"
+"356315","2020-05-02 10:41:13","http://45.154.1.58/bins/Gummy.arm","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356315/","zbetcheckin"
+"356314","2020-05-02 10:41:11","http://45.154.1.58/bins/Gummy.sh4","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356314/","zbetcheckin"
+"356313","2020-05-02 10:41:09","http://45.154.1.58/bins/Gummy.arm5","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356313/","zbetcheckin"
+"356312","2020-05-02 10:41:05","http://45.154.1.58/bins/Gummy.arm7","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356312/","zbetcheckin"
+"356311","2020-05-02 10:41:03","http://45.154.1.58/bins/Gummy.arm6","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356311/","zbetcheckin"
+"356310","2020-05-02 10:36:07","http://45.154.1.58/bins/Gummy.spc","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356310/","zbetcheckin"
+"356309","2020-05-02 10:36:05","http://45.154.1.58/bins/Gummy.m68k","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356309/","zbetcheckin"
+"356308","2020-05-02 10:36:03","http://45.154.1.58/bins/Gummy.ppc","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356308/","zbetcheckin"
+"356307","2020-05-02 10:31:08","http://201.103.20.67:29695/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/356307/","geenensp"
+"356306","2020-05-02 10:20:06","http://178.62.250.195/lmaoWTF/loligang.x86","offline","malware_download","32-bit,elf,x86-32","https://urlhaus.abuse.ch/url/356306/","geenensp"
+"356305","2020-05-02 10:20:03","http://178.62.250.195/Pemex.sh","offline","malware_download","script","https://urlhaus.abuse.ch/url/356305/","geenensp"
+"356304","2020-05-02 10:03:02","http://arufels.com/explfiles/btctwocrypted.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/356304/","gorimpthon"
+"356303","2020-05-02 10:02:52","http://arufels.com/explfiles/btcvfourcrypted.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/356303/","gorimpthon"
+"356302","2020-05-02 10:02:46","http://arufels.com/explfiles/buildcrypted.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/356302/","gorimpthon"
+"356301","2020-05-02 10:02:13","http://arufels.com/explfiles/nanco_backupcrypted.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/356301/","gorimpthon"
+"356300","2020-05-02 10:01:40","http://arufels.com/explfiles/nanocrytped.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/356300/","gorimpthon"
+"356299","2020-05-02 10:01:08","http://arufels.com/explfiles/origv2crypted.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/356299/","gorimpthon"
+"356298","2020-05-02 10:00:35","http://arufels.com/explfiles/origv4crytped.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/356298/","gorimpthon"
+"356297","2020-05-02 09:49:29","http://118.38.242.167:3647/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/356297/","geenensp"
+"356296","2020-05-02 09:49:23","http://45.154.1.58/bins/Gummy.mips","online","malware_download","32-bit,elf,mips","https://urlhaus.abuse.ch/url/356296/","geenensp"
+"356295","2020-05-02 09:49:21","http://45.154.1.58/bins/Gummy.x86","online","malware_download","32-bit,elf,x86-32","https://urlhaus.abuse.ch/url/356295/","geenensp"
+"356294","2020-05-02 09:49:19","http://hediyeler10gb-ramazan.net/hediye10gb.apk","online","malware_download","anubis,apk ","https://urlhaus.abuse.ch/url/356294/","mertcangokgoz"
+"356293","2020-05-02 09:49:16","http://saglikbakanligi-destek.org/basvuru_devlet_destegi.apk","online","malware_download","anubis,apk ","https://urlhaus.abuse.ch/url/356293/","mertcangokgoz"
+"356292","2020-05-02 09:49:12","https://hediye20gb.online/hediye20gb.apk","offline","malware_download","anubis,apk ","https://urlhaus.abuse.ch/url/356292/","mertcangokgoz"
+"356291","2020-05-02 09:49:06","http://ramazan20gbinternet.com/20gb_hediye_internet.apk","online","malware_download","anubis,apk ","https://urlhaus.abuse.ch/url/356291/","mertcangokgoz"
+"356290","2020-05-02 09:49:03","http://hayatevesigar-20gb.com/basvuru_devlet_destegi.apk","offline","malware_download","apk ","https://urlhaus.abuse.ch/url/356290/","mertcangokgoz"
+"356289","2020-05-02 09:22:08","http://37.49.226.230/AB4g5/kiga.mips","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356289/","zbetcheckin"
+"356288","2020-05-02 09:22:05","http://49.82.252.4:58679/Mozi.m","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/356288/","zbetcheckin"
+"356287","2020-05-02 09:18:10","http://37.49.226.230/AB4g5/kiga.arm","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356287/","zbetcheckin"
+"356286","2020-05-02 09:18:07","http://37.49.226.230/AB4g5/kiga.arm6","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356286/","zbetcheckin"
+"356285","2020-05-02 09:18:04","http://37.49.226.230/AB4g5/kiga.m68k","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356285/","zbetcheckin"
+"356284","2020-05-02 09:18:03","http://37.49.226.230/AB4g5/kiga.arm5","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356284/","zbetcheckin"
+"356283","2020-05-02 09:17:08","http://37.49.226.230/AB4g5/kiga.sh4","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356283/","zbetcheckin"
+"356282","2020-05-02 09:13:14","http://149.56.84.15/lmaoWTF/loligang.arm","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356282/","zbetcheckin"
+"356281","2020-05-02 09:13:10","http://149.56.84.15/lmaoWTF/loligang.x86","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356281/","zbetcheckin"
+"356280","2020-05-02 09:13:08","http://149.56.84.15/lmaoWTF/loligang.ppc","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356280/","zbetcheckin"
+"356279","2020-05-02 09:13:05","http://37.49.226.230/AB4g5/kiga.spc","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356279/","zbetcheckin"
+"356278","2020-05-02 09:13:03","http://37.49.226.230/AB4g5/kiga.ppc","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356278/","zbetcheckin"
+"356277","2020-05-02 09:06:09","http://149.56.84.15/lmaoWTF/loligang.arm7","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356277/","zbetcheckin"
+"356276","2020-05-02 09:06:06","http://149.56.84.15/lmaoWTF/loligang.arm6","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356276/","zbetcheckin"
+"356275","2020-05-02 09:06:03","http://149.56.84.15/lmaoWTF/loligang.arm5","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356275/","zbetcheckin"
+"356274","2020-05-02 09:04:28","http://49.81.238.9:56989/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356274/","Gandylyan1"
+"356273","2020-05-02 09:04:22","http://61.241.170.153:40598/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356273/","Gandylyan1"
+"356272","2020-05-02 09:04:00","http://116.114.95.111:52212/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356272/","Gandylyan1"
+"356271","2020-05-02 09:03:57","http://123.4.54.173:47354/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356271/","Gandylyan1"
+"356270","2020-05-02 09:03:51","http://113.219.81.166:47060/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356270/","Gandylyan1"
+"356269","2020-05-02 09:03:44","http://176.113.161.37:46433/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356269/","Gandylyan1"
+"356268","2020-05-02 09:03:41","http://123.4.156.19:38722/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356268/","Gandylyan1"
+"356267","2020-05-02 09:03:38","http://27.41.176.93:48950/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356267/","Gandylyan1"
+"356266","2020-05-02 09:03:24","http://180.116.210.174:33699/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356266/","Gandylyan1"
+"356265","2020-05-02 09:03:18","http://58.243.126.93:55511/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356265/","Gandylyan1"
+"356264","2020-05-02 09:03:14","http://49.70.127.10:34688/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356264/","Gandylyan1"
+"356263","2020-05-02 09:03:10","http://42.230.250.178:47584/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356263/","Gandylyan1"
+"356262","2020-05-02 09:03:06","http://221.210.211.25:46417/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356262/","Gandylyan1"
+"356261","2020-05-02 09:02:05","http://37.49.226.230/AB4g5/kiga.mpsl","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356261/","zbetcheckin"
+"356260","2020-05-02 09:02:03","http://37.49.226.230/AB4g5/kiga.arm7","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/356260/","zbetcheckin"
+"356259","2020-05-02 08:25:53","http://ncpcgov.com/i/build_SsDpIPVr201.bin","online","malware_download","encrypted,GuLoader,Loki","https://urlhaus.abuse.ch/url/356259/","abuse_ch"
+"356258","2020-05-02 08:25:19","http://63.250.42.34/~bulght/web/build_abCgnKyPh62.bin","online","malware_download","GuLoader,opendir","https://urlhaus.abuse.ch/url/356258/","abuse_ch"
+"356257","2020-05-02 08:25:15","http://63.250.42.34/~bulght/j/nondi.msi","online","malware_download","msi,opendir","https://urlhaus.abuse.ch/url/356257/","abuse_ch"
+"356256","2020-05-02 08:25:06","http://63.250.42.34/~bulght/j/samvitt1.msi","online","malware_download","msi,opendir","https://urlhaus.abuse.ch/url/356256/","abuse_ch"
+"356255","2020-05-02 08:19:06","http://senevdekaldiyehediye.com/20gbhediyenet.apk","online","malware_download","anubis,apk ","https://urlhaus.abuse.ch/url/356255/","mertcangokgoz"
+"356254","2020-05-02 08:11:06","https://tatyefabio.clareiamente.com/iznyyhruec/ServiceContractAgreement_2062_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356254/","spamhaus"
+"356253","2020-05-02 08:10:53","https://eco-choice.co.uk/wp-content/uploads/2020/05/uhhjzpeozb/2904/ServiceContractAgreement_2904_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356253/","spamhaus"
+"356252","2020-05-02 08:10:41","http://agentmama.online/wvxxpg/8419/ServiceContractAgreement_8419_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356252/","spamhaus"
+"356251","2020-05-02 08:10:39","https://engineeringegypt.com/wp-content/uploads/2020/05/zgzkipvfto/5706/ServiceContractAgreement_5706_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356251/","spamhaus"
+"356250","2020-05-02 08:10:27","http://cp-30.theborough.com.au/ytexdxlqe/1065/ServiceContractAgreement_1065_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356250/","spamhaus"
+"356249","2020-05-02 08:10:25","http://healthcaring.xyz/wp-content/uploads/2020/04/tcabb/5677/ServiceContractAgreement_5677_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356249/","spamhaus"
+"356248","2020-05-02 08:10:23","http://www.earthfields.co.ke/wp-content/uploads/2020/05/pvosvygcc/ServiceContractAgreement_9909_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356248/","spamhaus"
+"356247","2020-05-02 08:10:20","https://lesawilson.com/tgsxujpbbxp/5418/ServiceContractAgreement_5418_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356247/","spamhaus"
+"356246","2020-05-02 08:10:14","https://engineeringegypt.com/wp-content/uploads/2020/05/zgzkipvfto/2980/ServiceContractAgreement_2980_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356246/","spamhaus"
+"356245","2020-05-02 08:10:09","http://clareiamente.clareiamente.com/hcbljo/4439/ServiceContractAgreement_4439_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356245/","spamhaus"
+"356244","2020-05-02 08:10:03","http://skyfalss.ir/hacnhhy/7820/ServiceContractAgreement_7820_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356244/","spamhaus"
+"356243","2020-05-02 08:10:00","http://cp-30.theborough.com.au/ytexdxlqe/ServiceContractAgreement_4152_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356243/","spamhaus"
+"356242","2020-05-02 08:09:56","https://letsallter.com/wp-content/plugins/apikey/prxcnukt/3355/ServiceContractAgreement_3355_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356242/","spamhaus"
+"356241","2020-05-02 08:09:18","http://www.rsantamariadelosangeles.es/wp-content/uploads/2020/04/etakxaxvjyl/ServiceContractAgreement_5838_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356241/","spamhaus"
+"356240","2020-05-02 08:09:16","https://souq-aljwalat.com/wp-content/uploads/2020/05/zqwxkoa/8543/ServiceContractAgreement_8543_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356240/","spamhaus"
+"356239","2020-05-02 08:09:13","https://letsallter.com/wp-content/plugins/apikey/prxcnukt/8231/ServiceContractAgreement_8231_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356239/","spamhaus"
+"356238","2020-05-02 08:08:37","https://company.horoguides.com/wp-content/uploads/2020/04/bttdyafe/ServiceContractAgreement_4890_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356238/","spamhaus"
+"356237","2020-05-02 08:08:03","https://tatyefabio.clareiamente.com/iznyyhruec/0739/ServiceContractAgreement_0739_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356237/","spamhaus"
+"356236","2020-05-02 08:07:26","https://letsallter.com/wp-content/plugins/apikey/prxcnukt/8897/ServiceContractAgreement_8897_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356236/","spamhaus"
+"356235","2020-05-02 08:06:53","http://obinspirations.com/wp-content/uploads/2020/04/ehvyfi/7763/ServiceContractAgreement_7763_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356235/","spamhaus"
+"356234","2020-05-02 08:06:51","http://obinspirations.com/wp-content/uploads/2020/04/ehvyfi/6203/ServiceContractAgreement_6203_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356234/","spamhaus"
+"356233","2020-05-02 08:06:43","https://company.horoguides.com/wp-content/uploads/2020/04/bttdyafe/ServiceContractAgreement_2289_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356233/","spamhaus"
+"356232","2020-05-02 08:06:11","http://cp-30.theborough.com.au/ytexdxlqe/7597/ServiceContractAgreement_7597_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356232/","spamhaus"
+"356231","2020-05-02 08:06:09","http://skyfalss.ir/hacnhhy/7761/ServiceContractAgreement_7761_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356231/","spamhaus"
+"356230","2020-05-02 08:06:06","http://cp-30.theborough.com.au/ytexdxlqe/ServiceContractAgreement_7856_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356230/","spamhaus"
+"356229","2020-05-02 08:06:04","https://dbssistem.com.tr/wp-content/uploads/2020/05/nikdslx/ServiceContractAgreement_6379_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356229/","spamhaus"
+"356228","2020-05-02 08:06:02","http://skyfalss.ir/hacnhhy/ServiceContractAgreement_5278_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356228/","spamhaus"
+"356227","2020-05-02 08:05:59","https://eco-choice.co.uk/wp-content/uploads/2020/05/uhhjzpeozb/ServiceContractAgreement_6603_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356227/","spamhaus"
+"356226","2020-05-02 08:05:57","https://sycrystalhk.com/wp-content/uploads/2020/05/duvplawtkw/ServiceContractAgreement_4545_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356226/","spamhaus"
+"356225","2020-05-02 08:05:48","http://obinspirations.com/wp-content/uploads/2020/04/ehvyfi/ServiceContractAgreement_9608_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356225/","spamhaus"
+"356224","2020-05-02 08:05:31","http://www.rsantamariadelosangeles.es/wp-content/uploads/2020/04/etakxaxvjyl/ServiceContractAgreement_3800_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356224/","spamhaus"
+"356223","2020-05-02 08:05:25","http://quantominds.com/ystgg/ServiceContractAgreement_9303_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356223/","spamhaus"
+"356222","2020-05-02 08:05:15","https://engineeringegypt.com/wp-content/uploads/2020/05/zgzkipvfto/0476/ServiceContractAgreement_0476_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356222/","spamhaus"
+"356221","2020-05-02 08:05:10","http://www.earthfields.co.ke/wp-content/uploads/2020/05/pvosvygcc/0536/ServiceContractAgreement_0536_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356221/","spamhaus"
+"356220","2020-05-02 08:05:04","https://tatyefabio.clareiamente.com/iznyyhruec/ServiceContractAgreement_9408_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356220/","spamhaus"
+"356219","2020-05-02 08:04:45","https://company.horoguides.com/wp-content/uploads/2020/04/bttdyafe/ServiceContractAgreement_2439_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356219/","spamhaus"
+"356218","2020-05-02 08:04:12","http://healthcaring.xyz/wp-content/uploads/2020/04/tcabb/ServiceContractAgreement_8780_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356218/","spamhaus"
+"356217","2020-05-02 08:04:10","http://colombet-taxi.fr/fwtewqww/ServiceContractAgreement_6556_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356217/","spamhaus"
+"356216","2020-05-02 08:04:04","http://www.earthfields.co.ke/wp-content/uploads/2020/05/pvosvygcc/8108/ServiceContractAgreement_8108_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356216/","spamhaus"
+"356215","2020-05-02 08:03:57","http://cp-30.theborough.com.au/ytexdxlqe/ServiceContractAgreement_1317_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356215/","spamhaus"
+"356214","2020-05-02 08:03:50","https://lesawilson.com/tgsxujpbbxp/9800/ServiceContractAgreement_9800_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356214/","spamhaus"
+"356213","2020-05-02 08:03:38","https://company.horoguides.com/wp-content/uploads/2020/04/bttdyafe/9441/ServiceContractAgreement_9441_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356213/","spamhaus"
+"356212","2020-05-02 08:03:02","http://skyfalss.ir/hacnhhy/9481/ServiceContractAgreement_9481_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356212/","spamhaus"
+"356211","2020-05-02 08:02:58","https://sycrystalhk.com/wp-content/uploads/2020/05/duvplawtkw/ServiceContractAgreement_4464_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356211/","spamhaus"
+"356210","2020-05-02 08:02:49","https://engineeringegypt.com/wp-content/uploads/2020/05/zgzkipvfto/ServiceContractAgreement_2097_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356210/","spamhaus"
+"356209","2020-05-02 08:02:42","http://clareiamente.clareiamente.com/hcbljo/ServiceContractAgreement_0258_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356209/","spamhaus"
+"356208","2020-05-02 08:02:09","https://scoda.ir/wp-content/plugins/apikey/iehi/ServiceContractAgreement_0280_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356208/","spamhaus"
+"356207","2020-05-02 08:01:36","https://souq-aljwalat.com/wp-content/uploads/2020/05/zqwxkoa/3679/ServiceContractAgreement_3679_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356207/","spamhaus"
+"356206","2020-05-02 08:00:34","http://quantominds.com/ystgg/3501/ServiceContractAgreement_3501_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356206/","spamhaus"
+"356205","2020-05-02 07:59:53","https://lancamento-oneparkperdizes.com.br/wp-content/plugins/apikey/pagyufz/7930/ServiceContractAgreement_7930_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356205/","spamhaus"
+"356204","2020-05-02 07:59:20","http://healthcaring.xyz/wp-content/uploads/2020/04/tcabb/6863/ServiceContractAgreement_6863_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356204/","spamhaus"
+"356203","2020-05-02 07:58:46","https://emobilodeme.com/wp-content/uploads/2020/05/mlkf/ServiceContractAgreement_3822_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356203/","spamhaus"
+"356202","2020-05-02 07:58:12","http://www.rsantamariadelosangeles.es/wp-content/uploads/2020/04/etakxaxvjyl/ServiceContractAgreement_3747_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356202/","spamhaus"
+"356201","2020-05-02 07:57:07","http://healthcaring.xyz/wp-content/uploads/2020/04/tcabb/9403/ServiceContractAgreement_9403_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356201/","spamhaus"
+"356200","2020-05-02 07:56:35","http://www.earthfields.co.ke/wp-content/uploads/2020/05/pvosvygcc/ServiceContractAgreement_1135_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356200/","spamhaus"
+"356199","2020-05-02 07:52:34","http://144.217.117.146/kinsing","online","malware_download","elf","https://urlhaus.abuse.ch/url/356199/","zbetcheckin"
+"356198","2020-05-02 07:48:15","https://shop.factoryfamily.co/wp-content/plugins/apikey/gojckwf/ServiceContractAgreement_7240_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356198/","spamhaus"
+"356197","2020-05-02 07:48:12","https://handballrek.com/wp-content/uploads/2020/05/tipvbwbms/ServiceContractAgreement_4175_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356197/","spamhaus"
+"356196","2020-05-02 07:48:11","http://skyfalss.ir/hacnhhy/ServiceContractAgreement_7775_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356196/","spamhaus"
+"356195","2020-05-02 07:48:05","http://healthcaring.xyz/wp-content/uploads/2020/04/tcabb/3944/ServiceContractAgreement_3944_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356195/","spamhaus"
+"356194","2020-05-02 07:48:01","https://company.horoguides.com/wp-content/uploads/2020/04/bttdyafe/0234/ServiceContractAgreement_0234_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356194/","spamhaus"
+"356193","2020-05-02 07:47:27","https://homedecors.com.au/fdug/5646/ServiceContractAgreement_5646_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356193/","spamhaus"
+"356192","2020-05-02 07:47:17","http://quantominds.com/ystgg/ServiceContractAgreement_3184_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356192/","spamhaus"
+"356191","2020-05-02 07:47:08","https://handballrek.com/wp-content/uploads/2020/05/tipvbwbms/7970/ServiceContractAgreement_7970_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356191/","spamhaus"
+"356190","2020-05-02 07:47:05","http://clareiamente.clareiamente.com/hcbljo/8811/ServiceContractAgreement_8811_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356190/","spamhaus"
+"356189","2020-05-02 07:29:03","https://tatyefabio.clareiamente.com/iznyyhruec/8047/ServiceContractAgreement_8047_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356189/","spamhaus"
+"356188","2020-05-02 07:27:59","https://eco-choice.co.uk/wp-content/uploads/2020/05/uhhjzpeozb/ServiceContractAgreement_2576_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356188/","spamhaus"
+"356187","2020-05-02 07:27:57","https://celebritieswhogiveauctions.com/mtxo/ServiceContractAgreement_4332_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356187/","spamhaus"
+"356186","2020-05-02 07:27:54","http://www.omitkyspisar.cz/wp-content/uploads/fdif/ServiceContractAgreement_3466_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356186/","spamhaus"
+"356185","2020-05-02 07:27:51","http://healthcaring.xyz/wp-content/uploads/2020/04/tcabb/ServiceContractAgreement_6082_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356185/","spamhaus"
+"356184","2020-05-02 07:27:49","https://emobilodeme.com/wp-content/uploads/2020/05/mlkf/3199/ServiceContractAgreement_3199_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356184/","spamhaus"
+"356183","2020-05-02 07:27:46","https://engineeringegypt.com/wp-content/uploads/2020/05/zgzkipvfto/7278/ServiceContractAgreement_7278_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356183/","spamhaus"
+"356182","2020-05-02 07:27:41","http://clareiamente.clareiamente.com/hcbljo/ServiceContractAgreement_5941_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356182/","spamhaus"
+"356181","2020-05-02 07:27:36","https://engineeringegypt.com/wp-content/uploads/2020/05/zgzkipvfto/ServiceContractAgreement_3354_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356181/","spamhaus"
+"356180","2020-05-02 07:27:31","https://handballrek.com/wp-content/uploads/2020/05/tipvbwbms/ServiceContractAgreement_7844_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356180/","spamhaus"
+"356179","2020-05-02 07:27:28","https://celebritieswhogiveauctions.com/mtxo/5316/ServiceContractAgreement_5316_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356179/","spamhaus"
+"356178","2020-05-02 07:27:26","https://letsallter.com/wp-content/plugins/apikey/prxcnukt/8943/ServiceContractAgreement_8943_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356178/","spamhaus"
+"356177","2020-05-02 07:26:54","https://shop.factoryfamily.co/wp-content/plugins/apikey/gojckwf/8040/ServiceContractAgreement_8040_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356177/","spamhaus"
+"356176","2020-05-02 07:26:50","https://eco-choice.co.uk/wp-content/uploads/2020/05/uhhjzpeozb/8447/ServiceContractAgreement_8447_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356176/","spamhaus"
+"356175","2020-05-02 07:26:47","http://obinspirations.com/wp-content/uploads/2020/04/ehvyfi/ServiceContractAgreement_3323_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356175/","spamhaus"
+"356174","2020-05-02 07:26:39","https://letsallter.com/wp-content/plugins/apikey/prxcnukt/2673/ServiceContractAgreement_2673_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356174/","spamhaus"
+"356173","2020-05-02 07:26:07","http://cp-30.theborough.com.au/ytexdxlqe/1511/ServiceContractAgreement_1511_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356173/","spamhaus"
+"356172","2020-05-02 07:26:04","https://celebritieswhogiveauctions.com/mtxo/8388/ServiceContractAgreement_8388_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356172/","spamhaus"
+"356171","2020-05-02 07:24:03","https://tatyefabio.clareiamente.com/iznyyhruec/4347/ServiceContractAgreement_4347_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356171/","spamhaus"
+"356170","2020-05-02 07:23:39","http://www.omitkyspisar.cz/wp-content/uploads/fdif/8712/ServiceContractAgreement_8712_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356170/","spamhaus"
+"356169","2020-05-02 07:23:36","https://engineeringegypt.com/wp-content/uploads/2020/05/zgzkipvfto/0356/ServiceContractAgreement_0356_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356169/","spamhaus"
+"356168","2020-05-02 07:23:31","https://scoda.ir/wp-content/plugins/apikey/iehi/5885/ServiceContractAgreement_5885_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356168/","spamhaus"
+"356167","2020-05-02 07:23:29","http://clareiamente.clareiamente.com/hcbljo/ServiceContractAgreement_1780_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356167/","spamhaus"
+"356166","2020-05-02 07:23:26","http://skyfalss.ir/hacnhhy/2929/ServiceContractAgreement_2929_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356166/","spamhaus"
+"356165","2020-05-02 07:23:24","http://quantominds.com/ystgg/6222/ServiceContractAgreement_6222_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356165/","spamhaus"
+"356164","2020-05-02 07:23:20","https://handballrek.com/wp-content/uploads/2020/05/tipvbwbms/ServiceContractAgreement_5499_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356164/","spamhaus"
+"356163","2020-05-02 07:23:18","https://sycrystalhk.com/wp-content/uploads/2020/05/duvplawtkw/ServiceContractAgreement_0038_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356163/","spamhaus"
+"356162","2020-05-02 07:23:08","http://cp-30.theborough.com.au/ytexdxlqe/ServiceContractAgreement_5211_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356162/","spamhaus"
+"356161","2020-05-02 07:23:05","https://celebritieswhogiveauctions.com/mtxo/1580/ServiceContractAgreement_1580_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356161/","spamhaus"
+"356160","2020-05-02 07:23:02","http://cp-30.theborough.com.au/ytexdxlqe/5220/ServiceContractAgreement_5220_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356160/","spamhaus"
+"356159","2020-05-02 07:21:06","https://tatyefabio.clareiamente.com/iznyyhruec/ServiceContractAgreement_7550_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356159/","spamhaus"
+"356158","2020-05-02 07:21:03","https://tatyefabio.clareiamente.com/iznyyhruec/3252/ServiceContractAgreement_3252_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356158/","spamhaus"
+"356157","2020-05-02 07:20:05","http://healthcaring.xyz/wp-content/uploads/2020/04/tcabb/ServiceContractAgreement_1585_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356157/","spamhaus"
+"356156","2020-05-02 07:20:02","http://vistanewsite.ir/wp-content/uploads/2020/05/fraplwhzbdb/ServiceContractAgreement_2821_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356156/","spamhaus"
+"356155","2020-05-02 07:20:00","http://vistanewsite.ir/wp-content/uploads/2020/05/fraplwhzbdb/5750/ServiceContractAgreement_5750_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356155/","spamhaus"
+"356154","2020-05-02 07:19:58","https://souq-aljwalat.com/wp-content/uploads/2020/05/zqwxkoa/6284/ServiceContractAgreement_6284_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356154/","spamhaus"
+"356153","2020-05-02 07:19:56","http://healthcaring.xyz/wp-content/uploads/2020/04/tcabb/4891/ServiceContractAgreement_4891_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356153/","spamhaus"
+"356152","2020-05-02 07:19:54","https://tatyefabio.clareiamente.com/iznyyhruec/ServiceContractAgreement_1163_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356152/","spamhaus"
+"356151","2020-05-02 07:19:50","http://cp-30.theborough.com.au/ytexdxlqe/0652/ServiceContractAgreement_0652_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356151/","spamhaus"
+"356150","2020-05-02 07:19:47","http://www.earthfields.co.ke/wp-content/uploads/2020/05/pvosvygcc/ServiceContractAgreement_0770_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356150/","spamhaus"
+"356149","2020-05-02 07:19:44","https://scoda.ir/wp-content/plugins/apikey/iehi/3675/ServiceContractAgreement_3675_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356149/","spamhaus"
+"356148","2020-05-02 07:19:41","http://obinspirations.com/wp-content/uploads/2020/05/adnkf/ServiceContractAgreement_0783_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356148/","spamhaus"
+"356147","2020-05-02 07:19:38","http://vistanewsite.ir/wp-content/uploads/2020/05/fraplwhzbdb/ServiceContractAgreement_4055_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356147/","spamhaus"
+"356146","2020-05-02 07:19:36","https://shop.factoryfamily.co/wp-content/plugins/apikey/gojckwf/0272/ServiceContractAgreement_0272_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356146/","spamhaus"
+"356145","2020-05-02 07:19:34","https://homedecors.com.au/fdug/ServiceContractAgreement_2276_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356145/","spamhaus"
+"356144","2020-05-02 07:19:27","http://healthcaring.xyz/wp-content/uploads/2020/04/tcabb/2674/ServiceContractAgreement_2674_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356144/","spamhaus"
+"356143","2020-05-02 07:19:25","https://lesawilson.com/tgsxujpbbxp/9070/ServiceContractAgreement_9070_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356143/","spamhaus"
+"356142","2020-05-02 07:19:19","https://lesawilson.com/tgsxujpbbxp/ServiceContractAgreement_3969_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356142/","spamhaus"
+"356141","2020-05-02 07:19:13","http://www.omitkyspisar.cz/wp-content/uploads/fdif/ServiceContractAgreement_5204_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356141/","spamhaus"
+"356140","2020-05-02 07:19:09","https://dbssistem.com.tr/wp-content/uploads/2020/05/nikdslx/4084/ServiceContractAgreement_4084_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356140/","spamhaus"
+"356139","2020-05-02 07:19:04","https://shop.factoryfamily.co/wp-content/plugins/apikey/gojckwf/8902/ServiceContractAgreement_8902_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356139/","spamhaus"
+"356138","2020-05-02 07:18:14","http://45.154.1.58/nemesis.x86","offline","malware_download","64-bit,elf,x86-64","https://urlhaus.abuse.ch/url/356138/","geenensp"
+"356137","2020-05-02 07:18:12","https://celebritieswhogiveauctions.com/mtxo/ServiceContractAgreement_9127_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356137/","spamhaus"
+"356136","2020-05-02 07:18:10","https://souq-aljwalat.com/wp-content/uploads/2020/05/zqwxkoa/ServiceContractAgreement_7922_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356136/","spamhaus"
+"356135","2020-05-02 07:18:04","https://emobilodeme.com/wp-content/uploads/2020/05/mlkf/ServiceContractAgreement_4603_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356135/","spamhaus"
+"356134","2020-05-02 07:17:03","https://tatyefabio.clareiamente.com/iznyyhruec/0746/ServiceContractAgreement_0746_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356134/","spamhaus"
+"356133","2020-05-02 07:16:37","http://healthcaring.xyz/wp-content/uploads/2020/04/tcabb/3271/ServiceContractAgreement_3271_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356133/","spamhaus"
+"356132","2020-05-02 07:16:35","http://www.rsantamariadelosangeles.es/wp-content/uploads/2020/04/etakxaxvjyl/ServiceContractAgreement_9446_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356132/","spamhaus"
+"356131","2020-05-02 07:16:31","http://healthcaring.xyz/wp-content/uploads/2020/04/tcabb/8475/ServiceContractAgreement_8475_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356131/","spamhaus"
+"356130","2020-05-02 07:16:29","http://www.omitkyspisar.cz/wp-content/uploads/fdif/ServiceContractAgreement_2816_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356130/","spamhaus"
+"356129","2020-05-02 07:16:25","http://www.omitkyspisar.cz/wp-content/uploads/fdif/2905/ServiceContractAgreement_2905_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356129/","spamhaus"
+"356128","2020-05-02 07:16:21","http://219.70.238.66:64752/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/356128/","geenensp"
+"356127","2020-05-02 07:16:15","https://celebritieswhogiveauctions.com/mtxo/6025/ServiceContractAgreement_6025_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356127/","spamhaus"
+"356126","2020-05-02 07:16:12","http://healthcaring.xyz/wp-content/uploads/2020/04/tcabb/ServiceContractAgreement_7632_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356126/","spamhaus"
+"356125","2020-05-02 07:16:10","https://engineeringegypt.com/wp-content/uploads/2020/05/zgzkipvfto/ServiceContractAgreement_0020_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356125/","spamhaus"
+"356124","2020-05-02 07:16:05","http://agentmama.online/wvxxpg/ServiceContractAgreement_9562_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356124/","spamhaus"
+"356123","2020-05-02 07:16:02","https://company.horoguides.com/wp-content/uploads/2020/04/bttdyafe/7677/ServiceContractAgreement_7677_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356123/","spamhaus"
+"356122","2020-05-02 07:15:27","https://eco-choice.co.uk/wp-content/uploads/2020/05/uhhjzpeozb/ServiceContractAgreement_0771_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356122/","spamhaus"
+"356121","2020-05-02 07:15:21","http://www.omitkyspisar.cz/wp-content/uploads/fdif/6883/ServiceContractAgreement_6883_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356121/","spamhaus"
+"356120","2020-05-02 07:15:16","https://homedecors.com.au/fdug/ServiceContractAgreement_5516_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356120/","spamhaus"
+"356119","2020-05-02 07:15:08","https://shop.factoryfamily.co/wp-content/plugins/apikey/gojckwf/ServiceContractAgreement_6632_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356119/","spamhaus"
+"356118","2020-05-02 07:14:16","https://homedecors.com.au/fdug/7994/ServiceContractAgreement_7994_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356118/","spamhaus"
+"356117","2020-05-02 07:14:08","http://quantominds.com/ystgg/ServiceContractAgreement_8492_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356117/","spamhaus"
+"356116","2020-05-02 07:14:05","http://skyfalss.ir/hacnhhy/2172/ServiceContractAgreement_2172_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356116/","spamhaus"
+"356115","2020-05-02 07:14:03","http://www.earthfields.co.ke/wp-content/uploads/2020/05/pvosvygcc/ServiceContractAgreement_0078_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356115/","spamhaus"
+"356114","2020-05-02 07:14:00","https://eco-choice.co.uk/wp-content/uploads/2020/05/uhhjzpeozb/ServiceContractAgreement_3925_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356114/","spamhaus"
+"356113","2020-05-02 07:13:57","http://clareiamente.clareiamente.com/hcbljo/ServiceContractAgreement_2758_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356113/","spamhaus"
+"356112","2020-05-02 07:13:50","https://dbssistem.com.tr/wp-content/uploads/2020/05/nikdslx/ServiceContractAgreement_4638_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356112/","spamhaus"
+"356111","2020-05-02 07:13:47","https://homedecors.com.au/fdug/7388/ServiceContractAgreement_7388_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356111/","spamhaus"
+"356110","2020-05-02 07:13:43","https://homedecors.com.au/fdug/6715/ServiceContractAgreement_6715_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356110/","spamhaus"
+"356109","2020-05-02 07:13:36","http://healthcaring.xyz/wp-content/uploads/2020/04/tcabb/ServiceContractAgreement_7349_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356109/","spamhaus"
+"356108","2020-05-02 07:13:33","http://clareiamente.clareiamente.com/hcbljo/2039/ServiceContractAgreement_2039_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356108/","spamhaus"
+"356107","2020-05-02 07:13:27","https://shop.factoryfamily.co/wp-content/plugins/apikey/gojckwf/7009/ServiceContractAgreement_7009_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356107/","spamhaus"
+"356106","2020-05-02 07:13:24","http://obinspirations.com/wp-content/uploads/2020/04/ehvyfi/3704/ServiceContractAgreement_3704_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356106/","spamhaus"
+"356105","2020-05-02 07:13:21","http://obinspirations.com/wp-content/uploads/2020/05/adnkf/ServiceContractAgreement_2776_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356105/","spamhaus"
+"356104","2020-05-02 07:13:14","http://www.earthfields.co.ke/wp-content/uploads/2020/05/pvosvygcc/9292/ServiceContractAgreement_9292_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356104/","spamhaus"
+"356103","2020-05-02 07:13:11","http://colombet-taxi.fr/fwtewqww/5771/ServiceContractAgreement_5771_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356103/","spamhaus"
+"356102","2020-05-02 07:13:07","http://obinspirations.com/wp-content/uploads/2020/05/adnkf/ServiceContractAgreement_1306_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356102/","spamhaus"
+"356101","2020-05-02 07:04:04","https://tatyefabio.clareiamente.com/iznyyhruec/ServiceContractAgreement_1146_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356101/","spamhaus"
+"356100","2020-05-02 07:03:43","https://tatyefabio.clareiamente.com/iznyyhruec/ServiceContractAgreement_1950_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356100/","spamhaus"
+"356099","2020-05-02 07:03:38","http://175.199.142.182:46597/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/356099/","geenensp"
+"356098","2020-05-02 07:03:32","http://www.earthfields.co.ke/wp-content/uploads/2020/05/pvosvygcc/ServiceContractAgreement_1159_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356098/","spamhaus"
+"356097","2020-05-02 07:03:27","https://letsallter.com/wp-content/plugins/apikey/prxcnukt/ServiceContractAgreement_2509_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356097/","spamhaus"
+"356096","2020-05-02 07:02:53","http://vistanewsite.ir/wp-content/uploads/2020/05/fraplwhzbdb/5836/ServiceContractAgreement_5836_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356096/","spamhaus"
+"356095","2020-05-02 07:02:50","http://obinspirations.com/wp-content/uploads/2020/04/ehvyfi/ServiceContractAgreement_4334_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356095/","spamhaus"
+"356094","2020-05-02 07:02:43","http://cp-30.theborough.com.au/ytexdxlqe/5384/ServiceContractAgreement_5384_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356094/","spamhaus"
+"356093","2020-05-02 07:02:24","https://celebritieswhogiveauctions.com/mtxo/ServiceContractAgreement_9650_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356093/","spamhaus"
+"356092","2020-05-02 07:02:09","https://lesawilson.com/tgsxujpbbxp/ServiceContractAgreement_2479_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356092/","spamhaus"
+"356091","2020-05-02 07:01:36","https://handballrek.com/wp-content/uploads/2020/05/tipvbwbms/ServiceContractAgreement_1559_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356091/","spamhaus"
+"356090","2020-05-02 07:01:02","http://37.49.226.230/AB4g5/kiga.x86","online","malware_download","32-bit,elf,x86-32","https://urlhaus.abuse.ch/url/356090/","geenensp"
+"356089","2020-05-02 07:00:15","http://61.77.146.65:20271/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/356089/","geenensp"
+"356088","2020-05-02 07:00:09","http://175.212.95.112:16670/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/356088/","geenensp"
+"356087","2020-05-02 07:00:04","http://skyfalss.ir/hacnhhy/ServiceContractAgreement_7256_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356087/","spamhaus"
+"356086","2020-05-02 06:59:31","https://emobilodeme.com/wp-content/uploads/2020/05/mlkf/ServiceContractAgreement_4109_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356086/","spamhaus"
+"356085","2020-05-02 06:58:58","https://emobilodeme.com/wp-content/uploads/2020/05/mlkf/6262/ServiceContractAgreement_6262_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356085/","spamhaus"
+"356084","2020-05-02 06:58:24","https://engineeringegypt.com/wp-content/uploads/2020/05/zgzkipvfto/5241/ServiceContractAgreement_5241_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356084/","spamhaus"
+"356083","2020-05-02 06:57:49","https://company.horoguides.com/wp-content/uploads/2020/04/bttdyafe/4290/ServiceContractAgreement_4290_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356083/","spamhaus"
+"356082","2020-05-02 06:56:47","http://www.omitkyspisar.cz/wp-content/uploads/fdif/4066/ServiceContractAgreement_4066_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356082/","spamhaus"
+"356081","2020-05-02 06:56:13","https://dbssistem.com.tr/wp-content/uploads/2020/05/nikdslx/ServiceContractAgreement_1099_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356081/","spamhaus"
+"356080","2020-05-02 06:55:40","https://lancamento-oneparkperdizes.com.br/wp-content/plugins/apikey/pagyufz/1528/ServiceContractAgreement_1528_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356080/","spamhaus"
+"356079","2020-05-02 06:55:07","https://onedrive.live.com/download?cid=E61E5F3F655316FA&resid=E61E5F3F655316FA%21127&authkey=ADuW61iLvQd_15w","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/356079/","lovemalware"
+"356078","2020-05-02 06:54:33","https://shop.factoryfamily.co/wp-content/plugins/apikey/gojckwf/4538/ServiceContractAgreement_4538_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356078/","spamhaus"
+"356077","2020-05-02 06:54:00","http://cp-30.theborough.com.au/ytexdxlqe/6137/ServiceContractAgreement_6137_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356077/","spamhaus"
+"356076","2020-05-02 06:53:22","http://193.142.146.30/mips","online","malware_download","32-bit,elf,mips","https://urlhaus.abuse.ch/url/356076/","geenensp"
+"356075","2020-05-02 06:53:20","http://193.142.146.30/yoyobins.sh","online","malware_download","script","https://urlhaus.abuse.ch/url/356075/","geenensp"
+"356074","2020-05-02 06:52:46","https://homedecors.com.au/fdug/ServiceContractAgreement_4758_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/356074/","spamhaus"
+"356073","2020-05-02 06:52:12","http://84.228.102.152:48248/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/356073/","geenensp"
+"356072","2020-05-02 06:52:08","http://187.107.191.197:16897/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/356072/","geenensp"
+"356071","2020-05-02 06:52:04","http://62.219.227.20:8868/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/356071/","geenensp"
+"356070","2020-05-02 06:40:07","http://1.34.120.36:13383/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/356070/","geenensp"
+"356069","2020-05-02 06:21:06","http://186.93.107.30:9874/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/356069/","zbetcheckin"
+"356068","2020-05-02 06:08:04","http://218.21.171.51:54809/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356068/","Gandylyan1"
+"356067","2020-05-02 06:08:02","http://111.42.102.147:51198/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356067/","Gandylyan1"
+"356066","2020-05-02 06:07:58","http://172.39.45.241:43110/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356066/","Gandylyan1"
+"356065","2020-05-02 06:07:26","http://112.123.61.78:41987/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356065/","Gandylyan1"
+"356064","2020-05-02 06:07:20","http://125.47.80.74:52826/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356064/","Gandylyan1"
+"356063","2020-05-02 06:07:16","http://183.151.83.28:40708/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356063/","Gandylyan1"
+"356062","2020-05-02 06:07:11","http://111.42.66.55:41321/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356062/","Gandylyan1"
+"356061","2020-05-02 06:07:03","http://123.11.7.1:37021/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356061/","Gandylyan1"
+"356060","2020-05-02 06:06:59","http://211.137.225.120:47126/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356060/","Gandylyan1"
+"356059","2020-05-02 06:06:56","http://172.39.17.53:48347/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356059/","Gandylyan1"
+"356058","2020-05-02 06:06:24","http://172.45.29.119:38630/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356058/","Gandylyan1"
+"356057","2020-05-02 06:05:52","http://115.49.37.132:57282/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356057/","Gandylyan1"
+"356056","2020-05-02 06:05:48","http://111.43.223.173:60471/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356056/","Gandylyan1"
+"356055","2020-05-02 06:05:43","http://199.83.203.70:51846/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356055/","Gandylyan1"
+"356054","2020-05-02 06:05:38","http://114.234.46.95:44652/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356054/","Gandylyan1"
+"356053","2020-05-02 06:05:15","http://199.83.206.243:37837/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356053/","Gandylyan1"
+"356052","2020-05-02 06:05:09","http://111.43.223.44:55025/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356052/","Gandylyan1"
+"356051","2020-05-02 06:05:05","http://123.12.222.242:33710/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356051/","Gandylyan1"
+"356050","2020-05-02 06:04:59","http://182.113.199.176:41016/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356050/","Gandylyan1"
+"356049","2020-05-02 06:04:54","http://223.221.97.158:54705/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356049/","Gandylyan1"
+"356048","2020-05-02 06:04:51","http://172.39.93.127:57172/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356048/","Gandylyan1"
+"356047","2020-05-02 06:04:19","http://211.137.225.113:50145/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356047/","Gandylyan1"
+"356046","2020-05-02 05:27:05","http://193.142.146.30/i586","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/356046/","zbetcheckin"
+"356045","2020-05-02 05:27:02","http://193.142.146.30/armv5l","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/356045/","zbetcheckin"
+"356044","2020-05-02 05:26:11","http://193.142.146.30/m68k","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/356044/","zbetcheckin"
+"356043","2020-05-02 05:26:08","http://193.142.146.30/mipsel","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/356043/","zbetcheckin"
+"356042","2020-05-02 05:26:06","http://193.142.146.30/x86","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/356042/","zbetcheckin"
+"356041","2020-05-02 05:26:04","http://82.81.215.149:39202/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/356041/","zbetcheckin"
+"356040","2020-05-02 05:22:08","http://193.142.146.30/sh4","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/356040/","zbetcheckin"
+"356039","2020-05-02 05:22:05","http://193.142.146.30/armv6l","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/356039/","zbetcheckin"
+"356038","2020-05-02 05:22:03","http://193.142.146.30/i686","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/356038/","zbetcheckin"
+"356037","2020-05-02 05:21:09","http://193.142.146.30/armv4l","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/356037/","zbetcheckin"
+"356036","2020-05-02 05:21:07","http://193.142.146.30/sparc","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/356036/","zbetcheckin"
+"356035","2020-05-02 05:21:04","http://193.142.146.30/powerpc","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/356035/","zbetcheckin"
+"356034","2020-05-02 05:19:33","https://pastebin.com/raw/CqD4xFzn","offline","malware_download","Encoded,exe,njRAT","https://urlhaus.abuse.ch/url/356034/","viql"
+"356033","2020-05-02 04:33:10","http://1.34.5.89:2028/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/356033/","zbetcheckin"
+"356032","2020-05-02 04:33:05","http://98.159.99.37/23","online","malware_download","elf","https://urlhaus.abuse.ch/url/356032/","zbetcheckin"
+"356031","2020-05-02 03:06:50","http://162.212.113.168:46548/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356031/","Gandylyan1"
+"356030","2020-05-02 03:06:46","http://111.43.223.64:56644/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356030/","Gandylyan1"
+"356029","2020-05-02 03:06:19","http://115.59.24.255:51985/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356029/","Gandylyan1"
+"356028","2020-05-02 03:05:54","http://58.243.20.78:52701/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356028/","Gandylyan1"
+"356027","2020-05-02 03:05:44","http://111.43.223.151:44620/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356027/","Gandylyan1"
+"356026","2020-05-02 03:05:29","http://222.81.223.165:37298/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356026/","Gandylyan1"
+"356025","2020-05-02 03:05:23","http://111.43.223.45:48400/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356025/","Gandylyan1"
+"356024","2020-05-02 03:05:16","http://172.36.6.93:55045/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356024/","Gandylyan1"
+"356023","2020-05-02 03:04:44","http://123.11.78.157:50417/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356023/","Gandylyan1"
+"356022","2020-05-02 03:04:39","http://116.114.95.86:45407/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/356022/","Gandylyan1"
+"356021","2020-05-02 03:04:33","http://172.45.8.99:55445/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/356021/","Gandylyan1"
+"356020","2020-05-02 02:38:11","http://208.113.133.35/armv6l","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/356020/","zbetcheckin"
+"356019","2020-05-02 02:38:08","http://45.95.168.207/Fuze.mpsl","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/356019/","zbetcheckin"
+"356018","2020-05-02 02:38:05","http://45.95.168.207/Fuze.pc","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/356018/","zbetcheckin"
+"356017","2020-05-02 02:38:03","http://45.154.1.122/sh4","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/356017/","zbetcheckin"
+"356016","2020-05-02 02:34:18","http://208.113.133.35/mipsel","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/356016/","zbetcheckin"
+"356015","2020-05-02 02:34:16","http://45.154.1.122/mips","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/356015/","zbetcheckin"
+"356014","2020-05-02 02:34:13","http://45.154.1.122/sparc","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/356014/","zbetcheckin"
+"356013","2020-05-02 02:34:10","http://185.244.39.112/x86","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/356013/","zbetcheckin"
+"356012","2020-05-02 02:34:08","http://45.154.1.122/i586","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/356012/","zbetcheckin"
+"356011","2020-05-02 02:34:05","http://185.244.39.112/armv5l","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/356011/","zbetcheckin"
+"356010","2020-05-02 02:34:03","http://208.113.133.35/armv5l","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/356010/","zbetcheckin"
+"356009","2020-05-02 02:33:11","http://142.11.249.206/x-8.6-.GOOGLE","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/356009/","zbetcheckin"
+"356008","2020-05-02 02:33:08","http://45.95.168.207/Fuze.ppc","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/356008/","zbetcheckin"
+"356007","2020-05-02 02:33:06","http://142.11.249.206/m-p.s-l.GOOGLE","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/356007/","zbetcheckin"
+"356006","2020-05-02 02:33:02","http://45.95.168.207/Fuze.x32","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/356006/","zbetcheckin"
+"356005","2020-05-02 02:29:31","http://185.244.39.112/powerpc","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/356005/","zbetcheckin"
+"356004","2020-05-02 02:29:29","http://142.11.249.206/i-5.8-6.GOOGLE","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/356004/","zbetcheckin"
+"356003","2020-05-02 02:29:26","http://142.11.249.206/x-3.2-.GOOGLE","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/356003/","zbetcheckin"
+"356002","2020-05-02 02:29:23","http://45.154.1.122/armv4l","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/356002/","zbetcheckin"
+"356001","2020-05-02 02:29:20","http://208.113.133.35/m68k","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/356001/","zbetcheckin"
+"356000","2020-05-02 02:29:18","http://185.244.39.112/m68k","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/356000/","zbetcheckin"
+"355999","2020-05-02 02:29:16","http://142.11.249.206/s-h.4-.GOOGLE","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/355999/","zbetcheckin"
+"355998","2020-05-02 02:29:13","http://208.113.133.35/armv4l","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/355998/","zbetcheckin"
+"355997","2020-05-02 02:29:09","http://45.154.1.122/armv5l","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/355997/","zbetcheckin"
+"355996","2020-05-02 02:29:07","http://142.11.249.206/a-r.m-6.GOOGLE","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/355996/","zbetcheckin"
+"355995","2020-05-02 02:29:04","http://142.11.249.206/a-r.m-7.GOOGLE","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/355995/","zbetcheckin"
+"355994","2020-05-02 02:25:21","http://208.113.133.35/sh4","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/355994/","zbetcheckin"
+"355993","2020-05-02 02:25:19","http://185.244.39.112/sh4","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/355993/","zbetcheckin"
+"355992","2020-05-02 02:25:16","http://185.244.39.112/armv6l","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/355992/","zbetcheckin"
+"355991","2020-05-02 02:25:13","http://185.244.39.112/i586","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/355991/","zbetcheckin"
+"355990","2020-05-02 02:25:11","http://45.95.168.207/Fuze.m68k","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/355990/","zbetcheckin"
+"355989","2020-05-02 02:25:08","http://45.95.168.207/Fuze.i586","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/355989/","zbetcheckin"
+"355988","2020-05-02 02:25:06","http://45.95.168.207/Fuze.mips","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/355988/","zbetcheckin"
+"355987","2020-05-02 02:25:03","http://208.113.133.35/sparc","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/355987/","zbetcheckin"
+"355986","2020-05-02 02:24:06","http://185.244.39.112/i686","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/355986/","zbetcheckin"
+"355985","2020-05-02 02:24:03","http://45.95.168.207/Fuze.arm4","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/355985/","zbetcheckin"
+"355984","2020-05-02 02:21:01","http://45.154.1.122/x86","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/355984/","zbetcheckin"
+"355983","2020-05-02 02:20:30","http://142.11.249.206/m-i.p-s.GOOGLE","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/355983/","zbetcheckin"
+"355982","2020-05-02 02:20:26","http://208.113.133.35/i586","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/355982/","zbetcheckin"
+"355981","2020-05-02 02:20:23","http://185.244.39.112/mips","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/355981/","zbetcheckin"
+"355980","2020-05-02 02:20:19","http://45.95.168.207/Fuze.sh4","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/355980/","zbetcheckin"
+"355979","2020-05-02 02:20:17","http://45.154.1.122/i686","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/355979/","zbetcheckin"
+"355978","2020-05-02 02:20:15","http://142.11.249.206/a-r.m-4.GOOGLE","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/355978/","zbetcheckin"
+"355977","2020-05-02 02:20:12","http://185.244.39.112/sparc","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/355977/","zbetcheckin"
+"355976","2020-05-02 02:20:08","http://45.154.1.122/m68k","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/355976/","zbetcheckin"
+"355975","2020-05-02 02:20:06","http://45.154.1.122/armv6l","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/355975/","zbetcheckin"
+"355974","2020-05-02 02:20:04","http://185.244.39.112/armv4l","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/355974/","zbetcheckin"
+"355973","2020-05-02 02:16:23","http://142.11.249.206/p-p.c-.GOOGLE","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/355973/","zbetcheckin"
+"355972","2020-05-02 02:16:19","http://208.113.133.35/powerpc","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/355972/","zbetcheckin"
+"355971","2020-05-02 02:16:16","http://142.11.249.206/a-r.m-5.GOOGLE","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/355971/","zbetcheckin"
+"355970","2020-05-02 02:16:13","http://45.95.168.207/Fuze.arm6","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/355970/","zbetcheckin"
+"355969","2020-05-02 02:16:10","http://208.113.133.35/i686","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/355969/","zbetcheckin"
+"355968","2020-05-02 02:16:07","http://208.113.133.35/x86","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/355968/","zbetcheckin"
+"355967","2020-05-02 02:16:04","http://45.95.168.207/Fuze.x86","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/355967/","zbetcheckin"
+"355966","2020-05-02 02:12:14","http://45.154.1.122/powerpc","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/355966/","zbetcheckin"
+"355965","2020-05-02 02:12:12","http://45.154.1.122/mipsel","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/355965/","zbetcheckin"
+"355964","2020-05-02 02:12:10","http://142.11.249.206/m-6.8-k.GOOGLE","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/355964/","zbetcheckin"
+"355963","2020-05-02 02:12:06","http://208.113.133.35/mips","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/355963/","zbetcheckin"
+"355962","2020-05-02 02:12:03","http://185.244.39.112/mipsel","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/355962/","zbetcheckin"
+"355961","2020-05-02 01:46:12","http://45.95.168.207/bins.sh","offline","malware_download","shellscript","https://urlhaus.abuse.ch/url/355961/","zbetcheckin"
+"355960","2020-05-02 01:46:10","http://142.11.249.206/GoOgle.sh","offline","malware_download","shellscript","https://urlhaus.abuse.ch/url/355960/","zbetcheckin"
+"355959","2020-05-02 01:46:07","http://208.113.133.35/yoyobins.sh","online","malware_download","shellscript","https://urlhaus.abuse.ch/url/355959/","zbetcheckin"
+"355958","2020-05-02 01:46:03","http://45.154.1.122/yoyobins.sh","online","malware_download","shellscript","https://urlhaus.abuse.ch/url/355958/","zbetcheckin"
+"355957","2020-05-02 01:42:07","http://198.211.98.37/SnOoPy.sh","offline","malware_download","shellscript","https://urlhaus.abuse.ch/url/355957/","zbetcheckin"
+"355956","2020-05-02 01:42:03","http://161.35.45.242/GhOul.sh","offline","malware_download","shellscript","https://urlhaus.abuse.ch/url/355956/","zbetcheckin"
+"355955","2020-05-02 01:37:03","http://185.244.39.112/BDbins.sh","offline","malware_download","shellscript","https://urlhaus.abuse.ch/url/355955/","zbetcheckin"
+"355954","2020-05-02 01:34:03","https://up4net.com/uploads/up4net-Dos-attack.exe","online","malware_download","exe,njRAT","https://urlhaus.abuse.ch/url/355954/","zbetcheckin"
+"355953","2020-05-02 01:33:05","https://up4net.com/uploads/up4net-stories.exe","online","malware_download","exe,njRAT","https://urlhaus.abuse.ch/url/355953/","zbetcheckin"
+"355952","2020-05-02 01:32:26","https://up4net.com/uploads/up4net-rufus-3-9p.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/355952/","zbetcheckin"
+"355951","2020-05-02 01:31:04","https://up4net.com/uploads/up4net-FastStone.exe","online","malware_download","exe,njRAT","https://urlhaus.abuse.ch/url/355951/","zbetcheckin"
+"355950","2020-05-02 00:05:04","http://74.66.217.253:30736/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/355950/","zbetcheckin"
+"355949","2020-05-02 00:04:51","http://111.43.223.167:38692/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355949/","Gandylyan1"
 "355948","2020-05-02 00:04:47","http://111.42.102.71:47073/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355948/","Gandylyan1"
 "355947","2020-05-02 00:04:41","http://111.43.223.69:50134/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355947/","Gandylyan1"
-"355946","2020-05-02 00:04:39","http://42.239.99.162:49390/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355946/","Gandylyan1"
-"355945","2020-05-02 00:04:33","http://111.43.223.54:59245/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355945/","Gandylyan1"
-"355944","2020-05-02 00:04:29","http://183.215.188.45:50925/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355944/","Gandylyan1"
+"355946","2020-05-02 00:04:39","http://42.239.99.162:49390/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355946/","Gandylyan1"
+"355945","2020-05-02 00:04:33","http://111.43.223.54:59245/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355945/","Gandylyan1"
+"355944","2020-05-02 00:04:29","http://183.215.188.45:50925/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355944/","Gandylyan1"
 "355943","2020-05-02 00:04:21","http://180.124.235.240:47803/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355943/","Gandylyan1"
 "355942","2020-05-02 00:04:16","http://115.49.154.25:38119/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355942/","Gandylyan1"
 "355941","2020-05-02 00:04:12","http://111.42.103.28:57494/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355941/","Gandylyan1"
 "355940","2020-05-02 00:04:04","http://221.210.211.132:51677/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355940/","Gandylyan1"
 "355939","2020-05-02 00:04:00","http://172.45.11.187:40720/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355939/","Gandylyan1"
-"355938","2020-05-02 00:03:28","http://111.42.66.53:43970/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355938/","Gandylyan1"
-"355937","2020-05-02 00:03:25","http://111.43.223.136:59860/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355937/","Gandylyan1"
-"355936","2020-05-02 00:03:15","http://116.114.95.230:41130/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355936/","Gandylyan1"
+"355938","2020-05-02 00:03:28","http://111.42.66.53:43970/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355938/","Gandylyan1"
+"355937","2020-05-02 00:03:25","http://111.43.223.136:59860/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355937/","Gandylyan1"
+"355936","2020-05-02 00:03:15","http://116.114.95.230:41130/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355936/","Gandylyan1"
 "355935","2020-05-02 00:03:12","http://42.226.73.191:47053/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355935/","Gandylyan1"
 "355934","2020-05-02 00:03:06","http://1.20.210.179:33715/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355934/","Gandylyan1"
-"355933","2020-05-01 22:06:15","http://23.238.204.36/i586","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/355933/","zbetcheckin"
-"355932","2020-05-01 22:06:11","http://23.238.204.36/armv6l","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/355932/","zbetcheckin"
-"355931","2020-05-01 22:06:07","http://23.238.204.36/sh4","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/355931/","zbetcheckin"
-"355930","2020-05-01 22:06:04","http://23.238.204.36/mipsel","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/355930/","zbetcheckin"
-"355929","2020-05-01 22:05:22","http://23.238.204.36/i686","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/355929/","zbetcheckin"
-"355928","2020-05-01 22:05:19","http://23.238.204.36/armv5l","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/355928/","zbetcheckin"
-"355927","2020-05-01 22:05:15","http://23.238.204.36/sparc","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/355927/","zbetcheckin"
-"355926","2020-05-01 22:05:12","http://23.238.204.36/armv4l","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/355926/","zbetcheckin"
-"355925","2020-05-01 22:05:08","http://23.238.204.36/m68k","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/355925/","zbetcheckin"
-"355924","2020-05-01 22:05:05","http://23.238.204.36/powerpc","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/355924/","zbetcheckin"
-"355923","2020-05-01 22:01:05","http://23.238.204.36/x86","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/355923/","zbetcheckin"
+"355933","2020-05-01 22:06:15","http://23.238.204.36/i586","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/355933/","zbetcheckin"
+"355932","2020-05-01 22:06:11","http://23.238.204.36/armv6l","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/355932/","zbetcheckin"
+"355931","2020-05-01 22:06:07","http://23.238.204.36/sh4","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/355931/","zbetcheckin"
+"355930","2020-05-01 22:06:04","http://23.238.204.36/mipsel","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/355930/","zbetcheckin"
+"355929","2020-05-01 22:05:22","http://23.238.204.36/i686","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/355929/","zbetcheckin"
+"355928","2020-05-01 22:05:19","http://23.238.204.36/armv5l","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/355928/","zbetcheckin"
+"355927","2020-05-01 22:05:15","http://23.238.204.36/sparc","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/355927/","zbetcheckin"
+"355926","2020-05-01 22:05:12","http://23.238.204.36/armv4l","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/355926/","zbetcheckin"
+"355925","2020-05-01 22:05:08","http://23.238.204.36/m68k","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/355925/","zbetcheckin"
+"355924","2020-05-01 22:05:05","http://23.238.204.36/powerpc","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/355924/","zbetcheckin"
+"355923","2020-05-01 22:01:05","http://23.238.204.36/x86","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/355923/","zbetcheckin"
 "355922","2020-05-01 21:05:19","http://218.234.125.7:59142/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355922/","Gandylyan1"
 "355921","2020-05-01 21:05:15","http://114.235.208.243:59231/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355921/","Gandylyan1"
 "355920","2020-05-01 21:04:42","http://162.212.114.65:54915/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355920/","Gandylyan1"
-"355919","2020-05-01 21:04:36","http://14.113.231.72:36810/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355919/","Gandylyan1"
+"355919","2020-05-01 21:04:36","http://14.113.231.72:36810/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355919/","Gandylyan1"
 "355918","2020-05-01 21:04:32","http://58.243.123.161:60178/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355918/","Gandylyan1"
 "355917","2020-05-01 21:04:28","http://115.48.148.250:54328/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355917/","Gandylyan1"
 "355916","2020-05-01 21:04:25","http://58.255.191.220:60680/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355916/","Gandylyan1"
-"355915","2020-05-01 21:04:20","http://221.210.211.60:45332/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355915/","Gandylyan1"
+"355915","2020-05-01 21:04:20","http://221.210.211.60:45332/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355915/","Gandylyan1"
 "355914","2020-05-01 21:04:17","http://182.115.245.137:41063/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355914/","Gandylyan1"
-"355913","2020-05-01 21:04:13","http://111.43.223.67:54654/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355913/","Gandylyan1"
-"355912","2020-05-01 21:04:09","http://116.114.95.186:51359/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355912/","Gandylyan1"
-"355911","2020-05-01 21:04:04","http://123.12.196.225:33710/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355911/","Gandylyan1"
+"355913","2020-05-01 21:04:13","http://111.43.223.67:54654/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355913/","Gandylyan1"
+"355912","2020-05-01 21:04:09","http://116.114.95.186:51359/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355912/","Gandylyan1"
+"355911","2020-05-01 21:04:04","http://123.12.196.225:33710/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355911/","Gandylyan1"
 "355910","2020-05-01 20:39:35","http://159.65.249.66/SBIDIOT/zte","offline","malware_download","None","https://urlhaus.abuse.ch/url/355910/","JayTHL"
 "355909","2020-05-01 20:39:33","http://159.65.249.66/SBIDIOT/yarn","offline","malware_download","None","https://urlhaus.abuse.ch/url/355909/","JayTHL"
 "355908","2020-05-01 20:39:30","http://159.65.249.66/SBIDIOT/x86","offline","malware_download","None","https://urlhaus.abuse.ch/url/355908/","JayTHL"
@@ -81,7 +459,7 @@
 "355869","2020-05-01 20:08:04","http://89.121.31.159:29015/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/355869/","zbetcheckin"
 "355868","2020-05-01 20:06:17","https://sycrystalhk.com/wp-content/uploads/2020/05/duvplawtkw/ServiceContractAgreement_9571_04302020.zip","online","malware_download","Qakbot,qbot,spx110,zip","https://urlhaus.abuse.ch/url/355868/","malware_traffic"
 "355867","2020-05-01 20:06:07","https://sycrystalhk.com/wp-content/uploads/2020/05/duvplawtkw/ServiceContractAgreement_5695_04302020.zip","online","malware_download","Qakbot,qbot,spx110,zip","https://urlhaus.abuse.ch/url/355867/","malware_traffic"
-"355866","2020-05-01 20:06:04","https://sycrystalhk.com/wp-content/uploads/2020/05/duvplawtkw/4959/ServiceContractAgreement_4959_04302020.zip","offline","malware_download","Qakbot,qbot,spx110,zip","https://urlhaus.abuse.ch/url/355866/","malware_traffic"
+"355866","2020-05-01 20:06:04","https://sycrystalhk.com/wp-content/uploads/2020/05/duvplawtkw/4959/ServiceContractAgreement_4959_04302020.zip","online","malware_download","Qakbot,qbot,spx110,zip","https://urlhaus.abuse.ch/url/355866/","malware_traffic"
 "355865","2020-05-01 20:06:00","https://souq-aljwalat.com/wp-content/uploads/2020/05/zqwxkoa/ServiceContractAgreement_8516_04302020.zip","offline","malware_download","Qakbot,qbot,spx110,zip","https://urlhaus.abuse.ch/url/355865/","malware_traffic"
 "355864","2020-05-01 20:05:47","https://shop.factoryfamily.co/wp-content/plugins/apikey/gojckwf/8873/ServiceContractAgreement_8873_04302020.zip","offline","malware_download","Qakbot,qbot,spx110,zip","https://urlhaus.abuse.ch/url/355864/","malware_traffic"
 "355863","2020-05-01 20:05:31","https://shop.factoryfamily.co/wp-content/plugins/apikey/gojckwf/1711/ServiceContractAgreement_1711_04302020.zip","offline","malware_download","Qakbot,qbot,spx110,zip","https://urlhaus.abuse.ch/url/355863/","malware_traffic"
@@ -89,12 +467,12 @@
 "355861","2020-05-01 20:05:16","https://letsallter.com/wp-content/plugins/apikey/prxcnukt/ServiceContractAgreement_3770_04302020.zip","offline","malware_download","Qakbot,qbot,spx110,zip","https://urlhaus.abuse.ch/url/355861/","malware_traffic"
 "355860","2020-05-01 20:05:10","https://letsallter.com/wp-content/plugins/apikey/prxcnukt/4944/ServiceContractAgreement_4944_04302020.zip","offline","malware_download","Qakbot,qbot,spx110,zip","https://urlhaus.abuse.ch/url/355860/","malware_traffic"
 "355859","2020-05-01 20:05:00","https://lesawilson.com/tgsxujpbbxp/ServiceContractAgreement_2109_04302020.zip","online","malware_download","Qakbot,qbot,spx110,zip","https://urlhaus.abuse.ch/url/355859/","malware_traffic"
-"355858","2020-05-01 20:04:53","https://homedecors.com.au/fdug/ServiceContractAgreement_8074_04302020.zip","offline","malware_download","Qakbot,qbot,spx110,zip","https://urlhaus.abuse.ch/url/355858/","malware_traffic"
+"355858","2020-05-01 20:04:53","https://homedecors.com.au/fdug/ServiceContractAgreement_8074_04302020.zip","online","malware_download","Qakbot,qbot,spx110,zip","https://urlhaus.abuse.ch/url/355858/","malware_traffic"
 "355857","2020-05-01 20:04:50","https://homedecors.com.au/fdug/6248/ServiceContractAgreement_6248_04302020.zip","offline","malware_download","Qakbot,qbot,spx110,zip","https://urlhaus.abuse.ch/url/355857/","malware_traffic"
-"355856","2020-05-01 20:04:45","https://homedecors.com.au/fdug/5378/ServiceContractAgreement_5378_04302020.zip","online","malware_download","Qakbot,qbot,spx110,zip","https://urlhaus.abuse.ch/url/355856/","malware_traffic"
+"355856","2020-05-01 20:04:45","https://homedecors.com.au/fdug/5378/ServiceContractAgreement_5378_04302020.zip","offline","malware_download","Qakbot,qbot,spx110,zip","https://urlhaus.abuse.ch/url/355856/","malware_traffic"
 "355855","2020-05-01 20:04:39","https://eco-choice.co.uk/wp-content/uploads/2020/05/uhhjzpeozb/ServiceContractAgreement_6936_04302020.zip","online","malware_download","Qakbot,qbot,spx110,zip","https://urlhaus.abuse.ch/url/355855/","malware_traffic"
-"355854","2020-05-01 20:04:37","https://eco-choice.co.uk/wp-content/uploads/2020/05/uhhjzpeozb/ServiceContractAgreement_5774_04302020.zip","online","malware_download","Qakbot,qbot,spx110,zip","https://urlhaus.abuse.ch/url/355854/","malware_traffic"
-"355853","2020-05-01 20:04:29","https://eco-choice.co.uk/wp-content/uploads/2020/05/uhhjzpeozb/8320/ServiceContractAgreement_8320_04302020.zip","offline","malware_download","Qakbot,qbot,spx110,zip","https://urlhaus.abuse.ch/url/355853/","malware_traffic"
+"355854","2020-05-01 20:04:37","https://eco-choice.co.uk/wp-content/uploads/2020/05/uhhjzpeozb/ServiceContractAgreement_5774_04302020.zip","offline","malware_download","Qakbot,qbot,spx110,zip","https://urlhaus.abuse.ch/url/355854/","malware_traffic"
+"355853","2020-05-01 20:04:29","https://eco-choice.co.uk/wp-content/uploads/2020/05/uhhjzpeozb/8320/ServiceContractAgreement_8320_04302020.zip","online","malware_download","Qakbot,qbot,spx110,zip","https://urlhaus.abuse.ch/url/355853/","malware_traffic"
 "355852","2020-05-01 20:04:24","https://company.horoguides.com/wp-content/uploads/2020/04/bttdyafe/3922/ServiceContractAgreement_3922_04302020.zip","offline","malware_download","Qakbot,qbot,spx110,zip","https://urlhaus.abuse.ch/url/355852/","malware_traffic"
 "355851","2020-05-01 20:04:04","https://celebritieswhogiveauctions.com/mtxo/ServiceContractAgreement_5339_04302020.zip","offline","malware_download","Qakbot,qbot,spx110,zip","https://urlhaus.abuse.ch/url/355851/","malware_traffic"
 "355850","2020-05-01 20:04:01","https://celebritieswhogiveauctions.com/mtxo/2568/ServiceContractAgreement_2568_04302020.zip","offline","malware_download","Qakbot,qbot,spx110,zip","https://urlhaus.abuse.ch/url/355850/","malware_traffic"
@@ -110,13 +488,13 @@
 "355840","2020-05-01 20:03:12","http://skyfalss.ir/hacnhhy/9416/ServiceContractAgreement_9416_04302020.zip","offline","malware_download","Qakbot,qbot,spx110,zip","https://urlhaus.abuse.ch/url/355840/","malware_traffic"
 "355839","2020-05-01 20:03:09","http://skyfalss.ir/hacnhhy/6609/ServiceContractAgreement_6609_04302020.zip","offline","malware_download","Qakbot,qbot,spx110,zip","https://urlhaus.abuse.ch/url/355839/","malware_traffic"
 "355838","2020-05-01 20:03:04","http://obinspirations.com/wp-content/uploads/2020/05/adnkf/2723/ServiceContractAgreement_2723_04302020.zip","online","malware_download","Qakbot,qbot,spx110,zip","https://urlhaus.abuse.ch/url/355838/","malware_traffic"
-"355837","2020-05-01 20:02:45","http://cp-30.theborough.com.au/ytexdxlqe/ServiceContractAgreement_9606_04302020.zip","online","malware_download","Qakbot,qbot,spx110,zip","https://urlhaus.abuse.ch/url/355837/","malware_traffic"
-"355836","2020-05-01 20:02:32","http://cp-30.theborough.com.au/ytexdxlqe/3892/ServiceContractAgreement_3892_04302020.zip","online","malware_download","Qakbot,qbot,spx110,zip","https://urlhaus.abuse.ch/url/355836/","malware_traffic"
-"355835","2020-05-01 20:02:26","http://colombet-taxi.fr/fwtewqww/8022/ServiceContractAgreement_8022_04302020.zip","online","malware_download","Qakbot,qbot,spx110,zip","https://urlhaus.abuse.ch/url/355835/","malware_traffic"
+"355837","2020-05-01 20:02:45","http://cp-30.theborough.com.au/ytexdxlqe/ServiceContractAgreement_9606_04302020.zip","offline","malware_download","Qakbot,qbot,spx110,zip","https://urlhaus.abuse.ch/url/355837/","malware_traffic"
+"355836","2020-05-01 20:02:32","http://cp-30.theborough.com.au/ytexdxlqe/3892/ServiceContractAgreement_3892_04302020.zip","offline","malware_download","Qakbot,qbot,spx110,zip","https://urlhaus.abuse.ch/url/355836/","malware_traffic"
+"355835","2020-05-01 20:02:26","http://colombet-taxi.fr/fwtewqww/8022/ServiceContractAgreement_8022_04302020.zip","offline","malware_download","Qakbot,qbot,spx110,zip","https://urlhaus.abuse.ch/url/355835/","malware_traffic"
 "355834","2020-05-01 20:02:23","http://colombet-taxi.fr/fwtewqww/6398/ServiceContractAgreement_6398_04302020.zip","offline","malware_download","Qakbot,qbot,spx110,zip","https://urlhaus.abuse.ch/url/355834/","malware_traffic"
-"355833","2020-05-01 20:02:20","http://clareiamente.clareiamente.com/hcbljo/ServiceContractAgreement_6845_04302020.zip","offline","malware_download","Qakbot,qbot,spx110,zip","https://urlhaus.abuse.ch/url/355833/","malware_traffic"
+"355833","2020-05-01 20:02:20","http://clareiamente.clareiamente.com/hcbljo/ServiceContractAgreement_6845_04302020.zip","online","malware_download","Qakbot,qbot,spx110,zip","https://urlhaus.abuse.ch/url/355833/","malware_traffic"
 "355832","2020-05-01 20:02:16","http://clareiamente.clareiamente.com/hcbljo/ServiceContractAgreement_0160_04302020.zip","offline","malware_download","Qakbot,qbot,spx110,zip","https://urlhaus.abuse.ch/url/355832/","malware_traffic"
-"355831","2020-05-01 20:01:41","http://clareiamente.clareiamente.com/hcbljo/5159/ServiceContractAgreement_5159_04302020.zip","offline","malware_download","Qakbot,qbot,spx110,zip","https://urlhaus.abuse.ch/url/355831/","malware_traffic"
+"355831","2020-05-01 20:01:41","http://clareiamente.clareiamente.com/hcbljo/5159/ServiceContractAgreement_5159_04302020.zip","online","malware_download","Qakbot,qbot,spx110,zip","https://urlhaus.abuse.ch/url/355831/","malware_traffic"
 "355830","2020-05-01 20:01:06","http://clareiamente.clareiamente.com/hcbljo/3836/ServiceContractAgreement_3836_04302020.zip","online","malware_download","Qakbot,qbot,spx110,zip","https://urlhaus.abuse.ch/url/355830/","malware_traffic"
 "355829","2020-05-01 20:00:33","http://agentmama.online/wvxxpg/2309/ServiceContractAgreement_2309_04302020.zip","offline","malware_download","Qakbot,qbot,spx110,zip","https://urlhaus.abuse.ch/url/355829/","malware_traffic"
 "355828","2020-05-01 19:59:41","https://pastebin.com/raw/U00vnQbF","offline","malware_download","None","https://urlhaus.abuse.ch/url/355828/","JayTHL"
@@ -160,32 +538,32 @@
 "355790","2020-05-01 18:43:40","http://45.84.196.167/SBIDIOT/arm7","offline","malware_download","None","https://urlhaus.abuse.ch/url/355790/","JayTHL"
 "355789","2020-05-01 18:43:37","http://45.84.196.167/SBIDIOT/arm6","offline","malware_download","None","https://urlhaus.abuse.ch/url/355789/","JayTHL"
 "355788","2020-05-01 18:43:34","http://45.84.196.167/SBIDIOT/arm","offline","malware_download","None","https://urlhaus.abuse.ch/url/355788/","JayTHL"
-"355787","2020-05-01 18:43:32","http://37.49.226.168/beastmode/b3astmode.x86","online","malware_download","None","https://urlhaus.abuse.ch/url/355787/","JayTHL"
-"355786","2020-05-01 18:43:30","http://37.49.226.168/beastmode/b3astmode.spc","online","malware_download","None","https://urlhaus.abuse.ch/url/355786/","JayTHL"
-"355785","2020-05-01 18:43:27","http://37.49.226.168/beastmode/b3astmode.sh4","online","malware_download","None","https://urlhaus.abuse.ch/url/355785/","JayTHL"
-"355784","2020-05-01 18:43:25","http://37.49.226.168/beastmode/b3astmode.ppc","online","malware_download","None","https://urlhaus.abuse.ch/url/355784/","JayTHL"
-"355783","2020-05-01 18:43:23","http://37.49.226.168/beastmode/b3astmode.mpsl","online","malware_download","None","https://urlhaus.abuse.ch/url/355783/","JayTHL"
-"355782","2020-05-01 18:43:20","http://37.49.226.168/beastmode/b3astmode.mips","online","malware_download","None","https://urlhaus.abuse.ch/url/355782/","JayTHL"
-"355781","2020-05-01 18:43:18","http://37.49.226.168/beastmode/b3astmode.m68k","online","malware_download","None","https://urlhaus.abuse.ch/url/355781/","JayTHL"
-"355780","2020-05-01 18:43:16","http://37.49.226.168/beastmode/b3astmode.arm6","online","malware_download","None","https://urlhaus.abuse.ch/url/355780/","JayTHL"
-"355779","2020-05-01 18:43:13","http://37.49.226.168/beastmode/b3astmode.arm5","online","malware_download","None","https://urlhaus.abuse.ch/url/355779/","JayTHL"
-"355778","2020-05-01 18:43:11","http://37.49.226.168/beastmode/b3astmode.arm","online","malware_download","None","https://urlhaus.abuse.ch/url/355778/","JayTHL"
+"355787","2020-05-01 18:43:32","http://37.49.226.168/beastmode/b3astmode.x86","offline","malware_download","None","https://urlhaus.abuse.ch/url/355787/","JayTHL"
+"355786","2020-05-01 18:43:30","http://37.49.226.168/beastmode/b3astmode.spc","offline","malware_download","None","https://urlhaus.abuse.ch/url/355786/","JayTHL"
+"355785","2020-05-01 18:43:27","http://37.49.226.168/beastmode/b3astmode.sh4","offline","malware_download","None","https://urlhaus.abuse.ch/url/355785/","JayTHL"
+"355784","2020-05-01 18:43:25","http://37.49.226.168/beastmode/b3astmode.ppc","offline","malware_download","None","https://urlhaus.abuse.ch/url/355784/","JayTHL"
+"355783","2020-05-01 18:43:23","http://37.49.226.168/beastmode/b3astmode.mpsl","offline","malware_download","None","https://urlhaus.abuse.ch/url/355783/","JayTHL"
+"355782","2020-05-01 18:43:20","http://37.49.226.168/beastmode/b3astmode.mips","offline","malware_download","None","https://urlhaus.abuse.ch/url/355782/","JayTHL"
+"355781","2020-05-01 18:43:18","http://37.49.226.168/beastmode/b3astmode.m68k","offline","malware_download","None","https://urlhaus.abuse.ch/url/355781/","JayTHL"
+"355780","2020-05-01 18:43:16","http://37.49.226.168/beastmode/b3astmode.arm6","offline","malware_download","None","https://urlhaus.abuse.ch/url/355780/","JayTHL"
+"355779","2020-05-01 18:43:13","http://37.49.226.168/beastmode/b3astmode.arm5","offline","malware_download","None","https://urlhaus.abuse.ch/url/355779/","JayTHL"
+"355778","2020-05-01 18:43:11","http://37.49.226.168/beastmode/b3astmode.arm","offline","malware_download","None","https://urlhaus.abuse.ch/url/355778/","JayTHL"
 "355777","2020-05-01 18:43:09","http://23.95.89.93/bins/spc","online","malware_download","None","https://urlhaus.abuse.ch/url/355777/","JayTHL"
 "355776","2020-05-01 18:43:06","http://23.95.89.93/bins/sh4","online","malware_download","None","https://urlhaus.abuse.ch/url/355776/","JayTHL"
 "355775","2020-05-01 18:43:04","http://23.95.89.93/bins/ppc","online","malware_download","None","https://urlhaus.abuse.ch/url/355775/","JayTHL"
 "355774","2020-05-01 18:43:01","http://23.95.89.93/bins/m68k","online","malware_download","None","https://urlhaus.abuse.ch/url/355774/","JayTHL"
-"355773","2020-05-01 18:42:58","http://23.95.89.80/bins/blxntz.x86","online","malware_download","None","https://urlhaus.abuse.ch/url/355773/","JayTHL"
-"355772","2020-05-01 18:42:55","http://23.95.89.80/bins/blxntz.spc","online","malware_download","None","https://urlhaus.abuse.ch/url/355772/","JayTHL"
-"355771","2020-05-01 18:42:53","http://23.95.89.80/bins/blxntz.sh4","online","malware_download","None","https://urlhaus.abuse.ch/url/355771/","JayTHL"
-"355770","2020-05-01 18:42:50","http://23.95.89.80/bins/blxntz.ppc","online","malware_download","None","https://urlhaus.abuse.ch/url/355770/","JayTHL"
-"355769","2020-05-01 18:42:48","http://23.95.89.80/bins/blxntz.mpsl","online","malware_download","None","https://urlhaus.abuse.ch/url/355769/","JayTHL"
-"355768","2020-05-01 18:42:45","http://23.95.89.80/bins/blxntz.mips","online","malware_download","None","https://urlhaus.abuse.ch/url/355768/","JayTHL"
-"355767","2020-05-01 18:42:42","http://23.95.89.80/bins/blxntz.m68k","online","malware_download","None","https://urlhaus.abuse.ch/url/355767/","JayTHL"
-"355766","2020-05-01 18:42:39","http://23.95.89.80/bins/blxntz.arm6","online","malware_download","None","https://urlhaus.abuse.ch/url/355766/","JayTHL"
-"355765","2020-05-01 18:42:37","http://23.95.89.80/bins/blxntz.arm5","online","malware_download","None","https://urlhaus.abuse.ch/url/355765/","JayTHL"
-"355764","2020-05-01 18:42:34","http://23.95.89.80/bins/blxntz.arm","online","malware_download","None","https://urlhaus.abuse.ch/url/355764/","JayTHL"
-"355763","2020-05-01 18:42:31","http://182.113.220.114:42221/i","online","malware_download","None","https://urlhaus.abuse.ch/url/355763/","JayTHL"
-"355762","2020-05-01 18:42:21","http://182.113.220.114:42221/","online","malware_download","None","https://urlhaus.abuse.ch/url/355762/","JayTHL"
+"355773","2020-05-01 18:42:58","http://23.95.89.80/bins/blxntz.x86","offline","malware_download","None","https://urlhaus.abuse.ch/url/355773/","JayTHL"
+"355772","2020-05-01 18:42:55","http://23.95.89.80/bins/blxntz.spc","offline","malware_download","None","https://urlhaus.abuse.ch/url/355772/","JayTHL"
+"355771","2020-05-01 18:42:53","http://23.95.89.80/bins/blxntz.sh4","offline","malware_download","None","https://urlhaus.abuse.ch/url/355771/","JayTHL"
+"355770","2020-05-01 18:42:50","http://23.95.89.80/bins/blxntz.ppc","offline","malware_download","None","https://urlhaus.abuse.ch/url/355770/","JayTHL"
+"355769","2020-05-01 18:42:48","http://23.95.89.80/bins/blxntz.mpsl","offline","malware_download","None","https://urlhaus.abuse.ch/url/355769/","JayTHL"
+"355768","2020-05-01 18:42:45","http://23.95.89.80/bins/blxntz.mips","offline","malware_download","None","https://urlhaus.abuse.ch/url/355768/","JayTHL"
+"355767","2020-05-01 18:42:42","http://23.95.89.80/bins/blxntz.m68k","offline","malware_download","None","https://urlhaus.abuse.ch/url/355767/","JayTHL"
+"355766","2020-05-01 18:42:39","http://23.95.89.80/bins/blxntz.arm6","offline","malware_download","None","https://urlhaus.abuse.ch/url/355766/","JayTHL"
+"355765","2020-05-01 18:42:37","http://23.95.89.80/bins/blxntz.arm5","offline","malware_download","None","https://urlhaus.abuse.ch/url/355765/","JayTHL"
+"355764","2020-05-01 18:42:34","http://23.95.89.80/bins/blxntz.arm","offline","malware_download","None","https://urlhaus.abuse.ch/url/355764/","JayTHL"
+"355763","2020-05-01 18:42:31","http://182.113.220.114:42221/i","offline","malware_download","None","https://urlhaus.abuse.ch/url/355763/","JayTHL"
+"355762","2020-05-01 18:42:21","http://182.113.220.114:42221/","offline","malware_download","None","https://urlhaus.abuse.ch/url/355762/","JayTHL"
 "355761","2020-05-01 18:41:45","http://176.32.35.22/x86","offline","malware_download","None","https://urlhaus.abuse.ch/url/355761/","JayTHL"
 "355760","2020-05-01 18:41:42","http://176.32.35.22/sparc","offline","malware_download","None","https://urlhaus.abuse.ch/url/355760/","JayTHL"
 "355759","2020-05-01 18:41:40","http://176.32.35.22/sh4","offline","malware_download","None","https://urlhaus.abuse.ch/url/355759/","JayTHL"
@@ -223,17 +601,17 @@
 "355727","2020-05-01 18:40:09","http://165.227.217.70/SBIDIOT/arm7","offline","malware_download","None","https://urlhaus.abuse.ch/url/355727/","JayTHL"
 "355726","2020-05-01 18:40:06","http://165.227.217.70/SBIDIOT/arm6","offline","malware_download","None","https://urlhaus.abuse.ch/url/355726/","JayTHL"
 "355725","2020-05-01 18:40:03","http://165.227.217.70/SBIDIOT/arm","offline","malware_download","None","https://urlhaus.abuse.ch/url/355725/","JayTHL"
-"355724","2020-05-01 18:40:00","http://142.11.232.26/bins/blxntz.x86","online","malware_download","None","https://urlhaus.abuse.ch/url/355724/","JayTHL"
-"355723","2020-05-01 18:39:58","http://142.11.232.26/bins/blxntz.spc","online","malware_download","None","https://urlhaus.abuse.ch/url/355723/","JayTHL"
-"355722","2020-05-01 18:39:55","http://142.11.232.26/bins/blxntz.sh4","online","malware_download","None","https://urlhaus.abuse.ch/url/355722/","JayTHL"
-"355721","2020-05-01 18:39:52","http://142.11.232.26/bins/blxntz.ppc","online","malware_download","None","https://urlhaus.abuse.ch/url/355721/","JayTHL"
-"355720","2020-05-01 18:39:50","http://142.11.232.26/bins/blxntz.mpsl","online","malware_download","None","https://urlhaus.abuse.ch/url/355720/","JayTHL"
-"355719","2020-05-01 18:39:47","http://142.11.232.26/bins/blxntz.mips","online","malware_download","None","https://urlhaus.abuse.ch/url/355719/","JayTHL"
-"355718","2020-05-01 18:39:45","http://142.11.232.26/bins/blxntz.m68k","online","malware_download","None","https://urlhaus.abuse.ch/url/355718/","JayTHL"
-"355717","2020-05-01 18:39:42","http://142.11.232.26/bins/blxntz.arm7","online","malware_download","None","https://urlhaus.abuse.ch/url/355717/","JayTHL"
-"355716","2020-05-01 18:39:39","http://142.11.232.26/bins/blxntz.arm6","online","malware_download","None","https://urlhaus.abuse.ch/url/355716/","JayTHL"
-"355715","2020-05-01 18:39:36","http://142.11.232.26/bins/blxntz.arm5","online","malware_download","None","https://urlhaus.abuse.ch/url/355715/","JayTHL"
-"355714","2020-05-01 18:39:34","http://142.11.232.26/bins/blxntz.arm","online","malware_download","None","https://urlhaus.abuse.ch/url/355714/","JayTHL"
+"355724","2020-05-01 18:40:00","http://142.11.232.26/bins/blxntz.x86","offline","malware_download","None","https://urlhaus.abuse.ch/url/355724/","JayTHL"
+"355723","2020-05-01 18:39:58","http://142.11.232.26/bins/blxntz.spc","offline","malware_download","None","https://urlhaus.abuse.ch/url/355723/","JayTHL"
+"355722","2020-05-01 18:39:55","http://142.11.232.26/bins/blxntz.sh4","offline","malware_download","None","https://urlhaus.abuse.ch/url/355722/","JayTHL"
+"355721","2020-05-01 18:39:52","http://142.11.232.26/bins/blxntz.ppc","offline","malware_download","None","https://urlhaus.abuse.ch/url/355721/","JayTHL"
+"355720","2020-05-01 18:39:50","http://142.11.232.26/bins/blxntz.mpsl","offline","malware_download","None","https://urlhaus.abuse.ch/url/355720/","JayTHL"
+"355719","2020-05-01 18:39:47","http://142.11.232.26/bins/blxntz.mips","offline","malware_download","None","https://urlhaus.abuse.ch/url/355719/","JayTHL"
+"355718","2020-05-01 18:39:45","http://142.11.232.26/bins/blxntz.m68k","offline","malware_download","None","https://urlhaus.abuse.ch/url/355718/","JayTHL"
+"355717","2020-05-01 18:39:42","http://142.11.232.26/bins/blxntz.arm7","offline","malware_download","None","https://urlhaus.abuse.ch/url/355717/","JayTHL"
+"355716","2020-05-01 18:39:39","http://142.11.232.26/bins/blxntz.arm6","offline","malware_download","None","https://urlhaus.abuse.ch/url/355716/","JayTHL"
+"355715","2020-05-01 18:39:36","http://142.11.232.26/bins/blxntz.arm5","offline","malware_download","None","https://urlhaus.abuse.ch/url/355715/","JayTHL"
+"355714","2020-05-01 18:39:34","http://142.11.232.26/bins/blxntz.arm","offline","malware_download","None","https://urlhaus.abuse.ch/url/355714/","JayTHL"
 "355713","2020-05-01 18:39:31","http://107.175.197.164/bins/blxntz.x86","online","malware_download","None","https://urlhaus.abuse.ch/url/355713/","JayTHL"
 "355712","2020-05-01 18:39:29","http://107.175.197.164/bins/blxntz.spc","online","malware_download","None","https://urlhaus.abuse.ch/url/355712/","JayTHL"
 "355711","2020-05-01 18:39:26","http://107.175.197.164/bins/blxntz.sh4","online","malware_download","None","https://urlhaus.abuse.ch/url/355711/","JayTHL"
@@ -245,15 +623,15 @@
 "355705","2020-05-01 18:39:10","http://107.175.197.164/bins/blxntz.arm6","online","malware_download","None","https://urlhaus.abuse.ch/url/355705/","JayTHL"
 "355704","2020-05-01 18:39:08","http://107.175.197.164/bins/blxntz.arm5","online","malware_download","None","https://urlhaus.abuse.ch/url/355704/","JayTHL"
 "355703","2020-05-01 18:39:05","http://107.175.197.164/bins/blxntz.arm","online","malware_download","None","https://urlhaus.abuse.ch/url/355703/","JayTHL"
-"355702","2020-05-01 18:22:05","http://jahesa.com/wordpress/wp-content/plugins/sid/yilp1xp3.ljo.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/355702/","zbetcheckin"
+"355702","2020-05-01 18:22:05","http://jahesa.com/wordpress/wp-content/plugins/sid/yilp1xp3.ljo.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/355702/","zbetcheckin"
 "355701","2020-05-01 18:19:11","https://pastebin.com/raw/JYW4wryi","offline","malware_download","None","https://urlhaus.abuse.ch/url/355701/","JayTHL"
-"355700","2020-05-01 18:18:19","http://www.jahesa.com/wordpress/wp-content/plugins/sid/yilp1xp3.ljo.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/355700/","zbetcheckin"
-"355699","2020-05-01 18:18:14","http://jahesa.com/wordpress/wp-content/plugins/sid/hhhuu.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/355699/","zbetcheckin"
-"355698","2020-05-01 18:18:07","http://jahesa.com/wordpress/wp-content/plugins/sid/ub2tcjwd.0hq.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/355698/","zbetcheckin"
-"355697","2020-05-01 18:14:15","http://www.jahesa.com/wordpress/wp-content/plugins/sid/hhhuu.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/355697/","zbetcheckin"
+"355700","2020-05-01 18:18:19","http://www.jahesa.com/wordpress/wp-content/plugins/sid/yilp1xp3.ljo.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/355700/","zbetcheckin"
+"355699","2020-05-01 18:18:14","http://jahesa.com/wordpress/wp-content/plugins/sid/hhhuu.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/355699/","zbetcheckin"
+"355698","2020-05-01 18:18:07","http://jahesa.com/wordpress/wp-content/plugins/sid/ub2tcjwd.0hq.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/355698/","zbetcheckin"
+"355697","2020-05-01 18:14:15","http://www.jahesa.com/wordpress/wp-content/plugins/sid/hhhuu.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/355697/","zbetcheckin"
 "355696","2020-05-01 18:14:04","https://lancamento-oneparkperdizes.com.br/wp-content/plugins/apikey/pagyufz/ServiceContractAgreement_5928_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355696/","spamhaus"
-"355695","2020-05-01 18:06:26","https://dbssistem.com.tr/wp-content/uploads/2020/05/nikdslx/ServiceContractAgreement_0939_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355695/","spamhaus"
-"355694","2020-05-01 18:06:23","http://obinspirations.com/wp-content/uploads/2020/05/adnkf/0441/ServiceContractAgreement_0441_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355694/","spamhaus"
+"355695","2020-05-01 18:06:26","https://dbssistem.com.tr/wp-content/uploads/2020/05/nikdslx/ServiceContractAgreement_0939_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355695/","spamhaus"
+"355694","2020-05-01 18:06:23","http://obinspirations.com/wp-content/uploads/2020/05/adnkf/0441/ServiceContractAgreement_0441_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355694/","spamhaus"
 "355693","2020-05-01 18:06:16","https://company.horoguides.com/wp-content/uploads/2020/04/bttdyafe/ServiceContractAgreement_8734_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355693/","spamhaus"
 "355692","2020-05-01 18:04:48","http://37.232.98.44:51797/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355692/","Gandylyan1"
 "355691","2020-05-01 18:04:45","http://49.112.155.47:41014/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355691/","Gandylyan1"
@@ -261,69 +639,69 @@
 "355689","2020-05-01 18:04:34","http://60.188.104.239:51717/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355689/","Gandylyan1"
 "355688","2020-05-01 18:03:52","http://110.179.5.188:40063/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355688/","Gandylyan1"
 "355687","2020-05-01 18:03:46","http://187.120.123.187:56024/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355687/","Gandylyan1"
-"355686","2020-05-01 18:03:40","http://219.154.105.40:50650/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355686/","Gandylyan1"
-"355685","2020-05-01 18:03:36","http://211.137.225.60:42264/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355685/","Gandylyan1"
-"355684","2020-05-01 18:03:32","http://111.43.223.24:54298/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355684/","Gandylyan1"
-"355683","2020-05-01 18:03:28","http://176.113.161.89:34511/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355683/","Gandylyan1"
+"355686","2020-05-01 18:03:40","http://219.154.105.40:50650/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355686/","Gandylyan1"
+"355685","2020-05-01 18:03:36","http://211.137.225.60:42264/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355685/","Gandylyan1"
+"355684","2020-05-01 18:03:32","http://111.43.223.24:54298/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355684/","Gandylyan1"
+"355683","2020-05-01 18:03:28","http://176.113.161.89:34511/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355683/","Gandylyan1"
 "355682","2020-05-01 18:03:24","http://111.42.103.48:33964/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355682/","Gandylyan1"
-"355681","2020-05-01 18:03:20","http://42.232.224.254:50142/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355681/","Gandylyan1"
+"355681","2020-05-01 18:03:20","http://42.232.224.254:50142/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355681/","Gandylyan1"
 "355680","2020-05-01 18:03:08","http://36.33.128.252:55275/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355680/","Gandylyan1"
 "355679","2020-05-01 18:03:05","http://110.18.194.3:42680/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355679/","Gandylyan1"
 "355678","2020-05-01 17:59:33","http://quantominds.com/ystgg/ServiceContractAgreement_0932_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355678/","spamhaus"
 "355677","2020-05-01 17:59:26","http://76.98.216.130:4709/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/355677/","geenensp"
 "355676","2020-05-01 17:59:20","http://www.omitkyspisar.cz/wp-content/uploads/fdif/1959/ServiceContractAgreement_1959_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355676/","spamhaus"
 "355675","2020-05-01 17:59:16","http://quantominds.com/ystgg/ServiceContractAgreement_0152_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355675/","spamhaus"
-"355674","2020-05-01 17:59:08","https://eco-choice.co.uk/wp-content/uploads/2020/05/uhhjzpeozb/3236/ServiceContractAgreement_3236_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355674/","spamhaus"
+"355674","2020-05-01 17:59:08","https://eco-choice.co.uk/wp-content/uploads/2020/05/uhhjzpeozb/3236/ServiceContractAgreement_3236_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355674/","spamhaus"
 "355673","2020-05-01 17:59:06","https://sycrystalhk.com/wp-content/uploads/2020/05/duvplawtkw/ServiceContractAgreement_1987_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355673/","spamhaus"
 "355672","2020-05-01 17:48:23","https://celebritieswhogiveauctions.com/mtxo/ServiceContractAgreement_5010_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355672/","spamhaus"
 "355671","2020-05-01 17:48:18","http://agentmama.online/wvxxpg/0171/ServiceContractAgreement_0171_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355671/","spamhaus"
 "355670","2020-05-01 17:48:13","https://dbssistem.com.tr/wp-content/uploads/2020/05/nikdslx/9609/ServiceContractAgreement_9609_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355670/","spamhaus"
 "355669","2020-05-01 17:48:06","http://obinspirations.com/wp-content/uploads/2020/04/ehvyfi/ServiceContractAgreement_3459_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355669/","spamhaus"
-"355668","2020-05-01 17:44:25","http://obinspirations.com/wp-content/uploads/2020/04/ehvyfi/5085/ServiceContractAgreement_5085_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355668/","spamhaus"
+"355668","2020-05-01 17:44:25","http://obinspirations.com/wp-content/uploads/2020/04/ehvyfi/5085/ServiceContractAgreement_5085_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355668/","spamhaus"
 "355667","2020-05-01 17:44:03","https://handballrek.com/wp-content/uploads/2020/05/tipvbwbms/ServiceContractAgreement_4407_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355667/","spamhaus"
 "355666","2020-05-01 17:43:06","https://handballrek.com/wp-content/uploads/2020/05/tipvbwbms/ServiceContractAgreement_6421_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355666/","spamhaus"
 "355665","2020-05-01 17:41:01","http://cp-30.theborough.com.au/ytexdxlqe/1408/ServiceContractAgreement_1408_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355665/","spamhaus"
-"355664","2020-05-01 17:40:55","https://lesawilson.com/tgsxujpbbxp/1649/ServiceContractAgreement_1649_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355664/","spamhaus"
+"355664","2020-05-01 17:40:55","https://lesawilson.com/tgsxujpbbxp/1649/ServiceContractAgreement_1649_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355664/","spamhaus"
 "355663","2020-05-01 17:40:51","http://obinspirations.com/wp-content/uploads/2020/05/adnkf/2730/ServiceContractAgreement_2730_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355663/","spamhaus"
 "355662","2020-05-01 17:40:47","http://quantominds.com/ystgg/ServiceContractAgreement_3081_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355662/","spamhaus"
 "355661","2020-05-01 17:40:36","http://quantominds.com/ystgg/4280/ServiceContractAgreement_4280_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355661/","spamhaus"
 "355660","2020-05-01 17:40:27","https://engineeringegypt.com/wp-content/uploads/2020/05/zgzkipvfto/6376/ServiceContractAgreement_6376_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355660/","spamhaus"
-"355659","2020-05-01 17:40:23","https://lesawilson.com/tgsxujpbbxp/5440/ServiceContractAgreement_5440_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355659/","spamhaus"
+"355659","2020-05-01 17:40:23","https://lesawilson.com/tgsxujpbbxp/5440/ServiceContractAgreement_5440_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355659/","spamhaus"
 "355658","2020-05-01 17:40:04","http://obinspirations.com/wp-content/uploads/2020/05/adnkf/ServiceContractAgreement_8167_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355658/","spamhaus"
 "355657","2020-05-01 17:39:09","http://www.earthfields.co.ke/wp-content/uploads/2020/05/pvosvygcc/5265/ServiceContractAgreement_5265_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355657/","spamhaus"
 "355656","2020-05-01 17:39:05","https://engineeringegypt.com/wp-content/uploads/2020/05/zgzkipvfto/5907/ServiceContractAgreement_5907_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355656/","spamhaus"
 "355655","2020-05-01 17:34:45","https://shop.factoryfamily.co/wp-content/plugins/apikey/gojckwf/2393/ServiceContractAgreement_2393_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355655/","spamhaus"
-"355654","2020-05-01 17:34:42","http://quantominds.com/ystgg/ServiceContractAgreement_6617_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355654/","spamhaus"
-"355653","2020-05-01 17:34:36","https://dbssistem.com.tr/wp-content/uploads/2020/05/nikdslx/2570/ServiceContractAgreement_2570_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355653/","spamhaus"
+"355654","2020-05-01 17:34:42","http://quantominds.com/ystgg/ServiceContractAgreement_6617_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355654/","spamhaus"
+"355653","2020-05-01 17:34:36","https://dbssistem.com.tr/wp-content/uploads/2020/05/nikdslx/2570/ServiceContractAgreement_2570_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355653/","spamhaus"
 "355652","2020-05-01 17:34:28","https://handballrek.com/wp-content/uploads/2020/05/tipvbwbms/9940/ServiceContractAgreement_9940_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355652/","spamhaus"
 "355651","2020-05-01 17:34:15","https://scoda.ir/wp-content/plugins/apikey/iehi/ServiceContractAgreement_4100_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355651/","spamhaus"
 "355650","2020-05-01 17:34:09","http://healthcaring.xyz/wp-content/uploads/2020/04/tcabb/ServiceContractAgreement_9158_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355650/","spamhaus"
-"355649","2020-05-01 17:34:06","https://lesawilson.com/tgsxujpbbxp/6840/ServiceContractAgreement_6840_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355649/","spamhaus"
+"355649","2020-05-01 17:34:06","https://lesawilson.com/tgsxujpbbxp/6840/ServiceContractAgreement_6840_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355649/","spamhaus"
 "355648","2020-05-01 17:34:01","https://eco-choice.co.uk/wp-content/uploads/2020/05/uhhjzpeozb/6699/ServiceContractAgreement_6699_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355648/","spamhaus"
 "355647","2020-05-01 17:33:57","https://lancamento-oneparkperdizes.com.br/wp-content/plugins/apikey/pagyufz/6275/ServiceContractAgreement_6275_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355647/","spamhaus"
 "355646","2020-05-01 17:33:51","http://healthcaring.xyz/wp-content/uploads/2020/04/tcabb/4885/ServiceContractAgreement_4885_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355646/","spamhaus"
 "355645","2020-05-01 17:33:47","https://scoda.ir/wp-content/plugins/apikey/iehi/5450/ServiceContractAgreement_5450_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355645/","spamhaus"
 "355644","2020-05-01 17:33:42","https://lancamento-oneparkperdizes.com.br/wp-content/plugins/apikey/pagyufz/7727/ServiceContractAgreement_7727_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355644/","spamhaus"
 "355643","2020-05-01 17:33:32","https://lancamento-oneparkperdizes.com.br/wp-content/plugins/apikey/pagyufz/ServiceContractAgreement_9074_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355643/","spamhaus"
-"355642","2020-05-01 17:33:25","https://homedecors.com.au/fdug/ServiceContractAgreement_4928_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355642/","spamhaus"
+"355642","2020-05-01 17:33:25","https://homedecors.com.au/fdug/ServiceContractAgreement_4928_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355642/","spamhaus"
 "355641","2020-05-01 17:33:21","http://skyfalss.ir/hacnhhy/1322/ServiceContractAgreement_1322_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355641/","spamhaus"
-"355640","2020-05-01 17:33:13","http://www.rsantamariadelosangeles.es/wp-content/uploads/2020/04/etakxaxvjyl/ServiceContractAgreement_4994_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355640/","spamhaus"
-"355639","2020-05-01 17:33:07","https://dbssistem.com.tr/wp-content/uploads/2020/05/nikdslx/9283/ServiceContractAgreement_9283_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355639/","spamhaus"
+"355640","2020-05-01 17:33:13","http://www.rsantamariadelosangeles.es/wp-content/uploads/2020/04/etakxaxvjyl/ServiceContractAgreement_4994_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355640/","spamhaus"
+"355639","2020-05-01 17:33:07","https://dbssistem.com.tr/wp-content/uploads/2020/05/nikdslx/9283/ServiceContractAgreement_9283_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355639/","spamhaus"
 "355638","2020-05-01 17:32:57","http://agentmama.online/wvxxpg/7131/ServiceContractAgreement_7131_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355638/","spamhaus"
 "355637","2020-05-01 17:32:50","http://quantominds.com/ystgg/ServiceContractAgreement_0485_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355637/","spamhaus"
 "355636","2020-05-01 17:32:40","http://aeengineering.net/ss_encrypted_AD10C3F.bin","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/355636/","lovemalware"
 "355635","2020-05-01 17:32:27","http://www.earthfields.co.ke/wp-content/uploads/2020/05/pvosvygcc/ServiceContractAgreement_5415_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355635/","spamhaus"
 "355634","2020-05-01 17:32:15","https://sycrystalhk.com/wp-content/uploads/2020/05/duvplawtkw/3960/ServiceContractAgreement_3960_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355634/","spamhaus"
-"355633","2020-05-01 17:32:08","http://colombet-taxi.fr/fwtewqww/9881/ServiceContractAgreement_9881_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355633/","spamhaus"
+"355633","2020-05-01 17:32:08","http://colombet-taxi.fr/fwtewqww/9881/ServiceContractAgreement_9881_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355633/","spamhaus"
 "355632","2020-05-01 17:31:35","https://sycrystalhk.com/wp-content/uploads/2020/05/duvplawtkw/ServiceContractAgreement_3569_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355632/","spamhaus"
 "355631","2020-05-01 17:29:33","https://pastebin.com/raw/4xn36WN9","offline","malware_download","None","https://urlhaus.abuse.ch/url/355631/","JayTHL"
 "355630","2020-05-01 17:28:10","http://5.206.227.18/bot.mipsel","online","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/355630/","Gandylyan1"
 "355629","2020-05-01 17:28:07","http://5.206.227.18/bot.mips","online","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/355629/","Gandylyan1"
 "355628","2020-05-01 17:28:05","http://5.206.227.18/bot.arm6","online","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/355628/","Gandylyan1"
 "355627","2020-05-01 17:28:03","http://5.206.227.18/bot.arm5","online","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/355627/","Gandylyan1"
-"355626","2020-05-01 17:26:34","http://securefileinterneationaltransferthroughm.duckdns.org/bg/vbc.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/355626/","oppimaniac"
-"355625","2020-05-01 17:25:06","http://45.95.168.254:1691//dvrbot.x86","online","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/355625/","Gandylyan1"
-"355624","2020-05-01 17:25:04","http://45.95.168.254:1691//dvrbot.arm","online","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/355624/","Gandylyan1"
+"355626","2020-05-01 17:26:34","http://securefileinterneationaltransferthroughm.duckdns.org/bg/vbc.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/355626/","oppimaniac"
+"355625","2020-05-01 17:25:06","http://45.95.168.254:1691//dvrbot.x86","offline","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/355625/","Gandylyan1"
+"355624","2020-05-01 17:25:04","http://45.95.168.254:1691//dvrbot.arm","offline","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/355624/","Gandylyan1"
 "355623","2020-05-01 17:20:07","http://45.95.168.251//mips","offline","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/355623/","Gandylyan1"
 "355622","2020-05-01 17:20:04","http://45.95.168.251//x86","offline","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/355622/","Gandylyan1"
 "355621","2020-05-01 17:19:07","http://208.113.130.13//mips","offline","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/355621/","Gandylyan1"
@@ -331,20 +709,20 @@
 "355619","2020-05-01 17:17:05","http://185.244.39.123//mips","online","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/355619/","Gandylyan1"
 "355618","2020-05-01 17:17:03","http://185.244.39.123//x86","online","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/355618/","Gandylyan1"
 "355617","2020-05-01 16:52:33","https://pastebin.com/raw/BrGbzbsE","offline","malware_download","None","https://urlhaus.abuse.ch/url/355617/","JayTHL"
-"355616","2020-05-01 16:43:19","http://clareiamente.clareiamente.com/hcbljo/2726/ServiceContractAgreement_2726_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355616/","spamhaus"
+"355616","2020-05-01 16:43:19","http://clareiamente.clareiamente.com/hcbljo/2726/ServiceContractAgreement_2726_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355616/","spamhaus"
 "355615","2020-05-01 16:43:13","https://lancamento-oneparkperdizes.com.br/wp-content/plugins/apikey/pagyufz/6074/ServiceContractAgreement_6074_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355615/","spamhaus"
 "355614","2020-05-01 16:43:05","https://handballrek.com/wp-content/uploads/2020/05/tipvbwbms/ServiceContractAgreement_4628_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355614/","spamhaus"
 "355613","2020-05-01 16:40:20","https://pastebin.com/raw/cXRUtga3","offline","malware_download","None","https://urlhaus.abuse.ch/url/355613/","JayTHL"
-"355612","2020-05-01 16:40:12","https://eco-choice.co.uk/wp-content/uploads/2020/05/uhhjzpeozb/5649/ServiceContractAgreement_5649_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355612/","spamhaus"
-"355611","2020-05-01 16:40:05","http://quantominds.com/ystgg/ServiceContractAgreement_1628_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355611/","spamhaus"
+"355612","2020-05-01 16:40:12","https://eco-choice.co.uk/wp-content/uploads/2020/05/uhhjzpeozb/5649/ServiceContractAgreement_5649_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355612/","spamhaus"
+"355611","2020-05-01 16:40:05","http://quantominds.com/ystgg/ServiceContractAgreement_1628_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355611/","spamhaus"
 "355610","2020-05-01 16:31:04","http://www.rsantamariadelosangeles.es/wp-content/uploads/2020/04/etakxaxvjyl/7440/ServiceContractAgreement_7440_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355610/","spamhaus"
-"355609","2020-05-01 16:30:32","https://emobilodeme.com/wp-content/uploads/2020/05/mlkf/ServiceContractAgreement_4788_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355609/","spamhaus"
+"355609","2020-05-01 16:30:32","https://emobilodeme.com/wp-content/uploads/2020/05/mlkf/ServiceContractAgreement_4788_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355609/","spamhaus"
 "355608","2020-05-01 16:30:25","https://engineeringegypt.com/wp-content/uploads/2020/05/zgzkipvfto/5259/ServiceContractAgreement_5259_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355608/","spamhaus"
 "355607","2020-05-01 16:30:23","https://handballrek.com/wp-content/uploads/2020/05/tipvbwbms/ServiceContractAgreement_9838_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355607/","spamhaus"
 "355606","2020-05-01 16:30:20","http://healthcaring.xyz/wp-content/uploads/2020/04/tcabb/ServiceContractAgreement_0603_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355606/","spamhaus"
-"355605","2020-05-01 16:30:00","http://quantominds.com/ystgg/6456/ServiceContractAgreement_6456_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355605/","spamhaus"
+"355605","2020-05-01 16:30:00","http://quantominds.com/ystgg/6456/ServiceContractAgreement_6456_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355605/","spamhaus"
 "355604","2020-05-01 16:29:51","http://171.248.114.46:11489/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/355604/","geenensp"
-"355603","2020-05-01 16:29:05","http://www.rsantamariadelosangeles.es/wp-content/uploads/2020/04/etakxaxvjyl/ServiceContractAgreement_6749_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355603/","spamhaus"
+"355603","2020-05-01 16:29:05","http://www.rsantamariadelosangeles.es/wp-content/uploads/2020/04/etakxaxvjyl/ServiceContractAgreement_6749_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355603/","spamhaus"
 "355602","2020-05-01 16:18:37","http://obinspirations.com/wp-content/uploads/2020/04/ehvyfi/ServiceContractAgreement_0061_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355602/","spamhaus"
 "355601","2020-05-01 16:18:24","http://www.earthfields.co.ke/wp-content/uploads/2020/05/pvosvygcc/5880/ServiceContractAgreement_5880_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355601/","spamhaus"
 "355600","2020-05-01 16:13:03","http://skyfalss.ir/hacnhhy/ServiceContractAgreement_7827_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355600/","spamhaus"
@@ -352,12 +730,12 @@
 "355598","2020-05-01 16:08:18","https://shop.factoryfamily.co/wp-content/plugins/apikey/gojckwf/7361/ServiceContractAgreement_7361_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355598/","spamhaus"
 "355597","2020-05-01 16:07:12","http://200.104.210.165:48507/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/355597/","geenensp"
 "355596","2020-05-01 16:07:07","http://healthcaring.xyz/wp-content/uploads/2020/04/tcabb/5393/ServiceContractAgreement_5393_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355596/","spamhaus"
-"355595","2020-05-01 16:01:34","https://piedmontrescue.org/sport/rockstar.php","online","malware_download","exe,Trickbot","https://urlhaus.abuse.ch/url/355595/","abuse_ch"
+"355595","2020-05-01 16:01:34","https://piedmontrescue.org/sport/rockstar.php","offline","malware_download","exe,IcedID,Trickbot","https://urlhaus.abuse.ch/url/355595/","abuse_ch"
 "355594","2020-05-01 15:57:11","https://shop.factoryfamily.co/wp-content/plugins/apikey/gojckwf/8669/ServiceContractAgreement_8669_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355594/","spamhaus"
 "355593","2020-05-01 15:56:38","http://cp-30.theborough.com.au/ytexdxlqe/ServiceContractAgreement_2045_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355593/","spamhaus"
 "355592","2020-05-01 15:53:10","https://homedecors.com.au/fdug/2464/ServiceContractAgreement_2464_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355592/","spamhaus"
 "355591","2020-05-01 15:52:24","https://homedecors.com.au/fdug/ServiceContractAgreement_9296_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355591/","spamhaus"
-"355590","2020-05-01 15:52:15","https://souq-aljwalat.com/wp-content/uploads/2020/05/zqwxkoa/ServiceContractAgreement_4233_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355590/","spamhaus"
+"355590","2020-05-01 15:52:15","https://souq-aljwalat.com/wp-content/uploads/2020/05/zqwxkoa/ServiceContractAgreement_4233_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355590/","spamhaus"
 "355589","2020-05-01 15:52:12","http://vistanewsite.ir/wp-content/uploads/2020/05/fraplwhzbdb/ServiceContractAgreement_6322_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355589/","spamhaus"
 "355588","2020-05-01 15:52:08","http://vistanewsite.ir/wp-content/uploads/2020/05/fraplwhzbdb/9650/ServiceContractAgreement_9650_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355588/","spamhaus"
 "355587","2020-05-01 15:52:05","https://lesawilson.com/tgsxujpbbxp/7888/ServiceContractAgreement_7888_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355587/","spamhaus"
@@ -370,9 +748,9 @@
 "355580","2020-05-01 15:43:10","http://jocuri.trophygaming.net/bins/DEMONS.mips","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/355580/","zbetcheckin"
 "355579","2020-05-01 15:43:08","http://jocuri.trophygaming.net/bins/DEMONS.arm7","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/355579/","zbetcheckin"
 "355578","2020-05-01 15:43:03","http://45.95.168.202/bins/DEMONS.sh4","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/355578/","zbetcheckin"
-"355577","2020-05-01 15:42:45","https://souq-aljwalat.com/wp-content/uploads/2020/05/zqwxkoa/ServiceContractAgreement_9190_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355577/","spamhaus"
+"355577","2020-05-01 15:42:45","https://souq-aljwalat.com/wp-content/uploads/2020/05/zqwxkoa/ServiceContractAgreement_9190_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355577/","spamhaus"
 "355576","2020-05-01 15:42:37","http://obinspirations.com/wp-content/uploads/2020/05/adnkf/2287/ServiceContractAgreement_2287_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355576/","spamhaus"
-"355575","2020-05-01 15:42:24","http://cp-30.theborough.com.au/ytexdxlqe/ServiceContractAgreement_1874_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355575/","spamhaus"
+"355575","2020-05-01 15:42:24","http://cp-30.theborough.com.au/ytexdxlqe/ServiceContractAgreement_1874_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355575/","spamhaus"
 "355574","2020-05-01 15:42:16","https://handballrek.com/wp-content/uploads/2020/05/tipvbwbms/ServiceContractAgreement_5350_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355574/","spamhaus"
 "355573","2020-05-01 15:42:09","https://celebritieswhogiveauctions.com/mtxo/6117/ServiceContractAgreement_6117_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355573/","spamhaus"
 "355572","2020-05-01 15:42:04","https://handballrek.com/wp-content/uploads/2020/05/tipvbwbms/ServiceContractAgreement_7059_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355572/","spamhaus"
@@ -380,18 +758,18 @@
 "355570","2020-05-01 15:39:07","http://45.95.168.202/bins/DEMONS.spc","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/355570/","zbetcheckin"
 "355569","2020-05-01 15:39:05","https://pastebin.com/raw/3D8TrtQD","offline","malware_download","None","https://urlhaus.abuse.ch/url/355569/","JayTHL"
 "355568","2020-05-01 15:38:02","http://kristofferdaniels.com/wp-content/themes/twentyseventeen/tAwcbpyCBBjBqb.txt","offline","malware_download","Encoded,njRAT","https://urlhaus.abuse.ch/url/355568/","abuse_ch"
-"355567","2020-05-01 15:33:24","https://homedecors.com.au/fdug/7462/ServiceContractAgreement_7462_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355567/","spamhaus"
+"355567","2020-05-01 15:33:24","https://homedecors.com.au/fdug/7462/ServiceContractAgreement_7462_04302020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355567/","spamhaus"
 "355566","2020-05-01 15:33:18","https://scoda.ir/wp-content/plugins/apikey/iehi/ServiceContractAgreement_5453_04302020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355566/","spamhaus"
 "355565","2020-05-01 15:33:12","http://ddl7.data.hu/get/247463/12414237/company_profile_as_requested_and_Purchase_Order_PDF.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/355565/","spamhaus"
-"355564","2020-05-01 15:33:08","http://ddl7.data.hu/get/294970/12415680/Order_002_PDF.gz","online","malware_download","gz","https://urlhaus.abuse.ch/url/355564/","spamhaus"
+"355564","2020-05-01 15:33:08","http://ddl7.data.hu/get/294970/12415680/Order_002_PDF.gz","offline","malware_download","gz","https://urlhaus.abuse.ch/url/355564/","spamhaus"
 "355563","2020-05-01 15:32:14","http://coronetsfrank.ug/ds.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/355563/","abuse_ch"
 "355562","2020-05-01 15:26:08","https://pastebin.com/raw/mts8YDHq","offline","malware_download","None","https://urlhaus.abuse.ch/url/355562/","JayTHL"
 "355561","2020-05-01 15:26:05","https://pastebin.com/raw/K0Nb7ZJu","offline","malware_download","None","https://urlhaus.abuse.ch/url/355561/","JayTHL"
-"355560","2020-05-01 15:12:06","http://www.jahesa.com/wordpress/wp-content/plugins/sid/ub2tcjwd.0hq.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/355560/","abuse_ch"
+"355560","2020-05-01 15:12:06","http://www.jahesa.com/wordpress/wp-content/plugins/sid/ub2tcjwd.0hq.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/355560/","abuse_ch"
 "355559","2020-05-01 15:08:05","http://217.218.218.196:33127/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/355559/","geenensp"
 "355558","2020-05-01 15:07:55","http://123.11.194.45:49759/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355558/","Gandylyan1"
 "355557","2020-05-01 15:07:50","http://172.36.19.40:43417/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355557/","Gandylyan1"
-"355556","2020-05-01 15:07:18","http://116.114.95.234:54711/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355556/","Gandylyan1"
+"355556","2020-05-01 15:07:18","http://116.114.95.234:54711/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355556/","Gandylyan1"
 "355555","2020-05-01 15:07:07","http://123.11.25.79:45985/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355555/","Gandylyan1"
 "355554","2020-05-01 15:07:01","http://172.39.10.232:53073/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355554/","Gandylyan1"
 "355553","2020-05-01 15:06:29","http://112.123.187.249:39182/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355553/","Gandylyan1"
@@ -400,12 +778,12 @@
 "355550","2020-05-01 15:05:20","http://221.14.13.121:45051/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355550/","Gandylyan1"
 "355549","2020-05-01 15:05:10","http://112.28.98.69:40069/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355549/","Gandylyan1"
 "355548","2020-05-01 15:04:38","http://112.17.123.56:36909/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355548/","Gandylyan1"
-"355547","2020-05-01 15:03:43","http://220.171.194.244:54439/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355547/","Gandylyan1"
-"355546","2020-05-01 15:03:39","http://162.212.114.107:39847/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355546/","Gandylyan1"
+"355547","2020-05-01 15:03:43","http://220.171.194.244:54439/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355547/","Gandylyan1"
+"355546","2020-05-01 15:03:39","http://162.212.114.107:39847/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355546/","Gandylyan1"
 "355545","2020-05-01 15:03:35","http://115.53.130.208:51467/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355545/","Gandylyan1"
 "355544","2020-05-01 15:03:22","http://60.184.172.193:37671/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355544/","Gandylyan1"
-"355543","2020-05-01 15:03:15","http://112.123.61.9:44731/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355543/","Gandylyan1"
-"355542","2020-05-01 15:03:04","http://211.137.225.61:45963/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355542/","Gandylyan1"
+"355543","2020-05-01 15:03:15","http://112.123.61.9:44731/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355543/","Gandylyan1"
+"355542","2020-05-01 15:03:04","http://211.137.225.61:45963/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355542/","Gandylyan1"
 "355541","2020-05-01 15:01:35","http://baybars.xyz/bratio.txt","online","malware_download","Encoded,rat","https://urlhaus.abuse.ch/url/355541/","abuse_ch"
 "355540","2020-05-01 14:43:16","http://104.168.198.194/i686","online","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/355540/","Gandylyan1"
 "355539","2020-05-01 14:43:13","http://104.168.198.194/arm7","online","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/355539/","Gandylyan1"
@@ -416,7 +794,7 @@
 "355534","2020-05-01 14:29:44","http://service-updater.hopto.org/Java.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/355534/","zbetcheckin"
 "355533","2020-05-01 14:29:08","http://185.242.105.116/aren/aw.exe","offline","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/355533/","RobbieWhite98"
 "355532","2020-05-01 14:29:03","http://185.242.105.116/qroc/rino.hta","offline","malware_download","None","https://urlhaus.abuse.ch/url/355532/","RobbieWhite98"
-"355531","2020-05-01 14:10:39","http://ddl7.data.hu/get/294102/12415670/Inv__PList_PDF.gz","online","malware_download","gz","https://urlhaus.abuse.ch/url/355531/","spamhaus"
+"355531","2020-05-01 14:10:39","http://ddl7.data.hu/get/294102/12415670/Inv__PList_PDF.gz","offline","malware_download","gz","https://urlhaus.abuse.ch/url/355531/","spamhaus"
 "355530","2020-05-01 14:10:26","http://kristofferdaniels.com/wp-content/themes/twentyseventeen/LXnccisLjMo.exe","online","malware_download","bladabindi,njRAT","https://urlhaus.abuse.ch/url/355530/","Racco42"
 "355529","2020-05-01 14:10:22","https://ticte.in/wp-content/uploads/2020/04/docs_o2i/Buy-Sell%20Agreement_474957_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355529/","spamhaus"
 "355528","2020-05-01 14:10:20","http://ddl7.data.hu/get/276953/12415682/Order_002_PDF.gz","online","malware_download","gz","https://urlhaus.abuse.ch/url/355528/","spamhaus"
@@ -441,7 +819,7 @@
 "355509","2020-05-01 13:18:36","http://ffv32223.ru/Host_MdrjxhLseX6.bin","online","malware_download","encrypted,GuLoader,NetWire,rat","https://urlhaus.abuse.ch/url/355509/","abuse_ch"
 "355508","2020-05-01 13:17:34","https://cdn.discordapp.com/attachments/705344846206074881/705597522495930388/TT.PDF.Z","offline","malware_download","exe,rar","https://urlhaus.abuse.ch/url/355508/","malware_traffic"
 "355507","2020-05-01 13:05:05","http://85.10.21.212:55587/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/355507/","zbetcheckin"
-"355506","2020-05-01 13:02:18","http://ddl7.data.hu/get/276047/12415685/Order_002_PDF.gz","offline","malware_download","gz","https://urlhaus.abuse.ch/url/355506/","spamhaus"
+"355506","2020-05-01 13:02:18","http://ddl7.data.hu/get/276047/12415685/Order_002_PDF.gz","online","malware_download","gz","https://urlhaus.abuse.ch/url/355506/","spamhaus"
 "355505","2020-05-01 13:01:38","http://quickuploader.xyz/remcos_agent_tEjkwOPeS235.bin","online","malware_download","encrypted,GuLoader,rat,RemcosRAT","https://urlhaus.abuse.ch/url/355505/","abuse_ch"
 "355504","2020-05-01 12:56:34","https://nilemixitupd.biz.pl/MOKGLG/MEJMKQY.exe","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/355504/","abuse_ch"
 "355503","2020-05-01 12:46:04","http://coronetsfrank.ug/az2.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/355503/","zbetcheckin"
@@ -452,16 +830,16 @@
 "355498","2020-05-01 12:04:41","http://49.115.195.186:36885/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355498/","Gandylyan1"
 "355497","2020-05-01 12:04:37","http://218.31.2.125:46536/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355497/","Gandylyan1"
 "355496","2020-05-01 12:04:32","http://115.202.84.123:46806/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355496/","Gandylyan1"
-"355495","2020-05-01 12:04:27","http://115.56.51.119:36516/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355495/","Gandylyan1"
+"355495","2020-05-01 12:04:27","http://115.56.51.119:36516/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355495/","Gandylyan1"
 "355494","2020-05-01 12:04:22","http://123.10.159.88:34378/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355494/","Gandylyan1"
-"355493","2020-05-01 12:04:17","http://111.43.223.156:34205/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355493/","Gandylyan1"
+"355493","2020-05-01 12:04:17","http://111.43.223.156:34205/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355493/","Gandylyan1"
 "355492","2020-05-01 12:04:14","http://219.155.209.111:51102/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355492/","Gandylyan1"
 "355491","2020-05-01 12:04:10","http://182.142.119.93:48142/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355491/","Gandylyan1"
 "355490","2020-05-01 12:04:04","http://115.59.17.176:47818/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355490/","Gandylyan1"
 "355489","2020-05-01 12:03:41","http://221.15.4.252:46581/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355489/","Gandylyan1"
-"355488","2020-05-01 12:03:37","http://182.127.88.130:42944/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355488/","Gandylyan1"
-"355487","2020-05-01 12:03:34","http://186.225.177.46:54312/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355487/","Gandylyan1"
-"355486","2020-05-01 12:03:30","http://27.41.181.223:35020/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355486/","Gandylyan1"
+"355488","2020-05-01 12:03:37","http://182.127.88.130:42944/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355488/","Gandylyan1"
+"355487","2020-05-01 12:03:34","http://186.225.177.46:54312/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355487/","Gandylyan1"
+"355486","2020-05-01 12:03:30","http://27.41.181.223:35020/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355486/","Gandylyan1"
 "355485","2020-05-01 12:03:26","http://219.154.185.229:53532/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355485/","Gandylyan1"
 "355484","2020-05-01 12:03:21","http://106.110.125.58:53537/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355484/","Gandylyan1"
 "355483","2020-05-01 12:03:16","http://111.42.66.181:40706/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355483/","Gandylyan1"
@@ -473,8 +851,8 @@
 "355477","2020-05-01 11:55:20","http://82.81.108.172:48371/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/355477/","geenensp"
 "355476","2020-05-01 11:55:16","http://112.160.56.81:57741/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/355476/","geenensp"
 "355475","2020-05-01 11:55:10","http://ddl7.data.hu/get/367667/12415684/quotation_for_Sayyar_PDF.gz","online","malware_download","gz","https://urlhaus.abuse.ch/url/355475/","spamhaus"
-"355474","2020-05-01 11:48:42","https://mybook22.s3-us-west-1.amazonaws.com/DCMNT_ARQ09209881.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/355474/","abuse_ch"
-"355473","2020-05-01 11:27:09","http://218.161.3.200:9780/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/355473/","geenensp"
+"355474","2020-05-01 11:48:42","https://mybook22.s3-us-west-1.amazonaws.com/DCMNT_ARQ09209881.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/355474/","abuse_ch"
+"355473","2020-05-01 11:27:09","http://218.161.3.200:9780/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/355473/","geenensp"
 "355472","2020-05-01 11:27:04","https://www.teleporterhire.ie/wp-content/uploads/2020/04/docs_1sn/Buy-Sell%20Agreement_6968_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355472/","spamhaus"
 "355471","2020-05-01 11:21:04","https://drive.google.com/uc?export=download&id=19n0ofAiuODfAPdIz37cAXMD17k9dC2z6","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/355471/","abuse_ch"
 "355470","2020-05-01 11:07:08","https://kiaowadubai.com/docs_qsb/87923/Buy-Sell%20Agreement_87923_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355470/","spamhaus"
@@ -495,7 +873,7 @@
 "355455","2020-05-01 10:20:04","http://185.172.110.234/bins/arm6","online","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/355455/","Gandylyan1"
 "355454","2020-05-01 10:18:16","http://185.172.110.234/bins/arm5","online","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/355454/","Gandylyan1"
 "355453","2020-05-01 10:18:14","http://185.172.110.234/bins/arm","online","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/355453/","Gandylyan1"
-"355452","2020-05-01 10:18:12","http://27.155.87.120:7766/lll.sh","offline","malware_download","None","https://urlhaus.abuse.ch/url/355452/","bjornruberg"
+"355452","2020-05-01 10:18:12","http://27.155.87.120:7766/lll.sh","online","malware_download","None","https://urlhaus.abuse.ch/url/355452/","bjornruberg"
 "355451","2020-05-01 10:18:05","http://senevdekaldiyehediyenet.com/hediye20gb.apk","online","malware_download","apk ,Cerberus","https://urlhaus.abuse.ch/url/355451/","mertcangokgoz"
 "355450","2020-05-01 10:08:08","https://paste.ee/r/Zafeb","offline","malware_download","Encoded","https://urlhaus.abuse.ch/url/355450/","abuse_ch"
 "355449","2020-05-01 10:06:06","https://pastebin.com/raw/VZdULr1j","offline","malware_download","None","https://urlhaus.abuse.ch/url/355449/","JayTHL"
@@ -520,18 +898,18 @@
 "355430","2020-05-01 09:06:12","https://pastebin.com/raw/h5hCh1k9","offline","malware_download","None","https://urlhaus.abuse.ch/url/355430/","JayTHL"
 "355429","2020-05-01 09:06:09","http://172.45.59.143:32812/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355429/","Gandylyan1"
 "355428","2020-05-01 09:05:37","http://42.234.117.70:52032/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355428/","Gandylyan1"
-"355427","2020-05-01 09:05:29","http://173.15.162.156:3659/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355427/","Gandylyan1"
+"355427","2020-05-01 09:05:29","http://173.15.162.156:3659/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355427/","Gandylyan1"
 "355426","2020-05-01 09:05:25","http://115.58.127.178:44554/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355426/","Gandylyan1"
 "355425","2020-05-01 09:05:22","http://36.33.133.226:42171/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355425/","Gandylyan1"
-"355424","2020-05-01 09:05:13","http://117.95.173.64:48422/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355424/","Gandylyan1"
-"355423","2020-05-01 09:04:31","http://162.212.115.118:37628/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355423/","Gandylyan1"
+"355424","2020-05-01 09:05:13","http://117.95.173.64:48422/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355424/","Gandylyan1"
+"355423","2020-05-01 09:04:31","http://162.212.115.118:37628/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355423/","Gandylyan1"
 "355422","2020-05-01 09:04:27","http://36.107.234.185:47149/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355422/","Gandylyan1"
 "355421","2020-05-01 09:04:21","http://199.83.200.194:59123/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355421/","Gandylyan1"
-"355420","2020-05-01 09:04:18","http://91.234.60.94:51472/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355420/","Gandylyan1"
+"355420","2020-05-01 09:04:18","http://91.234.60.94:51472/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355420/","Gandylyan1"
 "355419","2020-05-01 09:04:14","http://27.41.178.53:53989/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355419/","Gandylyan1"
 "355418","2020-05-01 09:04:10","http://42.234.202.31:47562/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355418/","Gandylyan1"
 "355417","2020-05-01 09:04:06","http://111.43.223.22:37001/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355417/","Gandylyan1"
-"355416","2020-05-01 09:04:04","http://111.42.66.30:43370/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355416/","Gandylyan1"
+"355416","2020-05-01 09:04:04","http://111.42.66.30:43370/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355416/","Gandylyan1"
 "355415","2020-05-01 08:44:06","http://167.99.60.170/bins/Hilix.arm7","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/355415/","zbetcheckin"
 "355414","2020-05-01 08:44:04","http://167.99.60.170/bins/Hilix.mpsl","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/355414/","zbetcheckin"
 "355413","2020-05-01 08:43:04","http://cryline.net/lr.asd","online","malware_download","exe","https://urlhaus.abuse.ch/url/355413/","abuse_ch"
@@ -597,21 +975,21 @@
 "355353","2020-05-01 07:11:49","http://sylvaclouds.eu/nwamax/nwamax.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/355353/","gorimpthon"
 "355352","2020-05-01 07:11:13","http://156.96.48.220/mips","offline","malware_download","32-bit,elf,mips","https://urlhaus.abuse.ch/url/355352/","geenensp"
 "355351","2020-05-01 07:11:10","http://156.96.48.220/EkSgbins.sh","offline","malware_download","script","https://urlhaus.abuse.ch/url/355351/","geenensp"
-"355350","2020-05-01 07:11:05","http://121.168.227.85:18959/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/355350/","geenensp"
+"355350","2020-05-01 07:11:05","http://121.168.227.85:18959/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/355350/","geenensp"
 "355349","2020-05-01 07:10:08","http://27.65.63.54:31505/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/355349/","geenensp"
 "355348","2020-05-01 06:47:06","http://usapglobal.usapglobal.org/smuuu/smileyyyyy.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/355348/","zbetcheckin"
 "355347","2020-05-01 06:36:06","http://1.34.27.167:7346/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/355347/","zbetcheckin"
 "355346","2020-05-01 06:05:32","http://42.226.74.158:50053/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355346/","Gandylyan1"
-"355345","2020-05-01 06:05:25","http://222.139.66.54:35455/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355345/","Gandylyan1"
+"355345","2020-05-01 06:05:25","http://222.139.66.54:35455/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355345/","Gandylyan1"
 "355344","2020-05-01 06:05:20","http://122.232.53.176:49541/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355344/","Gandylyan1"
 "355343","2020-05-01 06:05:16","http://111.42.103.27:36535/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355343/","Gandylyan1"
-"355342","2020-05-01 06:05:10","http://111.43.223.112:47199/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355342/","Gandylyan1"
-"355341","2020-05-01 06:05:06","http://42.235.63.163:42517/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355341/","Gandylyan1"
-"355340","2020-05-01 06:04:59","http://49.119.56.127:34464/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355340/","Gandylyan1"
+"355342","2020-05-01 06:05:10","http://111.43.223.112:47199/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355342/","Gandylyan1"
+"355341","2020-05-01 06:05:06","http://42.235.63.163:42517/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355341/","Gandylyan1"
+"355340","2020-05-01 06:04:59","http://49.119.56.127:34464/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355340/","Gandylyan1"
 "355339","2020-05-01 06:04:53","http://115.58.132.211:40593/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355339/","Gandylyan1"
-"355338","2020-05-01 06:04:20","http://111.42.102.78:56238/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355338/","Gandylyan1"
+"355338","2020-05-01 06:04:20","http://111.42.102.78:56238/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355338/","Gandylyan1"
 "355337","2020-05-01 06:04:17","http://114.226.9.206:55344/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355337/","Gandylyan1"
-"355336","2020-05-01 06:04:11","http://111.43.223.38:43367/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355336/","Gandylyan1"
+"355336","2020-05-01 06:04:11","http://111.43.223.38:43367/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355336/","Gandylyan1"
 "355335","2020-05-01 06:04:08","http://176.113.161.59:42166/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355335/","Gandylyan1"
 "355334","2020-05-01 06:04:05","http://49.68.144.47:39194/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355334/","Gandylyan1"
 "355333","2020-05-01 05:18:34","http://usapglobal.usapglobal.org/buggy/baggyyyyy.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/355333/","zbetcheckin"
@@ -636,10 +1014,10 @@
 "355314","2020-05-01 03:08:13","http://usapglobal.usapglobal.org/youngj/ojammmm.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/355314/","zbetcheckin"
 "355313","2020-05-01 03:08:05","http://lastmorgoth.com/bin/billi_4fa79931167d46f7ad70b0e5daf22b23.exe.dom_1.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/355313/","zbetcheckin"
 "355312","2020-05-01 03:07:43","http://49.89.227.78:37628/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355312/","Gandylyan1"
-"355311","2020-05-01 03:07:31","http://115.59.3.153:60261/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355311/","Gandylyan1"
+"355311","2020-05-01 03:07:31","http://115.59.3.153:60261/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355311/","Gandylyan1"
 "355310","2020-05-01 03:07:26","http://42.235.24.9:58194/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355310/","Gandylyan1"
 "355309","2020-05-01 03:07:22","http://60.184.150.81:58341/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355309/","Gandylyan1"
-"355308","2020-05-01 03:06:05","http://176.113.161.94:56640/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355308/","Gandylyan1"
+"355308","2020-05-01 03:06:05","http://176.113.161.94:56640/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355308/","Gandylyan1"
 "355307","2020-05-01 03:06:02","http://101.51.100.74:52031/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355307/","Gandylyan1"
 "355306","2020-05-01 03:05:58","http://172.45.19.251:53833/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355306/","Gandylyan1"
 "355305","2020-05-01 03:05:20","http://49.82.192.122:38380/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355305/","Gandylyan1"
@@ -647,7 +1025,7 @@
 "355303","2020-05-01 03:05:02","http://110.18.194.20:53061/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355303/","Gandylyan1"
 "355302","2020-05-01 03:04:59","http://114.226.139.37:38313/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355302/","Gandylyan1"
 "355301","2020-05-01 03:04:53","http://221.210.211.28:39731/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355301/","Gandylyan1"
-"355300","2020-05-01 03:04:50","http://182.113.240.159:48934/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355300/","Gandylyan1"
+"355300","2020-05-01 03:04:50","http://182.113.240.159:48934/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355300/","Gandylyan1"
 "355299","2020-05-01 03:04:44","http://111.42.67.31:35243/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355299/","Gandylyan1"
 "355298","2020-05-01 03:04:36","http://172.39.35.208:51860/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355298/","Gandylyan1"
 "355297","2020-05-01 03:04:04","http://103.209.204.205:56138/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355297/","Gandylyan1"
@@ -685,11 +1063,11 @@
 "355265","2020-05-01 01:23:07","http://ffv322.ru/Faexejames.msi","online","malware_download","msi","https://urlhaus.abuse.ch/url/355265/","zbetcheckin"
 "355264","2020-05-01 01:16:11","http://114.32.4.184:2367/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/355264/","zbetcheckin"
 "355263","2020-05-01 01:14:10","http://114.32.4.184:26950/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/355263/","zbetcheckin"
-"355262","2020-05-01 01:14:04","http://45.19.201.181:12645/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/355262/","zbetcheckin"
+"355262","2020-05-01 01:14:04","http://45.19.201.181:12645/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/355262/","zbetcheckin"
 "355261","2020-05-01 01:13:10","http://arifrehan.xyz/wp-content/uploads/2020/04/ksxdxoooi/781406/ServiceContractAgreement_781406_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355261/","malware_traffic"
 "355260","2020-05-01 01:13:04","https://www.azenzatowers.com/wp-content/uploads/2020/04/zgesczf/8171558/ServiceContractAgreement_8171558_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355260/","malware_traffic"
 "355259","2020-05-01 01:12:29","https://www.tourenhelicoptero.com/wp-content/uploads/2020/04/jrtnwyaolip/562447/ServiceContractAgreement_562447_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355259/","malware_traffic"
-"355258","2020-05-01 01:12:25","http://www.mecbox.cn/wp-content/uploads/2020/04/pxrg/ServiceContractAgreement_161004735_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355258/","malware_traffic"
+"355258","2020-05-01 01:12:25","http://www.mecbox.cn/wp-content/uploads/2020/04/pxrg/ServiceContractAgreement_161004735_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355258/","malware_traffic"
 "355257","2020-05-01 01:12:21","https://yuluobo.com/wp-content/plugins/apikey/jzpt/ServiceContractAgreement_940979882_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355257/","malware_traffic"
 "355256","2020-05-01 01:12:15","http://misskproductions.co.za/cgpnbjtwui/32956200/ServiceContractAgreement_32956200_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355256/","malware_traffic"
 "355255","2020-05-01 01:12:11","https://www.dotpay.id/wp-content/uploads/2020/04/ckfsevy/224253/ServiceContractAgreement_224253_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355255/","malware_traffic"
@@ -714,18 +1092,18 @@
 "355236","2020-05-01 01:09:53","https://www.vendeaki.online/wp-content/uploads/2020/04/qnuhlexxe/ServiceContractAgreement_213975_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355236/","malware_traffic"
 "355235","2020-05-01 01:09:51","https://www.vendeaki.online/wp-content/uploads/2020/04/qnuhlexxe/61416343/ServiceContractAgreement_61416343_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355235/","malware_traffic"
 "355234","2020-05-01 01:09:49","https://www.vendeaki.online/wp-content/uploads/2020/04/qnuhlexxe/25068991/ServiceContractAgreement_25068991_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355234/","malware_traffic"
-"355233","2020-05-01 01:09:47","https://www.tourenhelicoptero.com/wp-content/uploads/2020/04/jrtnwyaolip/ServiceContractAgreement_0923183_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355233/","malware_traffic"
+"355233","2020-05-01 01:09:47","https://www.tourenhelicoptero.com/wp-content/uploads/2020/04/jrtnwyaolip/ServiceContractAgreement_0923183_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355233/","malware_traffic"
 "355232","2020-05-01 01:09:42","https://www.tourenhelicoptero.com/wp-content/uploads/2020/04/jrtnwyaolip/92578/ServiceContractAgreement_92578_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355232/","malware_traffic"
-"355231","2020-05-01 01:09:38","https://www.tourenhelicoptero.com/wp-content/uploads/2020/04/jrtnwyaolip/71329/ServiceContractAgreement_71329_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355231/","malware_traffic"
+"355231","2020-05-01 01:09:38","https://www.tourenhelicoptero.com/wp-content/uploads/2020/04/jrtnwyaolip/71329/ServiceContractAgreement_71329_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355231/","malware_traffic"
 "355230","2020-05-01 01:09:31","https://www.tourenhelicoptero.com/wp-content/uploads/2020/04/jrtnwyaolip/032833/ServiceContractAgreement_032833_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355230/","malware_traffic"
 "355229","2020-05-01 01:09:22","https://www.dotpay.id/wp-content/uploads/2020/04/ckfsevy/ServiceContractAgreement_68752_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355229/","malware_traffic"
 "355228","2020-05-01 01:09:19","https://www.dotpay.id/wp-content/uploads/2020/04/ckfsevy/ServiceContractAgreement_581159_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355228/","malware_traffic"
 "355227","2020-05-01 01:09:11","https://www.dotpay.id/wp-content/uploads/2020/04/ckfsevy/ServiceContractAgreement_34101_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355227/","malware_traffic"
 "355226","2020-05-01 01:09:08","https://www.dotpay.id/wp-content/uploads/2020/04/ckfsevy/1186031/ServiceContractAgreement_1186031_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355226/","malware_traffic"
-"355225","2020-05-01 01:09:00","https://www.canaan.io/wp-content/uploads/2020/04/ktndx/servicecontractagreement_70820_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355225/","malware_traffic"
-"355224","2020-05-01 01:08:54","https://www.canaan.io/wp-content/uploads/2020/04/ktndx/ServiceContractAgreement_3479390_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355224/","malware_traffic"
-"355223","2020-05-01 01:08:48","https://www.canaan.io/wp-content/uploads/2020/04/ktndx/ServiceContractAgreement_20699587_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355223/","malware_traffic"
-"355222","2020-05-01 01:08:40","https://www.canaan.io/wp-content/uploads/2020/04/ktndx/90554/ServiceContractAgreement_90554_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355222/","malware_traffic"
+"355225","2020-05-01 01:09:00","https://www.canaan.io/wp-content/uploads/2020/04/ktndx/servicecontractagreement_70820_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355225/","malware_traffic"
+"355224","2020-05-01 01:08:54","https://www.canaan.io/wp-content/uploads/2020/04/ktndx/ServiceContractAgreement_3479390_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355224/","malware_traffic"
+"355223","2020-05-01 01:08:48","https://www.canaan.io/wp-content/uploads/2020/04/ktndx/ServiceContractAgreement_20699587_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355223/","malware_traffic"
+"355222","2020-05-01 01:08:40","https://www.canaan.io/wp-content/uploads/2020/04/ktndx/90554/ServiceContractAgreement_90554_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355222/","malware_traffic"
 "355221","2020-05-01 01:08:35","https://www.canaan.io/wp-content/uploads/2020/04/ktndx/408724466/ServiceContractAgreement_408724466_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355221/","malware_traffic"
 "355220","2020-05-01 01:08:29","https://www.azenzatowers.com/wp-content/uploads/2020/04/zgesczf/ServiceContractAgreement_86455972_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355220/","malware_traffic"
 "355219","2020-05-01 01:07:57","https://www.azenzatowers.com/wp-content/uploads/2020/04/zgesczf/ServiceContractAgreement_851535552_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355219/","malware_traffic"
@@ -736,12 +1114,12 @@
 "355214","2020-05-01 01:05:14","https://www.azenzatowers.com/wp-content/uploads/2020/04/zgesczf/291832/ServiceContractAgreement_291832_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355214/","malware_traffic"
 "355213","2020-05-01 01:04:40","https://www.azenzatowers.com/wp-content/uploads/2020/04/zgesczf/27823/ServiceContractAgreement_27823_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355213/","malware_traffic"
 "355212","2020-05-01 01:04:08","https://www.azenzatowers.com/wp-content/uploads/2020/04/zgesczf/16219646/ServiceContractAgreement_16219646_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355212/","malware_traffic"
-"355211","2020-05-01 01:03:36","https://vibicloud.com/wp-content/uploads/2020/04/bluoljyrzh/ServiceContractAgreement_957804_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355211/","malware_traffic"
-"355210","2020-05-01 01:03:28","https://vibicloud.com/wp-content/uploads/2020/04/bluoljyrzh/ServiceContractAgreement_95411_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355210/","malware_traffic"
-"355209","2020-05-01 01:03:25","https://vibicloud.com/wp-content/uploads/2020/04/bluoljyrzh/servicecontractagreement_937511_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355209/","malware_traffic"
-"355208","2020-05-01 01:03:20","https://vibicloud.com/wp-content/uploads/2020/04/bluoljyrzh/303271/ServiceContractAgreement_303271_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355208/","malware_traffic"
-"355207","2020-05-01 01:03:07","https://vibicloud.com/wp-content/uploads/2020/04/bluoljyrzh/213610/ServiceContractAgreement_213610_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355207/","malware_traffic"
-"355206","2020-05-01 01:03:02","https://vibicloud.com/wp-content/uploads/2020/04/bluoljyrzh/17562/ServiceContractAgreement_17562_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355206/","malware_traffic"
+"355211","2020-05-01 01:03:36","https://vibicloud.com/wp-content/uploads/2020/04/bluoljyrzh/ServiceContractAgreement_957804_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355211/","malware_traffic"
+"355210","2020-05-01 01:03:28","https://vibicloud.com/wp-content/uploads/2020/04/bluoljyrzh/ServiceContractAgreement_95411_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355210/","malware_traffic"
+"355209","2020-05-01 01:03:25","https://vibicloud.com/wp-content/uploads/2020/04/bluoljyrzh/servicecontractagreement_937511_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355209/","malware_traffic"
+"355208","2020-05-01 01:03:20","https://vibicloud.com/wp-content/uploads/2020/04/bluoljyrzh/303271/ServiceContractAgreement_303271_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355208/","malware_traffic"
+"355207","2020-05-01 01:03:07","https://vibicloud.com/wp-content/uploads/2020/04/bluoljyrzh/213610/ServiceContractAgreement_213610_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355207/","malware_traffic"
+"355206","2020-05-01 01:03:02","https://vibicloud.com/wp-content/uploads/2020/04/bluoljyrzh/17562/ServiceContractAgreement_17562_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355206/","malware_traffic"
 "355205","2020-05-01 01:02:56","https://uyen.vn/wp-content/uploads/2020/04/uvgnwigmi/ServiceContractAgreement_22521330_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355205/","malware_traffic"
 "355204","2020-05-01 01:02:49","https://uyen.vn/wp-content/uploads/2020/04/uvgnwigmi/ServiceContractAgreement_127640399_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355204/","malware_traffic"
 "355203","2020-05-01 01:02:45","https://uyen.vn/wp-content/uploads/2020/04/uvgnwigmi/899028826/ServiceContractAgreement_899028826_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355203/","malware_traffic"
@@ -781,13 +1159,13 @@
 "355169","2020-05-01 00:12:12","https://jhorapatarastana.xyz/ptpkvgi/ServiceContractAgreement_338258_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355169/","malware_traffic"
 "355168","2020-05-01 00:12:09","https://jhorapatarastana.xyz/ptpkvgi/47157394/ServiceContractAgreement_47157394_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355168/","malware_traffic"
 "355167","2020-05-01 00:12:07","https://jhorapatarastana.xyz/ptpkvgi/04271/ServiceContractAgreement_04271_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355167/","malware_traffic"
-"355166","2020-05-01 00:12:05","https://itrigger.cn/wp-content/uploads/2020/04/wvcmkcon/ServiceContractAgreement_763721_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355166/","malware_traffic"
+"355166","2020-05-01 00:12:05","https://itrigger.cn/wp-content/uploads/2020/04/wvcmkcon/ServiceContractAgreement_763721_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355166/","malware_traffic"
 "355165","2020-05-01 00:11:59","http://www.kolibri-fabrika.ru/wp-content/uploads/2020/04/tlzgibsc/09861/ServiceContractAgreement_09861_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355165/","malware_traffic"
-"355164","2020-05-01 00:11:56","http://itrigger.cn/wp-content/uploads/2020/04/wvcmkcon/ServiceContractAgreement_763721_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355164/","malware_traffic"
+"355164","2020-05-01 00:11:56","http://itrigger.cn/wp-content/uploads/2020/04/wvcmkcon/ServiceContractAgreement_763721_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355164/","malware_traffic"
 "355163","2020-05-01 00:11:51","https://itrigger.cn/wp-content/uploads/2020/04/wvcmkcon/ServiceContractAgreement_45023177_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355163/","malware_traffic"
 "355162","2020-05-01 00:11:41","https://itrigger.cn/wp-content/uploads/2020/04/wvcmkcon/ServiceContractAgreement_16477_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355162/","malware_traffic"
-"355161","2020-05-01 00:11:37","https://itrigger.cn/wp-content/uploads/2020/04/wvcmkcon/75213/ServiceContractAgreement_75213_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355161/","malware_traffic"
-"355160","2020-05-01 00:11:31","https://itrigger.cn/wp-content/uploads/2020/04/wvcmkcon/6862554/ServiceContractAgreement_6862554_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355160/","malware_traffic"
+"355161","2020-05-01 00:11:37","https://itrigger.cn/wp-content/uploads/2020/04/wvcmkcon/75213/ServiceContractAgreement_75213_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355161/","malware_traffic"
+"355160","2020-05-01 00:11:31","https://itrigger.cn/wp-content/uploads/2020/04/wvcmkcon/6862554/ServiceContractAgreement_6862554_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355160/","malware_traffic"
 "355159","2020-05-01 00:11:23","https://haisannhatrang.com.vn/wp-content/plugins/apikey/kndghkh/ServiceContractAgreement_7360825_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355159/","malware_traffic"
 "355158","2020-05-01 00:11:16","https://haisannhatrang.com.vn/wp-content/plugins/apikey/kndghkh/ServiceContractAgreement_721247429_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355158/","malware_traffic"
 "355157","2020-05-01 00:11:11","https://freeprofessionalwebhosting.com/wp-content/uploads/2020/04/pozgtf/712977/ServiceContractAgreement_712977_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355157/","malware_traffic"
@@ -809,10 +1187,10 @@
 "355141","2020-05-01 00:09:11","https://avestor.uz/wp-content/uploads/2020/04/dbaogom/47424064/ServiceContractAgreement_47424064_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355141/","malware_traffic"
 "355140","2020-05-01 00:09:09","https://avestor.uz/wp-content/uploads/2020/04/dbaogom/2556655/ServiceContractAgreement_2556655_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355140/","malware_traffic"
 "355139","2020-05-01 00:09:07","https://avestor.uz/wp-content/uploads/2020/04/dbaogom/00347539/ServiceContractAgreement_00347539_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355139/","malware_traffic"
-"355138","2020-05-01 00:09:03","http://www.mecbox.cn/wp-content/uploads/2020/04/pxrg/ServiceContractAgreement_99901073_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355138/","malware_traffic"
+"355138","2020-05-01 00:09:03","http://www.mecbox.cn/wp-content/uploads/2020/04/pxrg/ServiceContractAgreement_99901073_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355138/","malware_traffic"
 "355137","2020-05-01 00:09:00","http://www.mecbox.cn/wp-content/uploads/2020/04/pxrg/ServiceContractAgreement_53680_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355137/","malware_traffic"
-"355136","2020-05-01 00:08:58","http://www.mecbox.cn/wp-content/uploads/2020/04/pxrg/ServiceContractAgreement_3091456_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355136/","malware_traffic"
-"355135","2020-05-01 00:08:46","http://www.mecbox.cn/wp-content/uploads/2020/04/pxrg/ServiceContractAgreement_1215829_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355135/","malware_traffic"
+"355136","2020-05-01 00:08:58","http://www.mecbox.cn/wp-content/uploads/2020/04/pxrg/ServiceContractAgreement_3091456_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355136/","malware_traffic"
+"355135","2020-05-01 00:08:46","http://www.mecbox.cn/wp-content/uploads/2020/04/pxrg/ServiceContractAgreement_1215829_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355135/","malware_traffic"
 "355134","2020-05-01 00:08:40","http://www.kolibri-fabrika.ru/wp-content/uploads/2020/04/tlzgibsc/42790/ServiceContractAgreement_42790_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355134/","malware_traffic"
 "355133","2020-05-01 00:08:38","http://www.kolibri-fabrika.ru/wp-content/uploads/2020/04/tlzgibsc/09861/ServiceC%20ontractAgreement_09861_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355133/","malware_traffic"
 "355132","2020-05-01 00:08:32","http://www.azenzatowers.com/wp-content/uploads/2020/04/zgesczf/ServiceContractAgreement_851535552_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355132/","malware_traffic"
@@ -820,7 +1198,7 @@
 "355130","2020-05-01 00:06:50","http://111.43.223.52:44564/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355130/","Gandylyan1"
 "355129","2020-05-01 00:06:47","http://182.127.242.93:36171/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355129/","Gandylyan1"
 "355128","2020-05-01 00:06:42","http://216.180.117.101:33555/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355128/","Gandylyan1"
-"355127","2020-05-01 00:06:38","http://125.40.75.189:43741/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355127/","Gandylyan1"
+"355127","2020-05-01 00:06:38","http://125.40.75.189:43741/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355127/","Gandylyan1"
 "355126","2020-05-01 00:06:33","http://172.36.57.117:58726/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355126/","Gandylyan1"
 "355125","2020-05-01 00:06:01","http://61.52.154.249:34417/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355125/","Gandylyan1"
 "355124","2020-05-01 00:05:58","http://112.123.109.196:52850/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355124/","Gandylyan1"
@@ -828,10 +1206,10 @@
 "355122","2020-05-01 00:05:48","http://111.40.79.79:34819/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355122/","Gandylyan1"
 "355121","2020-05-01 00:05:33","http://115.49.3.71:35426/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355121/","Gandylyan1"
 "355120","2020-05-01 00:05:26","http://118.255.208.60:37528/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355120/","Gandylyan1"
-"355119","2020-05-01 00:05:19","http://111.43.223.159:43766/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355119/","Gandylyan1"
+"355119","2020-05-01 00:05:19","http://111.43.223.159:43766/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355119/","Gandylyan1"
 "355118","2020-05-01 00:05:16","http://124.67.89.238:34969/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355118/","Gandylyan1"
 "355117","2020-05-01 00:05:11","http://27.41.227.123:41450/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355117/","Gandylyan1"
-"355116","2020-05-01 00:05:06","http://111.42.102.70:35844/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355116/","Gandylyan1"
+"355116","2020-05-01 00:05:06","http://111.42.102.70:35844/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355116/","Gandylyan1"
 "355115","2020-05-01 00:04:57","http://172.36.24.88:37562/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355115/","Gandylyan1"
 "355114","2020-05-01 00:04:26","http://221.210.211.132:55474/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355114/","Gandylyan1"
 "355113","2020-05-01 00:04:19","http://221.210.211.16:37945/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355113/","Gandylyan1"
@@ -848,11 +1226,11 @@
 "355102","2020-05-01 00:01:18","http://smollmart.com/wp-content/uploads/2020/04/swxcqhstvt/ServiceContractAgreement_157301_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355102/","malware_traffic"
 "355101","2020-05-01 00:01:13","http://smollmart.com/wp-content/uploads/2020/04/swxcqhstvt/286513/ServiceContractAgreement_286513_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355101/","malware_traffic"
 "355100","2020-05-01 00:01:04","http://smollmart.com/wp-content/uploads/2020/04/swxcqhstvt/08286651/servicecontractagreement_08286651_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355100/","malware_traffic"
-"355099","2020-05-01 00:00:52","http://phuphamca.com/rftt/ServiceContractAgreement_7034895_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355099/","malware_traffic"
+"355099","2020-05-01 00:00:52","http://phuphamca.com/rftt/ServiceContractAgreement_7034895_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355099/","malware_traffic"
 "355098","2020-05-01 00:00:35","http://phuphamca.com/rftt/ServiceContractAgreement_6422943_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355098/","malware_traffic"
-"355097","2020-05-01 00:00:08","http://phuphamca.com/rftt/ServiceContractAgreement_54864195_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355097/","malware_traffic"
+"355097","2020-05-01 00:00:08","http://phuphamca.com/rftt/ServiceContractAgreement_54864195_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355097/","malware_traffic"
 "355096","2020-04-30 23:59:57","http://phuphamca.com/rftt/ServiceContractAgreement_074722_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355096/","malware_traffic"
-"355095","2020-04-30 23:59:49","http://phuphamca.com/rftt/208425456/ServiceContractAgreement_208425456_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355095/","malware_traffic"
+"355095","2020-04-30 23:59:49","http://phuphamca.com/rftt/208425456/ServiceContractAgreement_208425456_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355095/","malware_traffic"
 "355094","2020-04-30 23:59:42","http://mecbox.cn/wp-content/uploads/2020/04/pxrg/servicecontractagreement_83409172_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355094/","malware_traffic"
 "355093","2020-04-30 23:59:38","http://kposter.alexandruplesea.ro/xspqzuhv/ServiceContractAgreement_74979218_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355093/","malware_traffic"
 "355092","2020-04-30 23:59:06","http://kposter.alexandruplesea.ro/xspqzuhv/8715655/ServiceContractAgreement_8715655_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355092/","malware_traffic"
@@ -868,7 +1246,7 @@
 "355082","2020-04-30 23:56:04","http://adnquocte.com/jttlp/ServiceContractAgreement_19794501_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355082/","malware_traffic"
 "355081","2020-04-30 23:55:58","http://adnquocte.com/jttlp/47851039/ServiceContractAgreement_47851039_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355081/","malware_traffic"
 "355080","2020-04-30 23:55:56","http://adnquocte.com/jttlp/277768/servicecontractagreement_277768_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355080/","malware_traffic"
-"355079","2020-04-30 23:55:52","http://itrigger.cn/wp-content/uploads/2020/04/wvcmkcon/ServiceContractAgreement%20_763721_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355079/","malware_traffic"
+"355079","2020-04-30 23:55:52","http://itrigger.cn/wp-content/uploads/2020/04/wvcmkcon/ServiceContractAgreement%20_763721_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355079/","malware_traffic"
 "355078","2020-04-30 23:55:48","http://freeprofessionalwebhosting.com/wp-content/uploads/2020/04/pozgtf/712977/ServiceContractAgreement_712977_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355078/","malware_traffic"
 "355077","2020-04-30 23:55:45","http://enixc.com/wp-content/uploads/2020/04/uxai/78850/servicecontractagreement_78850_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355077/","malware_traffic"
 "355076","2020-04-30 23:55:40","http://enixc.com/wp-content/uploads/2020/04/uxai/47119/ServiceContractAgreement_47119_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355076/","malware_traffic"
@@ -880,7 +1258,7 @@
 "355070","2020-04-30 23:42:03","http://167.250.49.155/bin/billi_7403895435d3487f9b36ed38b756b189.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/355070/","zbetcheckin"
 "355069","2020-04-30 23:38:07","http://98.159.99.37/443","online","malware_download","elf","https://urlhaus.abuse.ch/url/355069/","zbetcheckin"
 "355068","2020-04-30 23:15:34","https://pastebin.com/raw/01he7nkP","offline","malware_download","None","https://urlhaus.abuse.ch/url/355068/","JayTHL"
-"355067","2020-04-30 22:41:05","https://bucketstrong.s3-us-west-1.amazonaws.com/ARQ09209881.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/355067/","zbetcheckin"
+"355067","2020-04-30 22:41:05","https://bucketstrong.s3-us-west-1.amazonaws.com/ARQ09209881.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/355067/","zbetcheckin"
 "355066","2020-04-30 22:03:12","http://bovientix.com/Order883745.doc","online","malware_download","None","https://urlhaus.abuse.ch/url/355066/","JayTHL"
 "355065","2020-04-30 22:03:04","http://bovientix.com/order/face.mask.order.doc","online","malware_download","None","https://urlhaus.abuse.ch/url/355065/","JayTHL"
 "355064","2020-04-30 21:25:06","https://pastebin.com/raw/m1rVHyhk","offline","malware_download","None","https://urlhaus.abuse.ch/url/355064/","JayTHL"
@@ -905,7 +1283,7 @@
 "355045","2020-04-30 20:21:04","http://167.250.49.155/bin/billi_4fa79931167d46f7ad70b0e5daf22b23.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/355045/","zbetcheckin"
 "355044","2020-04-30 20:20:06","http://167.250.49.155/bin/billi_4fa79931167d46f7ad70b0e5daf22b23.exe.dom_1.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/355044/","zbetcheckin"
 "355043","2020-04-30 20:20:04","http://167.250.49.155/bin/billi_4fa79931167d46f7ad70b0e5daf22b23.exe.dom_2.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/355043/","zbetcheckin"
-"355042","2020-04-30 20:17:03","http://billieellish.org/scandale/Adobe,%20Acrobat%20PDF%20Writer%203.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/355042/","zbetcheckin"
+"355042","2020-04-30 20:17:03","http://billieellish.org/scandale/Adobe,%20Acrobat%20PDF%20Writer%203.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/355042/","zbetcheckin"
 "355041","2020-04-30 19:59:10","http://yolks.bestsellertwo.net/order/Purchase%20Sheet%202020.GZ","online","malware_download","None","https://urlhaus.abuse.ch/url/355041/","JayTHL"
 "355040","2020-04-30 19:59:06","http://yolks.bestsellertwo.net/Purchase%20Order.PDF.GZ","online","malware_download","None","https://urlhaus.abuse.ch/url/355040/","JayTHL"
 "355039","2020-04-30 19:56:04","https://srv-file9.gofile.io/download/Zw9Mex/OMS_FINANCIAL.SUPPORT.MEASURESpdf.vbs","offline","malware_download","md5:949c27be17c3828e6f4109056980fad3","https://urlhaus.abuse.ch/url/355039/","c_APT_ure"
@@ -923,23 +1301,23 @@
 "355027","2020-04-30 18:16:05","http://37.49.226.209/bins/hoho.m68k","online","malware_download","elf","https://urlhaus.abuse.ch/url/355027/","zbetcheckin"
 "355026","2020-04-30 18:16:03","http://37.49.226.209/bins/hoho.sh4","online","malware_download","elf","https://urlhaus.abuse.ch/url/355026/","zbetcheckin"
 "355025","2020-04-30 18:11:03","http://37.49.226.209/bins/hoho.arm7","online","malware_download","elf","https://urlhaus.abuse.ch/url/355025/","zbetcheckin"
-"355024","2020-04-30 18:09:53","https://www.canaan.io/wp-content/uploads/2020/04/ktndx/ServiceContractAgreement_1948677_04292020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355024/","spamhaus"
+"355024","2020-04-30 18:09:53","https://www.canaan.io/wp-content/uploads/2020/04/ktndx/ServiceContractAgreement_1948677_04292020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355024/","spamhaus"
 "355023","2020-04-30 18:09:45","https://data4i.com/azkcswshvv/88295925/ServiceContractAgreement_88295925_04292020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355023/","spamhaus"
-"355022","2020-04-30 18:09:41","https://vibicloud.com/wp-content/uploads/2020/04/bluoljyrzh/ServiceContractAgreement_517631_04292020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355022/","spamhaus"
+"355022","2020-04-30 18:09:41","https://vibicloud.com/wp-content/uploads/2020/04/bluoljyrzh/ServiceContractAgreement_517631_04292020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355022/","spamhaus"
 "355021","2020-04-30 18:09:32","http://khoztrip.ir/wp-content/uploads/2020/04/dyvopqaibo/ServiceContractAgreement_30519863_04292020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355021/","spamhaus"
 "355020","2020-04-30 18:09:27","http://adnquocte.com/jttlp/749518052/ServiceContractAgreement_749518052_04292020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355020/","spamhaus"
 "355019","2020-04-30 18:09:23","http://davidd47.sg-host.com/jqpfuszuh/ServiceContractAgreement_702732_04292020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355019/","spamhaus"
 "355018","2020-04-30 18:09:10","https://jhorapatarastana.xyz/ptpkvgi/224605/ServiceContractAgreement_224605_04292020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355018/","spamhaus"
-"355017","2020-04-30 18:09:07","http://adnquocte.com/jttlp/6169995/ServiceContractAgreement_6169995_04292020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355017/","spamhaus"
+"355017","2020-04-30 18:09:07","http://adnquocte.com/jttlp/6169995/ServiceContractAgreement_6169995_04292020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355017/","spamhaus"
 "355016","2020-04-30 18:08:32","http://167.250.49.155/scandale/5a765351046fea1490d20f25.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/355016/","zbetcheckin"
 "355015","2020-04-30 18:08:29","http://167.250.49.155/scandale/file_4571518150a8181b403df4ae7ad54ce8b16ded0c.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/355015/","zbetcheckin"
-"355014","2020-04-30 18:08:25","https://billieellish.org/scandale/agent.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/355014/","zbetcheckin"
+"355014","2020-04-30 18:08:25","https://billieellish.org/scandale/agent.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/355014/","zbetcheckin"
 "355013","2020-04-30 18:08:21","https://z.loyaltyaboveall.com/kvjkqh/ServiceContractAgreement_6979144_04292020.zip","offline","malware_download","None","https://urlhaus.abuse.ch/url/355013/","DrMattChristian"
 "355012","2020-04-30 18:08:18","http://84.10.31.238:59097/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/355012/","geenensp"
 "355011","2020-04-30 18:08:14","https://xn--d1aciabhfsdfe0a7e3b.xn--p1acf/wp-content/uploads/2020/04/vrydko/ServiceContractAgreement_192714748_04292020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355011/","spamhaus"
 "355010","2020-04-30 18:08:11","https://www.dotpay.id/wp-content/uploads/2020/04/ckfsevy/826489/ServiceContractAgreement_826489_04292020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355010/","spamhaus"
 "355009","2020-04-30 18:08:06","https://xn--d1aciabhfsdfe0a7e3b.xn--p1acf/wp-content/uploads/2020/04/vrydko/2634171/ServiceContractAgreement_2634171_04292020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355009/","spamhaus"
-"355008","2020-04-30 18:07:29","http://27.41.213.143:37182/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355008/","Gandylyan1"
+"355008","2020-04-30 18:07:29","http://27.41.213.143:37182/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355008/","Gandylyan1"
 "355007","2020-04-30 18:07:24","http://27.41.138.104:32995/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355007/","Gandylyan1"
 "355006","2020-04-30 18:07:21","http://172.36.49.78:44996/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355006/","Gandylyan1"
 "355005","2020-04-30 18:06:49","http://111.42.103.107:51147/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355005/","Gandylyan1"
@@ -953,7 +1331,7 @@
 "354997","2020-04-30 18:04:20","http://162.212.114.196:52274/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354997/","Gandylyan1"
 "354996","2020-04-30 18:04:16","http://182.126.183.195:47058/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354996/","Gandylyan1"
 "354995","2020-04-30 18:04:11","http://36.35.161.186:35150/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354995/","Gandylyan1"
-"354994","2020-04-30 18:04:05","http://123.10.101.22:48350/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354994/","Gandylyan1"
+"354994","2020-04-30 18:04:05","http://123.10.101.22:48350/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354994/","Gandylyan1"
 "354993","2020-04-30 18:03:04","http://usapglobal.usapglobal.org/smile/smileeeecry.exe","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/354993/","zbetcheckin"
 "354992","2020-04-30 17:56:06","http://37.49.226.209/bins/hoho.mips","online","malware_download","elf","https://urlhaus.abuse.ch/url/354992/","zbetcheckin"
 "354991","2020-04-30 17:56:04","http://167.250.49.155/scandale/PDFXCview.exe","online","malware_download","exe,kovter","https://urlhaus.abuse.ch/url/354991/","zbetcheckin"
@@ -1006,18 +1384,18 @@
 "354943","2020-04-30 15:07:36","http://45.95.168.247/sensi.sh","offline","malware_download","shellscript","https://urlhaus.abuse.ch/url/354943/","zbetcheckin"
 "354942","2020-04-30 15:07:34","https://pastebin.com/raw/0GDV0vg2","offline","malware_download","None","https://urlhaus.abuse.ch/url/354942/","JayTHL"
 "354941","2020-04-30 15:07:32","http://221.210.211.30:45426/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354941/","Gandylyan1"
-"354940","2020-04-30 15:07:28","http://180.116.47.28:40003/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354940/","Gandylyan1"
+"354940","2020-04-30 15:07:28","http://180.116.47.28:40003/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354940/","Gandylyan1"
 "354939","2020-04-30 15:06:54","http://49.82.196.117:42695/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354939/","Gandylyan1"
 "354938","2020-04-30 15:06:23","http://172.36.45.41:45155/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354938/","Gandylyan1"
 "354937","2020-04-30 15:05:51","http://182.222.195.192:3884/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354937/","Gandylyan1"
 "354936","2020-04-30 15:05:45","http://125.44.241.64:55036/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354936/","Gandylyan1"
-"354935","2020-04-30 15:05:38","http://119.102.153.184:45923/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354935/","Gandylyan1"
+"354935","2020-04-30 15:05:38","http://119.102.153.184:45923/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354935/","Gandylyan1"
 "354934","2020-04-30 15:05:28","http://110.154.15.122:58741/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354934/","Gandylyan1"
 "354933","2020-04-30 15:04:39","http://182.127.64.253:54695/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354933/","Gandylyan1"
-"354932","2020-04-30 15:04:32","http://182.113.220.114:42221/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354932/","Gandylyan1"
+"354932","2020-04-30 15:04:32","http://182.113.220.114:42221/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354932/","Gandylyan1"
 "354931","2020-04-30 15:04:28","http://121.233.116.232:44223/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354931/","Gandylyan1"
 "354930","2020-04-30 15:04:22","http://221.14.237.63:48812/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354930/","Gandylyan1"
-"354929","2020-04-30 15:04:13","http://116.114.95.89:44423/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354929/","Gandylyan1"
+"354929","2020-04-30 15:04:13","http://116.114.95.89:44423/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354929/","Gandylyan1"
 "354928","2020-04-30 15:04:10","http://125.125.44.18:54549/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354928/","Gandylyan1"
 "354927","2020-04-30 15:04:04","http://222.138.133.206:49382/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354927/","Gandylyan1"
 "354926","2020-04-30 15:01:39","http://morruko.antesos.com/fqtylehpb/4690/Buy-Sell_Agreement_4690_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354926/","spamhaus"
@@ -1031,24 +1409,24 @@
 "354918","2020-04-30 14:55:16","https://sirajaoloan.com/wp-content/plugins/ubh/PaymentSwiftPDF.exe","offline","malware_download","exe,NanoCore","https://urlhaus.abuse.ch/url/354918/","jstrosch"
 "354917","2020-04-30 14:54:38","https://rrinteriores.neoistone.site/wp-content/uploads/2020/04/exskkcowpfp/49913/ServiceContractAgreement_49913_04292020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354917/","spamhaus"
 "354916","2020-04-30 14:39:03","https://pastebin.com/raw/nzULABGd","offline","malware_download","None","https://urlhaus.abuse.ch/url/354916/","JayTHL"
-"354915","2020-04-30 14:32:04","http://jessymart.flexyhub.com/ssuzzix/9952/Buy-Sell_Agreement_9952_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354915/","spamhaus"
+"354915","2020-04-30 14:32:04","http://jessymart.flexyhub.com/ssuzzix/9952/Buy-Sell_Agreement_9952_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354915/","spamhaus"
 "354914","2020-04-30 14:23:15","https://bluecollarfinancial.net/gfmixt/Buy-Sell_Agreement_429077_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354914/","spamhaus"
 "354913","2020-04-30 14:23:10","http://116.100.249.121:11296/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/354913/","geenensp"
 "354912","2020-04-30 14:12:12","http://setsd.xyz/sagawa4.2.3.apk","offline","malware_download","None","https://urlhaus.abuse.ch/url/354912/","JayTHL"
 "354911","2020-04-30 14:12:06","http://setss.xyz/sagawa6.8.7.apk","offline","malware_download","None","https://urlhaus.abuse.ch/url/354911/","JayTHL"
 "354910","2020-04-30 14:02:30","https://pastebin.com/raw/hzxuFBgf","offline","malware_download","None","https://urlhaus.abuse.ch/url/354910/","JayTHL"
 "354909","2020-04-30 13:53:03","http://koravit.zaeteaw.net/okmqhrfdsvj/Buy-Sell_Agreement_0423623_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354909/","spamhaus"
-"354908","2020-04-30 13:42:13","http://rockersdolphin.co.za/dj/dj.exe","online","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/354908/","James_inthe_box"
+"354908","2020-04-30 13:42:13","http://rockersdolphin.co.za/dj/dj.exe","offline","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/354908/","James_inthe_box"
 "354907","2020-04-30 13:38:15","https://dr080.com/INV-004562.jar","online","malware_download","Adwind,jar","https://urlhaus.abuse.ch/url/354907/","spamhaus"
 "354906","2020-04-30 13:38:09","http://demo13.dsdemosite.com/alugzfn/Buy-Sell_Agreement_1165478_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354906/","spamhaus"
 "354905","2020-04-30 13:38:03","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/Buy-Sell_Agreement_2605470_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354905/","spamhaus"
-"354904","2020-04-30 13:26:11","http://ddl7.data.hu/get/320756/12414239/company_profile_as_requested_and_Purchase_Order_.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/354904/","spamhaus"
+"354904","2020-04-30 13:26:11","http://ddl7.data.hu/get/320756/12414239/company_profile_as_requested_and_Purchase_Order_.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/354904/","spamhaus"
 "354903","2020-04-30 13:15:08","http://evdekaldiye20-gb.com/kazan20gbturkiye.apk","offline","malware_download","apk ,Cerberus","https://urlhaus.abuse.ch/url/354903/","mertcangokgoz"
 "354902","2020-04-30 13:14:13","http://uygulamalarim-hediyeinternet.org/20gb_hediye_internet.apk","offline","malware_download","anubis,apk ","https://urlhaus.abuse.ch/url/354902/","mertcangokgoz"
 "354901","2020-04-30 13:14:09","http://178.62.204.84/Binarys/atomic.x86","offline","malware_download","32-bit,elf,x86-32","https://urlhaus.abuse.ch/url/354901/","geenensp"
 "354900","2020-04-30 13:14:04","http://www-ecimer-uygulamayukleme-govtr.com/cimer.apk","offline","malware_download","anubis,apk ","https://urlhaus.abuse.ch/url/354900/","mertcangokgoz"
 "354899","2020-04-30 12:48:51","http://ucretsiz20gbturkiye.com/kkazan20gb.apk","offline","malware_download","anubis,apk ","https://urlhaus.abuse.ch/url/354899/","mertcangokgoz"
-"354889","2020-04-30 12:48:06","http://122.243.173.3:60917/Mozi.m","online","malware_download","elf,gafgyt,Mozi","https://urlhaus.abuse.ch/url/354889/","07ac0n"
+"354889","2020-04-30 12:48:06","http://122.243.173.3:60917/Mozi.m","offline","malware_download","elf,gafgyt,Mozi","https://urlhaus.abuse.ch/url/354889/","07ac0n"
 "354886","2020-04-30 12:47:40","http://167.250.49.155/bin/billi_a0e85740669b439f8da813fa4c85cc02.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354886/","anonymous"
 "354885","2020-04-30 12:47:38","http://muhtessemramazan20gb.com/20gb_hediye_internet.apk","offline","malware_download","anubis,apk ","https://urlhaus.abuse.ch/url/354885/","mertcangokgoz"
 "354879","2020-04-30 12:47:01","http://185.112.146.165/bin/bg_8e18e1872cca4a21a79be2f996ef2e90.exe.dom_2.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354879/","anonymous"
@@ -1187,7 +1565,7 @@
 "354745","2020-04-30 12:18:08","https://gitlab.com/burov/tools/raw/master/bin/fp-sb-test.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354745/","zbetcheckin"
 "354744","2020-04-30 12:17:12","http://thesecuritysoftwarescannerindustrgreat.duckdns.org/badi/vbc.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/354744/","zbetcheckin"
 "354743","2020-04-30 12:17:09","http://tinckorm.beget.tech/testbuild.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/354743/","zbetcheckin"
-"354742","2020-04-30 12:17:05","http://baritaco.com/rem.exe","offline","malware_download","exe,RemcosRAT","https://urlhaus.abuse.ch/url/354742/","abuse_ch"
+"354742","2020-04-30 12:17:05","http://baritaco.com/rem.exe","online","malware_download","exe,RemcosRAT","https://urlhaus.abuse.ch/url/354742/","abuse_ch"
 "354741","2020-04-30 12:16:04","http://45.95.168.247/AB4g5/kiga.x86","offline","malware_download","32-bit,elf,x86-32","https://urlhaus.abuse.ch/url/354741/","geenensp"
 "354740","2020-04-30 12:13:10","http://185.112.146.165/meter/99.kiri.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354740/","zbetcheckin"
 "354739","2020-04-30 12:13:08","http://185.112.146.165/meter/waza.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354739/","zbetcheckin"
@@ -1203,17 +1581,17 @@
 "354729","2020-04-30 12:06:14","https://1podcast.xyz/ru53332/xh%20a1%20firmware%20update-RTMD-apk5g14obgaatbecaerffwamalkudh8a.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354729/","zbetcheckin"
 "354728","2020-04-30 12:06:06","http://185.112.146.165/meter/3.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354728/","zbetcheckin"
 "354727","2020-04-30 12:06:03","http://185.112.146.165/meter/wouuthch.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354727/","zbetcheckin"
-"354726","2020-04-30 12:05:19","http://115.49.246.62:36895/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354726/","Gandylyan1"
+"354726","2020-04-30 12:05:19","http://115.49.246.62:36895/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354726/","Gandylyan1"
 "354725","2020-04-30 12:05:15","http://42.115.12.180:35740/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354725/","Gandylyan1"
 "354724","2020-04-30 12:05:09","http://111.43.223.121:54267/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354724/","Gandylyan1"
 "354723","2020-04-30 12:05:02","http://222.142.196.145:36431/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354723/","Gandylyan1"
 "354722","2020-04-30 12:04:30","http://77.43.133.49:44840/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354722/","Gandylyan1"
 "354721","2020-04-30 12:03:58","http://49.81.134.147:35592/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354721/","Gandylyan1"
 "354720","2020-04-30 12:03:54","http://182.117.160.121:37741/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354720/","Gandylyan1"
-"354719","2020-04-30 12:03:49","http://125.47.248.28:60029/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354719/","Gandylyan1"
+"354719","2020-04-30 12:03:49","http://125.47.248.28:60029/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354719/","Gandylyan1"
 "354718","2020-04-30 12:03:43","http://219.155.62.175:46545/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354718/","Gandylyan1"
 "354717","2020-04-30 12:03:40","http://61.168.136.199:37608/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354717/","Gandylyan1"
-"354716","2020-04-30 12:03:35","http://116.114.95.108:59609/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354716/","Gandylyan1"
+"354716","2020-04-30 12:03:35","http://116.114.95.108:59609/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354716/","Gandylyan1"
 "354715","2020-04-30 12:03:31","http://112.17.166.50:35881/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354715/","Gandylyan1"
 "354714","2020-04-30 12:03:09","http://162.212.114.62:45575/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354714/","Gandylyan1"
 "354713","2020-04-30 12:03:04","http://125.44.215.179:45207/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354713/","Gandylyan1"
@@ -1242,7 +1620,7 @@
 "354690","2020-04-30 10:51:03","https://hediye-internet.site/Corona%20Takip.apk","offline","malware_download","None","https://urlhaus.abuse.ch/url/354690/","JAMESWT_MHT"
 "354689","2020-04-30 10:48:20","https://www.schoongezicht.org/wp-content/plugins/yikes-inc-easy-mailchimp-extender/public/SAMPLE.scan..exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/354689/","abuse_ch"
 "354688","2020-04-30 10:48:15","http://duongfpt.ga/lxgqgox/Buy-Sell_Agreement_9389_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354688/","spamhaus"
-"354687","2020-04-30 10:47:08","http://duongfpt.ga/lxgqgox/91390437/Buy-Sell_Agreement_91390437_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354687/","spamhaus"
+"354687","2020-04-30 10:47:08","http://duongfpt.ga/lxgqgox/91390437/Buy-Sell_Agreement_91390437_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354687/","spamhaus"
 "354686","2020-04-30 10:46:13","http://platisher.xyz/10.apk","offline","malware_download","None","https://urlhaus.abuse.ch/url/354686/","JAMESWT_MHT"
 "354685","2020-04-30 10:46:11","http://platisher.xyz/playservices.apk","online","malware_download","None","https://urlhaus.abuse.ch/url/354685/","JAMESWT_MHT"
 "354684","2020-04-30 10:45:28","https://gitlab.com/ordulkemal/ere/-/raw/master/yalan_obf.apk","offline","malware_download","None","https://urlhaus.abuse.ch/url/354684/","JAMESWT_MHT"
@@ -1268,7 +1646,7 @@
 "354664","2020-04-30 10:06:26","http://badmildiou.com/bin/bg_6b4131b99633431e8d2a09784711b1ac.exe.upx.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/354664/","anonymous"
 "354662","2020-04-30 10:06:16","http://185.172.110.221/mips","offline","malware_download","32-bit,elf,mips","https://urlhaus.abuse.ch/url/354662/","geenensp"
 "354661","2020-04-30 10:06:09","http://176.32.35.22/shoppinglistbins.sh","offline","malware_download","script","https://urlhaus.abuse.ch/url/354661/","geenensp"
-"354660","2020-04-30 10:06:06","http://oskarnews.gazashare.com/pelsq/4716189/Buy-Sell_Agreement_4716189_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354660/","spamhaus"
+"354660","2020-04-30 10:06:06","http://oskarnews.gazashare.com/pelsq/4716189/Buy-Sell_Agreement_4716189_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354660/","spamhaus"
 "354659","2020-04-30 09:47:11","http://1podcast.xyz/ru53332/-RTMD-.exe","offline","malware_download","glupteba","https://urlhaus.abuse.ch/url/354659/","vxvault"
 "354658","2020-04-30 09:43:03","https://pastebin.com/raw/cUZRd9HN","offline","malware_download","None","https://urlhaus.abuse.ch/url/354658/","JayTHL"
 "354657","2020-04-30 09:36:07","http://koravit.zaeteaw.net/okmqhrfdsvj/Buy-Sell_Agreement_208322_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354657/","spamhaus"
@@ -1277,7 +1655,7 @@
 "354654","2020-04-30 09:26:18","http://russchine2wsdyspecia20plumbingmaterialnb.duckdns.org/russdoc/regasm.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/354654/","gorimpthon"
 "354653","2020-04-30 09:26:16","http://alexandredekerchove.com/ylwhbcphyy/Buy-Sell_Agreement_6970_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354653/","spamhaus"
 "354652","2020-04-30 09:26:13","http://koravit.zaeteaw.net/okmqhrfdsvj/Buy-Sell_Agreement_5690_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354652/","spamhaus"
-"354651","2020-04-30 09:26:11","https://aelogica.com/zznohyxa/Buy-Sell_Agreement_06229_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354651/","spamhaus"
+"354651","2020-04-30 09:26:11","https://aelogica.com/zznohyxa/Buy-Sell_Agreement_06229_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354651/","spamhaus"
 "354650","2020-04-30 09:26:05","http://187.250.220.89:45717/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/354650/","geenensp"
 "354649","2020-04-30 09:18:05","http://45.84.196.200/bins/Hilix.arm5","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/354649/","zbetcheckin"
 "354648","2020-04-30 09:18:03","http://45.84.196.200/bins/Hilix.arm","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/354648/","zbetcheckin"
@@ -1289,7 +1667,7 @@
 "354642","2020-04-30 09:08:05","http://45.84.196.200/bins/Hilix.mpsl","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/354642/","zbetcheckin"
 "354641","2020-04-30 09:08:03","http://45.84.196.200/bins/Hilix.arm7","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/354641/","zbetcheckin"
 "354640","2020-04-30 09:06:46","http://218.70.144.50:40190/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354640/","Gandylyan1"
-"354639","2020-04-30 09:06:37","http://117.87.72.41:58679/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354639/","Gandylyan1"
+"354639","2020-04-30 09:06:37","http://117.87.72.41:58679/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354639/","Gandylyan1"
 "354638","2020-04-30 09:06:32","http://199.83.204.132:38890/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354638/","Gandylyan1"
 "354637","2020-04-30 09:06:23","http://199.83.206.38:41493/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354637/","Gandylyan1"
 "354636","2020-04-30 09:06:17","http://111.43.223.194:57786/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354636/","Gandylyan1"
@@ -1298,14 +1676,14 @@
 "354633","2020-04-30 09:06:06","http://61.53.197.182:47965/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354633/","Gandylyan1"
 "354632","2020-04-30 09:06:01","http://111.42.103.78:37641/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354632/","Gandylyan1"
 "354631","2020-04-30 09:05:57","http://172.39.59.220:49336/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354631/","Gandylyan1"
-"354630","2020-04-30 09:05:25","http://211.137.225.126:58698/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354630/","Gandylyan1"
-"354629","2020-04-30 09:05:20","http://218.21.170.84:54113/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354629/","Gandylyan1"
+"354630","2020-04-30 09:05:25","http://211.137.225.126:58698/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354630/","Gandylyan1"
+"354629","2020-04-30 09:05:20","http://218.21.170.84:54113/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354629/","Gandylyan1"
 "354628","2020-04-30 09:05:14","http://159.255.187.120:51450/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354628/","Gandylyan1"
 "354627","2020-04-30 09:04:42","http://114.232.176.199:35577/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354627/","Gandylyan1"
 "354626","2020-04-30 09:04:35","http://115.53.102.161:45503/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354626/","Gandylyan1"
 "354625","2020-04-30 09:04:32","http://172.39.35.1:47243/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354625/","Gandylyan1"
 "354624","2020-04-30 09:03:22","http://drinkopolykopen.nl/wp-content/uploads/2020/04/nnpebk/Buy-Sell_Agreement_39481614_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354624/","spamhaus"
-"354623","2020-04-30 09:03:16","https://vip.recommendedtoyoo.com/bdhycmsxctp/1063760/Buy-Sell_Agreement_1063760_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354623/","spamhaus"
+"354623","2020-04-30 09:03:16","https://vip.recommendedtoyoo.com/bdhycmsxctp/1063760/Buy-Sell_Agreement_1063760_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354623/","spamhaus"
 "354622","2020-04-30 09:03:09","https://britica.vn/dqsfv/Buy-Sell_Agreement_77334_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354622/","spamhaus"
 "354621","2020-04-30 09:02:37","http://denunciesoftwareilegal.org.br/wp-content/plugins/apikey/bfgvnffqfo/Buy-Sell_Agreement_854345_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354621/","spamhaus"
 "354620","2020-04-30 09:02:29","https://cryptoomarket.com/fhws/0892174/Buy-Sell_Agreement_0892174_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354620/","spamhaus"
@@ -1320,17 +1698,17 @@
 "354611","2020-04-30 09:00:17","https://kamagra.in.rs/bqcbhf/865772/Buy-Sell_Agreement_865772_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354611/","spamhaus"
 "354610","2020-04-30 08:59:43","https://bluecollarfinancial.net/gfmixt/Buy-Sell_Agreement_3474002_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354610/","spamhaus"
 "354609","2020-04-30 08:59:08","http://dev.apshaps.se/sdub/2766780/Buy-Sell_Agreement_2766780_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354609/","spamhaus"
-"354608","2020-04-30 08:58:35","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/Buy-Sell_Agreement_41879921_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354608/","spamhaus"
+"354608","2020-04-30 08:58:35","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/Buy-Sell_Agreement_41879921_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354608/","spamhaus"
 "354607","2020-04-30 08:54:24","https://pastebin.com/raw/TFER19JK","offline","malware_download","None","https://urlhaus.abuse.ch/url/354607/","JayTHL"
 "354606","2020-04-30 08:54:18","https://pastebin.com/raw/fves4YW3","offline","malware_download","None","https://urlhaus.abuse.ch/url/354606/","JayTHL"
 "354605","2020-04-30 08:54:11","http://cloud-server-updater2.co.za/doc/buer.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/354605/","abuse_ch"
 "354604","2020-04-30 08:54:06","https://vip.recommendedtoyoo.com/bdhycmsxctp/515173/Buy-Sell_Agreement_515173_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354604/","spamhaus"
 "354603","2020-04-30 08:53:02","https://rangebroadcasting.com/vfbc/6613/Buy-Sell_Agreement_6613_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354603/","spamhaus"
-"354602","2020-04-30 08:52:57","https://aelogica.com/zznohyxa/Buy-Sell_Agreement_0991292_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354602/","spamhaus"
+"354602","2020-04-30 08:52:57","https://aelogica.com/zznohyxa/Buy-Sell_Agreement_0991292_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354602/","spamhaus"
 "354601","2020-04-30 08:52:50","http://morruko.antesos.com/fqtylehpb/Buy-Sell_Agreement_7410_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354601/","spamhaus"
 "354600","2020-04-30 08:52:47","https://www.francois-champion.com/lqkb/3923182/Buy-Sell_Agreement_3923182_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354600/","spamhaus"
 "354599","2020-04-30 08:52:43","http://drinkopolykopen.nl/wp-content/uploads/2020/04/nnpebk/7230934/Buy-Sell_Agreement_7230934_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354599/","spamhaus"
-"354598","2020-04-30 08:52:39","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/Buy-Sell_Agreement_65313434_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354598/","spamhaus"
+"354598","2020-04-30 08:52:39","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/Buy-Sell_Agreement_65313434_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354598/","spamhaus"
 "354597","2020-04-30 08:52:33","http://koravit.zaeteaw.net/okmqhrfdsvj/82347/Buy-Sell_Agreement_82347_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354597/","spamhaus"
 "354596","2020-04-30 08:52:31","https://rangebroadcasting.com/vfbc/7041182/Buy-Sell_Agreement_7041182_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354596/","spamhaus"
 "354595","2020-04-30 08:52:26","http://Muanha.xyz/cfewahhzze/Buy-Sell_Agreement_3947_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354595/","spamhaus"
@@ -1345,7 +1723,7 @@
 "354586","2020-04-30 08:36:26","http://cheriyilbuilders.com/ixwqumcq/1200859/Buy-Sell_Agreement_1200859_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354586/","spamhaus"
 "354585","2020-04-30 08:36:21","http://cheriyilbuilders.com/ixwqumcq/8638399/Buy-Sell_Agreement_8638399_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354585/","spamhaus"
 "354584","2020-04-30 08:36:19","http://cerradocredito.com.br/wp-content/uploads/2020/04/beazvgceu/Buy-Sell_Agreement_9562_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354584/","spamhaus"
-"354583","2020-04-30 08:36:12","http://staging.popclusive.asia/okppdsnq/314752/Buy-Sell_Agreement_314752_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354583/","spamhaus"
+"354583","2020-04-30 08:36:12","http://staging.popclusive.asia/okppdsnq/314752/Buy-Sell_Agreement_314752_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354583/","spamhaus"
 "354582","2020-04-30 08:36:07","http://alexandredekerchove.com/ylwhbcphyy/0870/Buy-Sell_Agreement_0870_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354582/","spamhaus"
 "354581","2020-04-30 08:36:05","http://duongfpt.ga/lxgqgox/74547418/Buy-Sell_Agreement_74547418_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354581/","spamhaus"
 "354580","2020-04-30 08:35:58","http://sunboom-gift.com/zwbaxf/892950/Buy-Sell_Agreement_892950_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354580/","spamhaus"
@@ -1358,7 +1736,7 @@
 "354573","2020-04-30 08:28:29","http://silverstargalaxy.com.silverstartv.website/cmea/9982/Buy-Sell_Agreement_9982_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354573/","spamhaus"
 "354572","2020-04-30 08:28:26","https://supportalaskausa.org/2_WDxDpF243.bin","offline","malware_download","encrypted,opendir","https://urlhaus.abuse.ch/url/354572/","abuse_ch"
 "354571","2020-04-30 08:28:23","https://supportalaskausa.org/spad.msi","offline","malware_download","msi,opendir","https://urlhaus.abuse.ch/url/354571/","abuse_ch"
-"354570","2020-04-30 08:28:18","https://vip.recommendedtoyoo.com/bdhycmsxctp/6643/Buy-Sell_Agreement_6643_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354570/","spamhaus"
+"354570","2020-04-30 08:28:18","https://vip.recommendedtoyoo.com/bdhycmsxctp/6643/Buy-Sell_Agreement_6643_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354570/","spamhaus"
 "354569","2020-04-30 08:28:13","https://vip.recommendedtoyoo.com/bdhycmsxctp/Buy-Sell_Agreement_404343_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354569/","spamhaus"
 "354568","2020-04-30 08:28:09","https://rangebroadcasting.com/vfbc/Buy-Sell_Agreement_421253_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354568/","spamhaus"
 "354567","2020-04-30 08:28:04","http://113.116.176.162:7555/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/354567/","geenensp"
@@ -1369,24 +1747,24 @@
 "354562","2020-04-30 08:27:10","https://bluecollarfinancial.net/gfmixt/676447/Buy-Sell_Agreement_676447_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354562/","spamhaus"
 "354561","2020-04-30 08:26:59","http://xn--20gb-tanmla-kullan-l0c.com/20gb_tanimlama.apk","offline","malware_download","anubis,apk ","https://urlhaus.abuse.ch/url/354561/","mertcangokgoz"
 "354560","2020-04-30 08:26:53","http://oralloy.com/xyqkbu/Buy-Sell_Agreement_71800141_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354560/","spamhaus"
-"354559","2020-04-30 08:26:48","http://kazanin20gbturkiye.com/20gb_hediye_internet.apk","online","malware_download","anubis,apk ","https://urlhaus.abuse.ch/url/354559/","mertcangokgoz"
+"354559","2020-04-30 08:26:48","http://kazanin20gbturkiye.com/20gb_hediye_internet.apk","offline","malware_download","anubis,apk ","https://urlhaus.abuse.ch/url/354559/","mertcangokgoz"
 "354558","2020-04-30 08:26:37","http://sunboom-gift.com/zwbaxf/Buy-Sell_Agreement_0465995_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354558/","spamhaus"
 "354557","2020-04-30 08:26:33","http://alexandredekerchove.com/ylwhbcphyy/Buy-Sell_Agreement_9048_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354557/","spamhaus"
 "354556","2020-04-30 08:26:30","http://181.164.69.233:25780/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/354556/","geenensp"
 "354555","2020-04-30 08:26:24","http://morruko.antesos.com/fqtylehpb/Buy-Sell_Agreement_7730_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354555/","spamhaus"
 "354554","2020-04-30 08:26:22","http://koravit.zaeteaw.net/okmqhrfdsvj/Buy-Sell_Agreement_14617310_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354554/","spamhaus"
-"354553","2020-04-30 08:26:19","https://cryptoomarket.com/fhws/Buy-Sell_Agreement_92112_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354553/","spamhaus"
+"354553","2020-04-30 08:26:19","https://cryptoomarket.com/fhws/Buy-Sell_Agreement_92112_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354553/","spamhaus"
 "354552","2020-04-30 08:26:13","http://bolescy.com/otue/0297/Buy-Sell_Agreement_0297_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354552/","spamhaus"
 "354551","2020-04-30 08:26:10","http://Muanha.xyz/cfewahhzze/Buy-Sell_Agreement_5400_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354551/","spamhaus"
 "354550","2020-04-30 08:26:07","http://drinkopolykopen.nl/wp-content/uploads/2020/04/nnpebk/72985/Buy-Sell_Agreement_72985_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354550/","spamhaus"
 "354549","2020-04-30 08:25:35","http://ade.topepics.com/pkthdrgdb/Buy-Sell_Agreement_17553402_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354549/","spamhaus"
-"354548","2020-04-30 08:25:31","http://jessymart.flexyhub.com/ssuzzix/Buy-Sell_Agreement_3869557_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354548/","spamhaus"
+"354548","2020-04-30 08:25:31","http://jessymart.flexyhub.com/ssuzzix/Buy-Sell_Agreement_3869557_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354548/","spamhaus"
 "354547","2020-04-30 08:25:26","https://cryptoomarket.com/fhws/8830/Buy-Sell_Agreement_8830_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354547/","spamhaus"
-"354546","2020-04-30 08:25:19","https://cryptoomarket.com/fhws/74651/Buy-Sell_Agreement_74651_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354546/","spamhaus"
-"354545","2020-04-30 08:25:16","http://jessymart.flexyhub.com/ssuzzix/Buy-Sell_Agreement_3544_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354545/","spamhaus"
+"354546","2020-04-30 08:25:19","https://cryptoomarket.com/fhws/74651/Buy-Sell_Agreement_74651_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354546/","spamhaus"
+"354545","2020-04-30 08:25:16","http://jessymart.flexyhub.com/ssuzzix/Buy-Sell_Agreement_3544_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354545/","spamhaus"
 "354544","2020-04-30 08:19:07","http://fundbook.xyz/ru53332/ak3sol4cnqaa7xocafjvfwamamv02caa/fl+studio+20.6.2.1549+crack.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354544/","zbetcheckin"
 "354543","2020-04-30 08:19:05","http://fundbook.xyz/ru53332/AB2ak17nlgAAvhwCAERFFwAmAPMfGScA/Spectrasonics%20Omnisphere%202.6%20Cracked%20[Fixed].exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354543/","zbetcheckin"
-"354542","2020-04-30 08:17:12","http://allpetsandpaws.com/sport/rockstar.php","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354542/","abuse_ch"
+"354542","2020-04-30 08:17:12","http://allpetsandpaws.com/sport/rockstar.php","offline","malware_download","exe,IcedID","https://urlhaus.abuse.ch/url/354542/","abuse_ch"
 "354541","2020-04-30 08:04:03","http://fundbook.xyz/ru53332/AG9Jpl70lQAAvhwCAERFFwASAKjxU88A/multik.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354541/","zbetcheckin"
 "354540","2020-04-30 07:39:03","https://pastebin.com/raw/SRuPYCQZ","offline","malware_download","None","https://urlhaus.abuse.ch/url/354540/","JayTHL"
 "354539","2020-04-30 07:35:03","http://45.89.230.141/Pipe/i586","offline","malware_download","elf","https://urlhaus.abuse.ch/url/354539/","zbetcheckin"
@@ -1408,31 +1786,31 @@
 "354523","2020-04-30 07:19:24","https://kamagra.in.rs/bqcbhf/428972/Buy-Sell_Agreement_428972_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354523/","spamhaus"
 "354522","2020-04-30 07:19:15","http://koravit.zaeteaw.net/okmqhrfdsvj/Buy-Sell_Agreement_9160_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354522/","spamhaus"
 "354521","2020-04-30 07:19:13","http://189.252.214.199:46043/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/354521/","geenensp"
-"354520","2020-04-30 07:19:08","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/9864025/Buy-Sell_Agreement_9864025_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354520/","spamhaus"
+"354520","2020-04-30 07:19:08","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/9864025/Buy-Sell_Agreement_9864025_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354520/","spamhaus"
 "354519","2020-04-30 07:19:00","https://rangebroadcasting.com/vfbc/95996/Buy-Sell_Agreement_95996_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354519/","spamhaus"
 "354518","2020-04-30 07:18:55","http://oralloy.com/xyqkbu/Buy-Sell_Agreement_660534_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354518/","spamhaus"
 "354517","2020-04-30 07:18:51","https://cryptoomarket.com/fhws/710920/Buy-Sell_Agreement_710920_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354517/","spamhaus"
 "354516","2020-04-30 07:18:48","http://koravit.zaeteaw.net/okmqhrfdsvj/154744/Buy-Sell_Agreement_154744_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354516/","spamhaus"
-"354515","2020-04-30 07:18:46","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/6680/Buy-Sell_Agreement_6680_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354515/","spamhaus"
+"354515","2020-04-30 07:18:46","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/6680/Buy-Sell_Agreement_6680_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354515/","spamhaus"
 "354514","2020-04-30 07:18:40","http://bolescy.com/otue/1563143/Buy-Sell_Agreement_1563143_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354514/","spamhaus"
 "354513","2020-04-30 07:18:35","http://cerradocredito.com.br/wp-content/uploads/2020/04/beazvgceu/Buy-Sell_Agreement_58325_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354513/","spamhaus"
 "354512","2020-04-30 07:18:33","http://alexandredekerchove.com/ylwhbcphyy/0358/Buy-Sell_Agreement_0358_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354512/","spamhaus"
 "354511","2020-04-30 07:18:31","https://www.francois-champion.com/lqkb/Buy-Sell_Agreement_8444_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354511/","spamhaus"
 "354510","2020-04-30 07:18:29","https://cryptoomarket.com/fhws/Buy-Sell_Agreement_119635_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354510/","spamhaus"
 "354509","2020-04-30 07:18:25","http://ade.topepics.com/pkthdrgdb/5287/Buy-Sell_Agreement_5287_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354509/","spamhaus"
-"354508","2020-04-30 07:18:16","http://demo13.dsdemosite.com/alugzfn/3042/Buy-Sell_Agreement_3042_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354508/","spamhaus"
+"354508","2020-04-30 07:18:16","http://demo13.dsdemosite.com/alugzfn/3042/Buy-Sell_Agreement_3042_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354508/","spamhaus"
 "354507","2020-04-30 07:18:11","http://koravit.zaeteaw.net/okmqhrfdsvj/92052482/Buy-Sell_Agreement_92052482_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354507/","spamhaus"
 "354506","2020-04-30 07:18:09","http://Muanha.xyz/cfewahhzze/Buy-Sell_Agreement_4069_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354506/","spamhaus"
 "354505","2020-04-30 07:18:06","http://cerradocredito.com.br/wp-content/uploads/2020/04/beazvgceu/Buy-Sell_Agreement_2816_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354505/","spamhaus"
 "354504","2020-04-30 07:14:03","https://pastebin.com/raw/PMtXMCXc","offline","malware_download","None","https://urlhaus.abuse.ch/url/354504/","JayTHL"
 "354503","2020-04-30 06:53:10","http://cheriyilbuilders.com/ixwqumcq/Buy-Sell_Agreement_2041_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354503/","spamhaus"
-"354502","2020-04-30 06:53:08","https://aelogica.com/zznohyxa/2412243/Buy-Sell_Agreement_2412243_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354502/","spamhaus"
+"354502","2020-04-30 06:53:08","https://aelogica.com/zznohyxa/2412243/Buy-Sell_Agreement_2412243_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354502/","spamhaus"
 "354501","2020-04-30 06:53:01","http://bolescy.com/otue/84224564/Buy-Sell_Agreement_84224564_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354501/","spamhaus"
 "354500","2020-04-30 06:52:59","http://oralloy.com/xyqkbu/Buy-Sell_Agreement_30899059_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354500/","spamhaus"
 "354499","2020-04-30 06:52:55","https://www.francois-champion.com/lqkb/Buy-Sell_Agreement_3670858_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354499/","spamhaus"
 "354498","2020-04-30 06:52:53","http://alexandredekerchove.com/ylwhbcphyy/Buy-Sell_Agreement_191491_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354498/","spamhaus"
 "354497","2020-04-30 06:52:51","http://drinkopolykopen.nl/wp-content/uploads/2020/04/nnpebk/999774/Buy-Sell_Agreement_999774_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354497/","spamhaus"
-"354496","2020-04-30 06:52:17","https://cryptoomarket.com/fhws/78798619/Buy-Sell_Agreement_78798619_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354496/","spamhaus"
+"354496","2020-04-30 06:52:17","https://cryptoomarket.com/fhws/78798619/Buy-Sell_Agreement_78798619_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354496/","spamhaus"
 "354495","2020-04-30 06:52:12","http://oralloy.com/xyqkbu/51265010/Buy-Sell_Agreement_51265010_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354495/","spamhaus"
 "354494","2020-04-30 06:52:08","http://bolescy.com/otue/Buy-Sell_Agreement_6965292_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354494/","spamhaus"
 "354493","2020-04-30 06:52:05","http://45.84.196.200/bins/Hilix.mips","offline","malware_download","32-bit,elf,mips","https://urlhaus.abuse.ch/url/354493/","geenensp"
@@ -1447,7 +1825,7 @@
 "354484","2020-04-30 06:34:16","http://chnes17wsdywealthandmoduleorganisationui.duckdns.org/secure/svchost.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/354484/","gorimpthon"
 "354483","2020-04-30 06:34:13","http://45.89.230.141/Pipe/mips","offline","malware_download","32-bit,elf,mips","https://urlhaus.abuse.ch/url/354483/","geenensp"
 "354482","2020-04-30 06:34:11","http://45.89.230.141/Pipe/EkSgbins.sh","offline","malware_download","script","https://urlhaus.abuse.ch/url/354482/","geenensp"
-"354481","2020-04-30 06:34:08","https://vip.recommendedtoyoo.com/bdhycmsxctp/Buy-Sell_Agreement_033755_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354481/","spamhaus"
+"354481","2020-04-30 06:34:08","https://vip.recommendedtoyoo.com/bdhycmsxctp/Buy-Sell_Agreement_033755_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354481/","spamhaus"
 "354480","2020-04-30 06:34:04","https://cdn.discordapp.com/attachments/687683954882641920/704665307087896576/COVID-19.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/354480/","spamhaus"
 "354479","2020-04-30 06:33:31","http://thesecuritysoftwarescannerindustrgreat.duckdns.org/lvc/vbc.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/354479/","gorimpthon"
 "354478","2020-04-30 06:33:26","http://thesecuritysoftwarescannerindustrgreat.duckdns.org/lvc/mn.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/354478/","gorimpthon"
@@ -1474,12 +1852,12 @@
 "354457","2020-04-30 06:14:03","https://pastebin.com/raw/3uWfxV2w","offline","malware_download","None","https://urlhaus.abuse.ch/url/354457/","JayTHL"
 "354456","2020-04-30 06:13:53","http://morruko.antesos.com/fqtylehpb/4887191/Buy-Sell_Agreement_4887191_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354456/","spamhaus"
 "354455","2020-04-30 06:13:49","http://jaservicioscontables.casteviajes.com/xekqbxkehlx/Buy-Sell_Agreement_162998_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354455/","spamhaus"
-"354454","2020-04-30 06:13:44","http://duongfpt.ga/lxgqgox/93282146/Buy-Sell_Agreement_93282146_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354454/","spamhaus"
+"354454","2020-04-30 06:13:44","http://duongfpt.ga/lxgqgox/93282146/Buy-Sell_Agreement_93282146_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354454/","spamhaus"
 "354453","2020-04-30 06:13:41","https://rangebroadcasting.com/vfbc/Buy-Sell_Agreement_0679634_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354453/","spamhaus"
 "354452","2020-04-30 06:13:34","http://virustreatments.empeeevents.com/eyyudu/Buy-Sell_Agreement_3812_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354452/","spamhaus"
 "354451","2020-04-30 06:13:27","http://oralloy.com/xyqkbu/Buy-Sell_Agreement_3496851_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354451/","spamhaus"
 "354450","2020-04-30 06:13:24","http://dev.apshaps.se/sdub/954656/Buy-Sell_Agreement_954656_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354450/","spamhaus"
-"354449","2020-04-30 06:13:19","http://duongfpt.ga/lxgqgox/2278274/Buy-Sell_Agreement_2278274_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354449/","spamhaus"
+"354449","2020-04-30 06:13:19","http://duongfpt.ga/lxgqgox/2278274/Buy-Sell_Agreement_2278274_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354449/","spamhaus"
 "354448","2020-04-30 06:13:04","https://www.francois-champion.com/lqkb/59420/Buy-Sell_Agreement_59420_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354448/","spamhaus"
 "354447","2020-04-30 06:13:00","http://britica.vn/dqsfv/3334209/Buy-Sell_Agreement_3334209_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354447/","spamhaus"
 "354446","2020-04-30 06:12:57","https://rangebroadcasting.com/vfbc/Buy-Sell_Agreement_4224_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354446/","spamhaus"
@@ -1492,7 +1870,7 @@
 "354439","2020-04-30 06:12:10","http://61.75.111.224:46181/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/354439/","geenensp"
 "354438","2020-04-30 06:12:05","http://81.249.64.61:47159/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/354438/","geenensp"
 "354437","2020-04-30 06:12:01","http://bolescy.com/otue/10261/Buy-Sell_Agreement_10261_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354437/","spamhaus"
-"354436","2020-04-30 06:11:49","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/Buy-Sell_Agreement_3466_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354436/","spamhaus"
+"354436","2020-04-30 06:11:49","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/Buy-Sell_Agreement_3466_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354436/","spamhaus"
 "354435","2020-04-30 06:11:44","https://www.francois-champion.com/lqkb/776618/Buy-Sell_Agreement_776618_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354435/","spamhaus"
 "354434","2020-04-30 06:11:38","http://drinkopolykopen.nl/wp-content/uploads/2020/04/nnpebk/54192/Buy-Sell_Agreement_54192_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354434/","spamhaus"
 "354433","2020-04-30 06:11:35","http://virustreatments.empeeevents.com/eyyudu/5220/Buy-Sell_Agreement_5220_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354433/","spamhaus"
@@ -1500,7 +1878,7 @@
 "354431","2020-04-30 06:11:26","http://morruko.antesos.com/fqtylehpb/Buy-Sell_Agreement_4479_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354431/","spamhaus"
 "354430","2020-04-30 06:11:24","http://jaservicioscontables.casteviajes.com/xekqbxkehlx/4164189/Buy-Sell_Agreement_4164189_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354430/","spamhaus"
 "354429","2020-04-30 06:11:09","http://oralloy.com/xyqkbu/Buy-Sell_Agreement_3795_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354429/","spamhaus"
-"354428","2020-04-30 06:11:05","http://staging.popclusive.asia/okppdsnq/Buy-Sell_Agreement_66313_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354428/","spamhaus"
+"354428","2020-04-30 06:11:05","http://staging.popclusive.asia/okppdsnq/Buy-Sell_Agreement_66313_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354428/","spamhaus"
 "354427","2020-04-30 06:10:15","http://drinkopolykopen.nl/wp-content/uploads/2020/04/nnpebk/4496/Buy-Sell_Agreement_4496_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354427/","spamhaus"
 "354426","2020-04-30 06:10:13","http://evdekal-kampanyasi20gbhediye.com/EvdeKal-20gbhediye.apk","offline","malware_download","apk ,Cerberus","https://urlhaus.abuse.ch/url/354426/","mertcangokgoz"
 "354425","2020-04-30 06:10:02","http://virustreatments.empeeevents.com/eyyudu/Buy-Sell_Agreement_82412_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354425/","spamhaus"
@@ -1519,7 +1897,7 @@
 "354412","2020-04-30 06:05:38","http://172.36.55.78:44524/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354412/","Gandylyan1"
 "354411","2020-04-30 06:05:06","http://172.45.20.164:50497/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354411/","Gandylyan1"
 "354410","2020-04-30 06:04:34","http://182.114.212.28:55150/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354410/","Gandylyan1"
-"354409","2020-04-30 06:04:31","http://123.9.37.45:34275/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354409/","Gandylyan1"
+"354409","2020-04-30 06:04:31","http://123.9.37.45:34275/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354409/","Gandylyan1"
 "354408","2020-04-30 06:04:24","http://112.17.66.38:54929/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354408/","Gandylyan1"
 "354407","2020-04-30 06:04:20","http://89.148.255.10:45345/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354407/","Gandylyan1"
 "354406","2020-04-30 06:04:10","http://111.42.103.77:49997/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354406/","Gandylyan1"
@@ -1608,7 +1986,7 @@
 "354323","2020-04-30 00:03:37","http://113.221.145.204:35210/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354323/","Gandylyan1"
 "354322","2020-04-30 00:03:30","http://42.227.202.209:45436/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354322/","Gandylyan1"
 "354321","2020-04-30 00:03:27","http://111.43.223.17:59334/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354321/","Gandylyan1"
-"354320","2020-04-30 00:03:23","http://116.114.95.50:44946/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354320/","Gandylyan1"
+"354320","2020-04-30 00:03:23","http://116.114.95.50:44946/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354320/","Gandylyan1"
 "354319","2020-04-30 00:03:18","http://219.155.169.47:54267/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354319/","Gandylyan1"
 "354318","2020-04-30 00:03:13","http://219.155.173.125:52940/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354318/","Gandylyan1"
 "354317","2020-04-30 00:03:10","https://pastebin.com/raw/Amm2ja7E","offline","malware_download","None","https://urlhaus.abuse.ch/url/354317/","JayTHL"
@@ -1638,7 +2016,7 @@
 "354293","2020-04-29 21:50:03","http://185.163.47.253/reaper/reap.arm","offline","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/354293/","Gandylyan1"
 "354292","2020-04-29 21:18:11","http://yc5.timeisletitgo.ru/847545066.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354292/","zbetcheckin"
 "354291","2020-04-29 21:18:08","http://t37b.iwakalong.ru/1858969909.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354291/","zbetcheckin"
-"354290","2020-04-29 21:18:05","https://1l04.timeisletitgo.ru/1646845324.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354290/","zbetcheckin"
+"354290","2020-04-29 21:18:05","https://1l04.timeisletitgo.ru/1646845324.exe","offline","malware_download","ArkeiStealer,exe","https://urlhaus.abuse.ch/url/354290/","zbetcheckin"
 "354289","2020-04-29 21:14:26","http://a.seeanu.ru/908451710_2020-04-17_17-11.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354289/","zbetcheckin"
 "354288","2020-04-29 21:14:25","https://h1.iwakalong.ru/853715521.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354288/","zbetcheckin"
 "354287","2020-04-29 21:14:21","https://2xmy.timeisletitgo.ru/1003557504.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354287/","zbetcheckin"
@@ -1691,7 +2069,7 @@
 "354240","2020-04-29 19:33:20","https://rangebroadcasting.com/vfbc/Buy-Sell_Agreement_4975254_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354240/","spamhaus"
 "354239","2020-04-29 19:33:15","https://kamagra.in.rs/bqcbhf/52891506/Buy-Sell_Agreement_52891506_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354239/","spamhaus"
 "354238","2020-04-29 19:33:04","http://cerradocredito.com.br/wp-content/uploads/2020/04/beazvgceu/277263/Buy-Sell_Agreement_277263_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354238/","spamhaus"
-"354237","2020-04-29 19:29:26","https://aelogica.com/zznohyxa/11288831/Buy-Sell_Agreement_11288831_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354237/","spamhaus"
+"354237","2020-04-29 19:29:26","https://aelogica.com/zznohyxa/11288831/Buy-Sell_Agreement_11288831_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354237/","spamhaus"
 "354236","2020-04-29 19:29:22","http://dev.apshaps.se/sdub/Buy-Sell_Agreement_182728_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354236/","spamhaus"
 "354235","2020-04-29 19:29:19","http://drinkopolykopen.nl/wp-content/uploads/2020/04/nnpebk/43126858/Buy-Sell_Agreement_43126858_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354235/","spamhaus"
 "354234","2020-04-29 19:29:17","http://200.233.206.164:29712/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/354234/","geenensp"
@@ -1719,7 +2097,7 @@
 "354212","2020-04-29 18:28:03","https://vip.recommendedtoyoo.com/bdhycmsxctp/2017982/Buy-Sell_Agreement_2017982_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354212/","spamhaus"
 "354211","2020-04-29 18:27:20","http://silverstargalaxy.com.silverstartv.website/cmea/59975/Buy-Sell_Agreement_59975_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354211/","spamhaus"
 "354210","2020-04-29 18:27:12","http://cerradocredito.com.br/wp-content/uploads/2020/04/beazvgceu/65281/Buy-Sell_Agreement_65281_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354210/","spamhaus"
-"354209","2020-04-29 18:27:09","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/2423/Buy-Sell_Agreement_2423_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354209/","spamhaus"
+"354209","2020-04-29 18:27:09","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/2423/Buy-Sell_Agreement_2423_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354209/","spamhaus"
 "354208","2020-04-29 18:27:05","http://morruko.antesos.com/fqtylehpb/5609732/Buy-Sell_Agreement_5609732_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354208/","spamhaus"
 "354207","2020-04-29 18:26:12","http://demo13.dsdemosite.com/alugzfn/Buy-Sell_Agreement_55778_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354207/","spamhaus"
 "354206","2020-04-29 18:26:07","http://dev.apshaps.se/sdub/Buy-Sell_Agreement_19540301_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354206/","spamhaus"
@@ -1751,10 +2129,10 @@
 "354180","2020-04-29 18:04:13","http://124.67.89.74:49591/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354180/","Gandylyan1"
 "354179","2020-04-29 18:04:12","http://211.137.225.77:59159/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354179/","Gandylyan1"
 "354178","2020-04-29 18:04:04","http://115.61.2.125:45051/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354178/","Gandylyan1"
-"354177","2020-04-29 18:01:39","http://staging.popclusive.asia/okppdsnq/Buy-Sell_Agreement_5038_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354177/","spamhaus"
+"354177","2020-04-29 18:01:39","http://staging.popclusive.asia/okppdsnq/Buy-Sell_Agreement_5038_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354177/","spamhaus"
 "354176","2020-04-29 18:01:35","http://oskarnews.gazashare.com/pelsq/Buy-Sell_Agreement_25166746_04282020.zip","online","malware_download","geofenced,zip","https://urlhaus.abuse.ch/url/354176/","anonymous"
-"354175","2020-04-29 18:01:32","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/Buy-Sell_Agreement_86169_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354175/","spamhaus"
-"354174","2020-04-29 17:53:50","http://oskarnews.gazashare.com/pelsq/3939567/Buy-Sell_Agreement_3939567_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354174/","spamhaus"
+"354175","2020-04-29 18:01:32","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/Buy-Sell_Agreement_86169_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354175/","spamhaus"
+"354174","2020-04-29 17:53:50","http://oskarnews.gazashare.com/pelsq/3939567/Buy-Sell_Agreement_3939567_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354174/","spamhaus"
 "354173","2020-04-29 17:53:15","http://jaservicioscontables.casteviajes.com/xekqbxkehlx/5699246/Buy-Sell_Agreement_5699246_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354173/","spamhaus"
 "354172","2020-04-29 17:52:40","https://kamagra.in.rs/bqcbhf/6078657/Buy-Sell_Agreement_6078657_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354172/","spamhaus"
 "354171","2020-04-29 17:52:05","https://www.francois-champion.com/lqkb/Buy-Sell_Agreement_04275750_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354171/","spamhaus"
@@ -1769,26 +2147,26 @@
 "354162","2020-04-29 17:38:40","http://www.cheriyilbuilders.com/herevryxugc/385904/Buy-Sell_Agreement_385904_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354162/","spamhaus"
 "354161","2020-04-29 17:38:37","https://rangebroadcasting.com/vfbc/810366/Buy-Sell_Agreement_810366_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354161/","spamhaus"
 "354160","2020-04-29 17:38:33","https://kamagra.in.rs/bqcbhf/Buy-Sell_Agreement_4147_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354160/","spamhaus"
-"354159","2020-04-29 17:38:22","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/Buy-Sell_Agreement_49553_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354159/","spamhaus"
+"354159","2020-04-29 17:38:22","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/Buy-Sell_Agreement_49553_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354159/","spamhaus"
 "354158","2020-04-29 17:38:15","http://Muanha.xyz/cfewahhzze/58145827/Buy-Sell_Agreement_58145827_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354158/","spamhaus"
 "354157","2020-04-29 17:38:05","http://silverstargalaxy.com.silverstartv.website/cmea/Buy-Sell_Agreement_78764087_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354157/","spamhaus"
 "354156","2020-04-29 17:36:07","https://paste.ee/r/JeFGE","offline","malware_download","AgentTesla,Encoded","https://urlhaus.abuse.ch/url/354156/","abuse_ch"
 "354155","2020-04-29 17:31:37","https://pastebin.com/raw/inw8g5S4","offline","malware_download","None","https://urlhaus.abuse.ch/url/354155/","JayTHL"
 "354154","2020-04-29 17:31:21","http://morruko.antesos.com/fqtylehpb/Buy-Sell_Agreement_190951_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354154/","spamhaus"
 "354153","2020-04-29 17:30:47","http://alexandredekerchove.com/ylwhbcphyy/31131/Buy-Sell_Agreement_31131_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354153/","spamhaus"
-"354152","2020-04-29 17:30:15","https://cryptoomarket.com/fhws/Buy-Sell_Agreement_93312692_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354152/","spamhaus"
+"354152","2020-04-29 17:30:15","https://cryptoomarket.com/fhws/Buy-Sell_Agreement_93312692_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354152/","spamhaus"
 "354151","2020-04-29 17:29:42","https://www.francois-champion.com/lqkb/Buy-Sell_Agreement_0164_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354151/","spamhaus"
 "354150","2020-04-29 17:29:08","https://kamagra.in.rs/bqcbhf/Buy-Sell_Agreement_1529275_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354150/","spamhaus"
 "354149","2020-04-29 17:28:34","http://dzapasigroup.usapglobal.org/pbnxnmc/Buy-Sell_Agreement_99863546_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354149/","spamhaus"
 "354148","2020-04-29 17:25:34","https://pastebin.com/raw/PfYbwYfs","offline","malware_download","PowerShellEmpire","https://urlhaus.abuse.ch/url/354148/","viql"
-"354147","2020-04-29 17:18:29","https://cryptoomarket.com/fhws/65989452/Buy-Sell_Agreement_65989452_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354147/","spamhaus"
-"354146","2020-04-29 17:18:21","http://oskarnews.gazashare.com/pelsq/54479416/Buy-Sell_Agreement_54479416_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354146/","spamhaus"
+"354147","2020-04-29 17:18:29","https://cryptoomarket.com/fhws/65989452/Buy-Sell_Agreement_65989452_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354147/","spamhaus"
+"354146","2020-04-29 17:18:21","http://oskarnews.gazashare.com/pelsq/54479416/Buy-Sell_Agreement_54479416_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354146/","spamhaus"
 "354145","2020-04-29 17:18:11","http://sunboom-gift.com/zwbaxf/Buy-Sell_Agreement_855948_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354145/","spamhaus"
-"354144","2020-04-29 17:18:05","https://cryptoomarket.com/fhws/7289616/Buy-Sell_Agreement_7289616_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354144/","spamhaus"
+"354144","2020-04-29 17:18:05","https://cryptoomarket.com/fhws/7289616/Buy-Sell_Agreement_7289616_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354144/","spamhaus"
 "354143","2020-04-29 17:17:54","http://cheriyilbuilders.com/ixwqumcq/238380/Buy-Sell_Agreement_238380_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354143/","spamhaus"
 "354142","2020-04-29 17:17:42","https://rangebroadcasting.com/vfbc/Buy-Sell_Agreement_7507_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354142/","spamhaus"
-"354141","2020-04-29 17:17:35","http://jessymart.flexyhub.com/ssuzzix/Buy-Sell_Agreement_54933_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354141/","spamhaus"
-"354140","2020-04-29 17:17:24","http://demo13.dsdemosite.com/alugzfn/Buy-Sell_Agreement_0761_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354140/","spamhaus"
+"354141","2020-04-29 17:17:35","http://jessymart.flexyhub.com/ssuzzix/Buy-Sell_Agreement_54933_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354141/","spamhaus"
+"354140","2020-04-29 17:17:24","http://demo13.dsdemosite.com/alugzfn/Buy-Sell_Agreement_0761_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354140/","spamhaus"
 "354139","2020-04-29 17:17:14","http://www.cheriyilbuilders.com/herevryxugc/Buy-Sell_Agreement_203749_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354139/","spamhaus"
 "354138","2020-04-29 17:15:08","https://pastebin.com/raw/yjQwfwLu","offline","malware_download","None","https://urlhaus.abuse.ch/url/354138/","JayTHL"
 "354137","2020-04-29 17:15:03","https://pastebin.com/raw/Tps40B96","offline","malware_download","None","https://urlhaus.abuse.ch/url/354137/","JayTHL"
@@ -1802,8 +2180,8 @@
 "354129","2020-04-29 17:07:34","http://cheriyilbuilders.com/ixwqumcq/Buy-Sell_Agreement_54247895_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354129/","spamhaus"
 "354128","2020-04-29 17:07:24","http://oskarnews.gazashare.com/pelsq/21205/Buy-Sell_Agreement_21205_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354128/","spamhaus"
 "354127","2020-04-29 17:07:19","http://denunciesoftwareilegal.org.br/wp-content/plugins/apikey/bfgvnffqfo/Buy-Sell_Agreement_8325_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354127/","spamhaus"
-"354126","2020-04-29 17:07:15","http://duongfpt.ga/lxgqgox/Buy-Sell_Agreement_8606_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354126/","spamhaus"
-"354125","2020-04-29 17:07:10","http://jessymart.flexyhub.com/ssuzzix/Buy-Sell_Agreement_32854692_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354125/","spamhaus"
+"354126","2020-04-29 17:07:15","http://duongfpt.ga/lxgqgox/Buy-Sell_Agreement_8606_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354126/","spamhaus"
+"354125","2020-04-29 17:07:10","http://jessymart.flexyhub.com/ssuzzix/Buy-Sell_Agreement_32854692_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354125/","spamhaus"
 "354124","2020-04-29 17:07:05","https://aelogica.com/zznohyxa/Buy-Sell_Agreement_56786568_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354124/","spamhaus"
 "354123","2020-04-29 17:06:14","https://drive.google.com/uc?export=download&id=1Q2PX2OM5w6WFMrF_5lIhxBuqpcaxfjtr","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/354123/","lovemalware"
 "354122","2020-04-29 17:06:04","https://onedrive.live.com/download?cid=3112E77688F09693&resid=3112E77688F09693%21320&authkey=AOOUjzuf408Dclw","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/354122/","lovemalware"
@@ -1822,12 +2200,12 @@
 "354109","2020-04-29 16:47:15","http://cheriyilbuilders.com/ixwqumcq/Buy-Sell_Agreement_660298_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354109/","spamhaus"
 "354108","2020-04-29 16:47:11","http://cheriyilbuilders.com/ixwqumcq/Buy-Sell_Agreement_07288_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354108/","spamhaus"
 "354107","2020-04-29 16:47:08","http://jaservicioscontables.casteviajes.com/xekqbxkehlx/4546012/Buy-Sell_Agreement_4546012_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354107/","spamhaus"
-"354106","2020-04-29 16:47:06","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/4852/Buy-Sell_Agreement_4852_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354106/","spamhaus"
-"354105","2020-04-29 16:39:14","http://demo13.dsdemosite.com/alugzfn/Buy-Sell_Agreement_5945315_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354105/","spamhaus"
+"354106","2020-04-29 16:47:06","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/4852/Buy-Sell_Agreement_4852_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354106/","spamhaus"
+"354105","2020-04-29 16:39:14","http://demo13.dsdemosite.com/alugzfn/Buy-Sell_Agreement_5945315_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354105/","spamhaus"
 "354104","2020-04-29 16:39:05","http://dzapasigroup.usapglobal.org/pbnxnmc/48527452/Buy-Sell_Agreement_48527452_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354104/","spamhaus"
 "354103","2020-04-29 16:33:35","http://britica.vn/dqsfv/1457750/Buy-Sell_Agreement_1457750_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354103/","spamhaus"
 "354102","2020-04-29 16:33:27","https://aelogica.com/zznohyxa/Buy-Sell_Agreement_2316516_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354102/","spamhaus"
-"354101","2020-04-29 16:33:24","https://cryptoomarket.com/fhws/Buy-Sell_Agreement_01796037_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354101/","spamhaus"
+"354101","2020-04-29 16:33:24","https://cryptoomarket.com/fhws/Buy-Sell_Agreement_01796037_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354101/","spamhaus"
 "354100","2020-04-29 16:33:19","https://rangebroadcasting.com/vfbc/Buy-Sell_Agreement_6246_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354100/","spamhaus"
 "354099","2020-04-29 16:33:14","http://Muanha.xyz/cfewahhzze/Buy-Sell_Agreement_6877_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354099/","spamhaus"
 "354098","2020-04-29 16:33:10","https://rangebroadcasting.com/vfbc/0127/Buy-Sell_Agreement_0127_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354098/","spamhaus"
@@ -1847,7 +2225,7 @@
 "354084","2020-04-29 16:27:57","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/899516/Buy-Sell_Agreement_899516_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354084/","spamhaus"
 "354083","2020-04-29 16:27:25","http://jaservicioscontables.casteviajes.com/xekqbxkehlx/Buy-Sell_Agreement_874829_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354083/","spamhaus"
 "354082","2020-04-29 16:26:51","http://promassager.ga/yltkoe/65758864/Buy-Sell_Agreement_65758864_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354082/","spamhaus"
-"354081","2020-04-29 16:25:47","http://virustreatments.empeeevents.com/eyyudu/Buy-Sell_Agreement_3493806_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354081/","spamhaus"
+"354081","2020-04-29 16:25:47","http://virustreatments.empeeevents.com/eyyudu/Buy-Sell_Agreement_3493806_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354081/","spamhaus"
 "354080","2020-04-29 16:25:12","http://denunciesoftwareilegal.org.br/wp-content/plugins/apikey/bfgvnffqfo/Buy-Sell_Agreement_19864_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354080/","spamhaus"
 "354079","2020-04-29 16:25:11","http://alexandredekerchove.com/ylwhbcphyy/Buy-Sell_Agreement_23494_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354079/","spamhaus"
 "354078","2020-04-29 16:24:38","http://silverstargalaxy.com.silverstartv.website/cmea/94603139/Buy-Sell_Agreement_94603139_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354078/","spamhaus"
@@ -1860,15 +2238,15 @@
 "354071","2020-04-29 15:51:35","http://dzapasigroup.usapglobal.org/pbnxnmc/699164/Buy-Sell_Agreement_699164_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354071/","spamhaus"
 "354070","2020-04-29 15:49:03","https://pastebin.com/raw/srdmMBmH","offline","malware_download","None","https://urlhaus.abuse.ch/url/354070/","JayTHL"
 "354069","2020-04-29 15:46:18","https://pastebin.com/raw/2QygLNc6","offline","malware_download","PowerShellEmpire","https://urlhaus.abuse.ch/url/354069/","viql"
-"354068","2020-04-29 15:46:13","https://vip.recommendedtoyoo.com/bdhycmsxctp/9086/Buy-Sell_Agreement_9086_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354068/","spamhaus"
+"354068","2020-04-29 15:46:13","https://vip.recommendedtoyoo.com/bdhycmsxctp/9086/Buy-Sell_Agreement_9086_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354068/","spamhaus"
 "354067","2020-04-29 15:45:43","http://Muanha.xyz/cfewahhzze/477754/Buy-Sell_Agreement_477754_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354067/","spamhaus"
 "354066","2020-04-29 15:45:16","http://denunciesoftwareilegal.org.br/wp-content/plugins/apikey/bfgvnffqfo/781385/Buy-Sell_Agreement_781385_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354066/","spamhaus"
 "354065","2020-04-29 15:45:14","http://dzapasigroup.usapglobal.org/pbnxnmc/Buy-Sell_Agreement_08808_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354065/","spamhaus"
-"354064","2020-04-29 15:42:10","https://vip.recommendedtoyoo.com/bdhycmsxctp/86207/Buy-Sell_Agreement_86207_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354064/","spamhaus"
+"354064","2020-04-29 15:42:10","https://vip.recommendedtoyoo.com/bdhycmsxctp/86207/Buy-Sell_Agreement_86207_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354064/","spamhaus"
 "354063","2020-04-29 15:41:34","http://silverstargalaxy.com.silverstartv.website/cmea/849715/Buy-Sell_Agreement_849715_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354063/","spamhaus"
-"354062","2020-04-29 15:41:30","http://jessymart.flexyhub.com/ssuzzix/Buy-Sell_Agreement_038711_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354062/","spamhaus"
+"354062","2020-04-29 15:41:30","http://jessymart.flexyhub.com/ssuzzix/Buy-Sell_Agreement_038711_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354062/","spamhaus"
 "354061","2020-04-29 15:41:21","http://sunboom-gift.com/zwbaxf/Buy-Sell_Agreement_2743_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354061/","spamhaus"
-"354060","2020-04-29 15:41:15","https://vip.recommendedtoyoo.com/bdhycmsxctp/52854184/Buy-Sell_Agreement_52854184_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354060/","spamhaus"
+"354060","2020-04-29 15:41:15","https://vip.recommendedtoyoo.com/bdhycmsxctp/52854184/Buy-Sell_Agreement_52854184_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354060/","spamhaus"
 "354059","2020-04-29 15:40:10","http://morruko.antesos.com/fqtylehpb/25242/Buy-Sell_Agreement_25242_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354059/","spamhaus"
 "354058","2020-04-29 15:40:05","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/41357844/Buy-Sell_Agreement_41357844_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354058/","spamhaus"
 "354057","2020-04-29 15:39:59","http://denunciesoftwareilegal.org.br/wp-content/plugins/apikey/bfgvnffqfo/77655/Buy-Sell_Agreement_77655_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354057/","spamhaus"
@@ -1890,22 +2268,22 @@
 "354041","2020-04-29 15:22:52","http://oskarnews.gazashare.com/pelsq/00582/Buy-Sell_Agreement_00582_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354041/","spamhaus"
 "354040","2020-04-29 15:22:47","https://bluecollarfinancial.net/gfmixt/Buy-Sell_Agreement_0010_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354040/","spamhaus"
 "354039","2020-04-29 15:22:43","http://dzapasigroup.usapglobal.org/pbnxnmc/3054/Buy-Sell_Agreement_3054_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354039/","spamhaus"
-"354038","2020-04-29 15:22:40","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/Buy-Sell_Agreement_647741_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354038/","spamhaus"
+"354038","2020-04-29 15:22:40","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/Buy-Sell_Agreement_647741_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354038/","spamhaus"
 "354037","2020-04-29 15:22:37","http://duongfpt.ga/lxgqgox/Buy-Sell_Agreement_4191_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354037/","spamhaus"
-"354036","2020-04-29 15:22:29","http://virustreatments.empeeevents.com/eyyudu/6941/Buy-Sell_Agreement_6941_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354036/","spamhaus"
+"354036","2020-04-29 15:22:29","http://virustreatments.empeeevents.com/eyyudu/6941/Buy-Sell_Agreement_6941_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354036/","spamhaus"
 "354035","2020-04-29 15:22:24","http://jessymart.flexyhub.com/ssuzzix/8889210/Buy-Sell_Agreement_8889210_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354035/","spamhaus"
 "354034","2020-04-29 15:22:20","http://www.cheriyilbuilders.com/herevryxugc/Buy-Sell_Agreement_80209884_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354034/","spamhaus"
 "354033","2020-04-29 15:22:16","http://alexandredekerchove.com/ylwhbcphyy/Buy-Sell_Agreement_6091790_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354033/","spamhaus"
 "354032","2020-04-29 15:22:13","http://promassager.ga/yltkoe/Buy-Sell_Agreement_207769_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354032/","spamhaus"
 "354031","2020-04-29 15:22:10","http://denunciesoftwareilegal.org.br/wp-content/plugins/apikey/bfgvnffqfo/19041295/Buy-Sell_Agreement_19041295_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354031/","spamhaus"
 "354030","2020-04-29 15:22:08","https://kamagra.in.rs/bqcbhf/Buy-Sell_Agreement_8082_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354030/","spamhaus"
-"354029","2020-04-29 15:22:03","http://jessymart.flexyhub.com/ssuzzix/0314864/Buy-Sell_Agreement_0314864_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354029/","spamhaus"
+"354029","2020-04-29 15:22:03","http://jessymart.flexyhub.com/ssuzzix/0314864/Buy-Sell_Agreement_0314864_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354029/","spamhaus"
 "354028","2020-04-29 15:21:15","http://NCERTSOLUTIONACADEMY.COM/yghks/Buy-Sell_Agreement_329681_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354028/","spamhaus"
 "354027","2020-04-29 15:21:13","http://denunciesoftwareilegal.org.br/wp-content/plugins/apikey/bfgvnffqfo/Buy-Sell_Agreement_4038071_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354027/","spamhaus"
 "354026","2020-04-29 15:21:10","http://dzapasigroup.usapglobal.org/pbnxnmc/80499641/Buy-Sell_Agreement_80499641_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354026/","spamhaus"
 "354025","2020-04-29 15:17:04","http://104.168.198.194/mipsel","online","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/354025/","Gandylyan1"
 "354024","2020-04-29 15:15:06","https://taxukrebates.com/","offline","malware_download","phishing","https://urlhaus.abuse.ch/url/354024/","anonymous"
-"354023","2020-04-29 15:08:07","https://vip.recommendedtoyoo.com/bdhycmsxctp/Buy-Sell_Agreement_1571_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354023/","spamhaus"
+"354023","2020-04-29 15:08:07","https://vip.recommendedtoyoo.com/bdhycmsxctp/Buy-Sell_Agreement_1571_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354023/","spamhaus"
 "354022","2020-04-29 15:07:35","http://alexandredekerchove.com/ylwhbcphyy/71191/Buy-Sell_Agreement_71191_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354022/","spamhaus"
 "354021","2020-04-29 15:07:33","http://silverstargalaxy.com.silverstartv.website/cmea/2003/Buy-Sell_Agreement_2003_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354021/","spamhaus"
 "354020","2020-04-29 15:07:31","http://Muanha.xyz/cfewahhzze/Buy-Sell_Agreement_3250669_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354020/","spamhaus"
@@ -1943,7 +2321,7 @@
 "353988","2020-04-29 15:01:53","http://dev.apshaps.se/sdub/3757/Buy-Sell_Agreement_3757_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353988/","spamhaus"
 "353987","2020-04-29 15:01:51","https://www.francois-champion.com/lqkb/Buy-Sell_Agreement_71497458_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353987/","spamhaus"
 "353986","2020-04-29 15:01:46","http://cerradocredito.com.br/wp-content/uploads/2020/04/beazvgceu/05562669/Buy-Sell_Agreement_05562669_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353986/","spamhaus"
-"353985","2020-04-29 15:01:30","http://oskarnews.gazashare.com/pelsq/Buy-Sell_Agreement_7405_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353985/","spamhaus"
+"353985","2020-04-29 15:01:30","http://oskarnews.gazashare.com/pelsq/Buy-Sell_Agreement_7405_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353985/","spamhaus"
 "353984","2020-04-29 14:54:23","https://www.francois-champion.com/lqkb/Buy-Sell_Agreement_560194_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353984/","spamhaus"
 "353983","2020-04-29 14:54:17","http://NCERTSOLUTIONACADEMY.COM/yghks/2597807/Buy-Sell_Agreement_2597807_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353983/","spamhaus"
 "353982","2020-04-29 14:54:15","http://sunboom-gift.com/zwbaxf/14663643/Buy-Sell_Agreement_14663643_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353982/","spamhaus"
@@ -1957,11 +2335,11 @@
 "353974","2020-04-29 14:50:09","https://bluecollarfinancial.net/gfmixt/Buy-Sell_Agreement_8000484_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353974/","spamhaus"
 "353973","2020-04-29 14:50:04","https://aelogica.com/zznohyxa/8295/Buy-Sell_Agreement_8295_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353973/","spamhaus"
 "353972","2020-04-29 14:46:25","http://staging.popclusive.asia/okppdsnq/00827/Buy-Sell_Agreement_00827_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353972/","spamhaus"
-"353971","2020-04-29 14:46:18","http://jessymart.flexyhub.com/ssuzzix/Buy-Sell_Agreement_4896_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353971/","spamhaus"
+"353971","2020-04-29 14:46:18","http://jessymart.flexyhub.com/ssuzzix/Buy-Sell_Agreement_4896_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353971/","spamhaus"
 "353970","2020-04-29 14:46:13","http://dev.apshaps.se/sdub/Buy-Sell_Agreement_443872_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353970/","spamhaus"
-"353969","2020-04-29 14:46:11","https://vip.recommendedtoyoo.com/bdhycmsxctp/70840/Buy-Sell_Agreement_70840_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353969/","spamhaus"
-"353968","2020-04-29 14:45:43","http://virustreatments.empeeevents.com/eyyudu/Buy-Sell_Agreement_7595546_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353968/","spamhaus"
-"353967","2020-04-29 14:45:37","http://jessymart.flexyhub.com/ssuzzix/5876060/Buy-Sell_Agreement_5876060_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353967/","spamhaus"
+"353969","2020-04-29 14:46:11","https://vip.recommendedtoyoo.com/bdhycmsxctp/70840/Buy-Sell_Agreement_70840_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353969/","spamhaus"
+"353968","2020-04-29 14:45:43","http://virustreatments.empeeevents.com/eyyudu/Buy-Sell_Agreement_7595546_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353968/","spamhaus"
+"353967","2020-04-29 14:45:37","http://jessymart.flexyhub.com/ssuzzix/5876060/Buy-Sell_Agreement_5876060_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353967/","spamhaus"
 "353966","2020-04-29 14:45:34","https://aelogica.com/zznohyxa/94346/Buy-Sell_Agreement_94346_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353966/","spamhaus"
 "353965","2020-04-29 14:45:23","http://cheriyilbuilders.com/ixwqumcq/99014435/Buy-Sell_Agreement_99014435_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353965/","spamhaus"
 "353964","2020-04-29 14:45:19","http://promassager.ga/yltkoe/7587410/Buy-Sell_Agreement_7587410_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353964/","spamhaus"
@@ -1992,16 +2370,16 @@
 "353939","2020-04-29 14:39:31","http://oskarnews.gazashare.com/pelsq/Buy-Sell_Agreement_31209_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353939/","spamhaus"
 "353938","2020-04-29 14:39:29","http://denunciesoftwareilegal.org.br/wp-content/plugins/apikey/bfgvnffqfo/5433950/Buy-Sell_Agreement_5433950_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353938/","spamhaus"
 "353937","2020-04-29 14:39:17","http://dzapasigroup.usapglobal.org/pbnxnmc/35459684/Buy-Sell_Agreement_35459684_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353937/","spamhaus"
-"353936","2020-04-29 14:39:13","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/Buy-Sell_Agreement_41088_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353936/","spamhaus"
+"353936","2020-04-29 14:39:13","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/Buy-Sell_Agreement_41088_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353936/","spamhaus"
 "353935","2020-04-29 14:39:09","http://bolescy.com/otue/Buy-Sell_Agreement_5472_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353935/","spamhaus"
 "353934","2020-04-29 14:39:05","http://duongfpt.ga/lxgqgox/50076/Buy-Sell_Agreement_50076_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353934/","spamhaus"
-"353933","2020-04-29 14:39:02","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/Buy-Sell_Agreement_8485512_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353933/","spamhaus"
+"353933","2020-04-29 14:39:02","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/Buy-Sell_Agreement_8485512_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353933/","spamhaus"
 "353932","2020-04-29 14:38:57","http://cerradocredito.com.br/wp-content/uploads/2020/04/beazvgceu/Buy-Sell_Agreement_93912574_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353932/","spamhaus"
 "353931","2020-04-29 14:38:53","http://NCERTSOLUTIONACADEMY.COM/yghks/95004421/Buy-Sell_Agreement_95004421_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353931/","spamhaus"
-"353930","2020-04-29 14:38:49","http://duongfpt.ga/lxgqgox/69614610/Buy-Sell_Agreement_69614610_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353930/","spamhaus"
-"353929","2020-04-29 14:38:46","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/Buy-Sell_Agreement_4425983_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353929/","spamhaus"
+"353930","2020-04-29 14:38:49","http://duongfpt.ga/lxgqgox/69614610/Buy-Sell_Agreement_69614610_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353930/","spamhaus"
+"353929","2020-04-29 14:38:46","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/Buy-Sell_Agreement_4425983_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353929/","spamhaus"
 "353928","2020-04-29 14:38:38","https://www.francois-champion.com/lqkb/Buy-Sell_Agreement_12556414_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353928/","spamhaus"
-"353927","2020-04-29 14:38:33","https://cryptoomarket.com/fhws/Buy-Sell_Agreement_785445_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353927/","spamhaus"
+"353927","2020-04-29 14:38:33","https://cryptoomarket.com/fhws/Buy-Sell_Agreement_785445_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353927/","spamhaus"
 "353926","2020-04-29 14:38:24","http://dzapasigroup.usapglobal.org/pbnxnmc/Buy-Sell_Agreement_15886_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353926/","spamhaus"
 "353925","2020-04-29 14:38:18","http://Muanha.xyz/cfewahhzze/Buy-Sell_Agreement_73790_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353925/","spamhaus"
 "353924","2020-04-29 14:38:10","http://cheriyilbuilders.com/ixwqumcq/Buy-Sell_Agreement_35883362_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353924/","spamhaus"
@@ -2019,11 +2397,11 @@
 "353912","2020-04-29 14:37:07","http://51.89.119.154/bins/arm5","offline","malware_download","None","https://urlhaus.abuse.ch/url/353912/","JayTHL"
 "353911","2020-04-29 14:37:05","http://51.89.119.154/bins/arm","offline","malware_download","None","https://urlhaus.abuse.ch/url/353911/","JayTHL"
 "353910","2020-04-29 14:37:03","http://51.89.119.154/bins/KKK.sh","offline","malware_download","None","https://urlhaus.abuse.ch/url/353910/","JayTHL"
-"353909","2020-04-29 14:31:21","https://cryptoomarket.com/fhws/963978/Buy-Sell_Agreement_963978_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353909/","spamhaus"
+"353909","2020-04-29 14:31:21","https://cryptoomarket.com/fhws/963978/Buy-Sell_Agreement_963978_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353909/","spamhaus"
 "353908","2020-04-29 14:31:16","http://demo13.dsdemosite.com/alugzfn/Buy-Sell_Agreement_0090_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353908/","spamhaus"
 "353907","2020-04-29 14:31:13","http://Muanha.xyz/cfewahhzze/Buy-Sell_Agreement_6709320_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353907/","spamhaus"
 "353906","2020-04-29 14:31:09","https://rangebroadcasting.com/vfbc/504577/Buy-Sell_Agreement_504577_04282020.zip","offline","malware_download","ESP,Quakbot","https://urlhaus.abuse.ch/url/353906/","spamhaus"
-"353905","2020-04-29 14:31:03","http://virustreatments.empeeevents.com/eyyudu/Buy-Sell_Agreement_2788_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353905/","spamhaus"
+"353905","2020-04-29 14:31:03","http://virustreatments.empeeevents.com/eyyudu/Buy-Sell_Agreement_2788_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353905/","spamhaus"
 "353904","2020-04-29 14:30:58","https://aelogica.com/zznohyxa/Buy-Sell_Agreement_25066542_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353904/","spamhaus"
 "353903","2020-04-29 14:30:23","http://staging.popclusive.asia/okppdsnq/Buy-Sell_Agreement_22473650_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353903/","spamhaus"
 "353902","2020-04-29 14:30:13","https://vip.recommendedtoyoo.com/bdhycmsxctp/Buy-Sell_Agreement_57552714_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353902/","spamhaus"
@@ -2039,7 +2417,7 @@
 "353892","2020-04-29 14:29:03","https://bluecollarfinancial.net/gfmixt/Buy-Sell_Agreement_856388_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353892/","spamhaus"
 "353891","2020-04-29 14:28:58","http://britica.vn/dqsfv/Buy-Sell_Agreement_52744_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353891/","spamhaus"
 "353890","2020-04-29 14:28:52","http://drinkopolykopen.nl/wp-content/uploads/2020/04/nnpebk/442375/Buy-Sell_Agreement_442375_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353890/","spamhaus"
-"353889","2020-04-29 14:28:21","http://oskarnews.gazashare.com/pelsq/22488219/Buy-Sell_Agreement_22488219_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353889/","spamhaus"
+"353889","2020-04-29 14:28:21","http://oskarnews.gazashare.com/pelsq/22488219/Buy-Sell_Agreement_22488219_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353889/","spamhaus"
 "353888","2020-04-29 14:28:17","http://dev.apshaps.se/sdub/Buy-Sell_Agreement_2457_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353888/","spamhaus"
 "353887","2020-04-29 14:28:14","http://NCERTSOLUTIONACADEMY.COM/yghks/Buy-Sell_Agreement_5833942_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353887/","spamhaus"
 "353886","2020-04-29 14:28:12","http://promassager.ga/yltkoe/7604/Buy-Sell_Agreement_7604_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353886/","spamhaus"
@@ -2047,8 +2425,8 @@
 "353884","2020-04-29 14:28:02","http://silverstargalaxy.com.silverstartv.website/cmea/95147/Buy-Sell_Agreement_95147_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353884/","spamhaus"
 "353883","2020-04-29 14:27:59","http://bolescy.com/otue/Buy-Sell_Agreement_14503_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353883/","spamhaus"
 "353882","2020-04-29 14:27:56","http://bolescy.com/otue/8739403/Buy-Sell_Agreement_8739403_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353882/","spamhaus"
-"353881","2020-04-29 14:27:53","http://oskarnews.gazashare.com/pelsq/Buy-Sell_Agreement_14165_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353881/","spamhaus"
-"353880","2020-04-29 14:27:48","http://jessymart.flexyhub.com/ssuzzix/3866/Buy-Sell_Agreement_3866_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353880/","spamhaus"
+"353881","2020-04-29 14:27:53","http://oskarnews.gazashare.com/pelsq/Buy-Sell_Agreement_14165_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353881/","spamhaus"
+"353880","2020-04-29 14:27:48","http://jessymart.flexyhub.com/ssuzzix/3866/Buy-Sell_Agreement_3866_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353880/","spamhaus"
 "353879","2020-04-29 14:27:46","http://www.cheriyilbuilders.com/herevryxugc/Buy-Sell_Agreement_1328_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353879/","spamhaus"
 "353878","2020-04-29 14:27:40","http://morruko.antesos.com/fqtylehpb/Buy-Sell_Agreement_6586635_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353878/","spamhaus"
 "353877","2020-04-29 14:27:37","http://sunboom-gift.com/zwbaxf/Buy-Sell_Agreement_828327_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353877/","spamhaus"
@@ -2058,7 +2436,7 @@
 "353873","2020-04-29 14:27:22","https://rangebroadcasting.com/vfbc/0305/Buy-Sell_Agreement_0305_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353873/","spamhaus"
 "353872","2020-04-29 14:27:18","http://cerradocredito.com.br/wp-content/uploads/2020/04/beazvgceu/Buy-Sell_Agreement_16907797_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353872/","spamhaus"
 "353871","2020-04-29 14:27:16","http://NCERTSOLUTIONACADEMY.COM/yghks/87700391/Buy-Sell_Agreement_87700391_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353871/","spamhaus"
-"353870","2020-04-29 14:27:11","http://jessymart.flexyhub.com/ssuzzix/0257123/Buy-Sell_Agreement_0257123_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353870/","spamhaus"
+"353870","2020-04-29 14:27:11","http://jessymart.flexyhub.com/ssuzzix/0257123/Buy-Sell_Agreement_0257123_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353870/","spamhaus"
 "353869","2020-04-29 14:27:08","http://cerradocredito.com.br/wp-content/uploads/2020/04/beazvgceu/626389/Buy-Sell_Agreement_626389_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353869/","spamhaus"
 "353868","2020-04-29 14:27:03","http://ade.topepics.com/pkthdrgdb/27224/Buy-Sell_Agreement_27224_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353868/","spamhaus"
 "353867","2020-04-29 14:26:57","http://NCERTSOLUTIONACADEMY.COM/yghks/25607548/Buy-Sell_Agreement_25607548_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353867/","spamhaus"
@@ -2079,17 +2457,17 @@
 "353852","2020-04-29 14:22:14","http://cheaptours.in.ua/wp-content/cache/hyper-cache/cheaptours.in.ua/2016/information.exe","offline","malware_download","Trickbot","https://urlhaus.abuse.ch/url/353852/","anonymous"
 "353851","2020-04-29 14:20:10","https://mylocalfoodie.com.au/wp-content/cjayq/cjcrypt.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/353851/","JayTHL"
 "353850","2020-04-29 14:12:08","http://sylvaclouds.eu/toolshome/toolshome.exe","offline","malware_download","Formbook","https://urlhaus.abuse.ch/url/353850/","James_inthe_box"
-"353849","2020-04-29 13:58:05","http://45.95.169.234/SBIDIOT/zte","online","malware_download","None","https://urlhaus.abuse.ch/url/353849/","JayTHL"
-"353848","2020-04-29 13:58:03","http://45.95.169.234/SBIDIOT/yarn","online","malware_download","None","https://urlhaus.abuse.ch/url/353848/","JayTHL"
-"353847","2020-04-29 13:58:00","http://45.95.169.234/SBIDIOT/x86","online","malware_download","None","https://urlhaus.abuse.ch/url/353847/","JayTHL"
-"353846","2020-04-29 13:57:58","http://45.95.169.234/SBIDIOT/rtk","online","malware_download","None","https://urlhaus.abuse.ch/url/353846/","JayTHL"
-"353845","2020-04-29 13:57:56","http://45.95.169.234/SBIDIOT/root","online","malware_download","None","https://urlhaus.abuse.ch/url/353845/","JayTHL"
-"353844","2020-04-29 13:57:54","http://45.95.169.234/SBIDIOT/ppc","online","malware_download","None","https://urlhaus.abuse.ch/url/353844/","JayTHL"
-"353843","2020-04-29 13:57:52","http://45.95.169.234/SBIDIOT/mpsl","online","malware_download","None","https://urlhaus.abuse.ch/url/353843/","JayTHL"
-"353842","2020-04-29 13:57:50","http://45.95.169.234/SBIDIOT/mips","online","malware_download","None","https://urlhaus.abuse.ch/url/353842/","JayTHL"
-"353841","2020-04-29 13:57:48","http://45.95.169.234/SBIDIOT/arm7","online","malware_download","None","https://urlhaus.abuse.ch/url/353841/","JayTHL"
-"353840","2020-04-29 13:57:46","http://45.95.169.234/SBIDIOT/arm6","online","malware_download","None","https://urlhaus.abuse.ch/url/353840/","JayTHL"
-"353839","2020-04-29 13:57:43","http://45.95.169.234/SBIDIOT/arm","online","malware_download","None","https://urlhaus.abuse.ch/url/353839/","JayTHL"
+"353849","2020-04-29 13:58:05","http://45.95.169.234/SBIDIOT/zte","offline","malware_download","None","https://urlhaus.abuse.ch/url/353849/","JayTHL"
+"353848","2020-04-29 13:58:03","http://45.95.169.234/SBIDIOT/yarn","offline","malware_download","None","https://urlhaus.abuse.ch/url/353848/","JayTHL"
+"353847","2020-04-29 13:58:00","http://45.95.169.234/SBIDIOT/x86","offline","malware_download","None","https://urlhaus.abuse.ch/url/353847/","JayTHL"
+"353846","2020-04-29 13:57:58","http://45.95.169.234/SBIDIOT/rtk","offline","malware_download","None","https://urlhaus.abuse.ch/url/353846/","JayTHL"
+"353845","2020-04-29 13:57:56","http://45.95.169.234/SBIDIOT/root","offline","malware_download","None","https://urlhaus.abuse.ch/url/353845/","JayTHL"
+"353844","2020-04-29 13:57:54","http://45.95.169.234/SBIDIOT/ppc","offline","malware_download","None","https://urlhaus.abuse.ch/url/353844/","JayTHL"
+"353843","2020-04-29 13:57:52","http://45.95.169.234/SBIDIOT/mpsl","offline","malware_download","None","https://urlhaus.abuse.ch/url/353843/","JayTHL"
+"353842","2020-04-29 13:57:50","http://45.95.169.234/SBIDIOT/mips","offline","malware_download","None","https://urlhaus.abuse.ch/url/353842/","JayTHL"
+"353841","2020-04-29 13:57:48","http://45.95.169.234/SBIDIOT/arm7","offline","malware_download","None","https://urlhaus.abuse.ch/url/353841/","JayTHL"
+"353840","2020-04-29 13:57:46","http://45.95.169.234/SBIDIOT/arm6","offline","malware_download","None","https://urlhaus.abuse.ch/url/353840/","JayTHL"
+"353839","2020-04-29 13:57:43","http://45.95.169.234/SBIDIOT/arm","offline","malware_download","None","https://urlhaus.abuse.ch/url/353839/","JayTHL"
 "353838","2020-04-29 13:57:41","http://167.172.206.156/bins/Hilix.x86","offline","malware_download","None","https://urlhaus.abuse.ch/url/353838/","JayTHL"
 "353837","2020-04-29 13:57:38","http://167.172.206.156/bins/Hilix.spc","offline","malware_download","None","https://urlhaus.abuse.ch/url/353837/","JayTHL"
 "353836","2020-04-29 13:57:36","http://167.172.206.156/bins/Hilix.sh4","offline","malware_download","None","https://urlhaus.abuse.ch/url/353836/","JayTHL"
@@ -2177,7 +2555,7 @@
 "353754","2020-04-29 09:03:45","http://118.232.208.215:45195/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353754/","geenensp"
 "353753","2020-04-29 09:03:40","http://xn--transfgran-mgbbb600b.ro/UPS/ShippingInfo.jar","online","malware_download","Adwind,ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353753/","spamhaus"
 "353752","2020-04-29 09:03:37","http://coderived.in/zlseg/Buy-Sell_Agreement_34704566_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353752/","spamhaus"
-"353751","2020-04-29 09:03:33","http://anadolutatili.com/xtfdux/17055888/Buy-Sell_Agreement_17055888_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353751/","spamhaus"
+"353751","2020-04-29 09:03:33","http://anadolutatili.com/xtfdux/17055888/Buy-Sell_Agreement_17055888_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353751/","spamhaus"
 "353750","2020-04-29 09:03:28","http://healtina.com/xcaspvi/5392047/Buy-Sell_Agreement_5392047_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353750/","spamhaus"
 "353749","2020-04-29 09:03:26","https://rangebroadcasting.com/obrmn/93586244/Buy-Sell_Agreement_93586244_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353749/","spamhaus"
 "353748","2020-04-29 09:03:13","https://nmal.info/ntsphsl/9082650/Buy-Sell_Agreement_9082650_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353748/","spamhaus"
@@ -2185,10 +2563,10 @@
 "353746","2020-04-29 09:03:07","http://bookmytripping.com/tgxmxcm/30307798/Buy-Sell_Agreement_30307798_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353746/","spamhaus"
 "353745","2020-04-29 09:03:00","http://kandiandcolor.codeworkscanada.com/v/Buy-Sell_Agreement_59624925_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353745/","spamhaus"
 "353744","2020-04-29 09:02:57","http://cyberemprende.cl/wjoh/38575/Buy-Sell_Agreement_38575_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353744/","spamhaus"
-"353743","2020-04-29 09:02:53","http://ufabet168168.329263.com/tmpf/Buy-Sell_Agreement_658957_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353743/","spamhaus"
+"353743","2020-04-29 09:02:53","http://ufabet168168.329263.com/tmpf/Buy-Sell_Agreement_658957_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353743/","spamhaus"
 "353742","2020-04-29 09:02:46","https://how.ph/mrb/706759/Buy-Sell_Agreement_706759_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353742/","spamhaus"
-"353741","2020-04-29 09:02:37","http://myexpertca.in/fomi/63279611/Buy-Sell_Agreement_63279611_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353741/","spamhaus"
-"353740","2020-04-29 09:02:21","http://vaeqpu.329263.com/al/Buy-Sell_Agreement_23601612_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353740/","spamhaus"
+"353741","2020-04-29 09:02:37","http://myexpertca.in/fomi/63279611/Buy-Sell_Agreement_63279611_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353741/","spamhaus"
+"353740","2020-04-29 09:02:21","http://vaeqpu.329263.com/al/Buy-Sell_Agreement_23601612_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353740/","spamhaus"
 "353739","2020-04-29 09:02:18","https://www.loodgieterjoost.be/wp-content/uploads/2020/04/osiwprp/Buy-Sell_Agreement_3544_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353739/","spamhaus"
 "353738","2020-04-29 09:02:15","http://yucatanentiemporeal.com/wp-content/uploads/2020/04/nwl/3096/Buy-Sell_Agreement_3096_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353738/","spamhaus"
 "353737","2020-04-29 09:02:03","https://miraab.ir/wp-content/uploads/2020/04/tk/4080595/Buy-Sell_Agreement_4080595_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353737/","spamhaus"
@@ -2216,13 +2594,13 @@
 "353715","2020-04-29 08:41:16","http://alnajimaa.website.bahaoption.website/uktvs/Buy-Sell_Agreement_5473_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353715/","spamhaus"
 "353714","2020-04-29 08:41:11","https://www.mfpburundi.bi/wp-content/uploads/2020/04/pb/Buy-Sell_Agreement_170999_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353714/","spamhaus"
 "353713","2020-04-29 08:41:10","http://earningtipsbd.com/pn/280019/Buy-Sell_Agreement_280019_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353713/","spamhaus"
-"353712","2020-04-29 08:41:08","http://www.gainsdirectory.com/imtlt/11119/Buy-Sell_Agreement_11119_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353712/","spamhaus"
+"353712","2020-04-29 08:41:08","http://www.gainsdirectory.com/imtlt/11119/Buy-Sell_Agreement_11119_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353712/","spamhaus"
 "353711","2020-04-29 08:41:05","http://delmaestro.espacioeterno.com/e/Buy-Sell_Agreement_23577525_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353711/","spamhaus"
 "353710","2020-04-29 08:41:03","http://yucatanentiemporeal.com/wp-content/uploads/2020/04/nwl/Buy-Sell_Agreement_50658585_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353710/","spamhaus"
 "353709","2020-04-29 08:40:55","http://cyberemprende.cl/wjoh/8373/Buy-Sell_Agreement_8373_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353709/","spamhaus"
 "353708","2020-04-29 08:40:48","http://ufabet168168.329263.com/tmpf/Buy-Sell_Agreement_6108_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353708/","spamhaus"
 "353707","2020-04-29 08:40:43","https://aliyousefpoor.com/urcu/Buy-Sell_Agreement_24920_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353707/","spamhaus"
-"353706","2020-04-29 08:40:41","http://healtina.com/xcaspvi/2017128/Buy-Sell_Agreement_2017128_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353706/","spamhaus"
+"353706","2020-04-29 08:40:41","http://healtina.com/xcaspvi/2017128/Buy-Sell_Agreement_2017128_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353706/","spamhaus"
 "353705","2020-04-29 08:40:39","https://kingdomcarecan.com/nbdvaba/Buy-Sell_Agreement_04521_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353705/","spamhaus"
 "353704","2020-04-29 08:40:30","https://dienmaycu.vn/rcckjv/Buy-Sell_Agreement_762354_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353704/","spamhaus"
 "353703","2020-04-29 08:40:26","http://alnajimaa.website.bahaoption.website/uktvs/978968/Buy-Sell_Agreement_978968_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353703/","spamhaus"
@@ -2233,24 +2611,24 @@
 "353698","2020-04-29 08:40:05","http://www.energyplusjuice.ir/wp-content/uploads/2020/04/m/Buy-Sell_Agreement_14391_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353698/","spamhaus"
 "353697","2020-04-29 08:38:03","https://pastebin.com/raw/iVtywrUz","offline","malware_download","None","https://urlhaus.abuse.ch/url/353697/","JayTHL"
 "353696","2020-04-29 08:22:06","http://192.236.147.100:1950/Zflipbgi.iso","offline","malware_download","None","https://urlhaus.abuse.ch/url/353696/","JAMESWT_MHT"
-"353695","2020-04-29 08:14:50","http://lagalaxy88easy.329263.com/lbrnxxd/03531/Buy-Sell_Agreement_03531_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353695/","spamhaus"
+"353695","2020-04-29 08:14:50","http://lagalaxy88easy.329263.com/lbrnxxd/03531/Buy-Sell_Agreement_03531_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353695/","spamhaus"
 "353694","2020-04-29 08:14:45","https://nmal.info/ntsphsl/42806083/Buy-Sell_Agreement_42806083_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353694/","spamhaus"
 "353693","2020-04-29 08:14:40","http://escarateeventos.ladevi.cl/yworbn/414713/Buy-Sell_Agreement_414713_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353693/","spamhaus"
-"353692","2020-04-29 08:14:09","http://bonyamin.com/wyupb/4989/Buy-Sell_Agreement_4989_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353692/","spamhaus"
-"353691","2020-04-29 08:14:06","http://mlbfreestream.ml/q/51548833/Buy-Sell_Agreement_51548833_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353691/","spamhaus"
+"353692","2020-04-29 08:14:09","http://bonyamin.com/wyupb/4989/Buy-Sell_Agreement_4989_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353692/","spamhaus"
+"353691","2020-04-29 08:14:06","http://mlbfreestream.ml/q/51548833/Buy-Sell_Agreement_51548833_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353691/","spamhaus"
 "353690","2020-04-29 08:14:01","http://cpagrace.cl/k/8312/Buy-Sell_Agreement_8312_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353690/","spamhaus"
 "353689","2020-04-29 08:13:28","http://elabugablog.ru/zzj/Buy-Sell_Agreement_6905408_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353689/","spamhaus"
-"353688","2020-04-29 08:13:25","http://arowanafishforsale.com/dbmwl/1922788/Buy-Sell_Agreement_1922788_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353688/","spamhaus"
+"353688","2020-04-29 08:13:25","http://arowanafishforsale.com/dbmwl/1922788/Buy-Sell_Agreement_1922788_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353688/","spamhaus"
 "353687","2020-04-29 08:13:20","http://earningtipsbd.com/pn/Buy-Sell_Agreement_481073_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353687/","spamhaus"
 "353686","2020-04-29 08:11:40","http://alnajimaa.website.bahaoption.website/uktvs/89732/Buy-Sell_Agreement_89732_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353686/","spamhaus"
 "353685","2020-04-29 08:11:35","http://myexpertca.in/fomi/89079745/Buy-Sell_Agreement_89079745_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353685/","spamhaus"
-"353684","2020-04-29 08:11:32","http://mlbfreestream.gq/n/Buy-Sell_Agreement_35749554_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353684/","spamhaus"
-"353683","2020-04-29 08:11:26","http://healtina.com/xcaspvi/16772926/Buy-Sell_Agreement_16772926_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353683/","spamhaus"
+"353684","2020-04-29 08:11:32","http://mlbfreestream.gq/n/Buy-Sell_Agreement_35749554_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353684/","spamhaus"
+"353683","2020-04-29 08:11:26","http://healtina.com/xcaspvi/16772926/Buy-Sell_Agreement_16772926_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353683/","spamhaus"
 "353682","2020-04-29 08:11:20","http://www.energyplusjuice.ir/wp-content/uploads/2020/04/m/002783/Buy-Sell_Agreement_002783_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353682/","spamhaus"
 "353681","2020-04-29 08:11:15","http://www.amodoutours.com/rretwxj/8052388/Buy-Sell_Agreement_8052388_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353681/","spamhaus"
 "353680","2020-04-29 08:11:13","http://hdlive-espntv.live-sportshd.website/bpg/23066489/Buy-Sell_Agreement_23066489_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353680/","spamhaus"
 "353679","2020-04-29 08:11:10","http://coderived.in/zlseg/Buy-Sell_Agreement_5772_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353679/","spamhaus"
-"353678","2020-04-29 08:08:09","http://mlbfreestream.ml/q/Buy-Sell_Agreement_8401425_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353678/","spamhaus"
+"353678","2020-04-29 08:08:09","http://mlbfreestream.ml/q/Buy-Sell_Agreement_8401425_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353678/","spamhaus"
 "353677","2020-04-29 08:08:03","https://www.mfpburundi.bi/wp-content/uploads/2020/04/pb/664693/Buy-Sell_Agreement_664693_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353677/","spamhaus"
 "353676","2020-04-29 08:07:04","http://192.236.147.100:1950/ybxdraewe.iso","offline","malware_download","None","https://urlhaus.abuse.ch/url/353676/","JAMESWT_MHT"
 "353675","2020-04-29 08:04:04","https://fast.rentaroom.ml/euzxp/Buy-Sell_Agreement_04762346_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353675/","spamhaus"
@@ -2268,13 +2646,13 @@
 "353663","2020-04-29 08:02:32","https://alucard.online/yarx/Buy-Sell_Agreement_5821_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353663/","spamhaus"
 "353662","2020-04-29 08:02:28","http://anadolutatili.com/xtfdux/12602/Buy-Sell_Agreement_12602_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353662/","spamhaus"
 "353661","2020-04-29 08:02:22","https://aliyousefpoor.com/urcu/Buy-Sell_Agreement_907724_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353661/","spamhaus"
-"353660","2020-04-29 08:02:18","https://wwealthllc.com/sjokmsq/Buy-Sell_Agreement_594068_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353660/","spamhaus"
+"353660","2020-04-29 08:02:18","https://wwealthllc.com/sjokmsq/Buy-Sell_Agreement_594068_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353660/","spamhaus"
 "353659","2020-04-29 08:02:12","https://aliyousefpoor.com/urcu/Buy-Sell_Agreement_87065224_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353659/","spamhaus"
 "353658","2020-04-29 08:02:08","http://bonyamin.com/wyupb/36769/Buy-Sell_Agreement_36769_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353658/","spamhaus"
 "353657","2020-04-29 08:02:02","https://drwendyellis.com/laqrip/Buy-Sell_Agreement_9435083_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353657/","spamhaus"
 "353656","2020-04-29 08:01:55","http://sexybaccarat.329263.com/k/021803/Buy-Sell_Agreement_021803_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353656/","spamhaus"
-"353655","2020-04-29 08:01:48","http://kgfs3.329263.com/cvsf/94279544/Buy-Sell_Agreement_94279544_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353655/","spamhaus"
-"353654","2020-04-29 08:01:44","http://earningtipsbd.com/pn/16352769/Buy-Sell_Agreement_16352769_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353654/","spamhaus"
+"353655","2020-04-29 08:01:48","http://kgfs3.329263.com/cvsf/94279544/Buy-Sell_Agreement_94279544_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353655/","spamhaus"
+"353654","2020-04-29 08:01:44","http://earningtipsbd.com/pn/16352769/Buy-Sell_Agreement_16352769_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353654/","spamhaus"
 "353653","2020-04-29 08:01:40","https://drwendyellis.com/laqrip/262184/Buy-Sell_Agreement_262184_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353653/","spamhaus"
 "353652","2020-04-29 08:01:28","http://rentaroom.ml/oqqthv/33859/Buy-Sell_Agreement_33859_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353652/","spamhaus"
 "353651","2020-04-29 08:00:16","http://37.34.228.1:30592/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353651/","geenensp"
@@ -2282,7 +2660,7 @@
 "353649","2020-04-29 07:59:37","http://62.215.101.230:59574/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353649/","geenensp"
 "353648","2020-04-29 07:58:18","http://avto-pro.hostenko.com/too/50673/Buy-Sell_Agreement_50673_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353648/","spamhaus"
 "353647","2020-04-29 07:57:46","http://sportstrem.gq/imqmxkw/Buy-Sell_Agreement_0493_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353647/","spamhaus"
-"353646","2020-04-29 07:57:10","http://fifa555easy.329263.com/x/57599/Buy-Sell_Agreement_57599_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353646/","spamhaus"
+"353646","2020-04-29 07:57:10","http://fifa555easy.329263.com/x/57599/Buy-Sell_Agreement_57599_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353646/","spamhaus"
 "353645","2020-04-29 07:56:33","http://djonur24.de/hdc/Buy-Sell_Agreement_5473_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353645/","spamhaus"
 "353644","2020-04-29 07:37:09","https://pastebin.com/raw/1viY3naQ","offline","malware_download","None","https://urlhaus.abuse.ch/url/353644/","JayTHL"
 "353643","2020-04-29 07:24:05","https://fast.rentaroom.ml/euzxp/1854/Buy-Sell_Agreement_1854_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353643/","spamhaus"
@@ -2301,25 +2679,25 @@
 "353630","2020-04-29 07:22:21","http://coderived.in/zlseg/Buy-Sell_Agreement_1571081_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353630/","spamhaus"
 "353629","2020-04-29 07:22:16","http://sexybaccarat.329263.com/k/Buy-Sell_Agreement_62226978_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353629/","spamhaus"
 "353628","2020-04-29 07:22:08","http://myexpertca.in/fomi/Buy-Sell_Agreement_23325291_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353628/","spamhaus"
-"353627","2020-04-29 07:21:57","http://www.alnahrainfilminstitute.com/kuhjz/5389/Buy-Sell_Agreement_5389_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353627/","spamhaus"
+"353627","2020-04-29 07:21:57","http://www.alnahrainfilminstitute.com/kuhjz/5389/Buy-Sell_Agreement_5389_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353627/","spamhaus"
 "353626","2020-04-29 07:21:54","http://alnajimaa.website.bahaoption.website/uktvs/3704870/Buy-Sell_Agreement_3704870_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353626/","spamhaus"
-"353625","2020-04-29 07:21:50","https://brenleyquartzgh.com/ga/Buy-Sell_Agreement_60370501_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353625/","spamhaus"
-"353624","2020-04-29 07:21:45","http://sportshlive.xyz/gzld/Buy-Sell_Agreement_5741597_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353624/","spamhaus"
+"353625","2020-04-29 07:21:50","https://brenleyquartzgh.com/ga/Buy-Sell_Agreement_60370501_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353625/","spamhaus"
+"353624","2020-04-29 07:21:45","http://sportshlive.xyz/gzld/Buy-Sell_Agreement_5741597_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353624/","spamhaus"
 "353623","2020-04-29 07:21:36","http://www.alnahrainfilminstitute.com/kuhjz/28179863/Buy-Sell_Agreement_28179863_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353623/","spamhaus"
-"353622","2020-04-29 07:21:34","http://arowanafishforsale.com/dbmwl/Buy-Sell_Agreement_698683_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353622/","spamhaus"
+"353622","2020-04-29 07:21:34","http://arowanafishforsale.com/dbmwl/Buy-Sell_Agreement_698683_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353622/","spamhaus"
 "353621","2020-04-29 07:21:29","http://www.amodoutours.com/rretwxj/350310/Buy-Sell_Agreement_350310_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353621/","spamhaus"
-"353620","2020-04-29 07:21:27","http://amedeoscognamiglio.329263.com/i/24827473/Buy-Sell_Agreement_24827473_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353620/","spamhaus"
-"353619","2020-04-29 07:21:17","http://rentaroom.ml/oqqthv/4912/Buy-Sell_Agreement_4912_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353619/","spamhaus"
+"353620","2020-04-29 07:21:27","http://amedeoscognamiglio.329263.com/i/24827473/Buy-Sell_Agreement_24827473_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353620/","spamhaus"
+"353619","2020-04-29 07:21:17","http://rentaroom.ml/oqqthv/4912/Buy-Sell_Agreement_4912_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353619/","spamhaus"
 "353618","2020-04-29 07:21:13","https://siseco.mx/wp-content/uploads/2020/04/beomqxc/14307/Buy-Sell_Agreement_14307_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353618/","spamhaus"
 "353617","2020-04-29 07:21:06","http://fifa555easy.329263.com/x/441957/Buy-Sell_Agreement_441957_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353617/","spamhaus"
 "353616","2020-04-29 07:20:58","https://pcexperts.co.za/wp-content/uploads/2020/04/tmk/6097/Buy-Sell_Agreement_6097_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353616/","spamhaus"
-"353615","2020-04-29 07:20:51","https://wwealthllc.com/sjokmsq/Buy-Sell_Agreement_087485_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353615/","spamhaus"
+"353615","2020-04-29 07:20:51","https://wwealthllc.com/sjokmsq/Buy-Sell_Agreement_087485_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353615/","spamhaus"
 "353614","2020-04-29 07:20:37","http://yucatanentiemporeal.com/wp-content/uploads/2020/04/nwl/60928197/Buy-Sell_Agreement_60928197_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353614/","spamhaus"
 "353613","2020-04-29 07:20:34","http://www.amodoutours.com/rretwxj/Buy-Sell_Agreement_7730054_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353613/","spamhaus"
 "353612","2020-04-29 07:20:32","http://myexpertca.in/fomi/197064/Buy-Sell_Agreement_197064_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353612/","spamhaus"
 "353611","2020-04-29 07:20:24","http://kandiandcolor.codeworkscanada.com/v/05078/Buy-Sell_Agreement_05078_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353611/","spamhaus"
 "353610","2020-04-29 07:20:19","https://miraab.ir/wp-content/uploads/2020/04/tk/5646120/Buy-Sell_Agreement_5646120_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353610/","spamhaus"
-"353609","2020-04-29 07:20:07","https://www.cinnamoncreations.com.au/h/Buy-Sell_Agreement_04836_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353609/","spamhaus"
+"353609","2020-04-29 07:20:07","https://www.cinnamoncreations.com.au/h/Buy-Sell_Agreement_04836_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353609/","spamhaus"
 "353608","2020-04-29 07:00:06","https://pastebin.com/raw/bFRA2q5U","offline","malware_download","None","https://urlhaus.abuse.ch/url/353608/","JayTHL"
 "353607","2020-04-29 06:57:03","http://88.218.16.38/PcKZudZGCtvEohA.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/353607/","abuse_ch"
 "353606","2020-04-29 06:47:16","http://208.68.39.30/armv5l","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353606/","zbetcheckin"
@@ -2341,7 +2719,7 @@
 "353590","2020-04-29 06:38:59","https://aliyousefpoor.com/urcu/Buy-Sell_Agreement_9315_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353590/","spamhaus"
 "353589","2020-04-29 06:38:52","https://www.mfpburundi.bi/wp-content/uploads/2020/04/pb/3220667/Buy-Sell_Agreement_3220667_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353589/","spamhaus"
 "353588","2020-04-29 06:38:47","https://nmal.info/ntsphsl/1838107/Buy-Sell_Agreement_1838107_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353588/","spamhaus"
-"353587","2020-04-29 06:38:45","http://jjjexx.329263.com/vi/Buy-Sell_Agreement_6004581_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353587/","spamhaus"
+"353587","2020-04-29 06:38:45","http://jjjexx.329263.com/vi/Buy-Sell_Agreement_6004581_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353587/","spamhaus"
 "353586","2020-04-29 06:38:42","http://mlbfreestream.gq/n/Buy-Sell_Agreement_410171_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353586/","spamhaus"
 "353585","2020-04-29 06:38:36","http://cpagrace.cl/k/Buy-Sell_Agreement_3571_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353585/","spamhaus"
 "353584","2020-04-29 06:37:51","http://bookmytripping.com/tgxmxcm/822343/Buy-Sell_Agreement_822343_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353584/","spamhaus"
@@ -2357,18 +2735,18 @@
 "353574","2020-04-29 06:37:09","http://vaeqpu.329263.com/al/Buy-Sell_Agreement_13490_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353574/","spamhaus"
 "353573","2020-04-29 06:36:44","http://livetvsports.ml/z/4244/Buy-Sell_Agreement_4244_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353573/","spamhaus"
 "353572","2020-04-29 06:36:38","https://dienmaycu.vn/rcckjv/Buy-Sell_Agreement_8596071_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353572/","spamhaus"
-"353571","2020-04-29 06:36:35","http://vaeqpu.329263.com/al/56057178/Buy-Sell_Agreement_56057178_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353571/","spamhaus"
+"353571","2020-04-29 06:36:35","http://vaeqpu.329263.com/al/56057178/Buy-Sell_Agreement_56057178_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353571/","spamhaus"
 "353570","2020-04-29 06:36:30","https://www.loodgieterjoost.be/wp-content/uploads/2020/04/osiwprp/82152/Buy-Sell_Agreement_82152_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353570/","spamhaus"
-"353569","2020-04-29 06:36:28","http://85.217.170.105/mips","offline","malware_download","32-bit,elf,mips","https://urlhaus.abuse.ch/url/353569/","geenensp"
+"353569","2020-04-29 06:36:28","http://85.217.170.105/mips","online","malware_download","32-bit,elf,mips","https://urlhaus.abuse.ch/url/353569/","geenensp"
 "353568","2020-04-29 06:36:26","http://85.217.170.105/XXX.sh","offline","malware_download","script","https://urlhaus.abuse.ch/url/353568/","geenensp"
 "353567","2020-04-29 06:36:24","http://rentaroom.ml/oqqthv/Buy-Sell_Agreement_8132_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353567/","spamhaus"
 "353566","2020-04-29 06:36:20","http://bookmytripping.com/tgxmxcm/Buy-Sell_Agreement_781209_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353566/","spamhaus"
-"353565","2020-04-29 06:36:09","http://sexybaccarat.329263.com/k/Buy-Sell_Agreement_3633_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353565/","spamhaus"
+"353565","2020-04-29 06:36:09","http://sexybaccarat.329263.com/k/Buy-Sell_Agreement_3633_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353565/","spamhaus"
 "353564","2020-04-29 06:36:06","https://rugab.se/c/3260/Buy-Sell_Agreement_3260_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353564/","spamhaus"
 "353563","2020-04-29 06:36:04","http://vasylivka.lebrada.gov.ua/wp-content/themes/calliope/mwqpxes/024105/Buy-Sell_Agreement_024105_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353563/","spamhaus"
 "353562","2020-04-29 06:36:02","http://tulmix-beton.ru/hpoakm/27343853/Buy-Sell_Agreement_27343853_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353562/","spamhaus"
 "353561","2020-04-29 06:36:00","http://47.46.231.38:54076/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353561/","geenensp"
-"353560","2020-04-29 06:35:56","http://178.242.54.236:49542/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353560/","geenensp"
+"353560","2020-04-29 06:35:56","http://178.242.54.236:49542/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353560/","geenensp"
 "353559","2020-04-29 06:35:24","https://www.dzyzz.cn/wp-content/plugins/apikey/zwj/0855278/Buy-Sell_Agreement_0855278_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353559/","spamhaus"
 "353558","2020-04-29 06:35:08","http://ptsslot.329263.com/royph/Buy-Sell_Agreement_854321_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353558/","spamhaus"
 "353557","2020-04-29 06:35:04","http://27.147.40.128:22976/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353557/","geenensp"
@@ -2376,13 +2754,13 @@
 "353555","2020-04-29 06:34:42","http://lakropack.com/s/Buy-Sell_Agreement_94827816_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353555/","spamhaus"
 "353554","2020-04-29 06:34:37","https://www.cinnamoncreations.com.au/h/Buy-Sell_Agreement_46257_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353554/","spamhaus"
 "353553","2020-04-29 06:34:32","https://wwealthllc.com/sjokmsq/Buy-Sell_Agreement_58805622_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353553/","spamhaus"
-"353552","2020-04-29 06:34:28","http://vaeqpu.329263.com/al/Buy-Sell_Agreement_62844279_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353552/","spamhaus"
+"353552","2020-04-29 06:34:28","http://vaeqpu.329263.com/al/Buy-Sell_Agreement_62844279_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353552/","spamhaus"
 "353551","2020-04-29 06:34:24","http://lakropack.com/s/Buy-Sell_Agreement_723121_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353551/","spamhaus"
 "353550","2020-04-29 06:34:21","http://lakropack.com/s/Buy-Sell_Agreement_3132_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353550/","spamhaus"
 "353549","2020-04-29 06:34:17","http://veniceshop.ru/wp-content/uploads/2020/04/xwrxtgh/Buy-Sell_Agreement_64879608_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353549/","spamhaus"
-"353548","2020-04-29 06:34:15","http://rentaroom.ml/oqqthv/Buy-Sell_Agreement_3534_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353548/","spamhaus"
-"353547","2020-04-29 06:34:09","http://www.upendiveterinariovalencia.es/wp-content/uploads/2020/04/ywa/Buy-Sell_Agreement_1513_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353547/","spamhaus"
-"353546","2020-04-29 06:34:06","http://sportshlive.xyz/gzld/Buy-Sell_Agreement_52106_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353546/","spamhaus"
+"353548","2020-04-29 06:34:15","http://rentaroom.ml/oqqthv/Buy-Sell_Agreement_3534_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353548/","spamhaus"
+"353547","2020-04-29 06:34:09","http://www.upendiveterinariovalencia.es/wp-content/uploads/2020/04/ywa/Buy-Sell_Agreement_1513_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353547/","spamhaus"
+"353546","2020-04-29 06:34:06","http://sportshlive.xyz/gzld/Buy-Sell_Agreement_52106_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353546/","spamhaus"
 "353545","2020-04-29 06:34:01","http://hdlive-espntv.live-sportshd.website/bpg/Buy-Sell_Agreement_5643214_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353545/","spamhaus"
 "353544","2020-04-29 06:33:59","https://aliyousefpoor.com/urcu/Buy-Sell_Agreement_53675293_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353544/","spamhaus"
 "353543","2020-04-29 06:33:56","http://vasylivka.lebrada.gov.ua/wp-content/themes/calliope/mwqpxes/373191/Buy-Sell_Agreement_373191_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353543/","spamhaus"
@@ -2393,25 +2771,25 @@
 "353538","2020-04-29 06:32:29","http://avto-pro.hostenko.com/too/Buy-Sell_Agreement_148815_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353538/","spamhaus"
 "353537","2020-04-29 06:32:28","http://41.64.170.241:38406/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353537/","geenensp"
 "353536","2020-04-29 06:32:23","https://siseco.mx/wp-content/uploads/2020/04/beomqxc/5997272/Buy-Sell_Agreement_5997272_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353536/","spamhaus"
-"353535","2020-04-29 06:32:18","http://arowanafishforsale.com/dbmwl/03134/Buy-Sell_Agreement_03134_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353535/","spamhaus"
+"353535","2020-04-29 06:32:18","http://arowanafishforsale.com/dbmwl/03134/Buy-Sell_Agreement_03134_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353535/","spamhaus"
 "353534","2020-04-29 06:24:17","http://175.212.52.9:65408/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353534/","geenensp"
-"353533","2020-04-29 06:24:13","http://jjjexx.329263.com/vi/79300/Buy-Sell_Agreement_79300_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353533/","spamhaus"
+"353533","2020-04-29 06:24:13","http://jjjexx.329263.com/vi/79300/Buy-Sell_Agreement_79300_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353533/","spamhaus"
 "353532","2020-04-29 06:23:40","http://208.68.39.30/mips","offline","malware_download","32-bit,elf,mips","https://urlhaus.abuse.ch/url/353532/","geenensp"
 "353531","2020-04-29 06:23:37","http://208.68.39.30/EkSgbins.sh","offline","malware_download","script","https://urlhaus.abuse.ch/url/353531/","geenensp"
 "353530","2020-04-29 06:23:34","http://218.32.118.1:13579/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353530/","geenensp"
 "353529","2020-04-29 06:23:29","https://www.eposar.com.ar/mjpen/Buy-Sell_Agreement_1922_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353529/","spamhaus"
 "353528","2020-04-29 06:22:52","http://kandiandcolor.codeworkscanada.com/v/8289188/Buy-Sell_Agreement_8289188_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353528/","spamhaus"
 "353527","2020-04-29 06:22:19","http://myexpertca.in/fomi/0042/Buy-Sell_Agreement_0042_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353527/","spamhaus"
-"353526","2020-04-29 06:21:45","https://brenleyquartzgh.com/ga/3329/Buy-Sell_Agreement_3329_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353526/","spamhaus"
+"353526","2020-04-29 06:21:45","https://brenleyquartzgh.com/ga/3329/Buy-Sell_Agreement_3329_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353526/","spamhaus"
 "353525","2020-04-29 06:21:10","http://escarateeventos.ladevi.cl/yworbn/8064878/Buy-Sell_Agreement_8064878_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353525/","spamhaus"
-"353524","2020-04-29 06:20:07","http://lagalaxy88easy.329263.com/lbrnxxd/27873/Buy-Sell_Agreement_27873_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353524/","spamhaus"
+"353524","2020-04-29 06:20:07","http://lagalaxy88easy.329263.com/lbrnxxd/27873/Buy-Sell_Agreement_27873_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353524/","spamhaus"
 "353523","2020-04-29 06:19:34","https://www.foreveramericabrands.com/xaayvq/7084/Buy-Sell_Agreement_7084_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353523/","spamhaus"
 "353522","2020-04-29 06:10:03","https://pastebin.com/raw/ZpSk6dFU","offline","malware_download","None","https://urlhaus.abuse.ch/url/353522/","JayTHL"
 "353521","2020-04-29 06:07:39","http://199.83.206.58:57977/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353521/","Gandylyan1"
 "353520","2020-04-29 06:07:35","http://120.69.89.50:52503/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353520/","Gandylyan1"
 "353519","2020-04-29 06:07:30","http://125.41.82.28:48743/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353519/","Gandylyan1"
 "353518","2020-04-29 06:07:26","http://42.235.55.173:55956/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353518/","Gandylyan1"
-"353517","2020-04-29 06:07:20","http://59.174.151.114:49181/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353517/","Gandylyan1"
+"353517","2020-04-29 06:07:20","http://59.174.151.114:49181/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353517/","Gandylyan1"
 "353516","2020-04-29 06:06:56","http://221.160.177.226:3082/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353516/","Gandylyan1"
 "353515","2020-04-29 06:06:51","http://125.44.22.227:40734/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353515/","Gandylyan1"
 "353514","2020-04-29 06:06:43","http://117.93.216.98:49424/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353514/","Gandylyan1"
@@ -2428,21 +2806,21 @@
 "353503","2020-04-29 06:04:31","http://211.137.225.76:52437/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353503/","Gandylyan1"
 "353502","2020-04-29 06:04:18","http://183.130.71.167:60908/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353502/","Gandylyan1"
 "353501","2020-04-29 06:04:14","http://27.41.175.86:43919/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353501/","Gandylyan1"
-"353500","2020-04-29 05:39:03","http://45.95.168.254:1691/dvrbot.sparc","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/353500/","zbetcheckin"
+"353500","2020-04-29 05:39:03","http://45.95.168.254:1691/dvrbot.sparc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/353500/","zbetcheckin"
 "353499","2020-04-29 05:08:09","https://pastebin.com/raw/m8JBX3eU","offline","malware_download","None","https://urlhaus.abuse.ch/url/353499/","JayTHL"
 "353498","2020-04-29 05:08:04","https://pastebin.com/raw/JCD5St2R","offline","malware_download","None","https://urlhaus.abuse.ch/url/353498/","JayTHL"
-"353497","2020-04-29 04:39:20","http://85.217.170.105/armv6l","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353497/","zbetcheckin"
-"353496","2020-04-29 04:39:18","http://85.217.170.105/sh4","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353496/","zbetcheckin"
-"353495","2020-04-29 04:39:16","http://85.217.170.105/powerpc","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353495/","zbetcheckin"
-"353494","2020-04-29 04:39:14","http://85.217.170.105/i586","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353494/","zbetcheckin"
-"353493","2020-04-29 04:39:12","http://85.217.170.105/armv4l","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353493/","zbetcheckin"
-"353492","2020-04-29 04:39:10","http://85.217.170.105/m68k","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353492/","zbetcheckin"
+"353497","2020-04-29 04:39:20","http://85.217.170.105/armv6l","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353497/","zbetcheckin"
+"353496","2020-04-29 04:39:18","http://85.217.170.105/sh4","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353496/","zbetcheckin"
+"353495","2020-04-29 04:39:16","http://85.217.170.105/powerpc","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353495/","zbetcheckin"
+"353494","2020-04-29 04:39:14","http://85.217.170.105/i586","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353494/","zbetcheckin"
+"353493","2020-04-29 04:39:12","http://85.217.170.105/armv4l","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353493/","zbetcheckin"
+"353492","2020-04-29 04:39:10","http://85.217.170.105/m68k","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353492/","zbetcheckin"
 "353491","2020-04-29 04:39:08","http://46.100.56.152:59984/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/353491/","zbetcheckin"
-"353490","2020-04-29 04:39:03","http://85.217.170.105/x86","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353490/","zbetcheckin"
-"353489","2020-04-29 04:38:03","http://85.217.170.105/sparc","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353489/","zbetcheckin"
-"353488","2020-04-29 04:35:05","http://85.217.170.105/mipsel","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353488/","zbetcheckin"
-"353487","2020-04-29 04:35:03","http://85.217.170.105/armv5l","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353487/","zbetcheckin"
-"353486","2020-04-29 04:34:03","http://85.217.170.105/i686","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353486/","zbetcheckin"
+"353490","2020-04-29 04:39:03","http://85.217.170.105/x86","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353490/","zbetcheckin"
+"353489","2020-04-29 04:38:03","http://85.217.170.105/sparc","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353489/","zbetcheckin"
+"353488","2020-04-29 04:35:05","http://85.217.170.105/mipsel","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353488/","zbetcheckin"
+"353487","2020-04-29 04:35:03","http://85.217.170.105/armv5l","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353487/","zbetcheckin"
+"353486","2020-04-29 04:34:03","http://85.217.170.105/i686","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353486/","zbetcheckin"
 "353485","2020-04-29 04:31:11","https://pastebin.com/raw/cktFJ35y","offline","malware_download","None","https://urlhaus.abuse.ch/url/353485/","JayTHL"
 "353484","2020-04-29 04:31:07","https://pastebin.com/raw/7GsCwkbe","offline","malware_download","None","https://urlhaus.abuse.ch/url/353484/","JayTHL"
 "353483","2020-04-29 04:09:06","http://139.99.113.2/a-r.m-6.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353483/","zbetcheckin"
@@ -2464,11 +2842,11 @@
 "353467","2020-04-29 03:57:07","http://139.99.113.2/x-3.2-.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353467/","zbetcheckin"
 "353466","2020-04-29 03:57:04","http://139.99.113.2/p-p.c-.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353466/","zbetcheckin"
 "353465","2020-04-29 03:54:03","http://95.179.254.204/bins/ppc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/353465/","zbetcheckin"
-"353464","2020-04-29 03:46:40","http://45.95.168.254:1691/dvrbot.m68k","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/353464/","zbetcheckin"
+"353464","2020-04-29 03:46:40","http://45.95.168.254:1691/dvrbot.m68k","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/353464/","zbetcheckin"
 "353463","2020-04-29 03:43:03","http://139.99.113.2/SnOoPy.sh","offline","malware_download","shellscript","https://urlhaus.abuse.ch/url/353463/","zbetcheckin"
 "353462","2020-04-29 03:42:04","https://pastebin.com/raw/ND5cKisp","offline","malware_download","None","https://urlhaus.abuse.ch/url/353462/","JayTHL"
-"353461","2020-04-29 03:39:03","http://45.95.168.254:1691/dvrbot.mipsel","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/353461/","zbetcheckin"
-"353460","2020-04-29 03:35:04","http://45.95.168.254:1691/dvrbot.sh4","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/353460/","zbetcheckin"
+"353461","2020-04-29 03:39:03","http://45.95.168.254:1691/dvrbot.mipsel","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/353461/","zbetcheckin"
+"353460","2020-04-29 03:35:04","http://45.95.168.254:1691/dvrbot.sh4","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/353460/","zbetcheckin"
 "353459","2020-04-29 03:29:36","https://pastebin.com/raw/EzUgEUmD","offline","malware_download","None","https://urlhaus.abuse.ch/url/353459/","JayTHL"
 "353458","2020-04-29 03:28:03","http://95.179.254.204/update.sh","offline","malware_download","shellscript","https://urlhaus.abuse.ch/url/353458/","zbetcheckin"
 "353457","2020-04-29 03:05:44","http://221.210.211.132:47374/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353457/","Gandylyan1"
@@ -2494,7 +2872,7 @@
 "353437","2020-04-29 03:04:04","http://42.234.108.186:47016/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353437/","Gandylyan1"
 "353436","2020-04-29 02:45:04","http://159.89.180.180/boredbins.sh","offline","malware_download","shellscript","https://urlhaus.abuse.ch/url/353436/","zbetcheckin"
 "353435","2020-04-29 02:40:04","https://pastebin.com/raw/SrVaVL2B","offline","malware_download","None","https://urlhaus.abuse.ch/url/353435/","JayTHL"
-"353434","2020-04-29 02:38:02","http://45.148.122.113/mods.sh","online","malware_download","shellscript","https://urlhaus.abuse.ch/url/353434/","zbetcheckin"
+"353434","2020-04-29 02:38:02","http://45.148.122.113/mods.sh","offline","malware_download","shellscript","https://urlhaus.abuse.ch/url/353434/","zbetcheckin"
 "353433","2020-04-29 00:14:05","http://103.146.124.143/21","offline","malware_download","elf","https://urlhaus.abuse.ch/url/353433/","zbetcheckin"
 "353432","2020-04-29 00:10:07","http://www.zskyjov.cz/data/layout/flags/rtask.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/353432/","zbetcheckin"
 "353431","2020-04-29 00:06:03","http://110.179.30.218:39032/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353431/","Gandylyan1"
@@ -2553,15 +2931,15 @@
 "353378","2020-04-28 19:42:14","https://pastebin.com/raw/pNdajfcr","offline","malware_download","None","https://urlhaus.abuse.ch/url/353378/","JayTHL"
 "353377","2020-04-28 19:42:10","http://bookmytripping.com/tgxmxcm/Buy-Sell_Agreement_0929_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353377/","spamhaus"
 "353376","2020-04-28 19:42:06","http://canvasprint.ru/wp-content/uploads/2020/04/izrz/2285543/Buy-Sell_Agreement_2285543_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353376/","spamhaus"
-"353375","2020-04-28 19:36:31","http://rentaroom.ml/oqqthv/710814/Buy-Sell_Agreement_710814_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353375/","spamhaus"
+"353375","2020-04-28 19:36:31","http://rentaroom.ml/oqqthv/710814/Buy-Sell_Agreement_710814_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353375/","spamhaus"
 "353374","2020-04-28 19:36:26","https://siseco.mx/wp-content/uploads/2020/04/beomqxc/Buy-Sell_Agreement_19253_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353374/","spamhaus"
 "353373","2020-04-28 19:36:20","https://drwendyellis.com/laqrip/89870436/Buy-Sell_Agreement_89870436_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353373/","spamhaus"
 "353372","2020-04-28 19:36:07","http://arowanafishforsale.com/dbmwl/03121/Buy-Sell_Agreement_03121_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353372/","spamhaus"
 "353371","2020-04-28 19:32:05","http://kosslouer.com/uu/596088/Buy-Sell_Agreement_596088_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353371/","spamhaus"
-"353370","2020-04-28 19:32:03","http://healtina.com/xcaspvi/Buy-Sell_Agreement_1596675_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353370/","spamhaus"
+"353370","2020-04-28 19:32:03","http://healtina.com/xcaspvi/Buy-Sell_Agreement_1596675_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353370/","spamhaus"
 "353369","2020-04-28 19:27:13","https://rugab.se/c/81176/Buy-Sell_Agreement_81176_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353369/","spamhaus"
 "353368","2020-04-28 19:27:10","http://maharatal3zl.com/xdlycfp/2930651/Buy-Sell_Agreement_2930651_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353368/","spamhaus"
-"353367","2020-04-28 19:27:05","http://earningtipsbd.com/pn/Buy-Sell_Agreement_2344798_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353367/","spamhaus"
+"353367","2020-04-28 19:27:05","http://earningtipsbd.com/pn/Buy-Sell_Agreement_2344798_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353367/","spamhaus"
 "353366","2020-04-28 19:26:03","http://www.amodoutours.com/rretwxj/68562/Buy-Sell_Agreement_68562_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353366/","spamhaus"
 "353365","2020-04-28 19:25:24","http://qlifamily.org/homemap/defense.php","offline","malware_download","Dridex,zip","https://urlhaus.abuse.ch/url/353365/","malware_traffic"
 "353364","2020-04-28 19:25:18","https://wmagri.co.uk/wp-content/plugins/wordfence/modules/login-security/include.php","offline","malware_download","Dridex,zip","https://urlhaus.abuse.ch/url/353364/","malware_traffic"
@@ -2573,43 +2951,43 @@
 "353358","2020-04-28 19:24:42","http://humdingerdesigns.com.au/mockup/wp-includes/js/jquery/ui/api.lib.php","offline","malware_download","Dridex,zip","https://urlhaus.abuse.ch/url/353358/","malware_traffic"
 "353357","2020-04-28 19:24:35","http://harimbaofek.net/wp-content/themes/twentynineteen/sass/blocks/api.core.php","offline","malware_download","Dridex,zip","https://urlhaus.abuse.ch/url/353357/","malware_traffic"
 "353356","2020-04-28 19:24:30","http://dentistesamson.com/wp-content/plugins/LayerSlider/demos/carousel/framework.php","offline","malware_download","Dridex,zip","https://urlhaus.abuse.ch/url/353356/","malware_traffic"
-"353355","2020-04-28 19:24:27","http://amedeoscognamiglio.329263.com/i/Buy-Sell_Agreement_5137311_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353355/","spamhaus"
+"353355","2020-04-28 19:24:27","http://amedeoscognamiglio.329263.com/i/Buy-Sell_Agreement_5137311_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353355/","spamhaus"
 "353354","2020-04-28 19:24:22","https://www.dzyzz.cn/wp-content/plugins/apikey/zwj/7778718/Buy-Sell_Agreement_7778718_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353354/","spamhaus"
 "353353","2020-04-28 19:24:14","http://ufabet168168.329263.com/tmpf/Buy-Sell_Agreement_2467273_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353353/","spamhaus"
 "353352","2020-04-28 19:24:09","http://hdlive-espntv.live-sportshd.website/bpg/Buy-Sell_Agreement_7257829_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353352/","spamhaus"
-"353351","2020-04-28 19:24:07","http://kgfs3.329263.com/cvsf/Buy-Sell_Agreement_2272_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353351/","spamhaus"
+"353351","2020-04-28 19:24:07","http://kgfs3.329263.com/cvsf/Buy-Sell_Agreement_2272_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353351/","spamhaus"
 "353350","2020-04-28 19:24:03","http://bookmytripping.com/tgxmxcm/49493346/Buy-Sell_Agreement_49493346_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353350/","spamhaus"
 "353349","2020-04-28 19:19:17","http://filegotosecureothers.duckdns.org/dmb/vbc.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/353349/","abuse_ch"
 "353348","2020-04-28 19:19:13","http://vasylivka.lebrada.gov.ua/wp-content/themes/calliope/mwqpxes/Buy-Sell_Agreement_85618_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353348/","spamhaus"
-"353347","2020-04-28 19:17:19","http://vaeqpu.329263.com/al/7396/Buy-Sell_Agreement_7396_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353347/","spamhaus"
+"353347","2020-04-28 19:17:19","http://vaeqpu.329263.com/al/7396/Buy-Sell_Agreement_7396_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353347/","spamhaus"
 "353346","2020-04-28 19:17:12","http://kosslouer.com/uu/Buy-Sell_Agreement_48064345_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353346/","spamhaus"
 "353345","2020-04-28 19:17:07","http://173.21.50.161:16647/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353345/","geenensp"
 "353344","2020-04-28 19:17:04","http://yucatanentiemporeal.com/wp-content/uploads/2020/04/nwl/Buy-Sell_Agreement_80104_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353344/","spamhaus"
 "353343","2020-04-28 19:04:56","https://paste.ee/r/Fb8Wd","offline","malware_download","Encoded","https://urlhaus.abuse.ch/url/353343/","Jouliok"
 "353342","2020-04-28 19:04:48","http://ptsslot.329263.com/royph/8816/Buy-Sell_Agreement_8816_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353342/","spamhaus"
-"353341","2020-04-28 19:04:32","http://rentaroom.ml/oqqthv/6490074/Buy-Sell_Agreement_6490074_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353341/","spamhaus"
+"353341","2020-04-28 19:04:32","http://rentaroom.ml/oqqthv/6490074/Buy-Sell_Agreement_6490074_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353341/","spamhaus"
 "353340","2020-04-28 19:04:29","https://how.ph/mrb/2579/Buy-Sell_Agreement_2579_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353340/","spamhaus"
 "353339","2020-04-28 19:04:21","http://yucatanentiemporeal.com/wp-content/uploads/2020/04/nwl/Buy-Sell_Agreement_46431540_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353339/","spamhaus"
 "353338","2020-04-28 19:04:17","http://hdlive-espntv.live-sportshd.website/bpg/5395355/Buy-Sell_Agreement_5395355_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353338/","spamhaus"
 "353337","2020-04-28 19:04:15","https://delmaestro.cl/wtdeng/82374/Buy-Sell_Agreement_82374_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353337/","spamhaus"
 "353336","2020-04-28 19:04:11","http://maharatal3zl.com/xdlycfp/Buy-Sell_Agreement_0922006_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353336/","spamhaus"
-"353335","2020-04-28 19:04:06","https://brenleyquartzgh.com/ga/Buy-Sell_Agreement_21615_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353335/","spamhaus"
-"353334","2020-04-28 19:03:02","http://fifa555easy.329263.com/x/38011086/Buy-Sell_Agreement_38011086_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353334/","spamhaus"
+"353335","2020-04-28 19:04:06","https://brenleyquartzgh.com/ga/Buy-Sell_Agreement_21615_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353335/","spamhaus"
+"353334","2020-04-28 19:03:02","http://fifa555easy.329263.com/x/38011086/Buy-Sell_Agreement_38011086_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353334/","spamhaus"
 "353333","2020-04-28 19:02:55","http://escarateeventos.ladevi.cl/yworbn/44978/Buy-Sell_Agreement_44978_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353333/","spamhaus"
 "353332","2020-04-28 19:02:52","https://nmal.info/ntsphsl/84675/Buy-Sell_Agreement_84675_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353332/","spamhaus"
-"353331","2020-04-28 19:02:50","http://lagalaxy88easy.329263.com/lbrnxxd/Buy-Sell_Agreement_7744679_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353331/","spamhaus"
+"353331","2020-04-28 19:02:50","http://lagalaxy88easy.329263.com/lbrnxxd/Buy-Sell_Agreement_7744679_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353331/","spamhaus"
 "353330","2020-04-28 19:02:45","http://veniceshop.ru/wp-content/uploads/2020/04/xwrxtgh/Buy-Sell_Agreement_624286_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353330/","spamhaus"
 "353329","2020-04-28 19:02:42","https://delmaestro.cl/wtdeng/Buy-Sell_Agreement_3701_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353329/","spamhaus"
 "353328","2020-04-28 19:02:38","https://brenleyquartzgh.com/ga/91417284/Buy-Sell_Agreement_91417284_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353328/","spamhaus"
 "353327","2020-04-28 19:02:33","http://elabugablog.ru/zzj/Buy-Sell_Agreement_10640_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353327/","spamhaus"
-"353326","2020-04-28 19:02:30","https://dienmaycu.vn/rcckjv/4926121/Buy-Sell_Agreement_4926121_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353326/","spamhaus"
+"353326","2020-04-28 19:02:30","https://dienmaycu.vn/rcckjv/4926121/Buy-Sell_Agreement_4926121_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353326/","spamhaus"
 "353325","2020-04-28 19:02:26","http://avto-pro.hostenko.com/too/Buy-Sell_Agreement_738797_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353325/","spamhaus"
 "353324","2020-04-28 19:02:15","http://23.95.89.71/skid.mips","offline","malware_download","32-bit,elf,mips","https://urlhaus.abuse.ch/url/353324/","geenensp"
 "353323","2020-04-28 19:01:42","http://85.204.116.216/skid.sh","offline","malware_download","script","https://urlhaus.abuse.ch/url/353323/","geenensp"
 "353322","2020-04-28 19:01:39","http://livetvsports.ml/z/5453506/Buy-Sell_Agreement_5453506_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353322/","spamhaus"
-"353321","2020-04-28 19:01:32","http://88.156.169.98:59344/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353321/","geenensp"
+"353321","2020-04-28 19:01:32","http://88.156.169.98:59344/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353321/","geenensp"
 "353320","2020-04-28 19:01:22","https://aliyousefpoor.com/urcu/Buy-Sell_Agreement_99219_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353320/","spamhaus"
-"353319","2020-04-28 19:01:19","http://www.upendiveterinariovalencia.es/wp-content/uploads/2020/04/ywa/Buy-Sell_Agreement_88438622_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353319/","spamhaus"
+"353319","2020-04-28 19:01:19","http://www.upendiveterinariovalencia.es/wp-content/uploads/2020/04/ywa/Buy-Sell_Agreement_88438622_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353319/","spamhaus"
 "353318","2020-04-28 19:01:13","http://livetvsports.ml/z/38282630/Buy-Sell_Agreement_38282630_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353318/","spamhaus"
 "353317","2020-04-28 19:00:38","https://nmal.info/ntsphsl/8805/Buy-Sell_Agreement_8805_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353317/","spamhaus"
 "353316","2020-04-28 19:00:05","http://yucatanentiemporeal.com/wp-content/uploads/2020/04/nwl/29202/Buy-Sell_Agreement_29202_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353316/","spamhaus"
@@ -2618,7 +2996,7 @@
 "353313","2020-04-28 18:24:04","http://88.218.16.37/D3nXjwy5EMjHNdM.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/353313/","zbetcheckin"
 "353312","2020-04-28 18:22:08","https://digibookspublishing.com/license.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/353312/","zbetcheckin"
 "353311","2020-04-28 18:21:10","http://modcloudserver.eu/ahihi/rawone.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/353311/","zbetcheckin"
-"353310","2020-04-28 18:20:38","http://modcloudserver.eu/stanz/stanz.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/353310/","zbetcheckin"
+"353310","2020-04-28 18:20:38","http://modcloudserver.eu/stanz/stanz.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/353310/","zbetcheckin"
 "353309","2020-04-28 18:13:17","http://ufabet168168.329263.com/tmpf/9173652/Buy-Sell_Agreement_9173652_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353309/","spamhaus"
 "353308","2020-04-28 18:13:03","http://bookmytripping.com/tgxmxcm/Buy-Sell_Agreement_04173399_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353308/","spamhaus"
 "353307","2020-04-28 18:08:09","http://mlbfreestream.gq/n/042516/Buy-Sell_Agreement_042516_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353307/","spamhaus"
@@ -2634,7 +3012,7 @@
 "353297","2020-04-28 18:06:33","http://bbfjjf8.com/we20lo85/aio0i32p.php?l=nok3.cab","offline","malware_download","geofenced,us,USA,Valak","https://urlhaus.abuse.ch/url/353297/","JAMESWT_MHT"
 "353296","2020-04-28 18:06:28","http://bbfjjf8.com/we20lo85/aio0i32p.php?l=nok2.cab","offline","malware_download","geofenced,us,USA,Valak","https://urlhaus.abuse.ch/url/353296/","JAMESWT_MHT"
 "353295","2020-04-28 18:06:23","http://bbfjjf8.com/we20lo85/aio0i32p.php?l=nok1.cab","offline","malware_download","geofenced,us,USA,Valak","https://urlhaus.abuse.ch/url/353295/","JAMESWT_MHT"
-"353294","2020-04-28 18:06:19","https://dienmaycu.vn/rcckjv/Buy-Sell_Agreement_4487_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353294/","spamhaus"
+"353294","2020-04-28 18:06:19","https://dienmaycu.vn/rcckjv/Buy-Sell_Agreement_4487_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353294/","spamhaus"
 "353293","2020-04-28 18:06:11","https://www.foreveramericabrands.com/xaayvq/7554389/Buy-Sell_Agreement_7554389_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353293/","spamhaus"
 "353292","2020-04-28 18:06:06","https://www.mfpburundi.bi/wp-content/uploads/2020/04/pb/Buy-Sell_Agreement_36241823_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353292/","spamhaus"
 "353291","2020-04-28 18:05:31","http://182.116.107.161:50650/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353291/","Gandylyan1"
@@ -2652,9 +3030,9 @@
 "353279","2020-04-28 18:04:05","http://182.119.102.175:52826/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353279/","Gandylyan1"
 "353278","2020-04-28 17:57:41","http://healtina.com/xcaspvi/9824902/Buy-Sell_Agreement_9824902_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353278/","spamhaus"
 "353277","2020-04-28 17:57:08","http://avto-pro.hostenko.com/too/4955024/Buy-Sell_Agreement_4955024_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353277/","spamhaus"
-"353276","2020-04-28 17:56:33","http://www.gainsdirectory.com/imtlt/Buy-Sell_Agreement_7954433_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353276/","spamhaus"
+"353276","2020-04-28 17:56:33","http://www.gainsdirectory.com/imtlt/Buy-Sell_Agreement_7954433_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353276/","spamhaus"
 "353275","2020-04-28 17:51:34","http://genqur.com/_flox.exe","offline","malware_download","Dridex,exe","https://urlhaus.abuse.ch/url/353275/","abuse_ch"
-"353274","2020-04-28 17:47:13","https://royalplusmobile.ir/wp-content/uploads/2020/04/ohzjt/22076/Buy-Sell_Agreement_22076_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353274/","spamhaus"
+"353274","2020-04-28 17:47:13","https://royalplusmobile.ir/wp-content/uploads/2020/04/ohzjt/22076/Buy-Sell_Agreement_22076_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353274/","spamhaus"
 "353273","2020-04-28 17:47:07","http://escarateeventos.ladevi.cl/yworbn/1682/Buy-Sell_Agreement_1682_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353273/","spamhaus"
 "353272","2020-04-28 17:46:14","http://yucatanentiemporeal.com/wp-content/uploads/2020/04/nwl/1889533/Buy-Sell_Agreement_1889533_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353272/","spamhaus"
 "353271","2020-04-28 17:46:12","http://maharatal3zl.com/xdlycfp/38973/Buy-Sell_Agreement_38973_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353271/","spamhaus"
@@ -2665,32 +3043,32 @@
 "353266","2020-04-28 17:45:41","http://hdlive-espntv.live-sportshd.website/bpg/Buy-Sell_Agreement_43738_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353266/","spamhaus"
 "353265","2020-04-28 17:45:23","https://drwendyellis.com/laqrip/Buy-Sell_Agreement_456989_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353265/","spamhaus"
 "353264","2020-04-28 17:45:18","http://arowanafishforsale.com/dbmwl/Buy-Sell_Agreement_2539_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353264/","spamhaus"
-"353263","2020-04-28 17:34:26","http://www.alnahrainfilminstitute.com/kuhjz/Buy-Sell_Agreement_8555_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353263/","spamhaus"
+"353263","2020-04-28 17:34:26","http://www.alnahrainfilminstitute.com/kuhjz/Buy-Sell_Agreement_8555_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353263/","spamhaus"
 "353262","2020-04-28 17:34:20","https://nmal.info/ntsphsl/Buy-Sell_Agreement_726528_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353262/","spamhaus"
-"353261","2020-04-28 17:34:15","http://earningtipsbd.com/pn/Buy-Sell_Agreement_10363433_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353261/","spamhaus"
+"353261","2020-04-28 17:34:15","http://earningtipsbd.com/pn/Buy-Sell_Agreement_10363433_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353261/","spamhaus"
 "353260","2020-04-28 17:34:09","http://www.alnahrainfilminstitute.com/kuhjz/Buy-Sell_Agreement_94655_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353260/","spamhaus"
 "353259","2020-04-28 17:34:07","http://rentaroom.ml/oqqthv/9509826/Buy-Sell_Agreement_9509826_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353259/","spamhaus"
 "353258","2020-04-28 17:17:18","http://jjjexx.329263.com/vi/Buy-Sell_Agreement_6069_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353258/","spamhaus"
-"353257","2020-04-28 17:17:11","http://jjjexx.329263.com/vi/786917/Buy-Sell_Agreement_786917_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353257/","spamhaus"
+"353257","2020-04-28 17:17:11","http://jjjexx.329263.com/vi/786917/Buy-Sell_Agreement_786917_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353257/","spamhaus"
 "353256","2020-04-28 17:17:05","http://mlbfreestream.gq/n/Buy-Sell_Agreement_764238_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353256/","spamhaus"
 "353255","2020-04-28 17:16:14","https://miraab.ir/wp-content/uploads/2020/04/tk/298413/Buy-Sell_Agreement_298413_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353255/","spamhaus"
 "353254","2020-04-28 17:16:10","http://sportstrem.gq/imqmxkw/0835/Buy-Sell_Agreement_0835_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353254/","spamhaus"
 "353253","2020-04-28 17:14:18","http://www.alnahrainfilminstitute.com/kuhjz/Buy-Sell_Agreement_744702_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353253/","spamhaus"
 "353252","2020-04-28 17:14:16","https://brenleyquartzgh.com/ga/50602/Buy-Sell_Agreement_50602_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353252/","spamhaus"
-"353251","2020-04-28 17:14:10","http://lagalaxy88easy.329263.com/lbrnxxd/Buy-Sell_Agreement_538674_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353251/","spamhaus"
+"353251","2020-04-28 17:14:10","http://lagalaxy88easy.329263.com/lbrnxxd/Buy-Sell_Agreement_538674_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353251/","spamhaus"
 "353250","2020-04-28 17:12:08","http://vaeqpu.329263.com/al/73044112/Buy-Sell_Agreement_73044112_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353250/","spamhaus"
 "353249","2020-04-28 17:12:05","http://kandiandcolor.codeworkscanada.com/v/Buy-Sell_Agreement_6751913_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353249/","spamhaus"
 "353248","2020-04-28 17:10:06","http://uewizi.com/_flox.exe","offline","malware_download","Dridex,exe","https://urlhaus.abuse.ch/url/353248/","abuse_ch"
-"353247","2020-04-28 17:06:12","http://myexpertca.in/fomi/655664/Buy-Sell_Agreement_655664_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353247/","spamhaus"
+"353247","2020-04-28 17:06:12","http://myexpertca.in/fomi/655664/Buy-Sell_Agreement_655664_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353247/","spamhaus"
 "353246","2020-04-28 17:06:04","http://cpagrace.cl/k/Buy-Sell_Agreement_93929_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353246/","spamhaus"
 "353245","2020-04-28 17:04:56","http://79.179.199.159:19730/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353245/","geenensp"
 "353244","2020-04-28 17:04:53","https://alucard.online/yarx/Buy-Sell_Agreement_8227546_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353244/","spamhaus"
-"353243","2020-04-28 17:04:48","https://www.cinnamoncreations.com.au/h/44021075/Buy-Sell_Agreement_44021075_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353243/","spamhaus"
+"353243","2020-04-28 17:04:48","https://www.cinnamoncreations.com.au/h/44021075/Buy-Sell_Agreement_44021075_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353243/","spamhaus"
 "353242","2020-04-28 17:04:36","http://www.amodoutours.com/rretwxj/Buy-Sell_Agreement_76046632_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353242/","spamhaus"
 "353241","2020-04-28 17:04:34","https://drwendyellis.com/laqrip/Buy-Sell_Agreement_548596_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353241/","spamhaus"
 "353240","2020-04-28 17:04:31","https://delmaestro.cl/wtdeng/0829/Buy-Sell_Agreement_0829_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353240/","spamhaus"
-"353239","2020-04-28 17:04:27","http://ufabet168168.329263.com/tmpf/Buy-Sell_Agreement_8854_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353239/","spamhaus"
-"353238","2020-04-28 17:04:20","http://arowanafishforsale.com/dbmwl/Buy-Sell_Agreement_1148_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353238/","spamhaus"
+"353239","2020-04-28 17:04:27","http://ufabet168168.329263.com/tmpf/Buy-Sell_Agreement_8854_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353239/","spamhaus"
+"353238","2020-04-28 17:04:20","http://arowanafishforsale.com/dbmwl/Buy-Sell_Agreement_1148_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353238/","spamhaus"
 "353237","2020-04-28 17:04:09","http://kosslouer.com/uu/29800863/Buy-Sell_Agreement_29800863_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353237/","spamhaus"
 "353236","2020-04-28 17:04:06","http://djonur24.de/hdc/Buy-Sell_Agreement_5964970_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353236/","spamhaus"
 "353235","2020-04-28 17:01:30","http://denverktrade.xyz/css/bin_nSySIpsJT214.bin","offline","malware_download","encrypted,GuLoader,opendir","https://urlhaus.abuse.ch/url/353235/","abuse_ch"
@@ -2700,14 +3078,14 @@
 "353231","2020-04-28 17:01:05","http://denverktrade.xyz/css/bin_BgdIEZ91.bin","offline","malware_download","encrypted,GuLoader,opendir","https://urlhaus.abuse.ch/url/353231/","abuse_ch"
 "353230","2020-04-28 17:00:07","http://denverktrade.xyz/css/bin_KkhYIB85.bin","offline","malware_download","encrypted,Formbook,GuLoader,opendir","https://urlhaus.abuse.ch/url/353230/","abuse_ch"
 "353229","2020-04-28 16:52:25","http://amedeoscognamiglio.329263.com/i/8825/Buy-Sell_Agreement_8825_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353229/","spamhaus"
-"353228","2020-04-28 16:52:22","http://anadolutatili.com/xtfdux/1648/Buy-Sell_Agreement_1648_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353228/","spamhaus"
+"353228","2020-04-28 16:52:22","http://anadolutatili.com/xtfdux/1648/Buy-Sell_Agreement_1648_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353228/","spamhaus"
 "353227","2020-04-28 16:52:19","https://www.foreveramericabrands.com/xaayvq/4629/Buy-Sell_Agreement_4629_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353227/","spamhaus"
 "353226","2020-04-28 16:52:16","http://kosslouer.com/uu/3207/Buy-Sell_Agreement_3207_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353226/","spamhaus"
 "353225","2020-04-28 16:52:13","https://www.dzyzz.cn/wp-content/plugins/apikey/zwj/24506466/Buy-Sell_Agreement_24506466_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353225/","spamhaus"
 "353224","2020-04-28 16:52:06","http://kandiandcolor.codeworkscanada.com/v/85073/Buy-Sell_Agreement_85073_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353224/","spamhaus"
 "353223","2020-04-28 16:52:02","http://yucatanentiemporeal.com/wp-content/uploads/2020/04/nwl/000923/Buy-Sell_Agreement_000923_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353223/","spamhaus"
 "353222","2020-04-28 16:51:56","http://cyberemprende.cl/wjoh/Buy-Sell_Agreement_01828_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353222/","spamhaus"
-"353221","2020-04-28 16:51:48","https://wwealthllc.com/sjokmsq/Buy-Sell_Agreement_267705_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353221/","spamhaus"
+"353221","2020-04-28 16:51:48","https://wwealthllc.com/sjokmsq/Buy-Sell_Agreement_267705_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353221/","spamhaus"
 "353220","2020-04-28 16:51:44","http://ufabet168168.329263.com/tmpf/13339699/Buy-Sell_Agreement_13339699_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353220/","spamhaus"
 "353219","2020-04-28 16:51:39","https://aliyousefpoor.com/urcu/Buy-Sell_Agreement_173827_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353219/","spamhaus"
 "353218","2020-04-28 16:51:35","https://www.dzyzz.cn/wp-content/plugins/apikey/zwj/Buy-Sell_Agreement_0131373_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353218/","spamhaus"
@@ -2809,7 +3187,7 @@
 "353122","2020-04-28 13:18:26","http://mail.autoshops.online/gbh.exe","offline","malware_download","exe,ParallaxRAT","https://urlhaus.abuse.ch/url/353122/","abuse_ch"
 "353121","2020-04-28 12:58:06","http://thesecuritysoftwarescannerindustrgreat.duckdns.org/ba/vbc.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/353121/","oppimaniac"
 "353120","2020-04-28 12:45:17","http://bbfjjf8.com//we20lo85/aio0i32p.php?l=nok9.cab","offline","malware_download","None","https://urlhaus.abuse.ch/url/353120/","cocaman"
-"353119","2020-04-28 12:45:10","http://modcloudserver.eu//billiz/billiz.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/353119/","cocaman"
+"353119","2020-04-28 12:45:10","http://modcloudserver.eu//billiz/billiz.exe","online","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/353119/","cocaman"
 "353118","2020-04-28 12:45:03","http://88.218.16.37//Srr45MA8prCJUWh.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/353118/","cocaman"
 "353117","2020-04-28 12:40:08","http://mcdc.club/pics/784000.jpg","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/353117/","abuse_ch"
 "353116","2020-04-28 12:25:06","http://46.20.211.254:16982/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353116/","geenensp"
@@ -2834,7 +3212,7 @@
 "353097","2020-04-28 12:02:15","http://thesecuritysoftwarescannerindustrgreat.duckdns.org/all/black.exe","offline","malware_download","exe,Formbook","https://urlhaus.abuse.ch/url/353097/","ps66uk"
 "353096","2020-04-28 12:02:10","http://thesecuritysoftwarescannerindustrgreat.duckdns.org/all/big.exe","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/353096/","ps66uk"
 "353095","2020-04-28 12:02:05","http://123.241.112.94:45016/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353095/","geenensp"
-"353094","2020-04-28 11:55:10","http://171.235.177.250:50361/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353094/","geenensp"
+"353094","2020-04-28 11:55:10","http://171.235.177.250:50361/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353094/","geenensp"
 "353093","2020-04-28 11:53:03","http://soapstampingmachines.com/images/0/bbox.jpg","online","malware_download","exe,Smoke Loader","https://urlhaus.abuse.ch/url/353093/","zbetcheckin"
 "353092","2020-04-28 10:54:06","http://122.116.211.220:49808/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353092/","geenensp"
 "353091","2020-04-28 10:48:25","http://to4karu.ru/lierhgiojsgiouvbjnkfeiubg.bin","offline","malware_download","dll,Gozi","https://urlhaus.abuse.ch/url/353091/","abuse_ch"
@@ -2929,11 +3307,11 @@
 "353002","2020-04-28 07:35:14","https://youngspiritshop.com/docs_8s0/1548/Buy-Sell%20Agreement_1548_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353002/","spamhaus"
 "353001","2020-04-28 07:35:07","https://formadiksiuij.com/wp-content/uploads/2020/04/docs_25c/9525255/Buy-Sell%20Agreement_9525255_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353001/","spamhaus"
 "353000","2020-04-28 07:32:28","http://84.54.144.151:29847/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353000/","geenensp"
-"352999","2020-04-28 07:32:23","https://heavenif.co.za/blog/wp-content/themes/calliope/docs_kwc/608349/Buy-Sell%20Agreement_608349_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352999/","spamhaus"
+"352999","2020-04-28 07:32:23","https://heavenif.co.za/blog/wp-content/themes/calliope/docs_kwc/608349/Buy-Sell%20Agreement_608349_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352999/","spamhaus"
 "352998","2020-04-28 07:32:14","http://www.running-bike.com/docs_155/Buy-Sell%20Agreement_7169205_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352998/","spamhaus"
 "352997","2020-04-28 07:32:10","https://www.patrickchan-hk.net/wp-content/uploads/2020/04/docs_csa/Buy-Sell%20Agreement_6745783_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352997/","spamhaus"
 "352996","2020-04-28 07:32:02","https://mindseed.in/blog/wp-content/uploads/2020/04/docs_yfg/698283/Buy-Sell%20Agreement_698283_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352996/","spamhaus"
-"352995","2020-04-28 07:31:59","https://pakdesighee.com/wp-content/uploads/2020/04/docs_l9e/Buy-Sell%20Agreement_563232_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352995/","spamhaus"
+"352995","2020-04-28 07:31:59","https://pakdesighee.com/wp-content/uploads/2020/04/docs_l9e/Buy-Sell%20Agreement_563232_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352995/","spamhaus"
 "352994","2020-04-28 07:31:56","https://darazexpress.pk/wp-content/uploads/2020/04/docs_7tp/Buy-Sell%20Agreement_5299045_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352994/","spamhaus"
 "352993","2020-04-28 07:31:54","https://www.patrickchan-hk.net/wp-content/uploads/2020/04/docs_csa/Buy-Sell%20Agreement_78170227_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352993/","spamhaus"
 "352992","2020-04-28 07:31:46","https://www.leaksfly.com/docs_1tj/71964624/Buy-Sell%20Agreement_71964624_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352992/","spamhaus"
@@ -2943,18 +3321,18 @@
 "352988","2020-04-28 07:31:07","https://parmisco.com/docs_mc0/5349/Buy-Sell%20Agreement_5349_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352988/","spamhaus"
 "352987","2020-04-28 07:31:04","https://youngspiritshop.com/docs_8s0/9072097/Buy-Sell%20Agreement_9072097_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352987/","spamhaus"
 "352986","2020-04-28 07:30:47","https://www.teleporterhire.ie/wp-content/uploads/2020/04/docs_1sn/Buy-Sell%20Agreement_11948_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352986/","spamhaus"
-"352985","2020-04-28 07:30:15","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/114946/Buy-Sell%20Agreement_114946_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352985/","spamhaus"
+"352985","2020-04-28 07:30:15","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/114946/Buy-Sell%20Agreement_114946_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352985/","spamhaus"
 "352984","2020-04-28 07:29:41","https://blog.macwap.com/wp-content/themes/calliope/docs_wdp/52459011/Buy-Sell%20Agreement_52459011_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352984/","spamhaus"
 "352983","2020-04-28 07:29:06","https://www.leaksfly.com/docs_1tj/93939/Buy-Sell%20Agreement_93939_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352983/","spamhaus"
-"352982","2020-04-28 07:28:34","https://heavenif.co.za/blog/wp-content/themes/calliope/docs_kwc/Buy-Sell%20Agreement_15176424_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352982/","spamhaus"
+"352982","2020-04-28 07:28:34","https://heavenif.co.za/blog/wp-content/themes/calliope/docs_kwc/Buy-Sell%20Agreement_15176424_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352982/","spamhaus"
 "352981","2020-04-28 07:18:14","https://formadiksiuij.com/wp-content/uploads/2020/04/docs_25c/63052377/Buy-Sell%20Agreement_63052377_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352981/","spamhaus"
 "352980","2020-04-28 07:17:40","http://175.212.31.241:59527/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/352980/","geenensp"
 "352979","2020-04-28 07:17:35","http://5.80.68.84:21447/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/352979/","geenensp"
 "352978","2020-04-28 07:17:32","https://minimalisku.com/wp-content/uploads/2020/04/docs_tp8/1447/Buy-Sell%20Agreement_1447_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352978/","spamhaus"
-"352977","2020-04-28 07:16:58","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/Buy-Sell%20Agreement_55619230_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352977/","spamhaus"
+"352977","2020-04-28 07:16:58","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/Buy-Sell%20Agreement_55619230_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352977/","spamhaus"
 "352976","2020-04-28 07:16:23","https://www.h2obbs.cn/wp-content/themes/calliope/docs_3kj/2377504/Buy-Sell%20Agreement_2377504_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352976/","spamhaus"
 "352975","2020-04-28 07:16:17","https://www.netfeed.club/wp-content/themes/calliope/docs_wd2/49560/Buy-Sell%20Agreement_49560_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352975/","spamhaus"
-"352974","2020-04-28 07:16:14","https://www.patrickchan-hk.net/wp-content/uploads/2020/04/docs_csa/37397/Buy-Sell%20Agreement_37397_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352974/","spamhaus"
+"352974","2020-04-28 07:16:14","https://www.patrickchan-hk.net/wp-content/uploads/2020/04/docs_csa/37397/Buy-Sell%20Agreement_37397_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352974/","spamhaus"
 "352973","2020-04-28 07:16:03","https://www.tulsairishpub.com/blog/wp-content/themes/calliope/docs_khi/Buy-Sell%20Agreement_56428125_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352973/","spamhaus"
 "352972","2020-04-28 07:05:05","http://45.249.91.173/AAddropboxusercontent52t2jofjdp8lir61P9A8Ed2an8B0G4YF1LIhiMK156","offline","malware_download","AveMariaRAT,Encoded,rat","https://urlhaus.abuse.ch/url/352972/","abuse_ch"
 "352971","2020-04-28 07:01:47","https://mindseed.in/blog/wp-content/uploads/2020/04/docs_yfg/97263/Buy-Sell%20Agreement_97263_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352971/","spamhaus"
@@ -2964,7 +3342,7 @@
 "352967","2020-04-28 07:01:23","https://parmisco.com/docs_mc0/5530046/Buy-Sell%20Agreement_5530046_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352967/","spamhaus"
 "352966","2020-04-28 07:01:19","https://bestappliances.in/wp-content/uploads/2020/04/docs_0mg/5937/Buy-Sell%20Agreement_5937_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352966/","spamhaus"
 "352965","2020-04-28 07:01:14","https://bestappliances.in/wp-content/uploads/2020/04/docs_0mg/Buy-Sell%20Agreement_6520972_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352965/","spamhaus"
-"352964","2020-04-28 07:01:12","https://pakdesighee.com/wp-content/uploads/2020/04/docs_l9e/0415302/Buy-Sell%20Agreement_0415302_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352964/","spamhaus"
+"352964","2020-04-28 07:01:12","https://pakdesighee.com/wp-content/uploads/2020/04/docs_l9e/0415302/Buy-Sell%20Agreement_0415302_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352964/","spamhaus"
 "352963","2020-04-28 07:01:10","https://www.vagtachobrasil.com/wp-content/uploads/2020/04/docs_w7f/27448/Buy-Sell%20Agreement_27448_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352963/","spamhaus"
 "352962","2020-04-28 07:01:06","https://ftvlicenses.in/wp-content/uploads/2020/04/docs_ypk/Buy-Sell%20Agreement_13192921_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352962/","spamhaus"
 "352961","2020-04-28 07:00:34","https://www.netfeed.club/wp-content/themes/calliope/docs_wd2/Buy-Sell%20Agreement_401858_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352961/","spamhaus"
@@ -2981,7 +3359,7 @@
 "352950","2020-04-28 06:44:36","https://manamobile.store/wp-content/uploads/2020/04/docs_s1f/Buy-Sell%20Agreement_29969566_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352950/","spamhaus"
 "352949","2020-04-28 06:44:34","https://www.netfeed.club/wp-content/themes/calliope/docs_wd2/Buy-Sell%20Agreement_166451_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352949/","spamhaus"
 "352948","2020-04-28 06:44:29","https://www.teleporterhire.ie/wp-content/uploads/2020/04/docs_1sn/01180/Buy-Sell%20Agreement_01180_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352948/","spamhaus"
-"352947","2020-04-28 06:44:25","https://kiaowadubai.com/docs_qsb/Buy-Sell%20Agreement_8333_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352947/","spamhaus"
+"352947","2020-04-28 06:44:25","https://kiaowadubai.com/docs_qsb/Buy-Sell%20Agreement_8333_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352947/","spamhaus"
 "352946","2020-04-28 06:44:20","https://www.h2obbs.cn/wp-content/themes/calliope/docs_3kj/Buy-Sell%20Agreement_4860_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352946/","spamhaus"
 "352945","2020-04-28 06:43:40","https://www.internaut.in/wp-content/uploads/2020/04/docs_kl7/Buy-Sell%20Agreement_9653057_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352945/","spamhaus"
 "352944","2020-04-28 06:43:08","https://youngspiritshop.com/docs_8s0/Buy-Sell%20Agreement_179673_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352944/","spamhaus"
@@ -2993,7 +3371,7 @@
 "352938","2020-04-28 06:42:45","http://www.running-bike.com/docs_155/Buy-Sell%20Agreement_7032322_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352938/","spamhaus"
 "352937","2020-04-28 06:42:41","https://www.patrickchan-hk.net/wp-content/uploads/2020/04/docs_csa/21733673/Buy-Sell%20Agreement_21733673_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352937/","spamhaus"
 "352936","2020-04-28 06:42:34","https://manamobile.store/wp-content/uploads/2020/04/docs_s1f/Buy-Sell%20Agreement_427779_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352936/","spamhaus"
-"352935","2020-04-28 06:42:32","https://heavenif.co.za/blog/wp-content/themes/calliope/docs_kwc/Buy-Sell%20Agreement_52007906_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352935/","spamhaus"
+"352935","2020-04-28 06:42:32","https://heavenif.co.za/blog/wp-content/themes/calliope/docs_kwc/Buy-Sell%20Agreement_52007906_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352935/","spamhaus"
 "352934","2020-04-28 06:42:28","https://onikstrgovina.com/docs_0nd/13880/Buy-Sell%20Agreement_13880_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352934/","spamhaus"
 "352933","2020-04-28 06:41:57","https://youngspiritshop.com/docs_8s0/571982/Buy-Sell%20Agreement_571982_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352933/","spamhaus"
 "352932","2020-04-28 06:41:54","https://mindseed.in/blog/wp-content/uploads/2020/04/docs_yfg/823296/Buy-Sell%20Agreement_823296_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352932/","spamhaus"
@@ -3086,7 +3464,7 @@
 "352845","2020-04-28 06:04:30","http://111.43.223.136:53549/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352845/","Gandylyan1"
 "352844","2020-04-28 06:04:20","http://125.45.59.107:52130/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352844/","Gandylyan1"
 "352843","2020-04-28 06:04:10","http://183.215.188.45:49767/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352843/","Gandylyan1"
-"352842","2020-04-28 06:01:44","https://kiaowadubai.com/docs_qsb/9131/Buy-Sell%20Agreement_9131_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352842/","spamhaus"
+"352842","2020-04-28 06:01:44","https://kiaowadubai.com/docs_qsb/9131/Buy-Sell%20Agreement_9131_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352842/","spamhaus"
 "352841","2020-04-28 06:01:29","https://premiumshop.id/wp-content/uploads/2020/04/docs_ha7/97601837/Buy-Sell%20Agreement_97601837_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352841/","spamhaus"
 "352840","2020-04-28 06:01:23","https://youngspiritshop.com/docs_8s0/96791/Buy-Sell%20Agreement_96791_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352840/","spamhaus"
 "352839","2020-04-28 06:01:15","http://huniandijual.com/wp-content/uploads/2020/04/docs_x5r/Buy-Sell%20Agreement_440176_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352839/","spamhaus"
@@ -3098,7 +3476,7 @@
 "352833","2020-04-28 05:54:22","http://121.148.122.219:5895/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/352833/","geenensp"
 "352832","2020-04-28 05:54:17","http://106.248.202.245:45017/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/352832/","geenensp"
 "352831","2020-04-28 05:54:13","http://1.64.98.249:62482/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/352831/","geenensp"
-"352830","2020-04-28 05:54:07","http://dongiln.co/paymentslip/paymentslip.rar","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352830/","spamhaus"
+"352830","2020-04-28 05:54:07","http://dongiln.co/paymentslip/paymentslip.rar","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352830/","spamhaus"
 "352829","2020-04-28 05:53:38","http://121.122.87.76:53453/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/352829/","geenensp"
 "352828","2020-04-28 05:53:34","http://5.206.227.18/bot/bot.mipsel","online","malware_download","CoinMiner,elf","https://urlhaus.abuse.ch/url/352828/","hypoweb"
 "352827","2020-04-28 05:53:32","http://5.206.227.18/bot/bot.arm4","online","malware_download","CoinMiner,elf","https://urlhaus.abuse.ch/url/352827/","hypoweb"
@@ -3108,7 +3486,7 @@
 "352823","2020-04-28 05:53:19","https://www.teleporterhire.ie/wp-content/uploads/2020/04/docs_1sn/Buy-Sell%20Agreement_8491_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352823/","spamhaus"
 "352822","2020-04-28 05:53:04","https://darazexpress.pk/wp-content/uploads/2020/04/docs_7tp/Buy-Sell%20Agreement_4407969_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352822/","spamhaus"
 "352821","2020-04-28 05:52:22","https://mindseed.in/blog/wp-content/uploads/2020/04/docs_yfg/73181121/Buy-Sell%20Agreement_73181121_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352821/","spamhaus"
-"352820","2020-04-28 05:52:19","https://itohukuk.com/wp-content/uploads/2020/04/docs_u9n/Buy-Sell%20Agreement_461492_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352820/","spamhaus"
+"352820","2020-04-28 05:52:19","https://itohukuk.com/wp-content/uploads/2020/04/docs_u9n/Buy-Sell%20Agreement_461492_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352820/","spamhaus"
 "352819","2020-04-28 05:52:17","http://www.running-bike.com/docs_155/Buy-Sell%20Agreement_29911647_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352819/","spamhaus"
 "352818","2020-04-28 05:52:10","https://minimalisku.com/wp-content/uploads/2020/04/docs_tp8/Buy-Sell%20Agreement_0586_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352818/","spamhaus"
 "352817","2020-04-28 05:52:04","https://www.vagtachobrasil.com/wp-content/uploads/2020/04/docs_w7f/Buy-Sell%20Agreement_566310_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352817/","spamhaus"
@@ -3179,19 +3557,19 @@
 "352752","2020-04-28 03:32:03","http://144.202.124.211/d/xd.arm6","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/352752/","zbetcheckin"
 "352751","2020-04-28 03:31:07","http://170.130.55.65/s-h.4-.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/352751/","zbetcheckin"
 "352750","2020-04-28 03:31:03","http://170.130.55.65/x-8.6-.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/352750/","zbetcheckin"
-"352749","2020-04-28 03:27:33","http://88.218.17.222/s-h.4-.SNOOPY","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/352749/","zbetcheckin"
+"352749","2020-04-28 03:27:33","http://88.218.17.222/s-h.4-.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/352749/","zbetcheckin"
 "352748","2020-04-28 03:27:31","http://144.202.124.211/d/xd.m68k","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/352748/","zbetcheckin"
 "352747","2020-04-28 03:27:28","http://192.210.236.38/orbitclient.m68k","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/352747/","zbetcheckin"
 "352746","2020-04-28 03:27:26","http://167.172.167.26/armv6l","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/352746/","zbetcheckin"
-"352745","2020-04-28 03:27:24","http://88.218.17.222/a-r.m-4.SNOOPY","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/352745/","zbetcheckin"
+"352745","2020-04-28 03:27:24","http://88.218.17.222/a-r.m-4.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/352745/","zbetcheckin"
 "352744","2020-04-28 03:27:22","http://167.172.167.26/armv4l","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/352744/","zbetcheckin"
-"352743","2020-04-28 03:27:20","http://88.218.17.222/m-p.s-l.SNOOPY","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/352743/","zbetcheckin"
+"352743","2020-04-28 03:27:20","http://88.218.17.222/m-p.s-l.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/352743/","zbetcheckin"
 "352742","2020-04-28 03:27:17","http://170.130.55.65/m-i.p-s.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/352742/","zbetcheckin"
 "352741","2020-04-28 03:27:15","http://192.210.236.38/orbitclient.x32","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/352741/","zbetcheckin"
-"352740","2020-04-28 03:27:12","http://88.218.17.222/a-r.m-6.SNOOPY","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/352740/","zbetcheckin"
-"352739","2020-04-28 03:27:10","http://88.218.17.222/x-8.6-.SNOOPY","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/352739/","zbetcheckin"
+"352740","2020-04-28 03:27:12","http://88.218.17.222/a-r.m-6.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/352740/","zbetcheckin"
+"352739","2020-04-28 03:27:10","http://88.218.17.222/x-8.6-.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/352739/","zbetcheckin"
 "352738","2020-04-28 03:27:08","http://192.210.236.38/orbitclient.x86","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/352738/","zbetcheckin"
-"352737","2020-04-28 03:27:05","http://88.218.17.222/a-r.m-7.SNOOPY","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/352737/","zbetcheckin"
+"352737","2020-04-28 03:27:05","http://88.218.17.222/a-r.m-7.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/352737/","zbetcheckin"
 "352736","2020-04-28 03:27:03","http://167.172.167.26/i686","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/352736/","zbetcheckin"
 "352735","2020-04-28 03:23:11","http://144.202.124.211/d/xd.spc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/352735/","zbetcheckin"
 "352734","2020-04-28 03:23:07","http://170.130.55.65/m-p.s-l.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/352734/","zbetcheckin"
@@ -3200,21 +3578,21 @@
 "352731","2020-04-28 03:22:38","http://167.172.167.26/mips","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/352731/","zbetcheckin"
 "352730","2020-04-28 03:22:35","http://167.172.167.26/armv5l","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/352730/","zbetcheckin"
 "352729","2020-04-28 03:22:32","http://192.210.236.38/orbitclient.sh4","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/352729/","zbetcheckin"
-"352728","2020-04-28 03:22:29","http://88.218.17.222/m-6.8-k.SNOOPY","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/352728/","zbetcheckin"
+"352728","2020-04-28 03:22:29","http://88.218.17.222/m-6.8-k.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/352728/","zbetcheckin"
 "352727","2020-04-28 03:22:27","http://192.210.236.38/orbitclient.mpsl","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/352727/","zbetcheckin"
 "352726","2020-04-28 03:22:24","http://167.172.167.26/m68k","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/352726/","zbetcheckin"
 "352725","2020-04-28 03:22:21","http://167.172.167.26/sh4","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/352725/","zbetcheckin"
 "352724","2020-04-28 03:22:18","http://192.210.236.38/orbitclient.mips","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/352724/","zbetcheckin"
 "352723","2020-04-28 03:22:15","http://144.202.124.211/d/xd.arm5","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/352723/","zbetcheckin"
 "352722","2020-04-28 03:22:12","http://170.130.55.65/a-r.m-7.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/352722/","zbetcheckin"
-"352721","2020-04-28 03:22:09","http://88.218.17.222/p-p.c-.SNOOPY","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/352721/","zbetcheckin"
+"352721","2020-04-28 03:22:09","http://88.218.17.222/p-p.c-.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/352721/","zbetcheckin"
 "352720","2020-04-28 03:22:06","http://167.172.167.26/x86","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/352720/","zbetcheckin"
-"352719","2020-04-28 03:22:03","http://88.218.17.222/m-i.p-s.SNOOPY","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/352719/","zbetcheckin"
+"352719","2020-04-28 03:22:03","http://88.218.17.222/m-i.p-s.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/352719/","zbetcheckin"
 "352718","2020-04-28 03:18:30","http://192.210.236.38/orbitclient.arm6","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/352718/","zbetcheckin"
-"352717","2020-04-28 03:18:26","http://88.218.17.222/a-r.m-5.SNOOPY","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/352717/","zbetcheckin"
+"352717","2020-04-28 03:18:26","http://88.218.17.222/a-r.m-5.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/352717/","zbetcheckin"
 "352716","2020-04-28 03:18:24","http://170.130.55.65/i-5.8-6.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/352716/","zbetcheckin"
 "352715","2020-04-28 03:18:21","http://192.210.236.38/orbitclient.i586","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/352715/","zbetcheckin"
-"352714","2020-04-28 03:18:18","http://88.218.17.222/x-3.2-.SNOOPY","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/352714/","zbetcheckin"
+"352714","2020-04-28 03:18:18","http://88.218.17.222/x-3.2-.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/352714/","zbetcheckin"
 "352713","2020-04-28 03:18:16","http://170.130.55.65/x-3.2-.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/352713/","zbetcheckin"
 "352712","2020-04-28 03:18:14","http://170.130.55.65/a-r.m-4.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/352712/","zbetcheckin"
 "352711","2020-04-28 03:18:11","http://170.130.55.65/a-r.m-5.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/352711/","zbetcheckin"
@@ -3224,7 +3602,7 @@
 "352707","2020-04-28 03:17:51","http://reesn.xyz/chrome.apk","offline","malware_download","None","https://urlhaus.abuse.ch/url/352707/","JayTHL"
 "352706","2020-04-28 03:16:34","http://qasga.xyz/chrome.apk","offline","malware_download","None","https://urlhaus.abuse.ch/url/352706/","JayTHL"
 "352705","2020-04-28 03:13:07","http://144.202.124.211/d/xd.mpsl","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/352705/","zbetcheckin"
-"352704","2020-04-28 03:13:04","http://88.218.17.222/i-5.8-6.SNOOPY","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/352704/","zbetcheckin"
+"352704","2020-04-28 03:13:04","http://88.218.17.222/i-5.8-6.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/352704/","zbetcheckin"
 "352703","2020-04-28 03:13:02","http://167.172.167.26/powerpc","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/352703/","zbetcheckin"
 "352702","2020-04-28 03:12:45","http://51.38.101.119/SBIDIOT/zte","offline","malware_download","None","https://urlhaus.abuse.ch/url/352702/","JayTHL"
 "352701","2020-04-28 03:12:43","http://51.38.101.119/SBIDIOT/yarn","offline","malware_download","None","https://urlhaus.abuse.ch/url/352701/","JayTHL"
@@ -3259,7 +3637,7 @@
 "352672","2020-04-28 03:05:55","http://211.137.225.125:58434/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352672/","Gandylyan1"
 "352671","2020-04-28 03:05:52","http://121.226.143.49:59184/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352671/","Gandylyan1"
 "352670","2020-04-28 03:05:44","http://111.43.223.163:58816/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352670/","Gandylyan1"
-"352669","2020-04-28 03:05:39","http://36.34.234.8:60259/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352669/","Gandylyan1"
+"352669","2020-04-28 03:05:39","http://36.34.234.8:60259/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352669/","Gandylyan1"
 "352668","2020-04-28 03:05:35","http://110.18.194.234:45469/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352668/","Gandylyan1"
 "352667","2020-04-28 03:05:32","http://222.138.17.196:48367/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352667/","Gandylyan1"
 "352666","2020-04-28 03:05:28","http://218.21.170.244:33600/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352666/","Gandylyan1"
@@ -3285,7 +3663,7 @@
 "352646","2020-04-28 02:56:06","http://5.199.174.173/w00died.armv6l","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/352646/","zbetcheckin"
 "352645","2020-04-28 02:56:03","http://138.197.153.117/fearlesshitter.i586","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/352645/","zbetcheckin"
 "352644","2020-04-28 02:52:05","http://23.254.204.253/bins.sh","offline","malware_download","shellscript","https://urlhaus.abuse.ch/url/352644/","zbetcheckin"
-"352643","2020-04-28 02:52:03","http://88.218.17.222/SnOoPy.sh","online","malware_download","shellscript","https://urlhaus.abuse.ch/url/352643/","zbetcheckin"
+"352643","2020-04-28 02:52:03","http://88.218.17.222/SnOoPy.sh","offline","malware_download","shellscript","https://urlhaus.abuse.ch/url/352643/","zbetcheckin"
 "352642","2020-04-28 02:47:13","http://138.197.153.117/fearlesshitter.mpsl","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/352642/","zbetcheckin"
 "352641","2020-04-28 02:47:10","http://5.199.174.173/w00died.sparc","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/352641/","zbetcheckin"
 "352640","2020-04-28 02:47:08","http://138.197.153.117/fearlesshitter.sh4","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/352640/","zbetcheckin"
@@ -3391,7 +3769,7 @@
 "352540","2020-04-27 20:28:33","https://www.tulsairishpub.com/blog/wp-content/themes/calliope/docs_khi/01882/Buy-Sell%20Agreement_01882_04242020.zip","offline","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352540/","malware_traffic"
 "352539","2020-04-27 20:28:28","https://www.teleporterhire.ie/wp-content/uploads/2020/04/docs_1sn/Buy-Sell%20Agreement_3061_04242020.zip","offline","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352539/","malware_traffic"
 "352538","2020-04-27 20:28:19","https://www.teleporterhire.ie/wp-content/uploads/2020/04/docs_1sn/Buy-Sell%20Agreement_6748936_04242020.zip","offline","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352538/","malware_traffic"
-"352537","2020-04-27 20:28:15","https://www.patrickchan-hk.net/wp-content/uploads/2020/04/docs_csa/128073/Buy-Sell%20Agreement_128073_04242020.zip","online","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352537/","malware_traffic"
+"352537","2020-04-27 20:28:15","https://www.patrickchan-hk.net/wp-content/uploads/2020/04/docs_csa/128073/Buy-Sell%20Agreement_128073_04242020.zip","offline","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352537/","malware_traffic"
 "352536","2020-04-27 20:28:07","https://www.patrickchan-hk.net/wp-content/uploads/2020/04/docs_csa/10717/Buy-Sell%20Agreement_10717_04242020.zip","online","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352536/","malware_traffic"
 "352535","2020-04-27 20:27:17","https://www.netfeed.club/wp-content/themes/calliope/docs_wd2/Buy-Sell%20Agreement_1550_04242020.zip","offline","malware_download","Qakbot,qbot,sxp105,zip","https://urlhaus.abuse.ch/url/352535/","malware_traffic"
 "352534","2020-04-27 20:27:12","https://www.netfeed.club/wp-content/themes/calliope/docs_wd2/030827/Buy-Sell%20Agreement_030827_04242020.zip","offline","malware_download","Qakbot,qbot,sxp105,zip","https://urlhaus.abuse.ch/url/352534/","malware_traffic"
@@ -3442,13 +3820,13 @@
 "352489","2020-04-27 20:14:03","http://cecadesayu.corazondelcielo.mx/docs_ytk/3746/Buy-Sell%20Agreement_3746_04242020.zip","offline","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352489/","malware_traffic"
 "352488","2020-04-27 20:13:58","http://cecadesayu.corazondelcielo.mx/docs_ytk/0191867/Buy-Sell%20Agreement_0191867_04242020.zip","offline","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352488/","malware_traffic"
 "352487","2020-04-27 20:13:55","https://kiaowadubai.com/docs_qsb/Buy-Sell%20Agreement_37855099_04242020.zip","online","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352487/","malware_traffic"
-"352486","2020-04-27 20:13:50","https://kiaowadubai.com/docs_qsb/6455/Buy-Sell%20Agreement_6455_04242020.zip","offline","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352486/","malware_traffic"
+"352486","2020-04-27 20:13:50","https://kiaowadubai.com/docs_qsb/6455/Buy-Sell%20Agreement_6455_04242020.zip","online","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352486/","malware_traffic"
 "352485","2020-04-27 20:13:47","https://itohukuk.com/wp-content/uploads/2020/04/docs_u9n/387824/Buy-Sell%20Agreement_387824_04242020.zip","online","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352485/","malware_traffic"
 "352484","2020-04-27 20:13:45","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/9116273/Buy-Sell%20Agreement_9116273_04242020.zip","offline","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352484/","malware_traffic"
 "352483","2020-04-27 20:13:41","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/0070320/Buy-Sell%20Agreement_0070320_04242020.zip","online","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352483/","malware_traffic"
 "352482","2020-04-27 20:13:36","https://heavenif.co.za/blog/wp-content/themes/calliope/docs_kwc/Buy-Sell%20Agreement_85693132_04242020.zip","offline","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352482/","malware_traffic"
-"352481","2020-04-27 20:13:32","https://heavenif.co.za/blog/wp-content/themes/calliope/docs_kwc/Buy-Sell%20Agreement_8473004_04242020.zip","online","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352481/","malware_traffic"
-"352480","2020-04-27 20:13:27","https://heavenif.co.za/blog/wp-content/themes/calliope/docs_kwc/385661/Buy-Sell%20Agreement_385661_04242020.zip","offline","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352480/","malware_traffic"
+"352481","2020-04-27 20:13:32","https://heavenif.co.za/blog/wp-content/themes/calliope/docs_kwc/Buy-Sell%20Agreement_8473004_04242020.zip","offline","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352481/","malware_traffic"
+"352480","2020-04-27 20:13:27","https://heavenif.co.za/blog/wp-content/themes/calliope/docs_kwc/385661/Buy-Sell%20Agreement_385661_04242020.zip","online","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352480/","malware_traffic"
 "352479","2020-04-27 20:13:23","https://heavenif.co.za/blog/wp-content/themes/calliope/docs_kwc/20826984/Buy-Sell%20Agreement_20826984_04242020.zip","online","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352479/","malware_traffic"
 "352478","2020-04-27 20:13:19","https://formadiksiuij.com/wp-content/uploads/2020/04/docs_25c/Buy-Sell%20Agreement_305245_04242020.zip","offline","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352478/","malware_traffic"
 "352477","2020-04-27 20:13:15","https://darazexpress.pk/wp-content/uploads/2020/04/docs_7tp/Buy-Sell%20Agreement_4032_04242020.zip","offline","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352477/","malware_traffic"
@@ -3509,7 +3887,7 @@
 "352422","2020-04-27 18:51:48","https://mirandaspaintingca.com/wp-content/uploads/2020/04/docs_kjk/Buy-Sell%20Agreement_57220_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352422/","spamhaus"
 "352421","2020-04-27 18:51:43","https://ftvlicenses.in/wp-content/uploads/2020/04/docs_ypk/92640/Buy-Sell%20Agreement_92640_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352421/","spamhaus"
 "352420","2020-04-27 18:51:30","https://pakdesighee.com/wp-content/uploads/2020/04/docs_l9e/803206/Buy-Sell%20Agreement_803206_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352420/","spamhaus"
-"352419","2020-04-27 18:51:11","https://ticte.in/wp-content/uploads/2020/04/docs_o2i/06501/Buy-Sell%20Agreement_06501_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352419/","spamhaus"
+"352419","2020-04-27 18:51:11","https://ticte.in/wp-content/uploads/2020/04/docs_o2i/06501/Buy-Sell%20Agreement_06501_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352419/","spamhaus"
 "352418","2020-04-27 18:51:08","https://formadiksiuij.com/wp-content/uploads/2020/04/docs_25c/32556444/Buy-Sell%20Agreement_32556444_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352418/","spamhaus"
 "352417","2020-04-27 18:51:05","https://myheromydadthenurse.com/wp-content/plugins/apikey/docs_tqo/9134/Buy-Sell%20Agreement_9134_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352417/","spamhaus"
 "352416","2020-04-27 18:47:32","http://www.s172.com/wp-content/uploads/2020/04/docs_x1c/Buy-Sell%20Agreement_67685568_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352416/","spamhaus"
@@ -3548,14 +3926,14 @@
 "352383","2020-04-27 18:37:09","http://www.pacificstarimpex.com/wp-content/themes/calliope/docs_v79/529767/Buy-Sell%20Agreement_529767_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352383/","spamhaus"
 "352382","2020-04-27 18:37:04","https://mindseed.in/blog/wp-content/uploads/2020/04/docs_yfg/4501/Buy-Sell%20Agreement_4501_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352382/","spamhaus"
 "352381","2020-04-27 18:27:45","https://pastebin.com/raw/9EH2MwwL","offline","malware_download","None","https://urlhaus.abuse.ch/url/352381/","JayTHL"
-"352380","2020-04-27 18:27:13","https://pakdesighee.com/wp-content/uploads/2020/04/docs_l9e/1517405/Buy-Sell%20Agreement_1517405_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352380/","spamhaus"
+"352380","2020-04-27 18:27:13","https://pakdesighee.com/wp-content/uploads/2020/04/docs_l9e/1517405/Buy-Sell%20Agreement_1517405_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352380/","spamhaus"
 "352379","2020-04-27 18:26:11","https://parmisco.com/docs_mc0/Buy-Sell%20Agreement_01206107_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352379/","spamhaus"
 "352378","2020-04-27 18:25:38","https://www.netfeed.club/wp-content/themes/calliope/docs_wd2/718577/Buy-Sell%20Agreement_718577_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352378/","spamhaus"
 "352377","2020-04-27 18:21:03","https://darazexpress.pk/wp-content/uploads/2020/04/docs_7tp/91278/Buy-Sell%20Agreement_91278_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352377/","spamhaus"
 "352376","2020-04-27 18:19:38","http://79.159.207.150:1524/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/352376/","geenensp"
 "352375","2020-04-27 18:19:36","https://onikstrgovina.com/docs_0nd/62718678/Buy-Sell%20Agreement_62718678_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352375/","spamhaus"
 "352374","2020-04-27 18:15:23","https://heavenif.co.za/blog/wp-content/themes/calliope/docs_kwc/Buy-Sell%20Agreement_1197_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352374/","spamhaus"
-"352373","2020-04-27 18:15:13","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/106811/Buy-Sell%20Agreement_106811_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352373/","spamhaus"
+"352373","2020-04-27 18:15:13","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/106811/Buy-Sell%20Agreement_106811_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352373/","spamhaus"
 "352372","2020-04-27 18:09:02","https://onikstrgovina.com/docs_0nd/Buy-Sell%20Agreement_433299_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352372/","spamhaus"
 "352371","2020-04-27 18:07:16","http://www.pacificstarimpex.com/wp-content/themes/calliope/docs_v79/Buy-Sell%20Agreement_571385_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352371/","spamhaus"
 "352370","2020-04-27 18:07:09","http://orujedu.com/wp-content/uploads/2020/04/docs_f8n/Buy-Sell%20Agreement_7855_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352370/","spamhaus"
@@ -3592,42 +3970,42 @@
 "352339","2020-04-27 17:51:08","https://minimalisku.com/wp-content/uploads/2020/04/docs_tp8/22158/Buy-Sell%20Agreement_22158_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352339/","spamhaus"
 "352338","2020-04-27 17:51:05","https://altatecnica.com.mx/wp-content/uploads/2020/04/docs_qvi/Buy-Sell%20Agreement_104703_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352338/","spamhaus"
 "352337","2020-04-27 17:50:58","https://bestappliances.in/wp-content/uploads/2020/04/docs_0mg/Buy-Sell%20Agreement_2913784_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352337/","spamhaus"
-"352336","2020-04-27 17:50:17","https://www.patrickchan-hk.net/wp-content/uploads/2020/04/docs_csa/17604096/Buy-Sell%20Agreement_17604096_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352336/","spamhaus"
+"352336","2020-04-27 17:50:17","https://www.patrickchan-hk.net/wp-content/uploads/2020/04/docs_csa/17604096/Buy-Sell%20Agreement_17604096_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352336/","spamhaus"
 "352335","2020-04-27 17:43:04","http://outcaste-television.000webhostapp.com/VPN.scr","offline","malware_download","None","https://urlhaus.abuse.ch/url/352335/","vxvault"
 "352334","2020-04-27 17:40:49","https://www.teleporterhire.ie/wp-content/uploads/2020/04/docs_1sn/Buy-Sell%20Agreement_34830887_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352334/","spamhaus"
 "352333","2020-04-27 17:40:47","https://ftvlicenses.in/wp-content/uploads/2020/04/docs_ypk/Buy-Sell%20Agreement_8601_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352333/","spamhaus"
 "352332","2020-04-27 17:40:44","https://bestappliances.in/wp-content/uploads/2020/04/docs_0mg/3889/Buy-Sell%20Agreement_3889_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352332/","spamhaus"
-"352331","2020-04-27 17:40:13","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/07500/Buy-Sell%20Agreement_07500_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352331/","spamhaus"
+"352331","2020-04-27 17:40:13","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/07500/Buy-Sell%20Agreement_07500_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352331/","spamhaus"
 "352330","2020-04-27 17:40:08","https://myheromydadthenurse.com/wp-content/plugins/apikey/docs_tqo/25450/Buy-Sell%20Agreement_25450_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352330/","spamhaus"
 "352329","2020-04-27 17:40:05","https://formadiksiuij.com/wp-content/uploads/2020/04/docs_25c/Buy-Sell%20Agreement_7429247_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352329/","spamhaus"
 "352328","2020-04-27 17:40:00","http://www.running-bike.com/docs_155/5337859/Buy-Sell%20Agreement_5337859_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352328/","spamhaus"
 "352327","2020-04-27 17:39:55","https://www.tulsairishpub.com/blog/wp-content/themes/calliope/docs_khi/0166159/Buy-Sell%20Agreement_0166159_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352327/","spamhaus"
-"352326","2020-04-27 17:39:52","https://itohukuk.com/wp-content/uploads/2020/04/docs_u9n/06893779/Buy-Sell%20Agreement_06893779_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352326/","spamhaus"
-"352325","2020-04-27 17:39:43","https://www.patrickchan-hk.net/wp-content/uploads/2020/04/docs_csa/Buy-Sell%20Agreement_7580_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352325/","spamhaus"
+"352326","2020-04-27 17:39:52","https://itohukuk.com/wp-content/uploads/2020/04/docs_u9n/06893779/Buy-Sell%20Agreement_06893779_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352326/","spamhaus"
+"352325","2020-04-27 17:39:43","https://www.patrickchan-hk.net/wp-content/uploads/2020/04/docs_csa/Buy-Sell%20Agreement_7580_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352325/","spamhaus"
 "352324","2020-04-27 17:39:29","https://kiaowadubai.com/docs_qsb/Buy-Sell%20Agreement_15171881_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352324/","spamhaus"
-"352323","2020-04-27 17:39:24","https://ticte.in/wp-content/uploads/2020/04/docs_o2i/Buy-Sell%20Agreement_57903931_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352323/","spamhaus"
+"352323","2020-04-27 17:39:24","https://ticte.in/wp-content/uploads/2020/04/docs_o2i/Buy-Sell%20Agreement_57903931_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352323/","spamhaus"
 "352322","2020-04-27 17:39:22","https://www.netfeed.club/wp-content/themes/calliope/docs_wd2/33365/Buy-Sell%20Agreement_33365_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352322/","spamhaus"
 "352321","2020-04-27 17:39:17","https://minimalisku.com/wp-content/uploads/2020/04/docs_tp8/0856517/Buy-Sell%20Agreement_0856517_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352321/","spamhaus"
 "352320","2020-04-27 17:39:14","https://msquare.xyz/wp-content/uploads/2020/04/docs_ymn/Buy-Sell%20Agreement_027146_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352320/","spamhaus"
 "352319","2020-04-27 17:39:06","https://premiumshop.id/wp-content/uploads/2020/04/docs_ha7/172013/Buy-Sell%20Agreement_172013_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352319/","spamhaus"
 "352318","2020-04-27 17:38:32","https://onikstrgovina.com/docs_0nd/4846917/Buy-Sell%20Agreement_4846917_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352318/","spamhaus"
-"352317","2020-04-27 17:38:29","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/8096673/Buy-Sell%20Agreement_8096673_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352317/","spamhaus"
+"352317","2020-04-27 17:38:29","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/8096673/Buy-Sell%20Agreement_8096673_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352317/","spamhaus"
 "352316","2020-04-27 17:38:20","http://121.123.37.121:5229/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/352316/","geenensp"
 "352315","2020-04-27 17:38:14","http://80.210.20.94:37396/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/352315/","geenensp"
-"352314","2020-04-27 17:38:10","https://heavenif.co.za/blog/wp-content/themes/calliope/docs_kwc/0259743/Buy-Sell%20Agreement_0259743_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352314/","spamhaus"
+"352314","2020-04-27 17:38:10","https://heavenif.co.za/blog/wp-content/themes/calliope/docs_kwc/0259743/Buy-Sell%20Agreement_0259743_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352314/","spamhaus"
 "352313","2020-04-27 17:38:03","https://darazexpress.pk/wp-content/uploads/2020/04/docs_7tp/807898/Buy-Sell%20Agreement_807898_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352313/","spamhaus"
 "352312","2020-04-27 17:38:00","https://minimalisku.com/wp-content/uploads/2020/04/docs_tp8/Buy-Sell%20Agreement_99062_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352312/","spamhaus"
 "352311","2020-04-27 17:37:57","https://manamobile.store/wp-content/uploads/2020/04/docs_s1f/Buy-Sell%20Agreement_74658_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352311/","spamhaus"
 "352310","2020-04-27 17:37:54","https://youngspiritshop.com/docs_8s0/Buy-Sell%20Agreement_97359176_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352310/","spamhaus"
 "352309","2020-04-27 17:37:48","http://huniandijual.com/wp-content/uploads/2020/04/docs_x5r/Buy-Sell%20Agreement_16693439_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352309/","spamhaus"
-"352308","2020-04-27 17:37:42","https://www.patrickchan-hk.net/wp-content/uploads/2020/04/docs_csa/Buy-Sell%20Agreement_804242_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352308/","spamhaus"
+"352308","2020-04-27 17:37:42","https://www.patrickchan-hk.net/wp-content/uploads/2020/04/docs_csa/Buy-Sell%20Agreement_804242_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352308/","spamhaus"
 "352307","2020-04-27 17:37:37","https://premiumshop.id/wp-content/uploads/2020/04/docs_ha7/1638441/Buy-Sell%20Agreement_1638441_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352307/","spamhaus"
 "352306","2020-04-27 17:37:32","https://minimalisku.com/wp-content/uploads/2020/04/docs_tp8/4410/Buy-Sell%20Agreement_4410_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352306/","spamhaus"
 "352305","2020-04-27 17:37:25","http://www.pacificstarimpex.com/wp-content/themes/calliope/docs_v79/Buy-Sell%20Agreement_5593_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352305/","spamhaus"
 "352304","2020-04-27 17:37:19","https://youngspiritshop.com/docs_8s0/Buy-Sell%20Agreement_2708_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352304/","spamhaus"
 "352303","2020-04-27 17:37:15","https://www.leaksfly.com/docs_1tj/Buy-Sell%20Agreement_1825952_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352303/","spamhaus"
 "352302","2020-04-27 17:37:12","https://youngspiritshop.com/docs_8s0/Buy-Sell%20Agreement_4972116_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352302/","spamhaus"
-"352301","2020-04-27 17:37:09","https://itohukuk.com/wp-content/uploads/2020/04/docs_u9n/Buy-Sell%20Agreement_8769895_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352301/","spamhaus"
+"352301","2020-04-27 17:37:09","https://itohukuk.com/wp-content/uploads/2020/04/docs_u9n/Buy-Sell%20Agreement_8769895_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352301/","spamhaus"
 "352300","2020-04-27 17:37:05","https://premiumshop.id/wp-content/uploads/2020/04/docs_ha7/Buy-Sell%20Agreement_5290_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352300/","spamhaus"
 "352299","2020-04-27 17:33:48","https://itohukuk.com/wp-content/uploads/2020/04/docs_u9n/Buy-Sell%20Agreement_0936_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352299/","spamhaus"
 "352298","2020-04-27 17:33:42","https://blog.macwap.com/wp-content/themes/calliope/docs_wdp/37286057/Buy-Sell%20Agreement_37286057_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352298/","spamhaus"
@@ -3665,7 +4043,7 @@
 "352266","2020-04-27 16:34:20","https://coberturasgenerales.pe/wp-content/uploads/2020/04/docs_2hj/11680/Buy-Sell%20Agreement_11680_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352266/","spamhaus"
 "352265","2020-04-27 16:34:17","https://youngspiritshop.com/docs_8s0/Buy-Sell%20Agreement_55601975_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352265/","spamhaus"
 "352264","2020-04-27 16:34:09","https://ticte.in/wp-content/uploads/2020/04/docs_o2i/293599/Buy-Sell%20Agreement_293599_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352264/","spamhaus"
-"352263","2020-04-27 16:34:06","https://kiaowadubai.com/docs_qsb/Buy-Sell%20Agreement_4632_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352263/","spamhaus"
+"352263","2020-04-27 16:34:06","https://kiaowadubai.com/docs_qsb/Buy-Sell%20Agreement_4632_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352263/","spamhaus"
 "352262","2020-04-27 16:34:01","http://cecadesayu.corazondelcielo.mx/docs_ytk/4272/Buy-Sell%20Agreement_4272_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352262/","spamhaus"
 "352261","2020-04-27 16:33:57","https://www.teleporterhire.ie/wp-content/uploads/2020/04/docs_1sn/Buy-Sell%20Agreement_558030_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352261/","spamhaus"
 "352260","2020-04-27 16:33:51","http://www.running-bike.com/docs_155/2522/Buy-Sell%20Agreement_2522_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352260/","spamhaus"
@@ -3675,7 +4053,7 @@
 "352256","2020-04-27 16:33:26","https://coberturasgenerales.pe/wp-content/uploads/2020/04/docs_2hj/Buy-Sell%20Agreement_0476691_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352256/","spamhaus"
 "352255","2020-04-27 16:33:21","http://huniandijual.com/wp-content/uploads/2020/04/docs_x5r/Buy-Sell%20Agreement_334311_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352255/","spamhaus"
 "352254","2020-04-27 16:33:08","https://www.vagtachobrasil.com/wp-content/uploads/2020/04/docs_w7f/Buy-Sell%20Agreement_2686679_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352254/","spamhaus"
-"352253","2020-04-27 16:33:00","https://pakdesighee.com/wp-content/uploads/2020/04/docs_l9e/6987817/Buy-Sell%20Agreement_6987817_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352253/","spamhaus"
+"352253","2020-04-27 16:33:00","https://pakdesighee.com/wp-content/uploads/2020/04/docs_l9e/6987817/Buy-Sell%20Agreement_6987817_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352253/","spamhaus"
 "352252","2020-04-27 16:32:57","https://ftvlicenses.in/wp-content/uploads/2020/04/docs_ypk/79834712/Buy-Sell%20Agreement_79834712_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352252/","spamhaus"
 "352251","2020-04-27 16:32:54","http://orujedu.com/wp-content/uploads/2020/04/docs_f8n/51439450/Buy-Sell%20Agreement_51439450_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352251/","spamhaus"
 "352250","2020-04-27 16:32:51","http://orujedu.com/wp-content/uploads/2020/04/docs_f8n/Buy-Sell%20Agreement_92646947_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352250/","spamhaus"
@@ -3691,13 +4069,13 @@
 "352240","2020-04-27 16:30:58","http://lehzig.com/trix.exe","offline","malware_download","Dridex","https://urlhaus.abuse.ch/url/352240/","anonymous"
 "352239","2020-04-27 16:30:53","https://altatecnica.com.mx/wp-content/uploads/2020/04/docs_qvi/285752/Buy-Sell%20Agreement_285752_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352239/","spamhaus"
 "352238","2020-04-27 16:30:29","http://cecadesayu.corazondelcielo.mx/docs_ytk/47079/Buy-Sell%20Agreement_47079_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352238/","spamhaus"
-"352237","2020-04-27 16:29:55","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/42458/Buy-Sell%20Agreement_42458_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352237/","spamhaus"
+"352237","2020-04-27 16:29:55","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/42458/Buy-Sell%20Agreement_42458_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352237/","spamhaus"
 "352236","2020-04-27 16:29:19","https://coberturasgenerales.pe/wp-content/uploads/2020/04/docs_2hj/53600169/Buy-Sell%20Agreement_53600169_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352236/","spamhaus"
 "352235","2020-04-27 16:28:45","https://www.internaut.in/wp-content/uploads/2020/04/docs_kl7/83448/Buy-Sell%20Agreement_83448_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352235/","spamhaus"
 "352234","2020-04-27 16:28:08","https://bestappliances.in/wp-content/uploads/2020/04/docs_0mg/5220570/Buy-Sell%20Agreement_5220570_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352234/","spamhaus"
 "352233","2020-04-27 16:27:33","https://minimalisku.com/wp-content/uploads/2020/04/docs_tp8/Buy-Sell%20Agreement_2929_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352233/","spamhaus"
 "352232","2020-04-27 16:26:58","https://www.h2obbs.cn/wp-content/themes/calliope/docs_3kj/00495211/Buy-Sell%20Agreement_00495211_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352232/","spamhaus"
-"352231","2020-04-27 16:26:24","https://pakdesighee.com/wp-content/uploads/2020/04/docs_l9e/5150036/Buy-Sell%20Agreement_5150036_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352231/","spamhaus"
+"352231","2020-04-27 16:26:24","https://pakdesighee.com/wp-content/uploads/2020/04/docs_l9e/5150036/Buy-Sell%20Agreement_5150036_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352231/","spamhaus"
 "352230","2020-04-27 16:25:32","https://www.netfeed.club/wp-content/themes/calliope/docs_wd2/Buy-Sell%20Agreement_07984922_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352230/","spamhaus"
 "352229","2020-04-27 16:24:54","https://parmisco.com/docs_mc0/530449/Buy-Sell%20Agreement_530449_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352229/","spamhaus"
 "352228","2020-04-27 16:24:20","https://parmisco.com/docs_mc0/458204/Buy-Sell%20Agreement_458204_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352228/","spamhaus"
@@ -4027,16 +4405,16 @@
 "351904","2020-04-27 10:16:08","http://89.34.27.10/fbot.arm5","offline","malware_download",",elf","https://urlhaus.abuse.ch/url/351904/","Gandylyan1"
 "351903","2020-04-27 10:16:05","http://89.34.27.10/fbot.arm","offline","malware_download",",elf","https://urlhaus.abuse.ch/url/351903/","Gandylyan1"
 "351902","2020-04-27 10:16:03","http://89.34.27.10/fbot.x86","offline","malware_download",",elf","https://urlhaus.abuse.ch/url/351902/","Gandylyan1"
-"351901","2020-04-27 10:05:08","http://45.95.168.254:1691/dvrbot.x86","online","malware_download",",elf","https://urlhaus.abuse.ch/url/351901/","Gandylyan1"
-"351900","2020-04-27 10:05:05","http://45.95.168.254:1691/dvrbot.mips","online","malware_download",",elf","https://urlhaus.abuse.ch/url/351900/","Gandylyan1"
-"351899","2020-04-27 10:05:03","http://45.95.168.254:1691/dvrbot.arm5","online","malware_download",",elf","https://urlhaus.abuse.ch/url/351899/","Gandylyan1"
+"351901","2020-04-27 10:05:08","http://45.95.168.254:1691/dvrbot.x86","offline","malware_download",",elf","https://urlhaus.abuse.ch/url/351901/","Gandylyan1"
+"351900","2020-04-27 10:05:05","http://45.95.168.254:1691/dvrbot.mips","offline","malware_download",",elf","https://urlhaus.abuse.ch/url/351900/","Gandylyan1"
+"351899","2020-04-27 10:05:03","http://45.95.168.254:1691/dvrbot.arm5","offline","malware_download",",elf","https://urlhaus.abuse.ch/url/351899/","Gandylyan1"
 "351898","2020-04-27 10:01:33","http://vmi367745.contaboserver.net/bins/mpsl","offline","malware_download",",elf","https://urlhaus.abuse.ch/url/351898/","Gandylyan1"
 "351897","2020-04-27 10:01:31","http://vmi367745.contaboserver.net/bins/arm7","offline","malware_download",",elf","https://urlhaus.abuse.ch/url/351897/","Gandylyan1"
 "351896","2020-04-27 10:01:23","http://vmi367745.contaboserver.net/bins/arm6","offline","malware_download",",elf","https://urlhaus.abuse.ch/url/351896/","Gandylyan1"
 "351895","2020-04-27 10:01:19","http://vmi367745.contaboserver.net/bins/arm5","offline","malware_download",",elf","https://urlhaus.abuse.ch/url/351895/","Gandylyan1"
 "351894","2020-04-27 10:01:07","http://vmi367745.contaboserver.net/bins/arm","offline","malware_download",",elf","https://urlhaus.abuse.ch/url/351894/","Gandylyan1"
 "351893","2020-04-27 09:57:03","http://45.95.169.232/bins/m68k","offline","malware_download",",elf","https://urlhaus.abuse.ch/url/351893/","Gandylyan1"
-"351892","2020-04-27 09:50:03","http://45.95.168.254:1691/dvrbot.arm7","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351892/","zbetcheckin"
+"351892","2020-04-27 09:50:03","http://45.95.168.254:1691/dvrbot.arm7","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351892/","zbetcheckin"
 "351891","2020-04-27 09:47:40","https://pastebin.com/raw/bH0sjMPS","offline","malware_download","None","https://urlhaus.abuse.ch/url/351891/","JayTHL"
 "351890","2020-04-27 09:47:36","https://paste.ee/r/kKv90","offline","malware_download","Encoded,powershell,smokeloader","https://urlhaus.abuse.ch/url/351890/","Jouliok"
 "351889","2020-04-27 09:47:32","https://paste.ee/r/VfRGk","offline","malware_download","Encoded,powershell,smokeloader","https://urlhaus.abuse.ch/url/351889/","Jouliok"
@@ -4085,7 +4463,7 @@
 "351846","2020-04-27 07:33:06","http://107.175.8.75/powerpc","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351846/","zbetcheckin"
 "351845","2020-04-27 07:33:04","http://107.175.8.75/mipsel","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351845/","zbetcheckin"
 "351844","2020-04-27 07:30:04","http://disk.karelia.pro/rkeIbsm/zzzzzzzzz.exe","offline","malware_download","Taurus","https://urlhaus.abuse.ch/url/351844/","vxvault"
-"351843","2020-04-27 07:22:04","http://45.95.168.254:1691/dvrbot.arm","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351843/","zbetcheckin"
+"351843","2020-04-27 07:22:04","http://45.95.168.254:1691/dvrbot.arm","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351843/","zbetcheckin"
 "351842","2020-04-27 06:51:08","http://191.37.220.200:16972/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351842/","geenensp"
 "351841","2020-04-27 06:47:06","http://bibpap.com/Qa/56071822.jpg","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/351841/","abuse_ch"
 "351840","2020-04-27 06:46:05","http://bibpap.com/Qa/618883.jpg","offline","malware_download","exe,lucifer","https://urlhaus.abuse.ch/url/351840/","abuse_ch"
@@ -4315,8 +4693,8 @@
 "351616","2020-04-26 19:26:16","http://ettba.xyz/chrome.apk","offline","malware_download","None","https://urlhaus.abuse.ch/url/351616/","JayTHL"
 "351615","2020-04-26 19:26:11","http://etwax.xyz/chrome.apk","offline","malware_download","None","https://urlhaus.abuse.ch/url/351615/","JayTHL"
 "351614","2020-04-26 19:26:06","http://esxzt.xyz/chrome.apk","offline","malware_download","None","https://urlhaus.abuse.ch/url/351614/","JayTHL"
-"351613","2020-04-26 19:24:05","http://73.139.46.234:60322/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351613/","geenensp"
-"351612","2020-04-26 18:59:05","http://218.156.132.7:50562/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351612/","geenensp"
+"351613","2020-04-26 19:24:05","http://73.139.46.234:60322/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351613/","geenensp"
+"351612","2020-04-26 18:59:05","http://218.156.132.7:50562/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351612/","geenensp"
 "351611","2020-04-26 18:57:34","http://i-bss.com/build.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/351611/","zbetcheckin"
 "351610","2020-04-26 18:08:06","http://i-bss.com/COVID-19_Information.Doc","offline","malware_download","RTF","https://urlhaus.abuse.ch/url/351610/","zbetcheckin"
 "351609","2020-04-26 18:07:45","http://115.209.252.115:46234/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351609/","Gandylyan1"
@@ -4335,7 +4713,7 @@
 "351596","2020-04-26 18:04:42","http://172.36.27.47:38401/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351596/","Gandylyan1"
 "351595","2020-04-26 18:04:10","http://221.14.239.158:49281/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351595/","Gandylyan1"
 "351594","2020-04-26 18:04:04","http://111.42.103.37:38226/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351594/","Gandylyan1"
-"351593","2020-04-26 17:01:06","http://112.160.193.57:16171/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351593/","geenensp"
+"351593","2020-04-26 17:01:06","http://112.160.193.57:16171/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351593/","geenensp"
 "351592","2020-04-26 16:34:03","https://pastebin.com/raw/93Q4cEU9","offline","malware_download","None","https://urlhaus.abuse.ch/url/351592/","JayTHL"
 "351591","2020-04-26 16:25:15","http://23.252.75.251/3308","offline","malware_download","elf","https://urlhaus.abuse.ch/url/351591/","zbetcheckin"
 "351590","2020-04-26 16:25:10","http://49.84.93.106:42244/i","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351590/","zbetcheckin"
@@ -4406,7 +4784,7 @@
 "351525","2020-04-26 10:04:09","http://114.236.30.144:60065/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351525/","zbetcheckin"
 "351524","2020-04-26 09:25:09","http://shahtoba.faqserv.com/resmin.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/351524/","zbetcheckin"
 "351523","2020-04-26 09:15:04","http://89.136.197.170:33046/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351523/","geenensp"
-"351522","2020-04-26 09:14:05","http://183.107.57.170:47002/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/351522/","zbetcheckin"
+"351522","2020-04-26 09:14:05","http://183.107.57.170:47002/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/351522/","zbetcheckin"
 "351521","2020-04-26 09:07:07","http://221.210.211.114:33181/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351521/","Gandylyan1"
 "351520","2020-04-26 09:07:03","http://123.11.166.0:52608/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351520/","Gandylyan1"
 "351519","2020-04-26 09:06:58","http://180.116.96.229:40670/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351519/","Gandylyan1"
@@ -4458,7 +4836,7 @@
 "351473","2020-04-26 07:17:43","https://onedrive.live.com/download?cid=97B91CC99F8D92A7&resid=97B91CC99F8D92A7%21760&authkey=AH_4UDqQKUnv3Iw","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/351473/","lovemalware"
 "351472","2020-04-26 07:17:40","https://drive.google.com/uc?export=download&id=1hjlddzrmVdlrx9hKQO6HTIrG-NUpNRUB","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/351472/","lovemalware"
 "351471","2020-04-26 07:17:30","https://drive.google.com/uc?export=download&id=1mlGx7wgPzE4ZBxo-LJs6FOkb1G8e1Jsi","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/351471/","lovemalware"
-"351470","2020-04-26 07:17:24","https://onedrive.live.com/download?cid=6CD2E7E257C16E46&resid=6CD2E7E257C16E46%21158&authkey=ACpreL1y7oJkJqY","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/351470/","lovemalware"
+"351470","2020-04-26 07:17:24","https://onedrive.live.com/download?cid=6CD2E7E257C16E46&resid=6CD2E7E257C16E46%21158&authkey=ACpreL1y7oJkJqY","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/351470/","lovemalware"
 "351469","2020-04-26 07:17:20","https://drive.google.com/uc?export=download&id=1mGwOcBkUSpq-u0D_xTOrvkrxfUluQ1yG","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/351469/","lovemalware"
 "351468","2020-04-26 07:17:06","https://onedrive.live.com/download?cid=E4B1E1072DC91F5C&resid=E4B1E1072DC91F5C%21511&authkey=AGfS0Q7DZ7oS1LU","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/351468/","lovemalware"
 "351467","2020-04-26 07:13:18","http://117.206.159.20/jscoe/pluginfile.php/91322/mod_folder/content/0/NPTEL%20PDF.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/351467/","zbetcheckin"
@@ -4485,7 +4863,7 @@
 "351446","2020-04-26 07:01:05","http://213.202.255.4/x0ox0ox0oxDefault/z0r0.i686","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351446/","zbetcheckin"
 "351445","2020-04-26 07:01:03","http://213.202.255.4/x0ox0ox0oxDefault/z0r0.arm5","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351445/","zbetcheckin"
 "351444","2020-04-26 07:00:03","http://213.202.255.4/x0ox0ox0oxDefault/z0r0.arc","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351444/","zbetcheckin"
-"351443","2020-04-26 06:53:05","http://201.75.4.149:17537/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/351443/","zbetcheckin"
+"351443","2020-04-26 06:53:05","http://201.75.4.149:17537/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/351443/","zbetcheckin"
 "351442","2020-04-26 06:43:30","http://92.45.198.60:49882/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351442/","geenensp"
 "351441","2020-04-26 06:43:26","http://198.98.59.174/ap/ad.x86","offline","malware_download","32-bit,elf,x86-32","https://urlhaus.abuse.ch/url/351441/","geenensp"
 "351440","2020-04-26 06:43:23","http://198.98.59.174/xb.sh","offline","malware_download","script","https://urlhaus.abuse.ch/url/351440/","geenensp"
@@ -4673,7 +5051,7 @@
 "351258","2020-04-26 00:03:37","http://116.114.95.168:44475/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351258/","Gandylyan1"
 "351257","2020-04-26 00:03:05","http://42.227.202.209:36792/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351257/","Gandylyan1"
 "351256","2020-04-25 23:57:34","https://pastebin.com/raw/4gKpUkV5","offline","malware_download","None","https://urlhaus.abuse.ch/url/351256/","JayTHL"
-"351255","2020-04-25 23:19:10","http://112.185.140.99:8186/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/351255/","zbetcheckin"
+"351255","2020-04-25 23:19:10","http://112.185.140.99:8186/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/351255/","zbetcheckin"
 "351254","2020-04-25 23:19:04","http://77.43.208.172:34278/i","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351254/","zbetcheckin"
 "351253","2020-04-25 23:15:14","https://pastebin.com/raw/hsb7u9C4","offline","malware_download","None","https://urlhaus.abuse.ch/url/351253/","JayTHL"
 "351252","2020-04-25 23:15:05","https://pastebin.com/raw/bzsksT68","offline","malware_download","None","https://urlhaus.abuse.ch/url/351252/","JayTHL"
@@ -4722,7 +5100,7 @@
 "351209","2020-04-25 18:54:35","http://ramz.af/Slut4.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/351209/","abuse_ch"
 "351208","2020-04-25 18:53:34","http://freeforallapps.pk/az1.exe","offline","malware_download","AZORult,exe","https://urlhaus.abuse.ch/url/351208/","abuse_ch"
 "351207","2020-04-25 18:46:14","https://drive.google.com/uc?export=download&id=1-KRBLq6TpFbWkjbZTdbNrxYCERdgUPga","offline","malware_download","encrypted,GuLoader,Tinba","https://urlhaus.abuse.ch/url/351207/","abuse_ch"
-"351206","2020-04-25 18:46:09","https://onedrive.live.com/download?cid=7C41DDCFA01AEFF7&resid=7C41DDCFA01AEFF7%215298&authkey=ALbZYIzuqCZFv9s","online","malware_download","encrypted,GuLoader,NetWire","https://urlhaus.abuse.ch/url/351206/","abuse_ch"
+"351206","2020-04-25 18:46:09","https://onedrive.live.com/download?cid=7C41DDCFA01AEFF7&resid=7C41DDCFA01AEFF7%215298&authkey=ALbZYIzuqCZFv9s","offline","malware_download","encrypted,GuLoader,NetWire","https://urlhaus.abuse.ch/url/351206/","abuse_ch"
 "351205","2020-04-25 18:45:57","https://onedrive.live.com/download?cid=10C44A5247ACCFDE&resid=10C44A5247ACCFDE%21124&authkey=ACyRYegyb2pZO6M","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/351205/","abuse_ch"
 "351204","2020-04-25 18:45:44","http://inxeniadt.com/45678/Host_encrypted_1966D40.bin","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/351204/","abuse_ch"
 "351203","2020-04-25 18:45:24","https://mfpc.org.my//wp-content/plugins/formcraft3/STUB2_encrypted_BA9409F.bin","online","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/351203/","abuse_ch"
@@ -4784,7 +5162,7 @@
 "351147","2020-04-25 15:04:06","http://222.138.183.4:39368/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351147/","Gandylyan1"
 "351146","2020-04-25 14:38:16","https://pastebin.com/raw/ZGjPxXi1","offline","malware_download","None","https://urlhaus.abuse.ch/url/351146/","JayTHL"
 "351145","2020-04-25 14:38:11","https://pastebin.com/raw/YHh73p9Y","offline","malware_download","None","https://urlhaus.abuse.ch/url/351145/","JayTHL"
-"351144","2020-04-25 14:12:03","http://91.177.139.132:14677/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351144/","geenensp"
+"351144","2020-04-25 14:12:03","http://91.177.139.132:14677/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351144/","geenensp"
 "351143","2020-04-25 14:01:10","https://pastebin.com/raw/n4pq0gRF","offline","malware_download","None","https://urlhaus.abuse.ch/url/351143/","JayTHL"
 "351142","2020-04-25 13:54:11","http://27.206.66.103:34642/Mozi.a","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351142/","zbetcheckin"
 "351141","2020-04-25 13:54:05","http://121.135.146.40:1560/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/351141/","zbetcheckin"
@@ -4804,7 +5182,7 @@
 "351127","2020-04-25 12:04:01","http://123.10.166.238:56297/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351127/","Gandylyan1"
 "351126","2020-04-25 12:03:57","http://111.43.223.82:47101/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351126/","Gandylyan1"
 "351125","2020-04-25 12:03:52","http://42.224.170.228:59597/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351125/","Gandylyan1"
-"351124","2020-04-25 12:03:47","http://114.228.63.106:54323/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351124/","Gandylyan1"
+"351124","2020-04-25 12:03:47","http://114.228.63.106:54323/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351124/","Gandylyan1"
 "351123","2020-04-25 12:03:42","http://111.43.223.17:38864/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351123/","Gandylyan1"
 "351122","2020-04-25 12:03:39","http://162.212.113.156:54335/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351122/","Gandylyan1"
 "351121","2020-04-25 12:03:35","http://116.31.163.169:47300/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351121/","Gandylyan1"
@@ -5011,31 +5389,31 @@
 "350920","2020-04-25 03:04:15","http://116.114.95.142:33619/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/350920/","Gandylyan1"
 "350919","2020-04-25 03:04:12","http://58.243.189.248:43383/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/350919/","Gandylyan1"
 "350918","2020-04-25 03:04:05","http://182.114.208.185:38551/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/350918/","Gandylyan1"
-"350917","2020-04-25 02:54:24","http://45.148.122.113/s-h.4-.SNOOPY","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350917/","zbetcheckin"
+"350917","2020-04-25 02:54:24","http://45.148.122.113/s-h.4-.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350917/","zbetcheckin"
 "350916","2020-04-25 02:54:22","http://185.255.130.202/ARMV5L","offline","malware_download","elf","https://urlhaus.abuse.ch/url/350916/","zbetcheckin"
 "350915","2020-04-25 02:54:19","http://95.217.49.251/vtyhat","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350915/","zbetcheckin"
 "350914","2020-04-25 02:54:17","http://185.255.130.202/M68K","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350914/","zbetcheckin"
-"350913","2020-04-25 02:54:14","http://45.148.122.113/m-p.s-l.SNOOPY","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350913/","zbetcheckin"
-"350912","2020-04-25 02:54:12","http://45.148.122.113/a-r.m-5.SNOOPY","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350912/","zbetcheckin"
-"350911","2020-04-25 02:54:10","http://45.148.122.113/a-r.m-4.SNOOPY","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350911/","zbetcheckin"
+"350913","2020-04-25 02:54:14","http://45.148.122.113/m-p.s-l.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350913/","zbetcheckin"
+"350912","2020-04-25 02:54:12","http://45.148.122.113/a-r.m-5.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350912/","zbetcheckin"
+"350911","2020-04-25 02:54:10","http://45.148.122.113/a-r.m-4.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350911/","zbetcheckin"
 "350910","2020-04-25 02:54:08","http://185.255.130.202/MIPS","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350910/","zbetcheckin"
 "350909","2020-04-25 02:54:05","http://95.217.49.251/earyzq","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350909/","zbetcheckin"
-"350908","2020-04-25 02:54:03","http://45.148.122.113/m-i.p-s.SNOOPY","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350908/","zbetcheckin"
+"350908","2020-04-25 02:54:03","http://45.148.122.113/m-i.p-s.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350908/","zbetcheckin"
 "350907","2020-04-25 02:53:08","http://95.217.49.251/razdzn","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350907/","zbetcheckin"
-"350906","2020-04-25 02:53:05","http://45.148.122.113/x-3.2-.SNOOPY","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350906/","zbetcheckin"
+"350906","2020-04-25 02:53:05","http://45.148.122.113/x-3.2-.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350906/","zbetcheckin"
 "350905","2020-04-25 02:53:04","http://95.217.49.251/qtmzbn","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350905/","zbetcheckin"
 "350904","2020-04-25 02:49:27","http://95.217.49.251/atxhua","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350904/","zbetcheckin"
-"350903","2020-04-25 02:49:25","http://45.148.122.113/a-r.m-7.SNOOPY","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350903/","zbetcheckin"
-"350902","2020-04-25 02:49:23","http://45.148.122.113/a-r.m-6.SNOOPY","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350902/","zbetcheckin"
+"350903","2020-04-25 02:49:25","http://45.148.122.113/a-r.m-7.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350903/","zbetcheckin"
+"350902","2020-04-25 02:49:23","http://45.148.122.113/a-r.m-6.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350902/","zbetcheckin"
 "350901","2020-04-25 02:49:21","http://161.35.64.46/tftp","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350901/","zbetcheckin"
 "350900","2020-04-25 02:49:20","http://95.217.49.251/cemtop","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350900/","zbetcheckin"
-"350899","2020-04-25 02:49:18","http://45.148.122.113/i-5.8-6.SNOOPY","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350899/","zbetcheckin"
+"350899","2020-04-25 02:49:18","http://45.148.122.113/i-5.8-6.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350899/","zbetcheckin"
 "350898","2020-04-25 02:49:16","http://185.255.130.202/I686","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350898/","zbetcheckin"
 "350897","2020-04-25 02:49:13","http://95.217.49.251/vvglma","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350897/","zbetcheckin"
 "350896","2020-04-25 02:49:10","http://185.255.130.202/X86_64","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350896/","zbetcheckin"
 "350895","2020-04-25 02:49:07","http://185.255.130.202/POWERPC","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350895/","zbetcheckin"
 "350894","2020-04-25 02:49:05","http://185.255.130.202/I586","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350894/","zbetcheckin"
-"350893","2020-04-25 02:49:02","http://45.148.122.113/m-6.8-k.SNOOPY","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350893/","zbetcheckin"
+"350893","2020-04-25 02:49:02","http://45.148.122.113/m-6.8-k.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350893/","zbetcheckin"
 "350892","2020-04-25 02:46:35","http://161.35.64.46/ntpd","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350892/","zbetcheckin"
 "350891","2020-04-25 02:46:34","http://185.214.10.180/sparc","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350891/","zbetcheckin"
 "350890","2020-04-25 02:46:02","http://161.35.64.46/wget","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350890/","zbetcheckin"
@@ -5045,13 +5423,13 @@
 "350886","2020-04-25 02:45:17","http://161.35.64.46/pftp","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350886/","zbetcheckin"
 "350885","2020-04-25 02:45:09","http://161.35.64.46/sh","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350885/","zbetcheckin"
 "350884","2020-04-25 02:44:19","http://185.255.130.202/MIPSEL","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350884/","zbetcheckin"
-"350883","2020-04-25 02:44:15","http://45.148.122.113/x-8.6-.SNOOPY","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350883/","zbetcheckin"
+"350883","2020-04-25 02:44:15","http://45.148.122.113/x-8.6-.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350883/","zbetcheckin"
 "350882","2020-04-25 02:44:12","http://95.217.49.251/lnkfmx","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350882/","zbetcheckin"
 "350881","2020-04-25 02:44:03","http://95.217.49.251/nvitpj","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350881/","zbetcheckin"
 "350880","2020-04-25 02:40:22","http://185.214.10.180/mipsel","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350880/","zbetcheckin"
 "350879","2020-04-25 02:40:20","http://185.214.10.180/armv4l","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350879/","zbetcheckin"
 "350878","2020-04-25 02:40:18","http://185.214.10.180/armv6l","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350878/","zbetcheckin"
-"350877","2020-04-25 02:40:16","http://45.148.122.113/p-p.c-.SNOOPY","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350877/","zbetcheckin"
+"350877","2020-04-25 02:40:16","http://45.148.122.113/p-p.c-.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350877/","zbetcheckin"
 "350876","2020-04-25 02:40:14","http://185.214.10.180/powerpc","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350876/","zbetcheckin"
 "350875","2020-04-25 02:40:12","http://95.217.49.251/fwdfvf","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350875/","zbetcheckin"
 "350874","2020-04-25 02:40:10","http://185.255.130.202/ARMV6L","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350874/","zbetcheckin"
@@ -5110,34 +5488,34 @@
 "350821","2020-04-24 22:54:03","http://178.128.242.198/Pandoras_Box/pandora.arm","offline","malware_download","None","https://urlhaus.abuse.ch/url/350821/","JayTHL"
 "350820","2020-04-24 22:20:07","http://114.35.158.123:54597/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/350820/","zbetcheckin"
 "350819","2020-04-24 22:12:08","http://auxilioenergiacovid19.com/LoadMain.dll","offline","malware_download","exe","https://urlhaus.abuse.ch/url/350819/","zbetcheckin"
-"350818","2020-04-24 21:44:06","https://zethla.com/wp-content/themes/calliope/docs_osb/61488/Buy-Sell%20Agreement_61488_04232020.zip","online","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350818/","malware_traffic"
+"350818","2020-04-24 21:44:06","https://zethla.com/wp-content/themes/calliope/docs_osb/61488/Buy-Sell%20Agreement_61488_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350818/","malware_traffic"
 "350817","2020-04-24 21:43:09","http://https:/zethla.com/wp-content/themes/calliope/docs_osb/3242815/Buy-Sell%20Agreement_3242815_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350817/","malware_traffic"
 "350816","2020-04-24 21:43:07","https://zethla.com/wp-content/themes/calliope/docs_osb/3242815/Buy-Sell%20Agreement_3242815_04232020.zip","online","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350816/","malware_traffic"
-"350815","2020-04-24 21:42:52","https://www.qelie.com/wp-content/docs_q30/19188/Buy-Sell%20Agreement_19188_04232020.zip","online","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350815/","malware_traffic"
+"350815","2020-04-24 21:42:52","https://www.qelie.com/wp-content/docs_q30/19188/Buy-Sell%20Agreement_19188_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350815/","malware_traffic"
 "350814","2020-04-24 21:42:47","https://www.e24bay.in/docs_6su/Buy-Sell%20Agreement_683710_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350814/","malware_traffic"
 "350813","2020-04-24 21:42:45","https://www.e24bay.in/docs_6su/Buy-Sell%20Agreement_30590_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350813/","malware_traffic"
 "350812","2020-04-24 21:42:39","https://www.e24bay.in/docs_6su/Buy-Sell%20Agreement_039686_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350812/","malware_traffic"
 "350811","2020-04-24 21:42:35","https://www.e24bay.in/docs_6su/926274/Buy-Sell%20Agreement_926274_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350811/","malware_traffic"
 "350810","2020-04-24 21:42:32","https://woodofkosta.com/docs_hcv/Buy-Sell%20Agreement_08894_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350810/","malware_traffic"
 "350809","2020-04-24 21:42:26","https://test.aosex.club/wp-content/themes/calliope/docs_941/Buy-Sell%20Agreement_067627_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350809/","malware_traffic"
-"350808","2020-04-24 21:42:21","https://tecnobella.cl/docs_dte/Buy-Sell%20Agreement_96341540_04232020.zip","online","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350808/","malware_traffic"
-"350807","2020-04-24 21:42:18","https://serviciosinfoware.cl/docs_846/Buy-Sell%20Agreement_14067_04232020.zip","online","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350807/","malware_traffic"
+"350808","2020-04-24 21:42:21","https://tecnobella.cl/docs_dte/Buy-Sell%20Agreement_96341540_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350808/","malware_traffic"
+"350807","2020-04-24 21:42:18","https://serviciosinfoware.cl/docs_846/Buy-Sell%20Agreement_14067_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350807/","malware_traffic"
 "350806","2020-04-24 21:42:15","https://serviciosinfoware.cl/docs_846/8289510/Buy-Sell%20Agreement_8289510_04232020.zip","online","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350806/","malware_traffic"
 "350805","2020-04-24 21:42:09","https://seibee.biz/docs_3z8/976048239/Buy-Sell%20Agreement_976048239_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350805/","malware_traffic"
 "350804","2020-04-24 21:42:00","https://redeemerssports.com/wp-content/themes/calliope/docs_i4t/6737406/Buy-Sell%20Agreement_6737406_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350804/","malware_traffic"
 "350803","2020-04-24 21:41:57","https://redeemerssports.com/wp-content/themes/calliope/docs_i4t/346947/Buy-Sell%20Agreement_346947_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350803/","malware_traffic"
-"350802","2020-04-24 21:41:51","https://melusinkiwane.com/docs_c95/Buy-Sell%20Agreement_615778_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350802/","malware_traffic"
-"350801","2020-04-24 21:41:49","https://melusinkiwane.com/docs_c95/87464/Buy-Sell%20Agreement_87464_04232020.zip","online","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350801/","malware_traffic"
+"350802","2020-04-24 21:41:51","https://melusinkiwane.com/docs_c95/Buy-Sell%20Agreement_615778_04232020.zip","online","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350802/","malware_traffic"
+"350801","2020-04-24 21:41:49","https://melusinkiwane.com/docs_c95/87464/Buy-Sell%20Agreement_87464_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350801/","malware_traffic"
 "350800","2020-04-24 21:41:46","https://melusinkiwane.com/docs_c95/82941186/Buy-Sell%20Agreement_82941186_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350800/","malware_traffic"
 "350799","2020-04-24 21:41:43","https://buyitshop.in/docs_x2a/777494/Buy-Sell%20Agreement_777494_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350799/","malware_traffic"
 "350798","2020-04-24 21:41:39","https://buyitshop.in/docs_x2a/63747893/Buy-Sell%20Agreement_63747893_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350798/","malware_traffic"
 "350797","2020-04-24 21:41:35","https://buyitshop.in/docs_x2a/1784236/Buy-Sell%20Agreement_1784236_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350797/","malware_traffic"
 "350796","2020-04-24 21:41:33","https://buyitshop.in/docs_x2a/16317/Buy-Sell%20Agreement_16317_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350796/","malware_traffic"
-"350795","2020-04-24 21:41:26","http://www.vdotrip.blog/wp-content/uploads/2020/04/docs_evf/59613/Buy-Sell%20Agreement_59613_04232020.zip","online","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350795/","malware_traffic"
+"350795","2020-04-24 21:41:26","http://www.vdotrip.blog/wp-content/uploads/2020/04/docs_evf/59613/Buy-Sell%20Agreement_59613_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350795/","malware_traffic"
 "350794","2020-04-24 21:41:21","http://www.globalpremiere.org/docs_03j/Buy-Sell%20Agreement_342919423_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350794/","malware_traffic"
 "350793","2020-04-24 21:41:18","http://www.globalpremiere.org/docs_03j/Buy-Sell%20Agreement_137230_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350793/","malware_traffic"
 "350792","2020-04-24 21:41:14","http://www.e24bay.in/docs_6su/Buy-Sell%20Agreement_683710_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350792/","malware_traffic"
-"350791","2020-04-24 21:41:12","http://prepaenunsoloexamen.academiagalileoac.com/docs_l8z/05706/Buy-Sell%20Agreement_05706_04232020.zip","online","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350791/","malware_traffic"
+"350791","2020-04-24 21:41:12","http://prepaenunsoloexamen.academiagalileoac.com/docs_l8z/05706/Buy-Sell%20Agreement_05706_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350791/","malware_traffic"
 "350790","2020-04-24 21:41:06","http://portalouse.com.br/docs_jqk/Buy-Sell%20Agreement_3116575_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350790/","malware_traffic"
 "350789","2020-04-24 21:41:00","http://portalouse.com.br/docs_jqk/Buy-Sell%20Agreement_038095375_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350789/","malware_traffic"
 "350788","2020-04-24 21:40:40","http://portalouse.com.br/docs_jqk/471381/Buy-Sell%20Agreement_471381_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350788/","malware_traffic"
@@ -5160,7 +5538,7 @@
 "350771","2020-04-24 21:38:31","http://gestoriagyg.com.mx/wp-content/plugins/apikey/docs_twh/Buy-Sell%20Agreement_6319074_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350771/","malware_traffic"
 "350770","2020-04-24 21:38:27","http://flowesie.fr/wp-content/uploads/2020/04/docs_91y/Buy-Sell%20Agreement_3875935_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350770/","malware_traffic"
 "350769","2020-04-24 21:38:23","http://flowesie.fr/wp-content/uploads/2020/04/docs_91y/47396/Buy-Sell%20Agreement_47396_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350769/","malware_traffic"
-"350768","2020-04-24 21:38:21","http://bxbx28.cn/wp-content/plugins/apikey/docs_1fc/Buy-Sell%20Agreement_341946123_04232020.zip","online","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350768/","malware_traffic"
+"350768","2020-04-24 21:38:21","http://bxbx28.cn/wp-content/plugins/apikey/docs_1fc/Buy-Sell%20Agreement_341946123_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350768/","malware_traffic"
 "350767","2020-04-24 21:38:12","http://bxbx28.cn/wp-content/plugins/apikey/docs_1fc/Buy-Sell%20Agreement_261264_04232020.zip","online","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350767/","malware_traffic"
 "350766","2020-04-24 21:38:07","http://bxbx28.cn/wp-content/plugins/apikey/docs_1fc/6614881/Buy-Sell%20Agreement_6614881_04232020.zip","online","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350766/","malware_traffic"
 "350765","2020-04-24 21:06:04","http://172.39.76.165:33406/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/350765/","Gandylyan1"
@@ -5350,7 +5728,7 @@
 "350580","2020-04-24 12:02:34","http://prepaidgift.co/kpot.exe","offline","malware_download","exe,KPOTStealer","https://urlhaus.abuse.ch/url/350580/","zbetcheckin"
 "350579","2020-04-24 11:59:15","http://prepaidgift.co/$wz$Bluestack.exe","offline","malware_download","AveMariaRAT,exe","https://urlhaus.abuse.ch/url/350579/","zbetcheckin"
 "350578","2020-04-24 11:58:36","https://www.aussiepet.com.au/1KdJvgcHuY8uuSndWThUYk.pdf.jar","offline","malware_download","jSocket","https://urlhaus.abuse.ch/url/350578/","anonymous"
-"350577","2020-04-24 11:51:06","http://175.200.153.48:62149/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/350577/","zbetcheckin"
+"350577","2020-04-24 11:51:06","http://175.200.153.48:62149/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/350577/","zbetcheckin"
 "350576","2020-04-24 11:26:03","http://80.211.110.143:1691/dvrbot.x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/350576/","zbetcheckin"
 "350575","2020-04-24 11:22:05","http://hfye22gy.3b3kb3.com/juuu/ifhwwyy.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/350575/","zbetcheckin"
 "350574","2020-04-24 11:18:10","http://hfye22gy.3b3kb3.com/iuww/jhuimme.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/350574/","zbetcheckin"
@@ -6703,12 +7081,12 @@
 "349227","2020-04-24 01:53:03","http://104.248.95.243/YEETbins.sh","offline","malware_download","shellscript","https://urlhaus.abuse.ch/url/349227/","zbetcheckin"
 "349226","2020-04-24 00:24:07","http://checktime.pk/nw.exe","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/349226/","zbetcheckin"
 "349225","2020-04-24 00:21:07","http://checktime.pk/az2.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/349225/","zbetcheckin"
-"349224","2020-04-24 00:21:04","http://142.11.194.209/JSEBNAWKNDWANDAWD.mips","offline","malware_download","elf","https://urlhaus.abuse.ch/url/349224/","zbetcheckin"
+"349224","2020-04-24 00:21:04","http://142.11.194.209/JSEBNAWKNDWANDAWD.mips","online","malware_download","elf","https://urlhaus.abuse.ch/url/349224/","zbetcheckin"
 "349223","2020-04-24 00:21:02","https://apbfiber.com/openme/520d200d42d3_18d30d11.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/349223/","p5yb34m"
 "349222","2020-04-24 00:20:44","https://apbfiber.com/openme/8A2Bw3s7b8n8.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/349222/","p5yb34m"
 "349221","2020-04-24 00:20:32","https://apbfiber.com/openme/989dd3optoor.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/349221/","p5yb34m"
 "349220","2020-04-24 00:20:16","https://apbfiber.com/openme/1512345.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/349220/","p5yb34m"
-"349219","2020-04-24 00:18:24","http://softdown.55.la/soft/down/PDF2EXCEL_1.0.0.1_sogou.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/349219/","zbetcheckin"
+"349219","2020-04-24 00:18:24","http://softdown.55.la/soft/down/PDF2EXCEL_1.0.0.1_sogou.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/349219/","zbetcheckin"
 "349216","2020-04-24 00:15:38","http://softdown.55.la/soft/down/PDF2EXCEL_1.0.0.0_360hy.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/349216/","zbetcheckin"
 "349214","2020-04-24 00:14:11","https://apbfiber.com/openme/198312345.exe","offline","malware_download","exe,Gozi","https://urlhaus.abuse.ch/url/349214/","p5yb34m"
 "349213","2020-04-24 00:14:09","https://apbfiber.com/openme/195712345.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/349213/","p5yb34m"
@@ -6752,16 +7130,16 @@
 "349170","2020-04-24 00:01:35","https://apbfiber.com/openme/YhggfB.php","offline","malware_download","exe,Gozi,zloader","https://urlhaus.abuse.ch/url/349170/","p5yb34m"
 "349169","2020-04-23 23:54:07","http://220.134.77.110:65509/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/349169/","zbetcheckin"
 "349168","2020-04-23 23:51:13","https://griginet.com/ggassh/sshrod.php","offline","malware_download","exe,Trickbot","https://urlhaus.abuse.ch/url/349168/","zbetcheckin"
-"349167","2020-04-23 22:20:28","http://142.11.194.209/bins/JSEBNAWKNDWANDAWD.x86","offline","malware_download","None","https://urlhaus.abuse.ch/url/349167/","JayTHL"
-"349166","2020-04-23 22:20:25","http://142.11.194.209/bins/JSEBNAWKNDWANDAWD.spc","offline","malware_download","None","https://urlhaus.abuse.ch/url/349166/","JayTHL"
-"349165","2020-04-23 22:20:23","http://142.11.194.209/bins/JSEBNAWKNDWANDAWD.sh4","offline","malware_download","None","https://urlhaus.abuse.ch/url/349165/","JayTHL"
-"349164","2020-04-23 22:20:20","http://142.11.194.209/bins/JSEBNAWKNDWANDAWD.ppc","offline","malware_download","None","https://urlhaus.abuse.ch/url/349164/","JayTHL"
-"349163","2020-04-23 22:20:17","http://142.11.194.209/bins/JSEBNAWKNDWANDAWD.mpsl","offline","malware_download","None","https://urlhaus.abuse.ch/url/349163/","JayTHL"
-"349162","2020-04-23 22:20:15","http://142.11.194.209/bins/JSEBNAWKNDWANDAWD.mips","offline","malware_download","None","https://urlhaus.abuse.ch/url/349162/","JayTHL"
-"349161","2020-04-23 22:20:12","http://142.11.194.209/bins/JSEBNAWKNDWANDAWD.m68k","offline","malware_download","None","https://urlhaus.abuse.ch/url/349161/","JayTHL"
-"349160","2020-04-23 22:20:09","http://142.11.194.209/bins/JSEBNAWKNDWANDAWD.arm7","offline","malware_download","None","https://urlhaus.abuse.ch/url/349160/","JayTHL"
-"349159","2020-04-23 22:20:06","http://142.11.194.209/bins/JSEBNAWKNDWANDAWD.arm6","offline","malware_download","None","https://urlhaus.abuse.ch/url/349159/","JayTHL"
-"349158","2020-04-23 22:20:04","http://142.11.194.209/bins/JSEBNAWKNDWANDAWD.arm","offline","malware_download","None","https://urlhaus.abuse.ch/url/349158/","JayTHL"
+"349167","2020-04-23 22:20:28","http://142.11.194.209/bins/JSEBNAWKNDWANDAWD.x86","online","malware_download","None","https://urlhaus.abuse.ch/url/349167/","JayTHL"
+"349166","2020-04-23 22:20:25","http://142.11.194.209/bins/JSEBNAWKNDWANDAWD.spc","online","malware_download","None","https://urlhaus.abuse.ch/url/349166/","JayTHL"
+"349165","2020-04-23 22:20:23","http://142.11.194.209/bins/JSEBNAWKNDWANDAWD.sh4","online","malware_download","None","https://urlhaus.abuse.ch/url/349165/","JayTHL"
+"349164","2020-04-23 22:20:20","http://142.11.194.209/bins/JSEBNAWKNDWANDAWD.ppc","online","malware_download","None","https://urlhaus.abuse.ch/url/349164/","JayTHL"
+"349163","2020-04-23 22:20:17","http://142.11.194.209/bins/JSEBNAWKNDWANDAWD.mpsl","online","malware_download","None","https://urlhaus.abuse.ch/url/349163/","JayTHL"
+"349162","2020-04-23 22:20:15","http://142.11.194.209/bins/JSEBNAWKNDWANDAWD.mips","online","malware_download","None","https://urlhaus.abuse.ch/url/349162/","JayTHL"
+"349161","2020-04-23 22:20:12","http://142.11.194.209/bins/JSEBNAWKNDWANDAWD.m68k","online","malware_download","None","https://urlhaus.abuse.ch/url/349161/","JayTHL"
+"349160","2020-04-23 22:20:09","http://142.11.194.209/bins/JSEBNAWKNDWANDAWD.arm7","online","malware_download","None","https://urlhaus.abuse.ch/url/349160/","JayTHL"
+"349159","2020-04-23 22:20:06","http://142.11.194.209/bins/JSEBNAWKNDWANDAWD.arm6","online","malware_download","None","https://urlhaus.abuse.ch/url/349159/","JayTHL"
+"349158","2020-04-23 22:20:04","http://142.11.194.209/bins/JSEBNAWKNDWANDAWD.arm","online","malware_download","None","https://urlhaus.abuse.ch/url/349158/","JayTHL"
 "349157","2020-04-23 21:37:26","http://vbncdfaewoi.ug/az1.exe","offline","malware_download","AZORult,exe","https://urlhaus.abuse.ch/url/349157/","zbetcheckin"
 "349156","2020-04-23 21:37:10","http://nemo.herc.ws/get1.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/349156/","zbetcheckin"
 "349155","2020-04-23 21:33:21","http://vbncdfaewoi.ug/ds.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/349155/","zbetcheckin"
@@ -6807,9 +7185,9 @@
 "349115","2020-04-23 20:56:58","https://onedrive.live.com/download?cid=EAE9B5435CFAEBAA&resid=EAE9B5435CFAEBAA!232&authkey=AAuY9sGJCcGPZX8","online","malware_download","None","https://urlhaus.abuse.ch/url/349115/","JayTHL"
 "349114","2020-04-23 20:56:25","https://onedrive.live.com/download?cid=E61E5F3F655316FA&resid=E61E5F3F655316FA!124&authkey=ADKlC5yRN_vbmt8","online","malware_download","None","https://urlhaus.abuse.ch/url/349114/","JayTHL"
 "349113","2020-04-23 20:55:51","https://onedrive.live.com/download?cid=D5825CD44FFD03A7&resid=D5825CD44FFD03A7!841&authkey=AJahuq67BKwKerk","offline","malware_download","None","https://urlhaus.abuse.ch/url/349113/","JayTHL"
-"349112","2020-04-23 20:55:19","https://onedrive.live.com/download?cid=D06D60404544FB85&resid=D06D60404544FB85!875&authkey=AKa55YbDhQNOC6c","offline","malware_download","None","https://urlhaus.abuse.ch/url/349112/","JayTHL"
-"349111","2020-04-23 20:54:45","https://onedrive.live.com/download?cid=D06D60404544FB85&resid=D06D60404544FB85!872&authkey=AP9HcHZTYWO8ZUo","offline","malware_download","None","https://urlhaus.abuse.ch/url/349111/","JayTHL"
-"349110","2020-04-23 20:54:12","https://onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E!1347&authkey=AL-ZGe-TTVr921s","offline","malware_download","None","https://urlhaus.abuse.ch/url/349110/","JayTHL"
+"349112","2020-04-23 20:55:19","https://onedrive.live.com/download?cid=D06D60404544FB85&resid=D06D60404544FB85!875&authkey=AKa55YbDhQNOC6c","online","malware_download","None","https://urlhaus.abuse.ch/url/349112/","JayTHL"
+"349111","2020-04-23 20:54:45","https://onedrive.live.com/download?cid=D06D60404544FB85&resid=D06D60404544FB85!872&authkey=AP9HcHZTYWO8ZUo","online","malware_download","None","https://urlhaus.abuse.ch/url/349111/","JayTHL"
+"349110","2020-04-23 20:54:12","https://onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E!1347&authkey=AL-ZGe-TTVr921s","online","malware_download","None","https://urlhaus.abuse.ch/url/349110/","JayTHL"
 "349109","2020-04-23 20:53:39","https://onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E!1344&authkey=AOzErPpD6MnoKwY","online","malware_download","None","https://urlhaus.abuse.ch/url/349109/","JayTHL"
 "349108","2020-04-23 20:53:06","https://onedrive.live.com/download?cid=B3B98222C3EF96E0&resid=B3B98222C3EF96E0!166&authkey=AM6Hz6Klyos92OY","online","malware_download","None","https://urlhaus.abuse.ch/url/349108/","JayTHL"
 "349107","2020-04-23 20:52:33","https://onedrive.live.com/download?cid=A32AEA2B4355716B&resid=A32AEA2B4355716B!5047&authkey=ABGpmXhJe7B2pEQ","offline","malware_download","None","https://urlhaus.abuse.ch/url/349107/","JayTHL"
@@ -6818,11 +7196,11 @@
 "349104","2020-04-23 20:51:23","https://onedrive.live.com/download?cid=7C41DDCFA01AEFF7&resid=7C41DDCFA01AEFF7!5295&authkey=AASCEQJ1MDoDEuo","online","malware_download","None","https://urlhaus.abuse.ch/url/349104/","JayTHL"
 "349103","2020-04-23 20:51:12","https://onedrive.live.com/download?cid=7366FEFC2190D2E3&resid=7366FEFC2190D2E3!211&authkey=AIUVoiDHh8IFdEI","offline","malware_download","None","https://urlhaus.abuse.ch/url/349103/","JayTHL"
 "349102","2020-04-23 20:51:08","https://onedrive.live.com/download?cid=72EF66C14DF86B76&resid=72EF66C14DF86B76!196&authkey=AEIZSuDu2mLHlHU","online","malware_download","None","https://urlhaus.abuse.ch/url/349102/","JayTHL"
-"349101","2020-04-23 20:50:52","https://onedrive.live.com/download?cid=72EF66C14DF86B76&resid=72EF66C14DF86B76!190&authkey=AJ-3yQm7eZZ9zmE","offline","malware_download","None","https://urlhaus.abuse.ch/url/349101/","JayTHL"
+"349101","2020-04-23 20:50:52","https://onedrive.live.com/download?cid=72EF66C14DF86B76&resid=72EF66C14DF86B76!190&authkey=AJ-3yQm7eZZ9zmE","online","malware_download","None","https://urlhaus.abuse.ch/url/349101/","JayTHL"
 "349100","2020-04-23 20:50:43","https://onedrive.live.com/download?cid=72EF66C14DF86B76&resid=72EF66C14DF86B76!185&authkey=AMm2Fsxi2l-Wa9A","online","malware_download","None","https://urlhaus.abuse.ch/url/349100/","JayTHL"
 "349099","2020-04-23 20:50:38","https://onedrive.live.com/download?cid=72EF66C14DF86B76&resid=72EF66C14DF86B76!184&authkey=ACrLgQEORQqW7bE","online","malware_download","None","https://urlhaus.abuse.ch/url/349099/","JayTHL"
 "349098","2020-04-23 20:50:32","https://onedrive.live.com/download?cid=6CD2E7E257C16E46&resid=6CD2E7E257C16E46!144&authkey=ACWoeUasuRL8m3M","online","malware_download","None","https://urlhaus.abuse.ch/url/349098/","JayTHL"
-"349097","2020-04-23 20:50:28","https://onedrive.live.com/download?cid=6A1602E410531072&resid=6A1602E410531072!112&authkey=AAsndGbCwol3MYs","offline","malware_download","None","https://urlhaus.abuse.ch/url/349097/","JayTHL"
+"349097","2020-04-23 20:50:28","https://onedrive.live.com/download?cid=6A1602E410531072&resid=6A1602E410531072!112&authkey=AAsndGbCwol3MYs","online","malware_download","None","https://urlhaus.abuse.ch/url/349097/","JayTHL"
 "349096","2020-04-23 20:50:25","https://onedrive.live.com/download?cid=627BE925DFC4B997&resid=627BE925DFC4B997!145&authkey=ABz8d6UsBiJt_lU","online","malware_download","None","https://urlhaus.abuse.ch/url/349096/","JayTHL"
 "349095","2020-04-23 20:50:19","https://onedrive.live.com/download?cid=57C0958DB500FE0B&resid=57C0958DB500FE0B!68197&authkey=AOWPm7Ocl_21-oc","online","malware_download","None","https://urlhaus.abuse.ch/url/349095/","JayTHL"
 "349094","2020-04-23 20:50:13","https://onedrive.live.com/download?cid=4DF11EDA676A355F&resid=4DF11EDA676A355F!130&authkey=!AKd6uxvLjTLVpxU","online","malware_download","None","https://urlhaus.abuse.ch/url/349094/","JayTHL"
@@ -6830,7 +7208,7 @@
 "349092","2020-04-23 20:49:55","https://onedrive.live.com/download?cid=41F2978DA9CE0256&resid=41F2978DA9CE0256!113&authkey=AEOaNIW0sQpOAcU","online","malware_download","None","https://urlhaus.abuse.ch/url/349092/","JayTHL"
 "349091","2020-04-23 20:49:46","https://onedrive.live.com/download?cid=18418ADACEFED6E2&resid=18418ADACEFED6E2!129&authkey=APQOONsrCe0ArI4","online","malware_download","None","https://urlhaus.abuse.ch/url/349091/","JayTHL"
 "349090","2020-04-23 20:49:35","https://onedrive.live.com/download?cid=15128527F18DE6B7&resid=15128527F18DE6B7!107&authkey=!ALYQ3vqt_d-o4n4","offline","malware_download","None","https://urlhaus.abuse.ch/url/349090/","JayTHL"
-"349089","2020-04-23 20:49:32","https://onedrive.live.com/download?cid=1164EA2B0783A793&resid=1164EA2B0783A793!128&authkey=AOoJuE9Aw_IzFkA","offline","malware_download","None","https://urlhaus.abuse.ch/url/349089/","JayTHL"
+"349089","2020-04-23 20:49:32","https://onedrive.live.com/download?cid=1164EA2B0783A793&resid=1164EA2B0783A793!128&authkey=AOoJuE9Aw_IzFkA","online","malware_download","None","https://urlhaus.abuse.ch/url/349089/","JayTHL"
 "349088","2020-04-23 20:49:28","https://onedrive.live.com/download?cid=0C707F50E538E089&resid=C707F50E538E089!108&authkey=AFlvxX6otk0Mz4Q","offline","malware_download","None","https://urlhaus.abuse.ch/url/349088/","JayTHL"
 "349087","2020-04-23 20:49:22","https://onedrive.live.com/download?cid=052BCF630286E980&resid=52BCF630286E980!113&authkey=AH3RaTLEdBMNuaY","online","malware_download","None","https://urlhaus.abuse.ch/url/349087/","JayTHL"
 "349086","2020-04-23 20:49:12","https://onedrive.live.com/download?cid=01F191D863B4D5A4&resid=1F191D863B4D5A4!158&authkey=AMsoii5Nr6PomHc","online","malware_download","None","https://urlhaus.abuse.ch/url/349086/","JayTHL"
@@ -6900,7 +7278,7 @@
 "349022","2020-04-23 17:27:32","https://uvisionpk.com/wp/wp-content/themes/calliope/docs_4ru/Judgement_04222020_70525.zip","offline","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/349022/","malware_traffic"
 "349021","2020-04-23 17:27:26","https://uvisionpk.com/wp/wp-content/themes/calliope/docs_4ru/6004556/Judgement_04222020_6004556.zip","offline","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/349021/","malware_traffic"
 "349020","2020-04-23 17:27:18","https://tepatitlan.gob.mx/cs/wp-content/themes/calliope/docs_tpm/Judgement_04222020_5460712.zip","offline","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/349020/","malware_traffic"
-"349019","2020-04-23 17:27:13","https://tepatitlan.gob.mx/cs/wp-content/themes/calliope/docs_tpm/250122449/Judgement_04222020_250122449.zip","offline","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/349019/","malware_traffic"
+"349019","2020-04-23 17:27:13","https://tepatitlan.gob.mx/cs/wp-content/themes/calliope/docs_tpm/250122449/Judgement_04222020_250122449.zip","online","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/349019/","malware_traffic"
 "349018","2020-04-23 17:27:08","http://playvideo.site/docs_8kj/Judgement_04222020_0736741.zip","offline","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/349018/","malware_traffic"
 "349017","2020-04-23 17:27:06","http://playvideo.site/docs_8kj/81588387/Judgement_04222020_81588387.zip","offline","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/349017/","malware_traffic"
 "349016","2020-04-23 17:27:03","http://pinangcitygroup.asia/wp-content/uploads/2020/04/docs_cgj/Judgement_04222020_56507748.zip","offline","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/349016/","malware_traffic"
@@ -6913,10 +7291,10 @@
 "349009","2020-04-23 17:26:25","http://ixlarge.net/docs_to2/Judgement_04222020_490035134.zip","offline","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/349009/","malware_traffic"
 "349008","2020-04-23 17:26:21","https://jaincakes.xyz/docs_1o2/949025839/Judgement_04222020_949025839.zip","online","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/349008/","malware_traffic"
 "349007","2020-04-23 17:26:17","https://jaincakes.xyz/docs_1o2/818263/Judgement_04222020_818263.zip","online","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/349007/","malware_traffic"
-"349006","2020-04-23 17:26:14","https://jaincakes.xyz/docs_1o2/108393672/Judgement_04222020_108393672.zip","offline","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/349006/","malware_traffic"
+"349006","2020-04-23 17:26:14","https://jaincakes.xyz/docs_1o2/108393672/Judgement_04222020_108393672.zip","online","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/349006/","malware_traffic"
 "349005","2020-04-23 17:26:08","http://hlb.ae/docs_q22/Judgement_04222020_69120.zip","offline","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/349005/","malware_traffic"
 "349004","2020-04-23 17:26:02","http://hasifria.net/wp-content/uploads/2020/04/docs_jsv/Judgement_04222020_65639.zip","offline","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/349004/","malware_traffic"
-"349003","2020-04-23 17:25:59","https://www.foxfennecs.com/wp-content/themes/calliope/docs_v72/084594017/Judgement_04222020_084594017.zip","offline","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/349003/","malware_traffic"
+"349003","2020-04-23 17:25:59","https://www.foxfennecs.com/wp-content/themes/calliope/docs_v72/084594017/Judgement_04222020_084594017.zip","online","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/349003/","malware_traffic"
 "349002","2020-04-23 17:25:53","http://far-flower.mindsellers.ru/wp-content/plugins/apikey/docs_d64/054309/Judgement_04222020_054309.zip","offline","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/349002/","malware_traffic"
 "349001","2020-04-23 17:25:50","http://dubook.co.in/docs_5et/864422649/Judgement_04222020_864422649.zip","offline","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/349001/","malware_traffic"
 "349000","2020-04-23 17:25:44","http://www.blueleed.com/wp-content/plugins/advanced-ads-genesis/docs_try/2391241/Judgement_04222020_2391241.zip","offline","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/349000/","malware_traffic"
@@ -6975,7 +7353,7 @@
 "348947","2020-04-23 15:04:13","http://123.11.37.130:38302/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348947/","Gandylyan1"
 "348946","2020-04-23 15:04:08","http://120.212.213.152:45101/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348946/","Gandylyan1"
 "348945","2020-04-23 14:59:07","http://51.83.171.11/h754828/csrss.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/348945/","abuse_ch"
-"348944","2020-04-23 14:35:38","https://onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E%211347&authkey=AL-ZGe-TTVr921s","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348944/","lovemalware"
+"348944","2020-04-23 14:35:38","https://onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E%211347&authkey=AL-ZGe-TTVr921s","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348944/","lovemalware"
 "348943","2020-04-23 14:35:33","https://drive.google.com/uc?export=download&id=1OJwYThizdcCjqiwlFZ9cgeIP2Rz-dYQl","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348943/","lovemalware"
 "348942","2020-04-23 14:35:15","https://drive.google.com/uc?export=download&id=1iaoQ_kSc3xPakgzyAqxgM2N1btoFyYp3","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348942/","lovemalware"
 "348941","2020-04-23 14:34:17","https://drive.google.com/uc?export=download&id=1SSc5Dqt4l7Oil5NT5FzUT1Qfbl02aYo7","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348941/","lovemalware"
@@ -7138,9 +7516,9 @@
 "348784","2020-04-23 11:19:21","https://onedrive.live.com/download?cid=9CE7F7EAB219AAB3&resid=9CE7F7EAB219AAB3%21124&authkey=AEWD5JzUV0ZFe0U","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348784/","lovemalware"
 "348783","2020-04-23 11:18:45","https://onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E%211344&authkey=AOzErPpD6MnoKwY","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348783/","lovemalware"
 "348782","2020-04-23 11:18:11","https://drive.google.com/uc?export=download&id=1fc26tEwc9bbP8rT9_CshLEWfGem54dS4","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348782/","lovemalware"
-"348781","2020-04-23 11:17:34","https://onedrive.live.com/download?cid=72EF66C14DF86B76&resid=72EF66C14DF86B76%21191&authkey=AOumzH6K1KEmsCU","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348781/","lovemalware"
+"348781","2020-04-23 11:17:34","https://onedrive.live.com/download?cid=72EF66C14DF86B76&resid=72EF66C14DF86B76%21191&authkey=AOumzH6K1KEmsCU","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348781/","lovemalware"
 "348780","2020-04-23 11:00:09","http://alluringuk.com/images/file/pato/doc/Order.doc","offline","malware_download","RTF","https://urlhaus.abuse.ch/url/348780/","zbetcheckin"
-"348779","2020-04-23 10:56:39","https://onedrive.live.com/download?cid=41F2978DA9CE0256&resid=41F2978DA9CE0256%21120&authkey=AJFZZ_HBF2UlaSk","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348779/","lovemalware"
+"348779","2020-04-23 10:56:39","https://onedrive.live.com/download?cid=41F2978DA9CE0256&resid=41F2978DA9CE0256%21120&authkey=AJFZZ_HBF2UlaSk","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348779/","lovemalware"
 "348778","2020-04-23 10:56:35","https://drive.google.com/uc?export=download&id=1jc7hhGgq1mObCsl0EaCD5NCFj5_mwMha","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348778/","lovemalware"
 "348777","2020-04-23 10:56:27","https://onedrive.live.com/download?cid=D06D60404544FB85&resid=D06D60404544FB85%21875&authkey=AKa55YbDhQNOC6c","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348777/","lovemalware"
 "348776","2020-04-23 10:56:24","https://drive.google.com/uc?export=download&id=1waD-E10ClYRCKdDb5J5jz5imBZeYj-XL","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348776/","lovemalware"
@@ -7151,7 +7529,7 @@
 "348771","2020-04-23 10:55:09","https://drive.google.com/uc?export=download&id=1sz0AYWiMlTgH3VK1t6xnjFCVkRD7efVn","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348771/","lovemalware"
 "348770","2020-04-23 10:52:10","http://alluringuk.com/images/file/mighty/doc/Purchase.doc","offline","malware_download","RTF","https://urlhaus.abuse.ch/url/348770/","zbetcheckin"
 "348769","2020-04-23 10:41:04","http://sarvghamatan.ir/css/v.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/348769/","zbetcheckin"
-"348768","2020-04-23 10:32:37","https://onedrive.live.com/download?cid=72EF66C14DF86B76&resid=72EF66C14DF86B76%21185&authkey=AMm2Fsxi2l-Wa9A","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348768/","lovemalware"
+"348768","2020-04-23 10:32:37","https://onedrive.live.com/download?cid=72EF66C14DF86B76&resid=72EF66C14DF86B76%21185&authkey=AMm2Fsxi2l-Wa9A","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348768/","lovemalware"
 "348767","2020-04-23 10:32:30","https://onedrive.live.com/download?cid=505BE76830F4DC4C&resid=505BE76830F4DC4C%21406&authkey=AARnp48wUMgu6TQ","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348767/","lovemalware"
 "348766","2020-04-23 10:32:28","https://drive.google.com/uc?export=download&id=1hHGhBIWdP6U2z5MRSn5TdVDpOb1TRocA","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348766/","lovemalware"
 "348765","2020-04-23 10:32:19","https://drive.google.com/uc?export=download&id=112XwWlt4cACDc6_QhpeIHxf09QveX6Wq","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348765/","lovemalware"
@@ -7166,9 +7544,9 @@
 "348756","2020-04-23 10:08:17","https://drive.google.com/uc?export=download&id=1ilCsQxrgrDkvrFDpO4xi87pLjWD8gh3J","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348756/","lovemalware"
 "348755","2020-04-23 10:08:07","https://onedrive.live.com/download?cid=18418ADACEFED6E2&resid=18418ADACEFED6E2%21129&authkey=APQOONsrCe0ArI4","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348755/","lovemalware"
 "348754","2020-04-23 10:07:40","https://onedrive.live.com/download?cid=D06D60404544FB85&resid=D06D60404544FB85%21872&authkey=AP9HcHZTYWO8ZUo","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348754/","lovemalware"
-"348753","2020-04-23 10:07:35","https://onedrive.live.com/download?cid=FF1D187273DFBF73&resid=FF1D187273DFBF73%21694&authkey=AA5jQZJSp0eSr1s","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348753/","lovemalware"
+"348753","2020-04-23 10:07:35","https://onedrive.live.com/download?cid=FF1D187273DFBF73&resid=FF1D187273DFBF73%21694&authkey=AA5jQZJSp0eSr1s","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348753/","lovemalware"
 "348752","2020-04-23 10:07:30","https://drive.google.com/uc?export=download&id=1S0NllWS8ZPjZ-RN8x1XUTCf6Y6b8iPga","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348752/","lovemalware"
-"348751","2020-04-23 10:07:15","https://onedrive.live.com/download?cid=DDE26285195864B8&resid=DDE26285195864B8%21366&authkey=ALy44awv_tX2O5M","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348751/","lovemalware"
+"348751","2020-04-23 10:07:15","https://onedrive.live.com/download?cid=DDE26285195864B8&resid=DDE26285195864B8%21366&authkey=ALy44awv_tX2O5M","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348751/","lovemalware"
 "348750","2020-04-23 10:07:11","https://drive.google.com/uc?export=download&id=1G480JekfZCRTpfBwjx4yQbmwZy4LVVBH","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348750/","lovemalware"
 "348749","2020-04-23 09:54:04","http://116.114.95.218:55292/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/348749/","zbetcheckin"
 "348748","2020-04-23 09:40:03","http://51.161.68.186/update.sh","offline","malware_download","elf","https://urlhaus.abuse.ch/url/348748/","Gandylyan1"
@@ -7205,7 +7583,7 @@
 "348717","2020-04-23 08:43:14","http://primecontentstudios.com/pagigpy75.php","offline","malware_download","None","https://urlhaus.abuse.ch/url/348717/","JAMESWT_MHT"
 "348716","2020-04-23 08:42:09","http://evdekl20gbx.com/hediye20gb.apk","offline","malware_download","apk ,Cerberus","https://urlhaus.abuse.ch/url/348716/","mertcangokgoz"
 "348715","2020-04-23 08:42:07","https://onedrive.live.com/download?cid=052BCF630286E980&resid=52BCF630286E980%21113&authkey=AH3RaTLEdBMNuaY","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348715/","lovemalware"
-"348714","2020-04-23 08:42:04","https://onedrive.live.com/download?cid=72EF66C14DF86B76&resid=72EF66C14DF86B76%21190&authkey=AJ-3yQm7eZZ9zmE","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348714/","lovemalware"
+"348714","2020-04-23 08:42:04","https://onedrive.live.com/download?cid=72EF66C14DF86B76&resid=72EF66C14DF86B76%21190&authkey=AJ-3yQm7eZZ9zmE","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348714/","lovemalware"
 "348713","2020-04-23 08:41:35","http://personalfsbocoach.com/pagigpy75.php","offline","malware_download","None","https://urlhaus.abuse.ch/url/348713/","JAMESWT_MHT"
 "348712","2020-04-23 08:41:03","http://www.andrewzelaya.com/sgbvy?fml=27244","offline","malware_download","None","https://urlhaus.abuse.ch/url/348712/","JAMESWT_MHT"
 "348711","2020-04-23 08:37:34","http://51.178.81.75/bins.sh","offline","malware_download","shellscript","https://urlhaus.abuse.ch/url/348711/","zbetcheckin"
@@ -7253,7 +7631,7 @@
 "348668","2020-04-23 07:48:09","https://drive.google.com/uc?export=download&id=1gnV-z0JyUgGEWadWPtMfkZjXHUlTI3uQ","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348668/","lovemalware"
 "348667","2020-04-23 07:39:09","https://drive.google.com/uc?export=download&id=1qmJQCHnw0QwdDo3Se4WXFunSF1kchCMn","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348667/","lovemalware"
 "348666","2020-04-23 07:38:14","http://121.226.187.238:60528/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/348666/","zbetcheckin"
-"348665","2020-04-23 07:31:18","https://onedrive.live.com/download?cid=72EF66C14DF86B76&resid=72EF66C14DF86B76%21187&authkey=ANdGpqQ_ZP8LYr4","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348665/","lovemalware"
+"348665","2020-04-23 07:31:18","https://onedrive.live.com/download?cid=72EF66C14DF86B76&resid=72EF66C14DF86B76%21187&authkey=ANdGpqQ_ZP8LYr4","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348665/","lovemalware"
 "348664","2020-04-23 07:31:15","https://drive.google.com/uc?export=download&id=1yfzSjDBF5EEnArQaFA0JiM5T9T9pH_4U","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348664/","lovemalware"
 "348663","2020-04-23 07:25:04","http://uniteddefencefor7gorvermentwsdysocialeko.duckdns.org/chnsfrnd1/vbc.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/348663/","oppimaniac"
 "348662","2020-04-23 07:23:02","http://185.132.53.58/Hilix.sh","offline","malware_download","script","https://urlhaus.abuse.ch/url/348662/","geenensp"
@@ -7276,14 +7654,14 @@
 "348645","2020-04-23 06:52:22","https://alvaroalarcon.cl/A-FOOL_encrypted_A896E1F.bin","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348645/","lovemalware"
 "348644","2020-04-23 06:52:08","https://drive.google.com/uc?export=download&id=15XqNKp3KhhDhxFAryCVNMF1xWZ3LCasS","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348644/","lovemalware"
 "348643","2020-04-23 06:48:12","https://drive.google.com/uc?export=download&id=1oxWx2mdVOX-fhKFh9W92hWnjbHWoY8vG","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348643/","lovemalware"
-"348642","2020-04-23 06:47:34","https://onedrive.live.com/download?cid=CBFA5209EB41ABF2&resid=CBFA5209EB41ABF2%21148&authkey=ADaQmdNndev6D7E","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348642/","lovemalware"
+"348642","2020-04-23 06:47:34","https://onedrive.live.com/download?cid=CBFA5209EB41ABF2&resid=CBFA5209EB41ABF2%21148&authkey=ADaQmdNndev6D7E","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348642/","lovemalware"
 "348641","2020-04-23 06:43:18","https://onedrive.live.com/download?cid=052BCF630286E980&resid=52BCF630286E980%21114&authkey=AHzbIscDx0-2gfk","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348641/","lovemalware"
-"348640","2020-04-23 06:43:05","https://onedrive.live.com/download?cid=B8BA73DB68DA7C0B&resid=B8BA73DB68DA7C0B%217521&authkey=ABLT9zDyq2D4rb0","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348640/","lovemalware"
+"348640","2020-04-23 06:43:05","https://onedrive.live.com/download?cid=B8BA73DB68DA7C0B&resid=B8BA73DB68DA7C0B%217521&authkey=ABLT9zDyq2D4rb0","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348640/","lovemalware"
 "348639","2020-04-23 06:42:18","https://drive.google.com/uc?export=download&id=1q2xkR9dtz19DjMY_UhKpFTslALFRZcx4","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348639/","lovemalware"
 "348638","2020-04-23 06:42:11","https://drive.google.com/uc?export=download&id=1n6vwEhBTiK-gkqz5fVqPagDtz3fUYPdj","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348638/","lovemalware"
 "348637","2020-04-23 06:22:15","https://www.igrejayhwh.com/wo/newbackomo_encrypted_13CF940.bin","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348637/","lovemalware"
 "348636","2020-04-23 06:21:11","https://drive.google.com/uc?export=download&id=1aRM9yUylrkcQUb4aIsXHn4WuzZF95byX","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348636/","lovemalware"
-"348635","2020-04-23 06:21:04","https://onedrive.live.com/download?cid=7366FEFC2190D2E3&resid=7366FEFC2190D2E3%21195&authkey=AG9WIgSqvGrNwdI","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348635/","lovemalware"
+"348635","2020-04-23 06:21:04","https://onedrive.live.com/download?cid=7366FEFC2190D2E3&resid=7366FEFC2190D2E3%21195&authkey=AG9WIgSqvGrNwdI","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348635/","lovemalware"
 "348634","2020-04-23 06:20:24","http://121.186.105.200:43951/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348634/","geenensp"
 "348633","2020-04-23 06:20:19","https://drive.google.com/uc?export=download&id=15_2qc-PMvZLt1gMfLtB3Jd5TKpqWSKxR","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348633/","lovemalware"
 "348632","2020-04-23 06:19:38","https://drive.google.com/uc?export=download&id=1Iy1vilczX904GPDd_AILSDY1mPYG9aVu","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348632/","lovemalware"
@@ -7514,7 +7892,7 @@
 "348406","2020-04-22 18:15:47","http://longform.harker.org/wp-content/themes/mapro/pump/Judgement_04212020_9352.zip","offline","malware_download","Qakbot,qbot,spx102,zip","https://urlhaus.abuse.ch/url/348406/","malware_traffic"
 "348405","2020-04-22 18:15:38","http://longform.harker.org/wp-content/themes/mapro/pump/Judgement_04212020_3626.zip","offline","malware_download","Qakbot,qbot,spx102,zip","https://urlhaus.abuse.ch/url/348405/","malware_traffic"
 "348404","2020-04-22 18:15:33","http://longform.harker.org/wp-content/themes/mapro/pump/2495/Judgement_04212020_2495.zip","offline","malware_download","Qakbot,qbot,spx102,zip","https://urlhaus.abuse.ch/url/348404/","malware_traffic"
-"348403","2020-04-22 18:14:54","http://garage.themebuffets.com/wp-content/themes/mapro/pump/0416/judgement_04212020_0416.zip","online","malware_download","Qakbot,qbot,spx102,zip","https://urlhaus.abuse.ch/url/348403/","malware_traffic"
+"348403","2020-04-22 18:14:54","http://garage.themebuffets.com/wp-content/themes/mapro/pump/0416/judgement_04212020_0416.zip","offline","malware_download","Qakbot,qbot,spx102,zip","https://urlhaus.abuse.ch/url/348403/","malware_traffic"
 "348402","2020-04-22 18:14:19","http://cirkuscloudhosting.site/wp-content/themes/mapro/pump/Judgement_04212020_4918.zip","offline","malware_download","Qakbot,qbot,spx102,zip","https://urlhaus.abuse.ch/url/348402/","malware_traffic"
 "348401","2020-04-22 18:13:45","http://cirkuscloudhosting.site/wp-content/themes/mapro/pump/Judgement_04212020_2975.zip","offline","malware_download","Qakbot,qbot,spx102,zip","https://urlhaus.abuse.ch/url/348401/","malware_traffic"
 "348400","2020-04-22 18:13:10","http://cirkuscloudhosting.site/wp-content/themes/mapro/pump/1529/Judgement_04212020_1529.zip","offline","malware_download","Qakbot,qbot,spx102,zip","https://urlhaus.abuse.ch/url/348400/","malware_traffic"
@@ -7732,18 +8110,18 @@
 "348188","2020-04-22 14:43:06","http://115.213.223.64:49412/i","offline","malware_download","None","https://urlhaus.abuse.ch/url/348188/","JayTHL"
 "348187","2020-04-22 14:40:04","http://51.161.68.186/bins/arc","offline","malware_download","elf","https://urlhaus.abuse.ch/url/348187/","Gandylyan1"
 "348186","2020-04-22 14:36:33","http://23.95.89.71/bins/arc","offline","malware_download","elf","https://urlhaus.abuse.ch/url/348186/","Gandylyan1"
-"348185","2020-04-22 14:27:07","http://modcloudserver.eu/jayz/jayz.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/348185/","zbetcheckin"
+"348185","2020-04-22 14:27:07","http://modcloudserver.eu/jayz/jayz.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/348185/","zbetcheckin"
 "348184","2020-04-22 14:26:57","http://modcloudserver.eu/petercodyz/petercodyz.exe","offline","malware_download","AgentTesla,exe,Loki","https://urlhaus.abuse.ch/url/348184/","zbetcheckin"
-"348183","2020-04-22 14:26:25","http://modcloudserver.eu/billiz/billiz.exe","online","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/348183/","zbetcheckin"
+"348183","2020-04-22 14:26:25","http://modcloudserver.eu/billiz/billiz.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/348183/","zbetcheckin"
 "348182","2020-04-22 14:18:07","http://179.156.196.13:31972/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348182/","geenensp"
 "348181","2020-04-22 14:08:08","http://42.113.104.40:10796/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348181/","geenensp"
 "348180","2020-04-22 14:03:05","http://173.168.197.166:4638/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348180/","geenensp"
 "348179","2020-04-22 13:35:05","http://206.189.142.52/test.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/348179/","zbetcheckin"
-"348178","2020-04-22 13:23:41","http://modcloudserver.eu/anandz/anandz.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/348178/","zbetcheckin"
+"348178","2020-04-22 13:23:41","http://modcloudserver.eu/anandz/anandz.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/348178/","zbetcheckin"
 "348177","2020-04-22 13:23:09","http://modcloudserver.eu/cafilez/cafilez.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/348177/","zbetcheckin"
 "348176","2020-04-22 13:23:03","https://paste.ee/r/SdssK","offline","malware_download","Encoded","https://urlhaus.abuse.ch/url/348176/","abuse_ch"
 "348175","2020-04-22 13:20:19","http://quecik.com/j1x/1447032.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/348175/","zbetcheckin"
-"348174","2020-04-22 13:20:15","http://modcloudserver.eu/uzmod2/uzmod2.exe","online","malware_download","exe,Formbook","https://urlhaus.abuse.ch/url/348174/","zbetcheckin"
+"348174","2020-04-22 13:20:15","http://modcloudserver.eu/uzmod2/uzmod2.exe","offline","malware_download","exe,Formbook","https://urlhaus.abuse.ch/url/348174/","zbetcheckin"
 "348173","2020-04-22 13:19:39","http://modcloudserver.eu/nwamaz/nwamaz.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/348173/","zbetcheckin"
 "348172","2020-04-22 13:19:07","http://quecik.com/j1x/1856137.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/348172/","zbetcheckin"
 "348171","2020-04-22 13:16:07","http://www.apexsruveyors.com/date/eat.png","offline","malware_download","exe,NanoCore,rat","https://urlhaus.abuse.ch/url/348171/","abuse_ch"
@@ -7777,7 +8155,7 @@
 "348143","2020-04-22 12:01:05","http://misty-beppu-9627.lovesick.jp/ERC/EIC.exe","offline","malware_download","exe,Trickbot","https://urlhaus.abuse.ch/url/348143/","zbetcheckin"
 "348142","2020-04-22 11:57:48","http://misty-beppu-9627.lovesick.jp/Img/CIC.exe","offline","malware_download","exe,Trickbot","https://urlhaus.abuse.ch/url/348142/","zbetcheckin"
 "348141","2020-04-22 11:57:43","https://petromltd.com/Preview.PDF.exe","offline","malware_download"," 2020-04-22,Trickbot","https://urlhaus.abuse.ch/url/348141/","anonymous"
-"348140","2020-04-22 11:57:32","http://modcloudserver.eu/damiano/damiano.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/348140/","DanielStepanic"
+"348140","2020-04-22 11:57:32","http://modcloudserver.eu/damiano/damiano.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/348140/","DanielStepanic"
 "348139","2020-04-22 11:53:07","https://drive.google.com/uc?export=download&id=17BWiKHlfcejUbmN-vR5GRCXiHK4aZ5eh","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/348139/","abuse_ch"
 "348138","2020-04-22 11:49:06","http://quecik.com/j1x/6010277.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/348138/","abuse_ch"
 "348137","2020-04-22 11:46:06","http://139.99.180.76/bins/arm","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/348137/","zbetcheckin"
@@ -7833,7 +8211,7 @@
 "348087","2020-04-22 09:04:14","http://111.43.223.86:56363/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348087/","Gandylyan1"
 "348086","2020-04-22 09:04:11","http://116.114.95.108:56841/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348086/","Gandylyan1"
 "348085","2020-04-22 09:04:08","http://222.136.253.78:34373/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348085/","Gandylyan1"
-"348084","2020-04-22 08:54:33","http://dhlservices.duckdns.org/DHL/Receipt%20Address%20Confirmation%20(Please%20Sign)_Pdf.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/348084/","zbetcheckin"
+"348084","2020-04-22 08:54:33","http://dhlservices.duckdns.org/DHL/Receipt%20Address%20Confirmation%20(Please%20Sign)_Pdf.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/348084/","zbetcheckin"
 "348083","2020-04-22 08:37:21","http://103.60.110.111:443/ma/fdlaunchera.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/348083/","zbetcheckin"
 "348082","2020-04-22 08:37:18","http://103.60.110.111:443/ma/ReportServser.exe","online","malware_download","CoinMiner,exe","https://urlhaus.abuse.ch/url/348082/","zbetcheckin"
 "348081","2020-04-22 08:37:10","http://hotgifts.online/app/watchdog.exe","offline","malware_download","exe,glupteba","https://urlhaus.abuse.ch/url/348081/","zbetcheckin"
@@ -7880,7 +8258,7 @@
 "348040","2020-04-22 06:33:43","http://86.179.186.74:62126/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348040/","geenensp"
 "348039","2020-04-22 06:33:40","http://2.229.41.205:42285/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348039/","geenensp"
 "348038","2020-04-22 06:33:37","http://79.54.115.243:19655/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348038/","geenensp"
-"348037","2020-04-22 06:33:34","http://218.154.126.150:47788/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348037/","geenensp"
+"348037","2020-04-22 06:33:34","http://218.154.126.150:47788/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348037/","geenensp"
 "348036","2020-04-22 06:33:01","http://systemintergrafileexchangeserverprotocol.duckdns.org/sys/xx.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/348036/","gorimpthon"
 "348035","2020-04-22 06:32:29","http://systemintergrafileexchangeserverprotocol.duckdns.org/sys/x.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/348035/","gorimpthon"
 "348034","2020-04-22 06:31:57","http://systemintergrafileexchangeserverprotocol.duckdns.org/sys/py.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/348034/","gorimpthon"
@@ -7931,7 +8309,7 @@
 "347989","2020-04-22 06:06:14","http://211.137.225.113:43476/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347989/","Gandylyan1"
 "347988","2020-04-22 06:05:43","http://123.11.76.85:52757/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347988/","Gandylyan1"
 "347987","2020-04-22 06:05:38","http://219.155.211.147:39125/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347987/","Gandylyan1"
-"347986","2020-04-22 06:05:35","http://117.123.171.105:55768/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347986/","Gandylyan1"
+"347986","2020-04-22 06:05:35","http://117.123.171.105:55768/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347986/","Gandylyan1"
 "347985","2020-04-22 06:05:30","http://111.43.223.60:35002/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347985/","Gandylyan1"
 "347984","2020-04-22 06:05:26","http://221.210.211.9:35459/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347984/","Gandylyan1"
 "347983","2020-04-22 06:05:22","http://45.3.8.36:48928/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347983/","Gandylyan1"
@@ -8062,7 +8440,7 @@
 "347858","2020-04-22 00:05:15","http://173.15.162.146:4217/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347858/","Gandylyan1"
 "347857","2020-04-22 00:05:12","http://219.155.98.182:51850/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347857/","Gandylyan1"
 "347856","2020-04-22 00:05:08","http://180.125.172.181:38410/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347856/","Gandylyan1"
-"347855","2020-04-22 00:05:04","http://49.70.137.78:57384/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347855/","Gandylyan1"
+"347855","2020-04-22 00:05:04","http://49.70.137.78:57384/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347855/","Gandylyan1"
 "347854","2020-04-22 00:04:32","http://27.41.141.116:37266/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347854/","Gandylyan1"
 "347853","2020-04-22 00:04:28","http://42.231.173.223:51925/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347853/","Gandylyan1"
 "347852","2020-04-22 00:04:25","http://115.58.74.77:58082/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347852/","Gandylyan1"
@@ -8140,11 +8518,11 @@
 "347780","2020-04-21 18:47:10","http://music919.com/evolving/708485/708485.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347780/","malware_traffic"
 "347779","2020-04-21 18:47:01","http://mrsphr.ir/wp-content/uploads/2020/04/evolving/1252824/1252824.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347779/","malware_traffic"
 "347778","2020-04-21 18:46:55","http://knowledgetime.co.in/wp-content/uploads/2020/04/evolving/936934838.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347778/","malware_traffic"
-"347777","2020-04-21 18:46:50","http://keckarangdadap.pekalongankab.go.id/wp-content/uploads/2020/04/evolving/809295/809295.zip","online","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347777/","malware_traffic"
+"347777","2020-04-21 18:46:50","http://keckarangdadap.pekalongankab.go.id/wp-content/uploads/2020/04/evolving/809295/809295.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347777/","malware_traffic"
 "347776","2020-04-21 18:46:17","http://Bretmartinconstructioninc.com/evolving/613862/613862.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347776/","malware_traffic"
 "347775","2020-04-21 18:46:15","http://Bretmartinconstructioninc.com/evolving/082557.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347775/","malware_traffic"
 "347774","2020-04-21 18:46:03","http://artgennesis.com/wp-content/uploads/2020/04/evolving/81653036/81653036.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347774/","malware_traffic"
-"347773","2020-04-21 18:42:33","https://gulfcrossings.com/sport/rockstar.php","offline","malware_download","exe","https://urlhaus.abuse.ch/url/347773/","abuse_ch"
+"347773","2020-04-21 18:42:33","https://gulfcrossings.com/sport/rockstar.php","offline","malware_download","exe,IcedID","https://urlhaus.abuse.ch/url/347773/","abuse_ch"
 "347772","2020-04-21 18:39:05","http://45.95.169.233/sh4","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/347772/","zbetcheckin"
 "347771","2020-04-21 18:39:03","http://45.95.169.233/mips","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/347771/","zbetcheckin"
 "347770","2020-04-21 18:35:29","http://45.95.169.233/armv6l","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/347770/","zbetcheckin"
@@ -8250,8 +8628,8 @@
 "347670","2020-04-21 14:25:59","https://zoodbaz.com/wp-content/uploads/2020/04/evolving/39861/39861.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347670/","malware_traffic"
 "347669","2020-04-21 14:25:52","https://zoodbaz.com/wp-content/uploads/2020/04/evolving/0901086/0901086.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347669/","malware_traffic"
 "347668","2020-04-21 14:25:45","https://villette45.com/wp-content/uploads/2020/04/evolving/5329347/5329347.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347668/","malware_traffic"
-"347667","2020-04-21 14:25:42","https://tianzi8.cn/wp-content/plugins/apikey/evolving/8525382.zip","online","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347667/","malware_traffic"
-"347666","2020-04-21 14:25:34","https://tianzi8.cn/wp-content/plugins/apikey/evolving/17951100.zip","online","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347666/","malware_traffic"
+"347667","2020-04-21 14:25:42","https://tianzi8.cn/wp-content/plugins/apikey/evolving/8525382.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347667/","malware_traffic"
+"347666","2020-04-21 14:25:34","https://tianzi8.cn/wp-content/plugins/apikey/evolving/17951100.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347666/","malware_traffic"
 "347665","2020-04-21 14:25:17","https://themenuz.com/wp-content/uploads/2020/04/evolving/992093.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347665/","malware_traffic"
 "347664","2020-04-21 14:25:12","https://themenuz.com/wp-content/uploads/2020/04/evolving/9073043/9073043.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347664/","malware_traffic"
 "347663","2020-04-21 14:25:08","https://themenuz.com/wp-content/uploads/2020/04/evolving/810211749.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347663/","malware_traffic"
@@ -8274,8 +8652,8 @@
 "347646","2020-04-21 14:23:47","https://lamaisongourmande.live/wp-content/uploads/2020/04/evolving/241093858.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347646/","malware_traffic"
 "347645","2020-04-21 14:23:43","https://lamaisongourmande.live/wp-content/uploads/2020/04/evolving/23128159.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347645/","malware_traffic"
 "347644","2020-04-21 14:23:40","https://ileolaherbalcare.com.ng/wp-content/uploads/2020/04/evolving/301543/301543.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347644/","malware_traffic"
-"347643","2020-04-21 14:23:34","https://ileolaherbalcare.com.ng/wp-content/uploads/2020/04/evolving/11044836/11044836.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347643/","malware_traffic"
-"347642","2020-04-21 14:23:30","https://ileolaherbalcare.com.ng/wp-content/uploads/2020/04/evolving/10326.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347642/","malware_traffic"
+"347643","2020-04-21 14:23:34","https://ileolaherbalcare.com.ng/wp-content/uploads/2020/04/evolving/11044836/11044836.zip","online","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347643/","malware_traffic"
+"347642","2020-04-21 14:23:30","https://ileolaherbalcare.com.ng/wp-content/uploads/2020/04/evolving/10326.zip","online","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347642/","malware_traffic"
 "347641","2020-04-21 14:23:24","https://icshongkong.com/wp-content/uploads/2020/04/evolving/712611496.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347641/","malware_traffic"
 "347640","2020-04-21 14:23:16","https://icshongkong.com/wp-content/uploads/2020/04/evolving/31084/31084.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347640/","malware_traffic"
 "347639","2020-04-21 14:23:07","https://icshongkong.com/wp-content/uploads/2020/04/evolving/1034048/1034048.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347639/","malware_traffic"
@@ -8335,7 +8713,7 @@
 "347585","2020-04-21 14:16:20","http://knowledgetime.co.in/wp-content/uploads/2020/04/evolving/8234130/8234130.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347585/","malware_traffic"
 "347584","2020-04-21 14:16:15","http://knowledgetime.co.in/wp-content/uploads/2020/04/evolving/801311.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347584/","malware_traffic"
 "347583","2020-04-21 14:16:10","http://knowledgetime.co.in/wp-content/uploads/2020/04/evolving/42895/42895.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347583/","malware_traffic"
-"347582","2020-04-21 14:16:04","http://keckarangdadap.pekalongankab.go.id/wp-content/uploads/2020/04/evolving/98110.zip","online","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347582/","malware_traffic"
+"347582","2020-04-21 14:16:04","http://keckarangdadap.pekalongankab.go.id/wp-content/uploads/2020/04/evolving/98110.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347582/","malware_traffic"
 "347581","2020-04-21 14:15:54","http://Bretmartinconstructioninc.com/evolving/85171077/85171077.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347581/","malware_traffic"
 "347580","2020-04-21 14:15:46","http://Bretmartinconstructioninc.com/evolving/237784083.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347580/","malware_traffic"
 "347579","2020-04-21 14:15:36","http://Bretmartinconstructioninc.com/evolving/0996134.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347579/","malware_traffic"
@@ -8933,7 +9311,7 @@
 "346983","2020-04-20 17:47:23","http://tianmarket.shop/wp-content/uploads/2020/04/vary/111111.png","offline","malware_download","Qakbot,qbot,Quakbot","https://urlhaus.abuse.ch/url/346983/","notwhickey"
 "346982","2020-04-20 17:47:21","http://trujilloremodelingservicesinc.com/wp-admin/vary/111111.png","offline","malware_download","Qakbot,qbot,Quakbot","https://urlhaus.abuse.ch/url/346982/","notwhickey"
 "346981","2020-04-20 17:47:12","http://177.37.163.174:19501/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/346981/","geenensp"
-"346980","2020-04-20 17:47:05","http://45.163.149.85:30005/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/346980/","geenensp"
+"346980","2020-04-20 17:47:05","http://45.163.149.85:30005/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/346980/","geenensp"
 "346979","2020-04-20 17:31:09","http://187.33.71.68:53365/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/346979/","zbetcheckin"
 "346978","2020-04-20 17:31:05","http://23.252.75.251/21","offline","malware_download","elf","https://urlhaus.abuse.ch/url/346978/","zbetcheckin"
 "346977","2020-04-20 17:22:20","http://104.140.114.108/pbot.i586","offline","malware_download","elf","https://urlhaus.abuse.ch/url/346977/","Gandylyan1"
@@ -9015,7 +9393,7 @@
 "346901","2020-04-20 15:08:13","http://172.45.1.174:45491/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/346901/","Gandylyan1"
 "346900","2020-04-20 15:07:41","http://42.234.189.36:53972/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/346900/","Gandylyan1"
 "346899","2020-04-20 15:07:37","http://182.114.253.236:54572/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/346899/","Gandylyan1"
-"346898","2020-04-20 15:07:31","http://49.82.14.191:59397/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/346898/","Gandylyan1"
+"346898","2020-04-20 15:07:31","http://49.82.14.191:59397/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/346898/","Gandylyan1"
 "346897","2020-04-20 15:07:27","http://111.43.223.49:49754/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/346897/","Gandylyan1"
 "346896","2020-04-20 15:06:37","http://182.117.29.0:42077/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/346896/","Gandylyan1"
 "346895","2020-04-20 15:06:30","http://42.239.140.229:51179/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/346895/","Gandylyan1"
@@ -13007,7 +13385,7 @@
 "342848","2020-04-18 06:44:20","http://187.37.152.10:56005/.i","offline","malware_download","None","https://urlhaus.abuse.ch/url/342848/","geenensp"
 "342847","2020-04-18 06:44:15","http://37.49.226.142/bins/asdfghjkl.mips","offline","malware_download","None","https://urlhaus.abuse.ch/url/342847/","geenensp"
 "342846","2020-04-18 06:44:12","http://72.186.129.13:54593/.i","online","malware_download","None","https://urlhaus.abuse.ch/url/342846/","geenensp"
-"342845","2020-04-18 06:44:08","http://121.180.181.177:30422/.i","online","malware_download","None","https://urlhaus.abuse.ch/url/342845/","geenensp"
+"342845","2020-04-18 06:44:08","http://121.180.181.177:30422/.i","offline","malware_download","None","https://urlhaus.abuse.ch/url/342845/","geenensp"
 "342844","2020-04-18 06:44:04","http://79.11.228.219:43443/.i","online","malware_download","None","https://urlhaus.abuse.ch/url/342844/","geenensp"
 "342843","2020-04-18 06:43:16","http://121.140.141.73:14261/.i","online","malware_download","None","https://urlhaus.abuse.ch/url/342843/","geenensp"
 "342842","2020-04-18 06:43:11","http://alluringuk.com/images/file/frank/Purchase.exe","offline","malware_download","AZORult,exe","https://urlhaus.abuse.ch/url/342842/","jstrosch"
@@ -13369,7 +13747,7 @@
 "342486","2020-04-17 16:14:10","https://pastebin.com/raw/GEYa5yUF","offline","malware_download","None","https://urlhaus.abuse.ch/url/342486/","JayTHL"
 "342485","2020-04-17 16:14:07","https://pastebin.com/raw/UuWMYUT7","offline","malware_download","None","https://urlhaus.abuse.ch/url/342485/","JayTHL"
 "342484","2020-04-17 16:14:04","https://pastebin.com/raw/tngDpGXW","offline","malware_download","None","https://urlhaus.abuse.ch/url/342484/","JayTHL"
-"342483","2020-04-17 16:10:06","https://fairyqueenstore.com/differ/912544/912544.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342483/","malware_traffic"
+"342483","2020-04-17 16:10:06","https://fairyqueenstore.com/differ/912544/912544.zip","online","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342483/","malware_traffic"
 "342482","2020-04-17 16:09:55","http://192.3.251.44/arm7","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/342482/","zbetcheckin"
 "342481","2020-04-17 16:09:53","http://192.3.251.44/x86","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/342481/","zbetcheckin"
 "342480","2020-04-17 16:09:50","https://digivisor.website/differ/628212971/628212971.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342480/","malware_traffic"
@@ -13393,7 +13771,7 @@
 "342462","2020-04-17 16:08:10","http://192.3.251.44/m68k","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/342462/","zbetcheckin"
 "342461","2020-04-17 16:08:07","http://192.3.251.44/sh4","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/342461/","zbetcheckin"
 "342460","2020-04-17 16:08:04","https://quoteslevel.com/differ/6864772/6864772.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342460/","malware_traffic"
-"342459","2020-04-17 16:07:46","https://fairyqueenstore.com/differ/5366237.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342459/","malware_traffic"
+"342459","2020-04-17 16:07:46","https://fairyqueenstore.com/differ/5366237.zip","online","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342459/","malware_traffic"
 "342458","2020-04-17 16:07:41","https://bybysunday.com/differ/7076923.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342458/","malware_traffic"
 "342457","2020-04-17 16:07:35","https://digivisor.website/differ/63176025.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342457/","malware_traffic"
 "342456","2020-04-17 16:07:31","https://globaloilsupply.co/differ/470876/470876.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342456/","malware_traffic"
@@ -13409,7 +13787,7 @@
 "342446","2020-04-17 16:05:57","https://thepyramids.nl/differ/60636/60636.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342446/","malware_traffic"
 "342445","2020-04-17 16:05:52","https://sayiteducation.com/differ/354318294/354318294.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342445/","malware_traffic"
 "342444","2020-04-17 16:05:48","https://halotelco.vip/differ/70955.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342444/","malware_traffic"
-"342443","2020-04-17 16:05:33","https://compesat.com/differ/106172/106172.zip","online","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342443/","malware_traffic"
+"342443","2020-04-17 16:05:33","https://compesat.com/differ/106172/106172.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342443/","malware_traffic"
 "342442","2020-04-17 16:05:19","https://fine.black/differ/49363504/49363504.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342442/","malware_traffic"
 "342441","2020-04-17 16:05:12","https://musearttherapy.com/differ/645441.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342441/","malware_traffic"
 "342440","2020-04-17 16:05:06","https://420hempizone.co/differ/82386.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342440/","malware_traffic"
@@ -13476,7 +13854,7 @@
 "342379","2020-04-17 14:53:02","https://musearttherapy.com/differ/327336/327336.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342379/","malware_traffic"
 "342378","2020-04-17 14:52:50","https://glitchexotika.com/differ/947908.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342378/","malware_traffic"
 "342377","2020-04-17 14:52:43","https://fairyqueenstore.com/differ/2164939.zip","online","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342377/","malware_traffic"
-"342376","2020-04-17 14:52:31","https://compesat.com/differ/21962/21962.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342376/","malware_traffic"
+"342376","2020-04-17 14:52:31","https://compesat.com/differ/21962/21962.zip","online","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342376/","malware_traffic"
 "342375","2020-04-17 14:52:21","https://bybysunday.com/differ/09997/09997.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342375/","malware_traffic"
 "342374","2020-04-17 14:52:14","https://besthack.co/differ/9710336/9710336.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342374/","malware_traffic"
 "342373","2020-04-17 14:52:09","https://bavlcentral.org/differ/50208/50208.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342373/","malware_traffic"
@@ -14087,7 +14465,7 @@
 "341768","2020-04-17 00:04:11","http://222.138.99.235:33332/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/341768/","Gandylyan1"
 "341767","2020-04-17 00:00:08","http://lapurisima.cl/dllhost.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/341767/","zbetcheckin"
 "341766","2020-04-16 23:59:34","http://lapurisima.cl/scv.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/341766/","zbetcheckin"
-"341765","2020-04-16 23:52:38","http://www.lapurisima.cl/dllhost.exe","offline","malware_download","exe,QuasarRAT","https://urlhaus.abuse.ch/url/341765/","zbetcheckin"
+"341765","2020-04-16 23:52:38","http://www.lapurisima.cl/dllhost.exe","online","malware_download","exe,njRAT,QuasarRAT","https://urlhaus.abuse.ch/url/341765/","zbetcheckin"
 "341764","2020-04-16 23:48:05","http://104.33.52.85:52797/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/341764/","zbetcheckin"
 "341763","2020-04-16 22:39:07","http://45.148.10.202/bins/x86","offline","malware_download","elf","https://urlhaus.abuse.ch/url/341763/","Gandylyan1"
 "341762","2020-04-16 22:38:35","http://45.148.10.202/bins/mpsl","offline","malware_download","elf","https://urlhaus.abuse.ch/url/341762/","Gandylyan1"
@@ -14367,10 +14745,10 @@
 "341488","2020-04-16 15:06:32","http://sportwin.com.ua/wp-content/themes/calliope/beads/82612240/82612240.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341488/","malware_traffic"
 "341487","2020-04-16 15:06:28","http://sportwin.com.ua/wp-content/themes/calliope/beads/534397705/534397705.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341487/","malware_traffic"
 "341486","2020-04-16 15:06:24","http://shaoxiaofei.cn/beads/80858358/80858358.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341486/","malware_traffic"
-"341485","2020-04-16 15:05:52","http://shaoxiaofei.cn/beads/53170/53170.zip","online","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341485/","malware_traffic"
+"341485","2020-04-16 15:05:52","http://shaoxiaofei.cn/beads/53170/53170.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341485/","malware_traffic"
 "341484","2020-04-16 15:05:19","http://shaoxiaofei.cn/beads/4487627/4487627.zip","online","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341484/","malware_traffic"
 "341483","2020-04-16 15:04:02","http://shaoxiaofei.cn/beads/11763.zip","online","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341483/","malware_traffic"
-"341482","2020-04-16 15:03:54","http://shaoxiaofei.cn/beads/07058857/07058857.zip","online","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341482/","malware_traffic"
+"341482","2020-04-16 15:03:54","http://shaoxiaofei.cn/beads/07058857/07058857.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341482/","malware_traffic"
 "341481","2020-04-16 15:03:24","http://s1r.com/wp-content/themes/calliope/beads/44033/44033.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341481/","malware_traffic"
 "341480","2020-04-16 15:02:51","https://reclodtech.com/wp-content/themes/calliope/beads/87894159.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341480/","malware_traffic"
 "341479","2020-04-16 15:02:46","https://reclodtech.com/wp-content/themes/calliope/beads/485017/485017.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341479/","malware_traffic"
@@ -14407,7 +14785,7 @@
 "341448","2020-04-16 14:49:41","http://blog.iwebnext.com/wp-content/themes/calliope/beads/27917092/27917092.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341448/","malware_traffic"
 "341447","2020-04-16 14:49:07","http://blog.iwebnext.com/wp-content/themes/calliope/beads/012435.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341447/","malware_traffic"
 "341446","2020-04-16 14:48:32","https://asadairtravel.com/wp-content/themes/calliope/beads/268431328.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341446/","malware_traffic"
-"341445","2020-04-16 14:48:24","https://asadairtravel.com/wp-content/themes/calliope/beads/063102/063102.zip","online","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341445/","malware_traffic"
+"341445","2020-04-16 14:48:24","https://asadairtravel.com/wp-content/themes/calliope/beads/063102/063102.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341445/","malware_traffic"
 "341444","2020-04-16 14:48:16","http://aryon.ihu.edu.tr/wp-content/themes/calliope/beads/63425667.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341444/","malware_traffic"
 "341443","2020-04-16 14:48:14","http://aryon.ihu.edu.tr/wp-content/themes/calliope/beads/174806.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341443/","malware_traffic"
 "341442","2020-04-16 14:48:07","http://aryon.ihu.edu.tr/wp-content/themes/calliope/beads/1268346/1268346.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341442/","malware_traffic"
@@ -14605,7 +14983,7 @@
 "341250","2020-04-16 06:19:09","http://178.128.245.174/Binarys/nuclear.x86","offline","malware_download","None","https://urlhaus.abuse.ch/url/341250/","geenensp"
 "341249","2020-04-16 06:19:07","http://185.132.53.59/dark_bins/dark.x86","offline","malware_download","None","https://urlhaus.abuse.ch/url/341249/","geenensp"
 "341248","2020-04-16 06:19:05","http://a.coolbreeze.uk/213/312d/6748.png","offline","malware_download","exe,Qakbot,spx97","https://urlhaus.abuse.ch/url/341248/","lazyactivist192"
-"341247","2020-04-16 06:18:14","http://chattosport.com/wp-content/themes/calliope/beads/444444.png","online","malware_download","exe,Qakbot,spx97","https://urlhaus.abuse.ch/url/341247/","lazyactivist192"
+"341247","2020-04-16 06:18:14","http://chattosport.com/wp-content/themes/calliope/beads/444444.png","offline","malware_download","exe,Qakbot,spx97","https://urlhaus.abuse.ch/url/341247/","lazyactivist192"
 "341246","2020-04-16 06:17:43","http://marinerevetement.com/wp-content/themes/calliope/beads/444444.png","offline","malware_download","exe,Qakbot,spx97","https://urlhaus.abuse.ch/url/341246/","lazyactivist192"
 "341245","2020-04-16 06:17:40","http://pakgt.com/wp-content/themes/calliope/beads/444444.png","offline","malware_download","exe,Qakbot,spx97","https://urlhaus.abuse.ch/url/341245/","lazyactivist192"
 "341244","2020-04-16 06:17:32","http://198.98.61.142/axisbins.sh","offline","malware_download","None","https://urlhaus.abuse.ch/url/341244/","geenensp"
@@ -15450,9 +15828,9 @@
 "340405","2020-04-14 20:24:37","http://nowkh.com/string/11865/11865.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340405/","malware_traffic"
 "340404","2020-04-14 20:24:11","http://nowkh.com/string/00631353.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340404/","malware_traffic"
 "340403","2020-04-14 20:24:06","https://mochandmade.us/string/92098/92098.zip","online","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340403/","malware_traffic"
-"340402","2020-04-14 20:24:02","https://mochandmade.us/string/65869.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340402/","malware_traffic"
-"340401","2020-04-14 20:23:55","https://mochandmade.us/string/543110348/543110348.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340401/","malware_traffic"
-"340400","2020-04-14 20:23:50","https://mochandmade.us/string/443327271/443327271.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340400/","malware_traffic"
+"340402","2020-04-14 20:24:02","https://mochandmade.us/string/65869.zip","online","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340402/","malware_traffic"
+"340401","2020-04-14 20:23:55","https://mochandmade.us/string/543110348/543110348.zip","online","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340401/","malware_traffic"
+"340400","2020-04-14 20:23:50","https://mochandmade.us/string/443327271/443327271.zip","online","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340400/","malware_traffic"
 "340399","2020-04-14 20:23:42","https://microvpn.info/string/530345404/530345404.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340399/","malware_traffic"
 "340398","2020-04-14 20:23:38","http://melias.se/string/64928487.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340398/","malware_traffic"
 "340397","2020-04-14 20:23:30","https://marocaji.com/string/92174460/92174460.zip","online","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340397/","malware_traffic"
@@ -15467,8 +15845,8 @@
 "340388","2020-04-14 20:21:51","http://ipbg.org.br/string/637148407/637148407.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340388/","malware_traffic"
 "340387","2020-04-14 20:21:40","https://hotel-sangiorgio.com/string/974483/974483.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340387/","malware_traffic"
 "340386","2020-04-14 20:21:35","https://hellomessager.com/string/9336248.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340386/","malware_traffic"
-"340385","2020-04-14 20:21:33","https://hellomessager.com/string/67893798.zip","online","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340385/","malware_traffic"
-"340384","2020-04-14 20:21:30","https://hellomessager.com/string/487434/487434.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340384/","malware_traffic"
+"340385","2020-04-14 20:21:33","https://hellomessager.com/string/67893798.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340385/","malware_traffic"
+"340384","2020-04-14 20:21:30","https://hellomessager.com/string/487434/487434.zip","online","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340384/","malware_traffic"
 "340383","2020-04-14 20:21:23","https://gsm-laboratory.com/string/2259983.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340383/","malware_traffic"
 "340382","2020-04-14 20:21:18","https://gsm-laboratory.com/string/05907/05907.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340382/","malware_traffic"
 "340381","2020-04-14 20:21:13","https://gsm-laboratory.com/string/009540421.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340381/","malware_traffic"
@@ -15504,9 +15882,9 @@
 "340351","2020-04-14 20:17:32","http://ahurasolutions.com/string/97960/97960.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340351/","malware_traffic"
 "340350","2020-04-14 20:17:28","http://ahurasolutions.com/string/50928/50928.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340350/","malware_traffic"
 "340349","2020-04-14 20:17:24","http://ahurasolutions.com/string/28939.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340349/","malware_traffic"
-"340348","2020-04-14 20:17:18","https://accentlandscapes.com/string/08809662/08809662.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340348/","malware_traffic"
-"340347","2020-04-14 20:17:16","https://accentlandscapes.com/string/7666799/7666799.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340347/","malware_traffic"
-"340346","2020-04-14 20:17:13","https://accentlandscapes.com/string/13365/13365.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340346/","malware_traffic"
+"340348","2020-04-14 20:17:18","https://accentlandscapes.com/string/08809662/08809662.zip","online","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340348/","malware_traffic"
+"340347","2020-04-14 20:17:16","https://accentlandscapes.com/string/7666799/7666799.zip","online","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340347/","malware_traffic"
+"340346","2020-04-14 20:17:13","https://accentlandscapes.com/string/13365/13365.zip","online","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340346/","malware_traffic"
 "340345","2020-04-14 19:46:04","http://ruisgood.ru/ups.dat","online","malware_download","None","https://urlhaus.abuse.ch/url/340345/","p5yb34m"
 "340344","2020-04-14 19:43:09","http://ruisgood.ru/1201.rar","online","malware_download","CoinMiner","https://urlhaus.abuse.ch/url/340344/","p5yb34m"
 "340343","2020-04-14 19:43:04","http://ruisgood.ru/max.rar","online","malware_download","None","https://urlhaus.abuse.ch/url/340343/","p5yb34m"
@@ -15625,7 +16003,7 @@
 "340230","2020-04-14 14:43:05","http://unik-evenements.fr/string/444444.png","offline","malware_download","exe,Qakbot,spx96","https://urlhaus.abuse.ch/url/340230/","lazyactivist192"
 "340229","2020-04-14 14:37:13","http://leukkado.be/string/444444.png","offline","malware_download","exe,Qakbot,Quakbot,spx96","https://urlhaus.abuse.ch/url/340229/","lazyactivist192"
 "340228","2020-04-14 14:37:11","http://millionsawesomeproducts.com/string/444444.png","offline","malware_download","exe,Qakbot,spx96","https://urlhaus.abuse.ch/url/340228/","lazyactivist192"
-"340227","2020-04-14 14:37:08","http://funpartyrent.com/string/444444.png","offline","malware_download","exe,Qakbot,Quakbot,spx96","https://urlhaus.abuse.ch/url/340227/","lazyactivist192"
+"340227","2020-04-14 14:37:08","http://funpartyrent.com/string/444444.png","online","malware_download","exe,Qakbot,Quakbot,spx96","https://urlhaus.abuse.ch/url/340227/","lazyactivist192"
 "340226","2020-04-14 14:37:04","http://common-factor.nl/string/444444.png","offline","malware_download","exe,Qakbot,Quakbot,spx96","https://urlhaus.abuse.ch/url/340226/","lazyactivist192"
 "340224","2020-04-14 14:33:35","https://emamdouh1949.me/temp/JBPOWNH.txt","offline","malware_download","AZORult,exe","https://urlhaus.abuse.ch/url/340224/","abuse_ch"
 "340223","2020-04-14 14:23:39","http://otanityre.in/dj/dj.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/340223/","abuse_ch"
@@ -16363,7 +16741,7 @@
 "339490","2020-04-13 14:56:09","http://157.245.185.193/SBIDIOT/arm6","offline","malware_download","None","https://urlhaus.abuse.ch/url/339490/","JayTHL"
 "339489","2020-04-13 14:56:07","http://157.245.185.193/SBIDIOT/arm","offline","malware_download","None","https://urlhaus.abuse.ch/url/339489/","JayTHL"
 "339488","2020-04-13 14:56:03","http://140.82.8.73/update.sh","offline","malware_download","None","https://urlhaus.abuse.ch/url/339488/","JayTHL"
-"339487","2020-04-13 13:49:06","http://121.176.31.174:36606/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/339487/","zbetcheckin"
+"339487","2020-04-13 13:49:06","http://121.176.31.174:36606/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/339487/","zbetcheckin"
 "339486","2020-04-13 13:33:10","http://mobile-fueldrain.co.uk/sport/rockstar.php","offline","malware_download","exe,Trickbot","https://urlhaus.abuse.ch/url/339486/","abuse_ch"
 "339485","2020-04-13 12:10:08","http://218.144.252.19:1801/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/339485/","zbetcheckin"
 "339484","2020-04-13 12:09:47","http://42.235.44.249:45431/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/339484/","Gandylyan1"
@@ -17242,7 +17620,7 @@
 "338610","2020-04-12 09:04:33","http://172.36.39.197:50039/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/338610/","Gandylyan1"
 "338609","2020-04-12 08:19:10","http://162.212.113.18:34648/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/338609/","zbetcheckin"
 "338608","2020-04-12 07:43:04","http://199.83.203.171:48349/Mozi.m+-O+-","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/338608/","zbetcheckin"
-"338607","2020-04-12 07:41:04","http://libya-info.com/microsoft%20_office.jpg","offline","malware_download","encrypted","https://urlhaus.abuse.ch/url/338607/","abuse_ch"
+"338607","2020-04-12 07:41:04","http://libya-info.com/microsoft%20_office.jpg","online","malware_download","encrypted","https://urlhaus.abuse.ch/url/338607/","abuse_ch"
 "338606","2020-04-12 07:36:10","https://consultantglobalinternational.com/aprilnew_encrypted_874A9EF.bin","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/338606/","abuse_ch"
 "338605","2020-04-12 07:36:04","https://drive.google.com/uc?export=download&id=1pTSWF6H5PQq8vRGPpgXLueU-N9PDq0Zo","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/338605/","abuse_ch"
 "338604","2020-04-12 07:35:58","https://onedrive.live.com/download?cid=9B6A1F475E249332&resid=9B6A1F475E249332%21127&authkey=AO9T3Q_HpEMGGgk","online","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/338604/","abuse_ch"
@@ -18045,7 +18423,7 @@
 "337807","2020-04-10 09:03:29","http://49.89.190.130:48282/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/337807/","Gandylyan1"
 "337806","2020-04-10 09:03:24","http://45.161.254.200:50679/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/337806/","Gandylyan1"
 "337805","2020-04-10 09:03:21","http://116.114.95.64:58462/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/337805/","Gandylyan1"
-"337804","2020-04-10 09:03:18","http://108.95.162.21:48579/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/337804/","Gandylyan1"
+"337804","2020-04-10 09:03:18","http://108.95.162.21:48579/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/337804/","Gandylyan1"
 "337803","2020-04-10 09:03:15","http://115.61.5.50:40651/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/337803/","Gandylyan1"
 "337802","2020-04-10 09:03:11","http://172.245.21.222/bins/FearLess.arm6","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/337802/","zbetcheckin"
 "337801","2020-04-10 09:03:09","http://88.218.17.223/bins/qwertyuiop.sh4","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/337801/","zbetcheckin"
@@ -18407,12 +18785,12 @@
 "337445","2020-04-09 16:56:07","https://drive.google.com/uc?export=download&id=1N-1AGKYL3EQU3bTgirFjLQIZ2LLCafd0","offline","malware_download","encrypted,GuLoader,Loki","https://urlhaus.abuse.ch/url/337445/","abuse_ch"
 "337444","2020-04-09 16:55:32","http://185.172.110.241/x0ox0ox0oxDefault/z0r0.arm","offline","malware_download","None","https://urlhaus.abuse.ch/url/337444/","JayTHL"
 "337443","2020-04-09 16:55:30","http://185.172.110.241/x0ox0ox0oxDefault/z0r0.arm6","online","malware_download","None","https://urlhaus.abuse.ch/url/337443/","JayTHL"
-"337442","2020-04-09 16:55:28","http://185.172.110.241/x0ox0ox0oxDefault/z0r0.arm7","online","malware_download","None","https://urlhaus.abuse.ch/url/337442/","JayTHL"
+"337442","2020-04-09 16:55:28","http://185.172.110.241/x0ox0ox0oxDefault/z0r0.arm7","offline","malware_download","None","https://urlhaus.abuse.ch/url/337442/","JayTHL"
 "337441","2020-04-09 16:55:27","http://185.172.110.241/x0ox0ox0oxDefault/z0r0.m68k","offline","malware_download","None","https://urlhaus.abuse.ch/url/337441/","JayTHL"
-"337440","2020-04-09 16:55:25","http://185.172.110.241/x0ox0ox0oxDefault/z0r0.mips","offline","malware_download","None","https://urlhaus.abuse.ch/url/337440/","JayTHL"
-"337439","2020-04-09 16:55:23","http://185.172.110.241/x0ox0ox0oxDefault/z0r0.mpsl","offline","malware_download","None","https://urlhaus.abuse.ch/url/337439/","JayTHL"
+"337440","2020-04-09 16:55:25","http://185.172.110.241/x0ox0ox0oxDefault/z0r0.mips","online","malware_download","None","https://urlhaus.abuse.ch/url/337440/","JayTHL"
+"337439","2020-04-09 16:55:23","http://185.172.110.241/x0ox0ox0oxDefault/z0r0.mpsl","online","malware_download","None","https://urlhaus.abuse.ch/url/337439/","JayTHL"
 "337438","2020-04-09 16:55:21","http://185.172.110.241/x0ox0ox0oxDefault/z0r0.ppc","offline","malware_download","None","https://urlhaus.abuse.ch/url/337438/","JayTHL"
-"337437","2020-04-09 16:55:19","http://185.172.110.241/x0ox0ox0oxDefault/z0r0.sh4","online","malware_download","None","https://urlhaus.abuse.ch/url/337437/","JayTHL"
+"337437","2020-04-09 16:55:19","http://185.172.110.241/x0ox0ox0oxDefault/z0r0.sh4","offline","malware_download","None","https://urlhaus.abuse.ch/url/337437/","JayTHL"
 "337436","2020-04-09 16:55:17","http://185.172.110.241/x0ox0ox0oxDefault/z0r0.spc","offline","malware_download","None","https://urlhaus.abuse.ch/url/337436/","JayTHL"
 "337435","2020-04-09 16:55:15","http://185.172.110.241/x0ox0ox0oxDefault/z0r0.x86","offline","malware_download","None","https://urlhaus.abuse.ch/url/337435/","JayTHL"
 "337434","2020-04-09 16:55:07","https://greentec-automation.com/wp-cran.php","offline","malware_download","exe","https://urlhaus.abuse.ch/url/337434/","p5yb34m"
@@ -19569,7 +19947,7 @@
 "336281","2020-04-07 20:29:17","https://onedrive.live.com/download?cid=B03EE17D51411308&resid=B03EE17D51411308!2152&authkey=ABuTaAC83l5UTKs","online","malware_download","None","https://urlhaus.abuse.ch/url/336281/","JayTHL"
 "336280","2020-04-07 20:29:14","https://onedrive.live.com/download?cid=D718E3C8E3BC53C0&resid=D718E3C8E3BC53C0!191&authkey=AJL2UegQunSGC3Q","online","malware_download","None","https://urlhaus.abuse.ch/url/336280/","JayTHL"
 "336279","2020-04-07 20:29:11","https://onedrive.live.com/download?cid=B5EA8D4249D866E6&resid=B5EA8D4249D866E6!164&authkey=ADFsfCDAw3bIboY","online","malware_download","None","https://urlhaus.abuse.ch/url/336279/","JayTHL"
-"336278","2020-04-07 20:29:08","https://onedrive.live.com/download?cid=EFDF2C8D834A1928&resid=EFDF2C8D834A1928!202&authkey=AH1gjQ8j29DArW4","online","malware_download","None","https://urlhaus.abuse.ch/url/336278/","JayTHL"
+"336278","2020-04-07 20:29:08","https://onedrive.live.com/download?cid=EFDF2C8D834A1928&resid=EFDF2C8D834A1928!202&authkey=AH1gjQ8j29DArW4","offline","malware_download","None","https://urlhaus.abuse.ch/url/336278/","JayTHL"
 "336277","2020-04-07 20:15:24","https://mydreve.com/slider/326409.zip","offline","malware_download","Qakbot,qbot,zip","https://urlhaus.abuse.ch/url/336277/","malware_traffic"
 "336276","2020-04-07 20:15:19","http://crosstiesofocala.com/slider/65301951/65301951.zip","offline","malware_download","Qakbot,qbot,zip","https://urlhaus.abuse.ch/url/336276/","malware_traffic"
 "336275","2020-04-07 20:15:17","http://mestenergi.se/slider/8403.zip","offline","malware_download","Qakbot,qbot,zip","https://urlhaus.abuse.ch/url/336275/","malware_traffic"
@@ -19680,7 +20058,7 @@
 "336170","2020-04-07 14:16:00","http://robotrade.com.vn/wp-content/images/views/YtOA46S5guGQy9L.exe","offline","malware_download","HawkEye","https://urlhaus.abuse.ch/url/336170/","RobbieWhite98"
 "336169","2020-04-07 14:15:53","http://robotrade.com.vn/wp-content/images/views/itsRL2XbtQKrNnQ.exe","offline","malware_download","HawkEye","https://urlhaus.abuse.ch/url/336169/","RobbieWhite98"
 "336168","2020-04-07 14:15:47","http://modcloudserver.eu/arinze/arinze.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/336168/","0xFrost"
-"336167","2020-04-07 14:15:43","http://modcloudserver.eu/donstan/stanz.exe","online","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/336167/","RobbieWhite98"
+"336167","2020-04-07 14:15:43","http://modcloudserver.eu/donstan/stanz.exe","offline","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/336167/","RobbieWhite98"
 "336166","2020-04-07 14:15:19","http://renovanorte.com/Preview.exe","online","malware_download","None","https://urlhaus.abuse.ch/url/336166/","anonymous"
 "336165","2020-04-07 14:15:15","http://eroblog.best/1.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/336165/","RobbieWhite98"
 "336164","2020-04-07 14:15:11","http://posqit.net/0/80177.exe","offline","malware_download","exe,Loki,lokibot","https://urlhaus.abuse.ch/url/336164/","RobbieWhite98"
@@ -20380,7 +20758,7 @@
 "335469","2020-04-06 03:00:10","http://155.94.131.150/bins/blxntz.arm6","offline","malware_download","None","https://urlhaus.abuse.ch/url/335469/","JayTHL"
 "335468","2020-04-06 03:00:08","http://155.94.131.150/bins/blxntz.arm5","offline","malware_download","None","https://urlhaus.abuse.ch/url/335468/","JayTHL"
 "335467","2020-04-06 03:00:05","http://155.94.131.150/bins/blxntz.arm","offline","malware_download","None","https://urlhaus.abuse.ch/url/335467/","JayTHL"
-"335466","2020-04-06 02:10:06","http://14.33.86.236:63421/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/335466/","zbetcheckin"
+"335466","2020-04-06 02:10:06","http://14.33.86.236:63421/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/335466/","zbetcheckin"
 "335465","2020-04-06 00:05:27","http://221.210.211.29:41172/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/335465/","Gandylyan1"
 "335464","2020-04-06 00:05:21","http://31.146.124.61:54190/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/335464/","Gandylyan1"
 "335463","2020-04-06 00:04:50","http://162.212.114.65:51834/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/335463/","Gandylyan1"
@@ -20444,7 +20822,7 @@
 "335405","2020-04-05 21:06:01","http://112.17.88.160:57037/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/335405/","Gandylyan1"
 "335404","2020-04-05 21:05:53","http://182.116.93.35:36510/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/335404/","Gandylyan1"
 "335403","2020-04-05 21:05:50","http://42.231.186.1:39726/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/335403/","Gandylyan1"
-"335402","2020-04-05 21:05:46","http://173.15.162.156:3378/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/335402/","Gandylyan1"
+"335402","2020-04-05 21:05:46","http://173.15.162.156:3378/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/335402/","Gandylyan1"
 "335401","2020-04-05 21:05:42","http://124.119.101.189:51174/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/335401/","Gandylyan1"
 "335400","2020-04-05 21:05:32","http://42.227.150.207:53241/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/335400/","Gandylyan1"
 "335399","2020-04-05 21:05:27","http://111.43.223.57:43486/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/335399/","Gandylyan1"
@@ -21788,7 +22166,7 @@
 "334061","2020-04-02 18:03:13","http://180.124.13.12:42279/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/334061/","Gandylyan1"
 "334060","2020-04-02 18:03:05","http://183.215.188.50:56562/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/334060/","Gandylyan1"
 "334059","2020-04-02 17:40:11","https://eetownvulgar.xyz/3/ssf.dll","offline","malware_download","dll,zloader","https://urlhaus.abuse.ch/url/334059/","abuse_ch"
-"334058","2020-04-02 17:35:21","http://93.102.193.254:51142/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/334058/","zbetcheckin"
+"334058","2020-04-02 17:35:21","http://93.102.193.254:51142/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/334058/","zbetcheckin"
 "334057","2020-04-02 17:31:08","http://frogistik99.com/9548.exe","offline","malware_download","Dridex,exe","https://urlhaus.abuse.ch/url/334057/","abuse_ch"
 "334056","2020-04-02 17:26:09","https://drive.google.com/uc?export=download&id=1tAsOF062xStYM8PM-UBwDYZqC-zU1jXJ","offline","malware_download","encrypted,GuLoader,RemcosRAT","https://urlhaus.abuse.ch/url/334056/","abuse_ch"
 "334055","2020-04-02 16:59:11","http://office-updates-indexes.com/max.bin","offline","malware_download","None","https://urlhaus.abuse.ch/url/334055/","JayTHL"
@@ -22378,7 +22756,7 @@
 "333470","2020-04-01 16:29:34","https://raw.githubusercontent.com/chama1020/updates/master/Factura04-20.cmd","offline","malware_download","Casbaneiro,spy","https://urlhaus.abuse.ch/url/333470/","JAMESWT_MHT"
 "333469","2020-04-01 16:29:30","https://github.com/chama1020/updates/blob/master/Factura04-20.cmd","offline","malware_download","Casbaneiro,spy","https://urlhaus.abuse.ch/url/333469/","JAMESWT_MHT"
 "333468","2020-04-01 16:29:28","https://drive.google.com/uc?export=download&id=1vehQBU3s9dqzvl7S51JohJpIhh1dCA51","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/333468/","abuse_ch"
-"333467","2020-04-01 16:29:17","https://www.dieselmoreno.cl/site/v2and_encrypted_ADF260F.bin","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/333467/","abuse_ch"
+"333467","2020-04-01 16:29:17","https://www.dieselmoreno.cl/site/v2and_encrypted_ADF260F.bin","online","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/333467/","abuse_ch"
 "333466","2020-04-01 16:28:46","https://drive.google.com/uc?export=download&id=1Gb1S8DeVzx6E-Vt85u5j07zRFeRWyop3","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/333466/","abuse_ch"
 "333465","2020-04-01 16:28:34","https://drive.google.com/uc?export=download&id=1WH55pV9KBbK7PW583pXU4zGdk4Q4QfYf","offline","malware_download","encrypted,GuLoader,RemcosRAT","https://urlhaus.abuse.ch/url/333465/","abuse_ch"
 "333464","2020-04-01 16:28:23","https://drive.google.com/uc?export=download&id=1nmSm2jWWIH-VE0FWRcvRGH3AWiQboLXO","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/333464/","abuse_ch"
@@ -24170,7 +24548,7 @@
 "331666","2020-03-29 15:03:39","http://162.212.115.165:56113/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/331666/","Gandylyan1"
 "331665","2020-03-29 15:03:33","http://49.68.17.181:46681/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/331665/","Gandylyan1"
 "331664","2020-03-29 15:01:04","https://pastebin.com/raw/E4YzDAhK","offline","malware_download","None","https://urlhaus.abuse.ch/url/331664/","JayTHL"
-"331663","2020-03-29 14:58:05","http://1.246.223.125:2634/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/331663/","zbetcheckin"
+"331663","2020-03-29 14:58:05","http://1.246.223.125:2634/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/331663/","zbetcheckin"
 "331662","2020-03-29 14:48:04","https://pastebin.com/raw/PB1FpQkH","offline","malware_download","None","https://urlhaus.abuse.ch/url/331662/","JayTHL"
 "331661","2020-03-29 14:30:16","https://drive.google.com/uc?export=download&id=1mb-j_KSEzb52KAaAmYlCmHmFV_uCRPSU","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/331661/","abuse_ch"
 "331660","2020-03-29 14:28:40","http://167.71.52.95/d/xd.sh4","offline","malware_download","None","https://urlhaus.abuse.ch/url/331660/","anonymous"
@@ -25083,7 +25461,7 @@
 "330752","2020-03-27 06:42:29","https://supervisedvisitsllc.com/vla_encrypted_6D99100.bin","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/330752/","abuse_ch"
 "330751","2020-03-27 06:42:25","http://doha-media.com//ldr_3341780230_karantino.xyz.exe","offline","malware_download","exe,IcedID","https://urlhaus.abuse.ch/url/330751/","jstrosch"
 "330750","2020-03-27 06:42:21","http://hotdsk.com/staple/444444.png","offline","malware_download"," Qbot,Qakbot,Quakbot","https://urlhaus.abuse.ch/url/330750/","anonymous"
-"330749","2020-03-27 06:42:18","http://share.dmca.gripe/umGPHqvEPj2uIGdt.doc","online","malware_download","exe","https://urlhaus.abuse.ch/url/330749/","jstrosch"
+"330749","2020-03-27 06:42:18","http://share.dmca.gripe/umGPHqvEPj2uIGdt.doc","offline","malware_download","exe","https://urlhaus.abuse.ch/url/330749/","jstrosch"
 "330748","2020-03-27 06:42:06","https://halykhome.com/re/files/covidMappia_v1.0.3.apk","offline","malware_download","android,apk ,COVID","https://urlhaus.abuse.ch/url/330748/","DoberGroup"
 "330747","2020-03-27 06:41:36","https://drive.google.com/uc?export=download&id=1y5UM5xwWTFnyEaWVAwwfF9pihuNEqtNA","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/330747/","abuse_ch"
 "330746","2020-03-27 06:41:29","https://drive.google.com/uc?export=download&id=1sQA_CevfG7Bm-p0MMJTejGShKIwoOTAt","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/330746/","abuse_ch"
@@ -25828,7 +26206,7 @@
 "330007","2020-03-25 20:18:12","http://mwrc.ca/a/me_encrypted_3F1DDE0.bin","offline","malware_download","None","https://urlhaus.abuse.ch/url/330007/","JayTHL"
 "330006","2020-03-25 20:18:08","http://mwrc.ca/a/Stigmaticalque.exe","offline","malware_download","GuLoader","https://urlhaus.abuse.ch/url/330006/","JayTHL"
 "330005","2020-03-25 20:18:06","http://mwrc.ca/a/SAVINESNONSI.exe","offline","malware_download","GuLoader","https://urlhaus.abuse.ch/url/330005/","JayTHL"
-"330004","2020-03-25 20:16:09","https://share.dmca.gripe/vPh5kV34np1hCODm.doc","online","malware_download","AZORult,exe","https://urlhaus.abuse.ch/url/330004/","zbetcheckin"
+"330004","2020-03-25 20:16:09","https://share.dmca.gripe/vPh5kV34np1hCODm.doc","offline","malware_download","AZORult,exe","https://urlhaus.abuse.ch/url/330004/","zbetcheckin"
 "330003","2020-03-25 19:49:03","https://pastebin.com/raw/1URH290U","offline","malware_download","Encoded,exe,njRAT","https://urlhaus.abuse.ch/url/330003/","viql"
 "330002","2020-03-25 19:38:04","https://pastebin.com/raw/sPECbGga","offline","malware_download","Encoded,exe,Sodinokibi","https://urlhaus.abuse.ch/url/330002/","viql"
 "330001","2020-03-25 19:29:04","https://pastebin.com/raw/xDqfwtJZ","offline","malware_download","None","https://urlhaus.abuse.ch/url/330001/","JayTHL"
@@ -26220,7 +26598,7 @@
 "329612","2020-03-25 08:41:38","http://167.71.226.71/bins/UnHAnaAW.arm6","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/329612/","zbetcheckin"
 "329611","2020-03-25 08:41:35","http://145.239.136.42/zehir/z3hir.arm5","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/329611/","zbetcheckin"
 "329610","2020-03-25 08:41:33","http://159.89.54.236/beastmode/b3astmode.arm","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/329610/","zbetcheckin"
-"329609","2020-03-25 08:31:27","http://kenareh-gostare-aras.ir/Ori2_encrypted_B2ED50.bin","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/329609/","abuse_ch"
+"329609","2020-03-25 08:31:27","http://kenareh-gostare-aras.ir/Ori2_encrypted_B2ED50.bin","online","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/329609/","abuse_ch"
 "329608","2020-03-25 08:31:20","http://fggfa.us/nd/bot_encrypted_9BC6FDF.bin","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/329608/","abuse_ch"
 "329607","2020-03-25 08:31:17","https://drive.google.com/uc?export=download&id=1lQnqNShJ03oG6re6tbWLSg6oAOEDf6ps","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/329607/","abuse_ch"
 "329606","2020-03-25 08:31:10","https://drive.google.com/uc?export=download&id=1IN0Y2cQLglpUHpCwfUKNZIKA6R2Ya6eu","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/329606/","abuse_ch"
@@ -26391,7 +26769,7 @@
 "329441","2020-03-25 03:03:13","http://49.68.20.192:34658/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/329441/","Gandylyan1"
 "329440","2020-03-25 03:03:10","http://27.38.154.172:34949/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/329440/","Gandylyan1"
 "329439","2020-03-25 03:03:05","http://42.115.75.31:43105/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/329439/","Gandylyan1"
-"329438","2020-03-25 00:43:05","http://201.203.212.194:7438/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/329438/","zbetcheckin"
+"329438","2020-03-25 00:43:05","http://201.203.212.194:7438/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/329438/","zbetcheckin"
 "329437","2020-03-25 00:27:11","http://everestedu.org/lndex.php","offline","malware_download","Dridex,vbs,zip","https://urlhaus.abuse.ch/url/329437/","malware_traffic"
 "329436","2020-03-25 00:27:08","http://photoflip.co.in/lndex.php","offline","malware_download","Dridex,vbs,zip","https://urlhaus.abuse.ch/url/329436/","malware_traffic"
 "329435","2020-03-25 00:27:04","http://bienvenidosnewyork.com/app.php","offline","malware_download","Dridex,vbs,zip","https://urlhaus.abuse.ch/url/329435/","malware_traffic"
@@ -26551,7 +26929,7 @@
 "329281","2020-03-24 15:29:08","http://fdistus.com/glps.exe","offline","malware_download","Dridex,exe","https://urlhaus.abuse.ch/url/329281/","zbetcheckin"
 "329280","2020-03-24 15:18:57","http://120.151.248.134:26034/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/329280/","zbetcheckin"
 "329279","2020-03-24 15:18:50","https://onedrive.live.com/download?cid=1491235303209D1A&resid=1491235303209D1A%21124&authkey=ANVr9de13m7UgYw","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/329279/","abuse_ch"
-"329278","2020-03-24 15:18:16","http://kenareh-gostare-aras.ir/ce_test_encrypted_DFD37EF.bin","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/329278/","abuse_ch"
+"329278","2020-03-24 15:18:16","http://kenareh-gostare-aras.ir/ce_test_encrypted_DFD37EF.bin","online","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/329278/","abuse_ch"
 "329277","2020-03-24 15:18:12","https://drive.google.com/uc?export=download&id=1vam9why2kKUaQAJUgws9DLvtr4kjOvOc","offline","malware_download","encrypted,GuLoader,KPOTStealer","https://urlhaus.abuse.ch/url/329277/","abuse_ch"
 "329276","2020-03-24 15:18:05","http://chersoicryss.com/kundru/targen.php?l=zoak2.cab","offline","malware_download","Gozi,ursnif","https://urlhaus.abuse.ch/url/329276/","0xCARNAGE"
 "329275","2020-03-24 15:17:52","http://sbjadvogados.com.br/bui/bin_encrypted_410030.bin","offline","malware_download","encrypted,Formbook,GuLoader","https://urlhaus.abuse.ch/url/329275/","abuse_ch"
@@ -26883,7 +27261,7 @@
 "328949","2020-03-23 19:07:32","https://drive.google.com/uc?export=download&id=1FHWTCccLf6gU5h-EbNKIzuSZP51o2pEz","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/328949/","abuse_ch"
 "328948","2020-03-23 19:07:21","https://drive.google.com/uc?export=download&id=18Sw7zgGXNNnOyX6QQQFeUrNWPW7aOqS9","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/328948/","abuse_ch"
 "328947","2020-03-23 19:07:09","https://drive.google.com/uc?export=download&id=1pnt9gRgdM7FuXIPMUyAy9I6pWry0qO97","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/328947/","abuse_ch"
-"328946","2020-03-23 18:45:06","http://joshleeband.com/sport/rockstar.php","offline","malware_download","exe,Trickbot","https://urlhaus.abuse.ch/url/328946/","abuse_ch"
+"328946","2020-03-23 18:45:06","http://joshleeband.com/sport/rockstar.php","offline","malware_download","exe,IcedID,Trickbot","https://urlhaus.abuse.ch/url/328946/","abuse_ch"
 "328945","2020-03-23 18:37:31","https://files.fm/down.php?i=ng49wh5z","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/328945/","abuse_ch"
 "328944","2020-03-23 18:37:28","https://drive.google.com/uc?export=download&id=1P20CscHrB1MvWvv_3etH7oR6eOJLHd7G","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/328944/","abuse_ch"
 "328943","2020-03-23 18:37:17","https://drive.google.com/uc?export=download&id=1Bxq3sL8qVSkFHE18BHBhk3vQoBUcJKf3","offline","malware_download","encrypted,Formbook,GuLoader","https://urlhaus.abuse.ch/url/328943/","abuse_ch"
@@ -27213,7 +27591,7 @@
 "328619","2020-03-23 09:03:12","http://218.21.170.84:47677/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/328619/","Gandylyan1"
 "328618","2020-03-23 09:03:07","http://115.56.111.203:42802/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/328618/","Gandylyan1"
 "328617","2020-03-23 08:53:04","http://125.44.167.66:46264/Mozi.a","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/328617/","zbetcheckin"
-"328616","2020-03-23 08:47:23","http://filedownload.gb.net/files/a/vvvv.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/328616/","zbetcheckin"
+"328616","2020-03-23 08:47:23","http://filedownload.gb.net/files/a/vvvv.exe","offline","malware_download","exe,IcedID","https://urlhaus.abuse.ch/url/328616/","zbetcheckin"
 "328615","2020-03-23 08:47:05","http://162.40.170.40:39652/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/328615/","zbetcheckin"
 "328614","2020-03-23 08:28:03","https://pastebin.com/raw/q1r2wYjG","offline","malware_download","None","https://urlhaus.abuse.ch/url/328614/","JayTHL"
 "328613","2020-03-23 08:01:10","https://drive.google.com/uc?export=download&id=1_3qmamCna53FxzYKex0G_gGevTkO9lZU","offline","malware_download","encrypted,Formbook,GuLoader","https://urlhaus.abuse.ch/url/328613/","abuse_ch"
@@ -28429,7 +28807,7 @@
 "327399","2020-03-20 06:51:20","https://drive.google.com/uc?export=download&id=1y2hFFTUQFWAq8OrW6Plwy40qFC6ZhoLk","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/327399/","abuse_ch"
 "327398","2020-03-20 06:51:10","https://drive.google.com/uc?export=download&id=14r0M43I7ogB8OCvax0mZO_GTo3BwJTZL","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/327398/","abuse_ch"
 "327397","2020-03-20 06:49:06","http://urefere.org/opxe.exe","offline","malware_download","Dridex,exe","https://urlhaus.abuse.ch/url/327397/","abuse_ch"
-"327396","2020-03-20 06:47:11","http://dl.dzqzd.com/Wj1ASetup.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/327396/","zbetcheckin"
+"327396","2020-03-20 06:47:11","http://dl.dzqzd.com/Wj1ASetup.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/327396/","zbetcheckin"
 "327395","2020-03-20 06:43:09","https://drive.google.com/uc?export=download&id=1N2iDhCHpiojtxKparhbgZLKV56IiMK0h","offline","malware_download","encrypted,GuLoader,keylogger","https://urlhaus.abuse.ch/url/327395/","abuse_ch"
 "327394","2020-03-20 06:42:08","http://185.11.146.173/life/Puerto_encrypted_834367F.bin","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/327394/","abuse_ch"
 "327393","2020-03-20 06:41:37","https://drive.google.com/uc?export=download&id=1MU91PI7_XTLwdAhCa-c7Vwcc4Yq6yJXz","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/327393/","abuse_ch"
@@ -29731,7 +30109,7 @@
 "326093","2020-03-17 18:03:04","http://45.79.110.132/admin201506/uploadApkFile/rt/20161125/lookupalldata2.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/326093/","zbetcheckin"
 "326092","2020-03-17 17:58:05","http://211.105.171.108:8097/.i","offline","malware_download","elf","https://urlhaus.abuse.ch/url/326092/","zbetcheckin"
 "326091","2020-03-17 17:43:34","http://typrer.com/qrpt.exe","offline","malware_download","Dridex,exe","https://urlhaus.abuse.ch/url/326091/","anonymous"
-"326090","2020-03-17 16:53:21","http://175.211.16.150:42907/.i","online","malware_download","elf","https://urlhaus.abuse.ch/url/326090/","zbetcheckin"
+"326090","2020-03-17 16:53:21","http://175.211.16.150:42907/.i","offline","malware_download","elf","https://urlhaus.abuse.ch/url/326090/","zbetcheckin"
 "326089","2020-03-17 16:39:13","https://pastebin.com/raw/av0gsDC5","offline","malware_download","meterpreter","https://urlhaus.abuse.ch/url/326089/","viql"
 "326088","2020-03-17 16:09:34","https://pastebin.com/raw/j5q8b6w8","offline","malware_download","meterpreter","https://urlhaus.abuse.ch/url/326088/","viql"
 "326087","2020-03-17 15:50:52","http://125.65.46.241:8080/chongfu.sh","offline","malware_download","None","https://urlhaus.abuse.ch/url/326087/","anonymous"
@@ -30001,7 +30379,7 @@
 "325823","2020-03-16 22:26:27","http://64.44.51.120/images/redcar.png","offline","malware_download","exe,Trickbot","https://urlhaus.abuse.ch/url/325823/","malware_traffic"
 "325822","2020-03-16 22:26:21","http://64.44.51.120/images/imgpaper.png","offline","malware_download","exe,Trickbot","https://urlhaus.abuse.ch/url/325822/","malware_traffic"
 "325821","2020-03-16 22:26:07","http://64.44.51.120/images/cursor.png","offline","malware_download","exe,Trickbot","https://urlhaus.abuse.ch/url/325821/","malware_traffic"
-"325820","2020-03-16 22:20:06","http://audiosv.com/index/30520-pdf.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/325820/","zbetcheckin"
+"325820","2020-03-16 22:20:06","http://audiosv.com/index/30520-pdf.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/325820/","zbetcheckin"
 "325819","2020-03-16 22:15:15","http://reboot.pro/files/download/327-vhd-xp-compact-make-mini-xp/","offline","malware_download","exe","https://urlhaus.abuse.ch/url/325819/","zbetcheckin"
 "325818","2020-03-16 22:09:12","http://audiosv.com/index/0392020_pdf.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/325818/","zbetcheckin"
 "325817","2020-03-16 22:09:05","http://mastervisacloudesystemprtomicrosftwareus.duckdns.org/ryn/vbc.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/325817/","zbetcheckin"
@@ -30229,9 +30607,9 @@
 "325594","2020-03-16 11:38:08","https://drive.google.com/uc?export=download&id=10nAXipyS351C7mC-hS7sn9JheZ6RzGhG","offline","malware_download","encrypted,Formbook,GuLoader","https://urlhaus.abuse.ch/url/325594/","abuse_ch"
 "325593","2020-03-16 10:52:05","https://pastebin.com/raw/i39ByD6y","offline","malware_download","meterpreter","https://urlhaus.abuse.ch/url/325593/","viql"
 "325592","2020-03-16 10:43:12","http://5.45.164.142:13507/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/325592/","zbetcheckin"
-"325591","2020-03-16 10:43:07","http://211.216.116.40:6702/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/325591/","zbetcheckin"
+"325591","2020-03-16 10:43:07","http://211.216.116.40:6702/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/325591/","zbetcheckin"
 "325590","2020-03-16 10:00:15","http://bakery365sawamura.website/soul.exe","offline","malware_download","exe,Gozi,ursnif","https://urlhaus.abuse.ch/url/325590/","abuse_ch"
-"325589","2020-03-16 09:55:16","https://drive.google.com/uc?id=1eRTPmoUTpVVU19aONDr-yo0-RNkG5l07&export=download","offline","malware_download","Gozi,js,password:7777,ursnif,zip","https://urlhaus.abuse.ch/url/325589/","abuse_ch"
+"325589","2020-03-16 09:55:16","https://drive.google.com/uc?id=1eRTPmoUTpVVU19aONDr-yo0-RNkG5l07&export=download","online","malware_download","Gozi,js,password:7777,ursnif,zip","https://urlhaus.abuse.ch/url/325589/","abuse_ch"
 "325588","2020-03-16 09:41:03","http://185.163.45.101/bins/blxntz.arm5","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/325588/","zbetcheckin"
 "325587","2020-03-16 09:38:09","https://drive.google.com/uc?export=download&id=1DM4l_xFJc_yzE8nKFl01OojkrNl4kwpO","offline","malware_download","encrypted,GuLoader,Loki","https://urlhaus.abuse.ch/url/325587/","abuse_ch"
 "325586","2020-03-16 09:35:36","http://185.163.45.101/bins/blxntz.sh4","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/325586/","zbetcheckin"
@@ -33153,7 +33531,7 @@
 "322657","2020-03-08 09:03:05","http://116.114.95.64:52827/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/322657/","Gandylyan1"
 "322656","2020-03-08 08:22:09","http://mederfashion.com/dc/ihe_ofuru_encrypted_5912970.bin","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/322656/","abuse_ch"
 "322655","2020-03-08 08:22:05","http://mederfashion.com/dc/Host_encrypted_2D9E930.bin","offline","malware_download","encrypted,GuLoader,NetWire,rat","https://urlhaus.abuse.ch/url/322655/","abuse_ch"
-"322654","2020-03-08 08:21:07","http://wangtong7.siweidaoxiang.com/niuniushubiaozddj.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/322654/","zbetcheckin"
+"322654","2020-03-08 08:21:07","http://wangtong7.siweidaoxiang.com/niuniushubiaozddj.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/322654/","zbetcheckin"
 "322653","2020-03-08 08:20:41","http://chippingscottage.customer.netspace.net.au/socks.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/322653/","zbetcheckin"
 "322652","2020-03-08 08:09:36","http://wt8.siweidaoxiang.com/razorlame.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/322652/","zbetcheckin"
 "322651","2020-03-08 08:09:08","http://wangtong7.siweidaoxiang.com/weijing.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/322651/","zbetcheckin"
@@ -33167,7 +33545,7 @@
 "322643","2020-03-08 07:41:05","https://pastebin.com/raw/UYZaLYvW","offline","malware_download","meterpreter","https://urlhaus.abuse.ch/url/322643/","viql"
 "322642","2020-03-08 07:22:05","https://pastebin.com/raw/JW8iD452","offline","malware_download","PowerShellEmpire","https://urlhaus.abuse.ch/url/322642/","viql"
 "322641","2020-03-08 06:41:04","https://pastebin.com/raw/7j00nPnC","offline","malware_download","PowerShellEmpire","https://urlhaus.abuse.ch/url/322641/","viql"
-"322640","2020-03-08 06:35:20","http://wt8.siweidaoxiang.com/xspeghp.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/322640/","zbetcheckin"
+"322640","2020-03-08 06:35:20","http://wt8.siweidaoxiang.com/xspeghp.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/322640/","zbetcheckin"
 "322639","2020-03-08 06:35:15","http://wt8.siweidaoxiang.com/gwzsesxxgq.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/322639/","zbetcheckin"
 "322638","2020-03-08 06:34:55","http://wt9.siweidaoxiang.com/HA_GhostCastServer_WGL.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/322638/","zbetcheckin"
 "322637","2020-03-08 06:20:15","http://adiswesson.com/2018return/2018US%20GREGGSRETURN.doc","offline","malware_download","None","https://urlhaus.abuse.ch/url/322637/","JayTHL"
@@ -33208,7 +33586,7 @@
 "322602","2020-03-08 04:47:06","http://wangtong7.91tzy.com/niuniushubiaozddj.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/322602/","zbetcheckin"
 "322601","2020-03-08 04:22:06","http://wt9.91tzy.com/xspeghp.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/322601/","zbetcheckin"
 "322600","2020-03-08 04:17:12","http://wt9.91tzy.com/sqlzhlygj.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/322600/","zbetcheckin"
-"322599","2020-03-08 04:17:08","http://wt9.siweidaoxiang.com/sqlzhlygj.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/322599/","zbetcheckin"
+"322599","2020-03-08 04:17:08","http://wt9.siweidaoxiang.com/sqlzhlygj.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/322599/","zbetcheckin"
 "322598","2020-03-08 04:08:05","http://dx6.91tzy.com/jywckgj.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/322598/","zbetcheckin"
 "322597","2020-03-08 04:03:10","http://dx6.91tzy.com/apTopTrans.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/322597/","zbetcheckin"
 "322596","2020-03-08 04:03:06","http://wt9.91tzy.com/csoldzbfz.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/322596/","zbetcheckin"
@@ -33254,7 +33632,7 @@
 "322556","2020-03-08 01:13:03","http://146.71.78.117/i586","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/322556/","zbetcheckin"
 "322555","2020-03-08 01:08:03","http://146.71.78.117/sparc","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/322555/","zbetcheckin"
 "322554","2020-03-08 00:40:04","https://pastebin.com/raw/m4RD0Qgb","offline","malware_download","meterpreter","https://urlhaus.abuse.ch/url/322554/","viql"
-"322553","2020-03-08 00:12:13","http://dx30.siweidaoxiang.com/ssjjxggsjbfz.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/322553/","zbetcheckin"
+"322553","2020-03-08 00:12:13","http://dx30.siweidaoxiang.com/ssjjxggsjbfz.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/322553/","zbetcheckin"
 "322552","2020-03-08 00:07:29","http://jload08.xyz/download.php?file=3.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/322552/","zbetcheckin"
 "322551","2020-03-08 00:07:22","http://altoinfor.co/files/ORIBASE.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/322551/","zbetcheckin"
 "322550","2020-03-08 00:07:10","http://altoinfor.co/files/RTX.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/322550/","zbetcheckin"
@@ -33275,7 +33653,7 @@
 "322535","2020-03-07 23:25:09","https://pastebin.com/raw/AbiZMmpd","offline","malware_download","Encoded,exe,njRAT","https://urlhaus.abuse.ch/url/322535/","viql"
 "322534","2020-03-07 23:23:04","http://176.105.255.43/vps43.exe","offline","malware_download","exe,Trickbot","https://urlhaus.abuse.ch/url/322534/","p5yb34m"
 "322533","2020-03-07 23:22:10","https://pastebin.com/raw/Tdqsjigr","offline","malware_download","Encoded,exe,njRAT","https://urlhaus.abuse.ch/url/322533/","viql"
-"322532","2020-03-07 23:20:11","http://dx30.siweidaoxiang.com/lnwin10sjzl.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/322532/","zbetcheckin"
+"322532","2020-03-07 23:20:11","http://dx30.siweidaoxiang.com/lnwin10sjzl.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/322532/","zbetcheckin"
 "322531","2020-03-07 23:11:35","http://jload08.xyz/downfiles/5.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/322531/","p5yb34m"
 "322530","2020-03-07 23:11:25","http://jload08.xyz/downfiles/1.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/322530/","p5yb34m"
 "322529","2020-03-07 23:11:15","http://jload08.xyz/downfiles/2.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/322529/","p5yb34m"
@@ -33533,7 +33911,7 @@
 "322277","2020-03-07 00:04:05","http://182.112.57.2:60164/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/322277/","Gandylyan1"
 "322276","2020-03-06 23:57:03","https://pastebin.com/raw/WUjXL3Y2","offline","malware_download","meterpreter","https://urlhaus.abuse.ch/url/322276/","viql"
 "322275","2020-03-06 23:55:06","https://pastebin.com/raw/0gfQbN2p","offline","malware_download","meterpreter","https://urlhaus.abuse.ch/url/322275/","viql"
-"322274","2020-03-06 23:51:04","http://93.70.125.94:40883/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/322274/","zbetcheckin"
+"322274","2020-03-06 23:51:04","http://93.70.125.94:40883/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/322274/","zbetcheckin"
 "322273","2020-03-06 22:43:32","https://pastebin.com/raw/rPikkeG2","offline","malware_download","None","https://urlhaus.abuse.ch/url/322273/","JayTHL"
 "322272","2020-03-06 22:39:04","http://42.230.206.172:60073/Mozi.m","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/322272/","zbetcheckin"
 "322271","2020-03-06 22:25:04","https://pastebin.com/raw/GJfKSHFZ","offline","malware_download","meterpreter","https://urlhaus.abuse.ch/url/322271/","viql"
@@ -36880,7 +37258,7 @@
 "318910","2020-02-26 08:04:04","https://doc-0o-a0-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/e655hc66sh5akqbgi68q171ollmg7f39/1582703100000/02764085834106481668/*/1OlCxsolZCDyvo2fEdsCijVwCoHTbSygz?e=download","offline","malware_download","encrypted,NetWire,rat","https://urlhaus.abuse.ch/url/318910/","abuse_ch"
 "318909","2020-02-26 07:42:03","https://pastebin.com/raw/5a2y6kUc","offline","malware_download","Encoded,exe,njRAT","https://urlhaus.abuse.ch/url/318909/","viql"
 "318908","2020-02-26 07:34:04","https://doc-00-40-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/1sq85phfgvs2lrh4vjabb9jt9esk3e9m/1582700400000/16539084320342465001/*/1tqDHCz_38SidFvdvOclf6e1_P_1vUtt3?e=download","offline","malware_download","encrypted,Formbook","https://urlhaus.abuse.ch/url/318908/","abuse_ch"
-"318907","2020-02-26 07:32:10","http://kenareh-gostare-aras.ir/wp-admin/chi.exe","offline","malware_download","AgentTesla,exe,HawkEye","https://urlhaus.abuse.ch/url/318907/","abuse_ch"
+"318907","2020-02-26 07:32:10","http://kenareh-gostare-aras.ir/wp-admin/chi.exe","online","malware_download","AgentTesla,exe,HawkEye","https://urlhaus.abuse.ch/url/318907/","abuse_ch"
 "318906","2020-02-26 07:31:10","http://ppl.ac.id/komponen/account/dir/mn.doc","online","malware_download","doc","https://urlhaus.abuse.ch/url/318906/","abuse_ch"
 "318905","2020-02-26 07:30:07","http://jolly-saito-4993.sub.jp/JUN/JOJ.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/318905/","abuse_ch"
 "318904","2020-02-26 07:25:06","http://187.112.130.79:40894/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/318904/","zbetcheckin"
@@ -42423,7 +42801,7 @@
 "313330","2020-02-12 09:38:03","http://92.63.197.190/b.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/313330/","zbetcheckin"
 "313329","2020-02-12 09:33:06","http://23.249.164.109/office/invoice_11346.doc","offline","malware_download","RTF","https://urlhaus.abuse.ch/url/313329/","zbetcheckin"
 "313328","2020-02-12 09:33:04","http://92.63.197.190/11.exe","offline","malware_download","CoinMiner,exe,phorpiex","https://urlhaus.abuse.ch/url/313328/","zbetcheckin"
-"313327","2020-02-12 09:18:06","http://42.115.86.142:30999/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/313327/","zbetcheckin"
+"313327","2020-02-12 09:18:06","http://42.115.86.142:30999/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/313327/","zbetcheckin"
 "313326","2020-02-12 09:08:09","http://slot0.manews-relax.com/BraveIoT/spc","offline","malware_download","elf","https://urlhaus.abuse.ch/url/313326/","Gandylyan1"
 "313325","2020-02-12 09:08:07","http://slot0.manews-relax.com/BraveIoT/sh4","offline","malware_download","elf","https://urlhaus.abuse.ch/url/313325/","Gandylyan1"
 "313324","2020-02-12 09:08:05","http://slot0.manews-relax.com/BraveIoT/ppc","offline","malware_download","elf","https://urlhaus.abuse.ch/url/313324/","Gandylyan1"
@@ -42661,7 +43039,7 @@
 "313092","2020-02-11 16:29:05","https://pastebin.com/raw/P6b5bwTN","offline","malware_download","None","https://urlhaus.abuse.ch/url/313092/","JayTHL"
 "313091","2020-02-11 16:24:08","http://chnfsub2manglobalbusinessexytwosndy.duckdns.org/chfrnd2doc/regasm.exe","offline","malware_download","Formbook","https://urlhaus.abuse.ch/url/313091/","JAMESWT_MHT"
 "313090","2020-02-11 16:18:03","http://cermiamakmur.com/ii/remcosFIRE22_encrypted_25226C0.bin","offline","malware_download","encrypted,rat,RemcosRAT","https://urlhaus.abuse.ch/url/313090/","abuse_ch"
-"313089","2020-02-11 16:09:05","http://59.4.104.15:11453/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/313089/","zbetcheckin"
+"313089","2020-02-11 16:09:05","http://59.4.104.15:11453/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/313089/","zbetcheckin"
 "313088","2020-02-11 16:06:04","http://223.93.171.204:56473/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/313088/","Gandylyan1"
 "313087","2020-02-11 16:05:18","http://111.43.223.117:60325/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/313087/","Gandylyan1"
 "313086","2020-02-11 16:05:13","http://172.39.63.73:45399/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/313086/","Gandylyan1"
@@ -42812,7 +43190,7 @@
 "312941","2020-02-11 11:16:15","http://phoenixweb.in/meeee.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/312941/","zbetcheckin"
 "312940","2020-02-11 11:16:04","http://ftpbuzau.hi2.ro/resurse/cris/cristi.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/312940/","zbetcheckin"
 "312939","2020-02-11 11:13:05","http://chopa.mywire.org/nl.jpg","offline","malware_download","None","https://urlhaus.abuse.ch/url/312939/","abuse_ch"
-"312938","2020-02-11 10:56:07","http://112.156.36.178:44335/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/312938/","zbetcheckin"
+"312938","2020-02-11 10:56:07","http://112.156.36.178:44335/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/312938/","zbetcheckin"
 "312937","2020-02-11 10:44:03","http://107.189.10.150/eg/1222896.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/312937/","abuse_ch"
 "312936","2020-02-11 10:11:11","http://playtech.id/ji/bebe.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/312936/","abuse_ch"
 "312935","2020-02-11 10:06:23","http://112.17.78.210:37632/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/312935/","Gandylyan1"
@@ -44880,7 +45258,7 @@
 "310866","2020-02-07 10:01:35","http://officewindowssecurityfirewallopen.duckdns.org/big/svch.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/310866/","vxvault"
 "310865","2020-02-07 09:53:33","https://pastebin.com/raw/593Bq9NS","offline","malware_download","None","https://urlhaus.abuse.ch/url/310865/","JayTHL"
 "310864","2020-02-07 09:52:18","http://carpetessex.com/files/micc.exe","offline","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/310864/","vxvault"
-"310863","2020-02-07 09:51:45","http://www.lapurisima.cl/scv.exe","offline","malware_download","AsyncRAT,AveMariaRAT,exe,NanoCore,njRAT,QuasarRAT,RevengeRAT","https://urlhaus.abuse.ch/url/310863/","abuse_ch"
+"310863","2020-02-07 09:51:45","http://www.lapurisima.cl/scv.exe","online","malware_download","AsyncRAT,AveMariaRAT,exe,NanoCore,njRAT,QuasarRAT,RevengeRAT","https://urlhaus.abuse.ch/url/310863/","abuse_ch"
 "310862","2020-02-07 09:51:09","https://download-cdn.com/download.php","offline","malware_download","get2,ta505,xls","https://urlhaus.abuse.ch/url/310862/","ffforward"
 "310861","2020-02-07 09:50:34","https://fr.dl.download-cdn.com/download.php","offline","malware_download","get2,ta505,xls","https://urlhaus.abuse.ch/url/310861/","ffforward"
 "310860","2020-02-07 09:50:00","https://de.dl.download-cdn.com/download.php","offline","malware_download","get2,ta505,xls","https://urlhaus.abuse.ch/url/310860/","ffforward"
@@ -45855,7 +46233,7 @@
 "309887","2020-02-06 09:04:51","http://182.127.184.218:37989/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/309887/","Gandylyan1"
 "309886","2020-02-06 09:04:48","http://113.25.43.71:47216/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/309886/","Gandylyan1"
 "309885","2020-02-06 09:04:44","http://123.10.25.39:52851/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/309885/","Gandylyan1"
-"309884","2020-02-06 09:04:39","http://186.73.188.132:59038/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/309884/","Gandylyan1"
+"309884","2020-02-06 09:04:39","http://186.73.188.132:59038/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/309884/","Gandylyan1"
 "309883","2020-02-06 09:04:16","http://49.70.10.213:53701/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/309883/","Gandylyan1"
 "309882","2020-02-06 09:04:12","http://111.42.66.151:51987/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/309882/","Gandylyan1"
 "309881","2020-02-06 09:04:08","http://111.43.223.97:58420/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/309881/","Gandylyan1"
@@ -60999,7 +61377,7 @@
 "294688","2020-01-22 10:04:44","http://49.115.222.168:50902/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/294688/","Gandylyan1"
 "294687","2020-01-22 10:04:38","http://59.88.51.145:54594/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/294687/","Gandylyan1"
 "294686","2020-01-22 10:04:35","http://172.39.23.216:56644/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/294686/","Gandylyan1"
-"294685","2020-01-22 10:04:03","http://222.243.14.67:60796/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/294685/","Gandylyan1"
+"294685","2020-01-22 10:04:03","http://222.243.14.67:60796/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/294685/","Gandylyan1"
 "294684","2020-01-22 10:03:57","http://116.114.95.118:43124/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/294684/","Gandylyan1"
 "294683","2020-01-22 10:03:53","http://111.42.103.55:49997/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/294683/","Gandylyan1"
 "294682","2020-01-22 10:03:48","http://112.27.91.247:57054/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/294682/","Gandylyan1"
@@ -66380,7 +66758,7 @@
 "289285","2020-01-15 18:26:11","http://cdn.timebuyer.org/wp-includes/y3tzjo/","offline","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/289285/","Cryptolaemus1"
 "289284","2020-01-15 18:26:08","https://khanhbuiads.com/wp-includes/vaogzul/","offline","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/289284/","Cryptolaemus1"
 "289283","2020-01-15 18:25:14","http://daihatsumurahcikarang.com/wp/hEu/","offline","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/289283/","Cryptolaemus1"
-"289282","2020-01-15 18:25:10","http://openarts.com.br/ngt/0sjhd/","offline","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/289282/","Cryptolaemus1"
+"289282","2020-01-15 18:25:10","http://openarts.com.br/ngt/0sjhd/","online","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/289282/","Cryptolaemus1"
 "289281","2020-01-15 18:25:06","http://paginas.constructorajksalcedo.com/jk/C/","offline","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/289281/","Cryptolaemus1"
 "289280","2020-01-15 18:24:13","http://quantumneurology.com/finance/swift/m-500428033-516-pu45x-fciaj9/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/289280/","zbetcheckin"
 "289279","2020-01-15 18:24:07","http://arafatourist.com/wp-includes/closed-box/additional-LuO2Cqzv-2fBL80YnpRuSQt/996864532253-Sh7mzXV6P/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/289279/","Cryptolaemus1"
@@ -66549,7 +66927,7 @@
 "289096","2020-01-15 14:21:07","http://thanglongosc.com.vn/wp-includes/eTrac/wsk2qud/od874-472775993-7670-2iw8onmhuh-zw64ao7d/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/289096/","spamhaus"
 "289095","2020-01-15 14:16:21","http://mayxaydunghongha.com.vn/wp-includes/DOC/kkfmgcp7u3wq/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/289095/","spamhaus"
 "289094","2020-01-15 14:14:05","http://www.sarvdharmektautsavsamiti.com/ims/PSGFQD3I/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/289094/","spamhaus"
-"289093","2020-01-15 14:11:15","http://openarts.com.br/ngt/5719/y12rof4ie7d/yj3dps-567994663-253984-09fhr502jnf-exzrpncde/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/289093/","Cryptolaemus1"
+"289093","2020-01-15 14:11:15","http://openarts.com.br/ngt/5719/y12rof4ie7d/yj3dps-567994663-253984-09fhr502jnf-exzrpncde/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/289093/","Cryptolaemus1"
 "289092","2020-01-15 14:11:10","http://abba.com.vn/wp-includes/report/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/289092/","spamhaus"
 "289091","2020-01-15 14:10:24","http://111.43.223.100:50710/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/289091/","Gandylyan1"
 "289090","2020-01-15 14:10:04","http://216.57.119.59:42557/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/289090/","Gandylyan1"
@@ -68866,7 +69244,7 @@
 "286766","2020-01-12 22:03:11","http://222.83.55.188:34243/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/286766/","Gandylyan1"
 "286765","2020-01-12 22:03:06","http://116.114.95.180:60290/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/286765/","Gandylyan1"
 "286764","2020-01-12 22:03:05","http://111.43.223.147:37067/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/286764/","Gandylyan1"
-"286763","2020-01-12 21:12:16","http://e.dangeana.com/pubg/union_plugin_8fc1c5fe8ba07db6cc67302446c6607b_f3e8c217.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/286763/","zbetcheckin"
+"286763","2020-01-12 21:12:16","http://e.dangeana.com/pubg/union_plugin_8fc1c5fe8ba07db6cc67302446c6607b_f3e8c217.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/286763/","zbetcheckin"
 "286762","2020-01-12 21:04:00","http://113.133.224.126:48679/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/286762/","Gandylyan1"
 "286761","2020-01-12 21:03:57","http://221.160.177.112:2185/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/286761/","Gandylyan1"
 "286760","2020-01-12 21:03:52","http://111.42.102.80:48647/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/286760/","Gandylyan1"
@@ -74851,7 +75229,7 @@
 "280711","2019-12-29 02:23:54","http://172.36.33.234:51454/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/280711/","Gandylyan1"
 "280710","2019-12-29 02:23:22","http://116.114.95.244:58889/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/280710/","Gandylyan1"
 "280709","2019-12-29 02:23:19","http://36.83.194.27:38212/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/280709/","Gandylyan1"
-"280708","2019-12-29 02:23:11","http://1.246.223.49:1646/Mozi.m","online","malware_download","elf","https://urlhaus.abuse.ch/url/280708/","Gandylyan1"
+"280708","2019-12-29 02:23:11","http://1.246.223.49:1646/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/280708/","Gandylyan1"
 "280707","2019-12-29 02:23:08","http://211.137.225.142:42210/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/280707/","Gandylyan1"
 "280706","2019-12-29 02:23:04","http://112.17.158.193:47980/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/280706/","Gandylyan1"
 "280705","2019-12-29 02:09:24","http://111.43.223.172:52585/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/280705/","Gandylyan1"
@@ -75213,7 +75591,7 @@
 "280349","2019-12-28 12:16:04","http://116.114.95.72:53841/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/280349/","Gandylyan1"
 "280348","2019-12-28 12:15:45","http://117.95.220.140:52581/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/280348/","Gandylyan1"
 "280347","2019-12-28 12:15:41","http://221.210.211.25:37881/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/280347/","Gandylyan1"
-"280346","2019-12-28 12:15:37","http://173.15.162.151:4010/Mozi.m","online","malware_download","elf","https://urlhaus.abuse.ch/url/280346/","Gandylyan1"
+"280346","2019-12-28 12:15:37","http://173.15.162.151:4010/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/280346/","Gandylyan1"
 "280345","2019-12-28 12:15:34","http://115.206.0.29:42075/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/280345/","Gandylyan1"
 "280344","2019-12-28 12:15:27","http://111.42.66.12:38257/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/280344/","Gandylyan1"
 "280343","2019-12-28 12:15:23","http://110.18.194.236:49163/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/280343/","Gandylyan1"
@@ -75347,7 +75725,7 @@
 "280214","2019-12-27 16:32:37","https://pastebin.com/raw/vV7sFQWP","offline","malware_download","None","https://urlhaus.abuse.ch/url/280214/","JayTHL"
 "280213","2019-12-27 16:31:56","https://pastebin.com/raw/hDBga4sM","offline","malware_download","None","https://urlhaus.abuse.ch/url/280213/","JayTHL"
 "280212","2019-12-27 16:15:20","https://pastebin.com/raw/fKD6JMxr","offline","malware_download","CobaltStrike,powershell","https://urlhaus.abuse.ch/url/280212/","abuse_ch"
-"280211","2019-12-27 15:14:06","http://myonlinepokiesblog.com/license.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/280211/","abuse_ch"
+"280211","2019-12-27 15:14:06","http://myonlinepokiesblog.com/license.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/280211/","abuse_ch"
 "280210","2019-12-27 15:13:03","http://centre-de-conduite-roannais.com/wp-content/uploads/2019/12/last/444444.png","offline","malware_download","exe,geofenced,qbot,Quakbot,USA","https://urlhaus.abuse.ch/url/280210/","anonymous"
 "280209","2019-12-27 15:12:15","https://re365.com/wp-content/uploads/2019/12/last/85944289/85944289.zip","offline","malware_download","geofenced,qbot,USA,vbs,zip","https://urlhaus.abuse.ch/url/280209/","anonymous"
 "280208","2019-12-27 15:12:07","https://re365.com/wp-content/uploads/2019/12/last/00021920.zip","offline","malware_download","geofenced,qbot,USA,vbs,zip","https://urlhaus.abuse.ch/url/280208/","anonymous"
@@ -76004,7 +76382,7 @@
 "279556","2019-12-27 03:36:06","http://lincolnaward.org/wp-content/themes/genesis/license.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/279556/","zbetcheckin"
 "279555","2019-12-27 03:32:13","http://www.lincolnaward.org/wp-content/themes/genesis/license.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/279555/","zbetcheckin"
 "279554","2019-12-27 03:32:08","http://lebedyn.info/wp-content/themes/genesis/license.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/279554/","zbetcheckin"
-"279553","2019-12-27 03:23:04","http://www.lebedyn.info/wp-content/themes/genesis/license.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/279553/","zbetcheckin"
+"279553","2019-12-27 03:23:04","http://www.lebedyn.info/wp-content/themes/genesis/license.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/279553/","zbetcheckin"
 "279552","2019-12-27 03:19:06","http://meconservationschool.org/wp-content/themes/genesis/readme.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/279552/","zbetcheckin"
 "279551","2019-12-27 03:19:03","http://louisbenton.com/wp-content/themes/genesis/license.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/279551/","zbetcheckin"
 "279550","2019-12-27 02:56:03","http://31.146.124.107:41967","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/279550/","zbetcheckin"
@@ -76298,13 +76676,13 @@
 "279262","2019-12-26 23:33:50","https://dev.sebpo.net/aiim/Scan794626.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279262/","anonymous"
 "279261","2019-12-26 23:33:47","https://dev.sebpo.net/aiim/Scan787778.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279261/","anonymous"
 "279260","2019-12-26 23:33:44","http://visagepk.com/Scan620141.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279260/","anonymous"
-"279259","2019-12-26 23:33:41","http://ultimatelamborghiniexperience.com/Scan519714.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279259/","anonymous"
+"279259","2019-12-26 23:33:41","http://ultimatelamborghiniexperience.com/Scan519714.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279259/","anonymous"
 "279258","2019-12-26 23:33:39","http://ultimatelamborghiniexperience.com/Scan516977.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279258/","anonymous"
 "279257","2019-12-26 23:33:38","http://ultimatelamborghiniexperience.com/Scan514529.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279257/","anonymous"
 "279256","2019-12-26 23:33:35","http://www.zoeydeutchweb.com/Scan719307.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279256/","anonymous"
 "279255","2019-12-26 23:33:33","http://www.zoeydeutchweb.com/Scan693492.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279255/","anonymous"
 "279254","2019-12-26 23:33:32","http://www.zoeydeutchweb.com/Scan681933.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279254/","anonymous"
-"279253","2019-12-26 23:33:30","http://www.wbkmt.com/Scan568515.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279253/","anonymous"
+"279253","2019-12-26 23:33:30","http://www.wbkmt.com/Scan568515.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279253/","anonymous"
 "279252","2019-12-26 23:33:28","http://www.wbkmt.com/Scan567495.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279252/","anonymous"
 "279251","2019-12-26 23:33:26","http://www.wbkmt.com/Scan544303.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279251/","anonymous"
 "279250","2019-12-26 23:33:24","http://www.voyantvision.net/Scan674251.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279250/","anonymous"
@@ -76313,7 +76691,7 @@
 "279247","2019-12-26 23:33:17","http://www.vasoccernews.com/Scan538882.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279247/","anonymous"
 "279246","2019-12-26 23:33:15","http://www.vasoccernews.com/Scan537263.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279246/","anonymous"
 "279245","2019-12-26 23:33:13","http://www.urgentmessage.org/Scan618358.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279245/","anonymous"
-"279244","2019-12-26 23:33:11","http://www.urgentmessage.org/Scan592993.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279244/","anonymous"
+"279244","2019-12-26 23:33:11","http://www.urgentmessage.org/Scan592993.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279244/","anonymous"
 "279243","2019-12-26 23:33:08","http://www.ultimatepointsstore.com/Scan582389.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279243/","anonymous"
 "279242","2019-12-26 23:33:06","http://www.ultimatepointsstore.com/Scan580348.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279242/","anonymous"
 "279241","2019-12-26 23:33:05","http://www.ultimatepointsstore.com/Scan570071.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279241/","anonymous"
@@ -76323,8 +76701,8 @@
 "279237","2019-12-26 23:32:56","http://www.lincolnaward.org/Scan344198.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279237/","anonymous"
 "279236","2019-12-26 23:32:54","http://www.lincolnaward.org/Scan343927.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279236/","anonymous"
 "279235","2019-12-26 23:32:43","http://www.lebedyn.info/Scan422674.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279235/","anonymous"
-"279234","2019-12-26 23:32:41","http://www.lebedyn.info/Scan425768.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279234/","anonymous"
-"279233","2019-12-26 23:32:39","http://www.lebedyn.info/Scan425026.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279233/","anonymous"
+"279234","2019-12-26 23:32:41","http://www.lebedyn.info/Scan425768.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279234/","anonymous"
+"279233","2019-12-26 23:32:39","http://www.lebedyn.info/Scan425026.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279233/","anonymous"
 "279232","2019-12-26 23:32:37","http://www.intoxicated-twilight.com/Scan272806.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279232/","anonymous"
 "279231","2019-12-26 23:32:35","http://www.intoxicated-twilight.com/Scan253297.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279231/","anonymous"
 "279230","2019-12-26 23:32:33","http://www.ibr-mag.com/Scan343596.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279230/","anonymous"
@@ -76362,12 +76740,12 @@
 "279198","2019-12-26 23:30:43","http://myhood.cl/Scan505329.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279198/","anonymous"
 "279197","2019-12-26 23:30:40","http://myhood.cl/Scan495082.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279197/","anonymous"
 "279196","2019-12-26 23:30:37","http://mediamatkat.fi/Scan470798.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279196/","anonymous"
-"279195","2019-12-26 23:30:32","http://mediamatkat.fi/Scan468654.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279195/","anonymous"
+"279195","2019-12-26 23:30:32","http://mediamatkat.fi/Scan468654.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279195/","anonymous"
 "279194","2019-12-26 23:30:29","http://mediamatkat.fi/Scan457405.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279194/","anonymous"
 "279193","2019-12-26 23:30:26","http://lobstermentours.com/Scan37712.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279193/","anonymous"
 "279192","2019-12-26 23:30:23","http://lobstermentours.com/Scan363358.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279192/","anonymous"
 "279191","2019-12-26 23:30:19","http://jyv.fi/Scan320062.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279191/","anonymous"
-"279190","2019-12-26 23:30:16","http://jyv.fi/Scan315318.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279190/","anonymous"
+"279190","2019-12-26 23:30:16","http://jyv.fi/Scan315318.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279190/","anonymous"
 "279189","2019-12-26 23:30:13","http://jyv.fi/Scan312111.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279189/","anonymous"
 "279188","2019-12-26 23:30:10","http://jarilindholm.com/Scan340839.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279188/","anonymous"
 "279187","2019-12-26 23:30:01","http://jarilindholm.com/Scan326716.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279187/","anonymous"
@@ -80598,7 +80976,7 @@
 "274648","2019-12-21 06:58:41","http://110.155.6.9:51060/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/274648/","Gandylyan1"
 "274647","2019-12-21 06:58:09","http://176.113.161.64:35024/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/274647/","Gandylyan1"
 "274646","2019-12-21 06:58:07","http://221.210.211.15:33344/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/274646/","Gandylyan1"
-"274645","2019-12-21 06:58:04","http://1.246.223.125:2634/Mozi.m","online","malware_download","elf","https://urlhaus.abuse.ch/url/274645/","Gandylyan1"
+"274645","2019-12-21 06:58:04","http://1.246.223.125:2634/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/274645/","Gandylyan1"
 "274644","2019-12-21 06:57:58","http://42.228.122.79:45903/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/274644/","Gandylyan1"
 "274643","2019-12-21 06:57:53","http://115.58.56.47:44246/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/274643/","Gandylyan1"
 "274642","2019-12-21 06:57:51","http://182.126.0.118:55303/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/274642/","Gandylyan1"
@@ -81503,7 +81881,7 @@
 "273740","2019-12-20 07:34:52","http://116.114.95.168:60959/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/273740/","Gandylyan1"
 "273739","2019-12-20 07:34:49","http://111.42.66.24:55190/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/273739/","Gandylyan1"
 "273738","2019-12-20 07:34:41","http://27.22.230.221:39187/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/273738/","Gandylyan1"
-"273737","2019-12-20 07:34:34","http://176.113.161.136:60133/Mozi.m","online","malware_download","elf","https://urlhaus.abuse.ch/url/273737/","Gandylyan1"
+"273737","2019-12-20 07:34:34","http://176.113.161.136:60133/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/273737/","Gandylyan1"
 "273736","2019-12-20 07:34:02","http://176.113.161.72:50651/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/273736/","Gandylyan1"
 "273735","2019-12-20 07:34:00","http://111.42.103.28:32779/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/273735/","Gandylyan1"
 "273734","2019-12-20 07:33:53","http://115.55.123.56:52543/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/273734/","Gandylyan1"
@@ -82444,7 +82822,7 @@
 "272795","2019-12-19 12:38:13","http://172.36.52.129:34459/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/272795/","Gandylyan1"
 "272794","2019-12-19 12:37:42","http://113.25.52.121:36214/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/272794/","Gandylyan1"
 "272793","2019-12-19 12:37:39","http://172.36.10.61:48787/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/272793/","Gandylyan1"
-"272792","2019-12-19 12:37:07","http://176.113.161.89:33825/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/272792/","Gandylyan1"
+"272792","2019-12-19 12:37:07","http://176.113.161.89:33825/Mozi.m","online","malware_download","elf","https://urlhaus.abuse.ch/url/272792/","Gandylyan1"
 "272791","2019-12-19 12:37:05","http://49.116.60.244:55669/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/272791/","Gandylyan1"
 "272790","2019-12-19 12:37:00","http://59.98.116.212:33222/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/272790/","Gandylyan1"
 "272789","2019-12-19 12:36:27","http://120.70.155.100:42247/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/272789/","Gandylyan1"
@@ -82736,7 +83114,7 @@
 "272502","2019-12-19 06:08:04","http://112.17.78.146:45025/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/272502/","Gandylyan1"
 "272501","2019-12-19 06:07:50","http://111.43.223.149:49969/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/272501/","Gandylyan1"
 "272500","2019-12-19 06:07:39","http://176.113.161.68:48252/Mozi.m","online","malware_download","elf","https://urlhaus.abuse.ch/url/272500/","Gandylyan1"
-"272499","2019-12-19 06:07:37","http://1.246.222.234:3030/Mozi.m","online","malware_download","elf","https://urlhaus.abuse.ch/url/272499/","Gandylyan1"
+"272499","2019-12-19 06:07:37","http://1.246.222.234:3030/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/272499/","Gandylyan1"
 "272498","2019-12-19 06:07:33","http://24.234.131.201:50840/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/272498/","Gandylyan1"
 "272497","2019-12-19 06:07:29","http://221.210.211.12:32777/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/272497/","Gandylyan1"
 "272496","2019-12-19 06:07:26","http://218.31.253.157:38604/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/272496/","Gandylyan1"
@@ -84825,7 +85203,7 @@
 "270369","2019-12-17 06:03:05","http://trad-dev.dyntech.com.ar/wp-content/Documentation/jngo52/3z0kc7-869507-991403009-s6lnehkb2-gtvucb/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/270369/","spamhaus"
 "270368","2019-12-17 06:02:07","http://glexhotel.com.my/cgi-bin/sGHm-sfHW-67/","offline","malware_download","doc,emotet,epoch3,heodo","https://urlhaus.abuse.ch/url/270368/","spamhaus"
 "270367","2019-12-17 05:58:04","http://servicemanager.net.in/wp-admin/LLC/wdqebpqj/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/270367/","spamhaus"
-"270366","2019-12-17 05:55:04","http://ztqsc.com.cn/wp-admin/attachments/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/270366/","spamhaus"
+"270366","2019-12-17 05:55:04","http://ztqsc.com.cn/wp-admin/attachments/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/270366/","spamhaus"
 "270365","2019-12-17 05:53:03","http://aviationinsiderjobs.com/wp-includes/RjLWsBm299/","offline","malware_download","doc,emotet,epoch3,heodo","https://urlhaus.abuse.ch/url/270365/","spamhaus"
 "270364","2019-12-17 05:49:05","http://hondahatinh.vn/engl/Document/b4rwd4f-03692-646610219-obiiv-u202irz6e1/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/270364/","spamhaus"
 "270363","2019-12-17 05:45:05","https://zalfalova.com/wp-includes/INC/os8gal-6421552-97-plnd-ax4eucclok/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/270363/","spamhaus"
@@ -85133,7 +85511,7 @@
 "270057","2019-12-16 21:33:04","http://felixmakjr.com/wp-content/z9782/","offline","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/270057/","unixronin"
 "270056","2019-12-16 21:30:04","https://panchavatiayurvedic.com/FILE/isc5bzd9ycpf/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/270056/","spamhaus"
 "270055","2019-12-16 21:25:04","https://technologyadvantages.000webhostapp.com/wp-admin/payment/l68ye9r5nl/x17-91072-45-57r3shhfp6-2h03ekdrpsq/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/270055/","spamhaus"
-"270054","2019-12-16 21:24:06","http://luyalu.net/seo/zSdcdIG/","online","malware_download","doc,emotet,epoch3,heodo","https://urlhaus.abuse.ch/url/270054/","spamhaus"
+"270054","2019-12-16 21:24:06","http://luyalu.net/seo/zSdcdIG/","offline","malware_download","doc,emotet,epoch3,heodo","https://urlhaus.abuse.ch/url/270054/","spamhaus"
 "270053","2019-12-16 21:23:04","https://releaviate.com/wp-includes/kl99qu0o52q-3tmd29lair-array/ibxval79o70-wpj-space/evn-9y9sz8tts2/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/270053/","Cryptolaemus1"
 "270052","2019-12-16 21:22:04","https://salsa.es/wp-content/40122106485816/uodpt-4392-334348366-jgtte-gzvn7/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/270052/","spamhaus"
 "270047","2019-12-16 21:16:04","http://emgi.com.br/wp-includes/invoice/ovxub-882437616-51-p2cbq8brnvg-164m/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/270047/","spamhaus"
@@ -85967,7 +86345,7 @@
 "269212","2019-12-15 16:36:12","http://46.33.232.146:9667/.i","offline","malware_download","None","https://urlhaus.abuse.ch/url/269212/","anonymous"
 "269211","2019-12-15 16:36:07","http://49.82.8.106:35025/Mozi.m","offline","malware_download","None","https://urlhaus.abuse.ch/url/269211/","anonymous"
 "269210","2019-12-15 16:09:02","https://chasem2020.com/0589072/personal-module/interior-m81vm9y8ohsi-92foajx/g2ah445o8-y352t5ys1942t","offline","malware_download","doc","https://urlhaus.abuse.ch/url/269210/","zbetcheckin"
-"269209","2019-12-15 15:36:03","http://wakecar.cn/wp-admin/open_0VcBT5m_4ZNiMTyXs/security_warehouse/ydluyc7rxzma0yoa_u0x4y8492v3","online","malware_download","doc","https://urlhaus.abuse.ch/url/269209/","zbetcheckin"
+"269209","2019-12-15 15:36:03","http://wakecar.cn/wp-admin/open_0VcBT5m_4ZNiMTyXs/security_warehouse/ydluyc7rxzma0yoa_u0x4y8492v3","offline","malware_download","doc","https://urlhaus.abuse.ch/url/269209/","zbetcheckin"
 "269208","2019-12-15 14:16:16","http://45.32.188.83/xdll/19.sh4","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/269208/","zbetcheckin"
 "269207","2019-12-15 14:16:12","http://45.32.188.83/xdll/19.arm7","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/269207/","zbetcheckin"
 "269206","2019-12-15 14:16:09","http://89.34.27.36/servicecheck.sh4","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/269206/","zbetcheckin"
@@ -86471,7 +86849,7 @@
 "268708","2019-12-13 22:54:03","http://israelwork.info/metrika/dr6ibrnjcn/47tluqldsi-9251050444-29632-rds5m2fv-0ncb/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/268708/","spamhaus"
 "268707","2019-12-13 22:53:03","http://tedet.or.th/Register/rNC/","offline","malware_download","doc,emotet,epoch3,heodo","https://urlhaus.abuse.ch/url/268707/","spamhaus"
 "268706","2019-12-13 22:50:05","http://www.expatressources.com/wp-includes/LLC/viinss-730148-566732484-upe3t3bjbu-912gyonmt/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/268706/","spamhaus"
-"268705","2019-12-13 22:47:05","http://ztqsc.com.cn/wp-admin/closed_YqdZnM_36X9qgz/5pd_pytyw8tn6_r06yzlue_t0opa/XQBmSb_8vLunJvmlJ8ic7/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/268705/","zbetcheckin"
+"268705","2019-12-13 22:47:05","http://ztqsc.com.cn/wp-admin/closed_YqdZnM_36X9qgz/5pd_pytyw8tn6_r06yzlue_t0opa/XQBmSb_8vLunJvmlJ8ic7/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/268705/","zbetcheckin"
 "268704","2019-12-13 22:46:03","http://nqtropicalpools.com.au/cgi-bin/PXEKE/","offline","malware_download","doc,emotet,epoch3,heodo","https://urlhaus.abuse.ch/url/268704/","spamhaus"
 "268703","2019-12-13 22:44:04","https://pmlsdbs.ac.in/pdf/public/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/268703/","spamhaus"
 "268702","2019-12-13 22:43:03","https://deliciouskitchen.in/wp-includes/OCfN/","offline","malware_download","doc,emotet,epoch3,heodo","https://urlhaus.abuse.ch/url/268702/","spamhaus"
@@ -87251,7 +87629,7 @@
 "267916","2019-12-12 22:13:37","https://www.maruay99.com/wp-admin/private_module/corporate_space/66710039541_MKbaR7ehGjPW1MHk/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/267916/","Cryptolaemus1"
 "267915","2019-12-12 22:13:30","http://abm-jsc.ru/backup__/closed_92468726_CyVAE9q3d/verified_space/qbpovbv2q8_1v9s/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/267915/","Cryptolaemus1"
 "267914","2019-12-12 22:13:25","http://ninthwave.us/physics/wp-content/uploads/JmVg_ZCybZb1E_box/test_cloud/892920_845l8t5w58v/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/267914/","Cryptolaemus1"
-"267913","2019-12-12 22:13:15","http://oknoplastik.sk/index_soubory/common_sector/external_area/61551354147_t4d0KY73JJyWFfGY/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/267913/","Cryptolaemus1"
+"267913","2019-12-12 22:13:15","http://oknoplastik.sk/index_soubory/common_sector/external_area/61551354147_t4d0KY73JJyWFfGY/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/267913/","Cryptolaemus1"
 "267912","2019-12-12 22:13:02","https://sahilpanindre.000webhostapp.com/wp-admin/available-sector/individual-forum/oqAGLdoga2H-vdwdvn3s58rKJu/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/267912/","Cryptolaemus1"
 "267911","2019-12-12 22:12:46","http://arterihealth.id/wp-includes/private-935670-rdi4P4dw7pkUrw/2da3h6y0vnoo1-eia-space/50685921510-cIuiuKt2eMdk/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/267911/","Cryptolaemus1"
 "267910","2019-12-12 22:12:08","http://ds-al.er42.org/error/ttqxWV/","offline","malware_download","doc,emotet,epoch3,heodo","https://urlhaus.abuse.ch/url/267910/","spamhaus"
@@ -87803,7 +88181,7 @@
 "267361","2019-12-12 00:12:04","https://test.budresurs.org.ua/wp-content/eTrac/klmwfr38h/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/267361/","Cryptolaemus1"
 "267360","2019-12-12 00:10:03","http://www.firepulsesports.com/wp-content/uploads/browse/gvo4rjkizx/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/267360/","spamhaus"
 "267359","2019-12-12 00:05:06","http://tuvandoanhnghiep.org/fckeditor/8115500601557/mw2qjwduk/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/267359/","spamhaus"
-"267358","2019-12-12 00:04:05","http://wakecar.cn/wp-admin/DcTwr/","online","malware_download","doc,emotet,epoch3,heodo","https://urlhaus.abuse.ch/url/267358/","spamhaus"
+"267358","2019-12-12 00:04:05","http://wakecar.cn/wp-admin/DcTwr/","offline","malware_download","doc,emotet,epoch3,heodo","https://urlhaus.abuse.ch/url/267358/","spamhaus"
 "267357","2019-12-12 00:01:06","https://eldodesign.com/eldo/OCT/kcqls08sfe0/nfbr3j4-3517-4607-bile-2jndi2/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/267357/","spamhaus"
 "267356","2019-12-11 23:56:05","http://corp4.site/tt.doc","offline","malware_download","doc","https://urlhaus.abuse.ch/url/267356/","zbetcheckin"
 "267355","2019-12-11 23:56:04","http://karnatakatoursandtravels.com/cli/public/t9yrj68i3c/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/267355/","spamhaus"
@@ -90299,7 +90677,7 @@
 "264650","2019-12-07 01:38:48","https://kewlpets.ro/wp-admin/attachments/zw875ncf82cy/uuvd1-0321500-3462-vof3on48-96v1124o/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/264650/","Cryptolaemus1"
 "264649","2019-12-07 01:38:46","https://codexia.axess.fr/wp-content/LLC/apto1qx9w6tp/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/264649/","Cryptolaemus1"
 "264648","2019-12-07 01:38:40","http://zews.icu/wp-content/wvjip2py0/hcbf-745576456-02385698-gl96ryhpx-l1yvlp8f/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/264648/","Cryptolaemus1"
-"264647","2019-12-07 01:38:38","http://wakecar.cn/wp-admin/Document/f2fbip-1961-97730468-mbhy3epfnr-atrao/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/264647/","Cryptolaemus1"
+"264647","2019-12-07 01:38:38","http://wakecar.cn/wp-admin/Document/f2fbip-1961-97730468-mbhy3epfnr-atrao/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/264647/","Cryptolaemus1"
 "264646","2019-12-07 01:38:33","http://rayhanad.com/wp-includes/browse/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/264646/","Cryptolaemus1"
 "264645","2019-12-07 01:38:31","http://altfixsolutions.com.ph/astean/docs/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/264645/","Cryptolaemus1"
 "264644","2019-12-07 01:38:24","http://shoeshouse.in/wp-content/52807875809065/7yk43uio-478248760-4321496-tuflffh-5bf5no1dfv/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/264644/","Cryptolaemus1"
@@ -102776,7 +103154,7 @@
 "251471","2019-11-04 18:53:03","http://149.154.67.19/tin.png","offline","malware_download","exe,Trickbot","https://urlhaus.abuse.ch/url/251471/","abuse_ch"
 "251469","2019-11-04 18:52:04","http://51.68.128.171/C/8704100.jpg","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/251469/","abuse_ch"
 "251468","2019-11-04 18:24:03","http://b2as.fr/temp/zq/","offline","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/251468/","Cryptolaemus1"
-"251466","2019-11-04 17:58:05","http://185.5.229.8:26540/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/251466/","zbetcheckin"
+"251466","2019-11-04 17:58:05","http://185.5.229.8:26540/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/251466/","zbetcheckin"
 "251464","2019-11-04 17:48:05","http://windows.firewall-gateway.de/bigsss/vbc.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/251464/","zbetcheckin"
 "251463","2019-11-04 17:44:56","http://v9.monerov8.com:443/gx.exe","offline","malware_download","CoinMiner,exe","https://urlhaus.abuse.ch/url/251463/","zbetcheckin"
 "251462","2019-11-04 17:44:06","http://45.80.148.163/images/rear2.png","offline","malware_download","exe,Trickbot","https://urlhaus.abuse.ch/url/251462/","malware_traffic"
@@ -103538,7 +103916,7 @@
 "250652","2019-11-01 10:12:05","http://drearncosmetics.net/waz.exe","offline","malware_download","AveMariaRAT,exe","https://urlhaus.abuse.ch/url/250652/","zbetcheckin"
 "250651","2019-11-01 08:29:04","http://asdasgs.ug/asdf.EXE","offline","malware_download","AZORult,exe,NetWire","https://urlhaus.abuse.ch/url/250651/","zbetcheckin"
 "250650","2019-11-01 08:28:09","http://mkontakt.az/boy.exe","offline","malware_download","exe,Phoenix","https://urlhaus.abuse.ch/url/250650/","zbetcheckin"
-"250648","2019-11-01 08:28:04","http://intersel-idf.org/ecrire/balise/w2.exe","offline","malware_download","exe,Pony","https://urlhaus.abuse.ch/url/250648/","zbetcheckin"
+"250648","2019-11-01 08:28:04","http://intersel-idf.org/ecrire/balise/w2.exe","online","malware_download","exe,Pony","https://urlhaus.abuse.ch/url/250648/","zbetcheckin"
 "250647","2019-11-01 08:24:05","http://185.212.47.150/temp.ppc","offline","malware_download","elf","https://urlhaus.abuse.ch/url/250647/","zbetcheckin"
 "250646","2019-11-01 08:24:04","http://qwsfdxv.ru/rgvfdbcvbvcb.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/250646/","zbetcheckin"
 "250645","2019-11-01 08:19:05","http://wood-expert.net/templates/woodexpert/js/1c.jpg","online","malware_download","exe,Troldesh","https://urlhaus.abuse.ch/url/250645/","zbetcheckin"
@@ -103566,9 +103944,9 @@
 "250623","2019-11-01 06:39:07","http://sdfgdsf.ru/pcvxbkjhfsd.EXE","offline","malware_download","exe,NetWire","https://urlhaus.abuse.ch/url/250623/","abuse_ch"
 "250622","2019-11-01 06:39:04","http://sdfgdsf.ru/nsdvxcvbxcv.exe","offline","malware_download","exe,NetWire","https://urlhaus.abuse.ch/url/250622/","abuse_ch"
 "250621","2019-11-01 06:38:03","https://cdn.discordapp.com/attachments/626154810466369566/626873398651256832/0caaefecf2d9dd70.exe","offline","malware_download","njRAT","https://urlhaus.abuse.ch/url/250621/","JayTHL"
-"250620","2019-11-01 06:19:03","http://intersel-idf.org/local/cache-js/crimgroup.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/250620/","zbetcheckin"
+"250620","2019-11-01 06:19:03","http://intersel-idf.org/local/cache-js/crimgroup.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/250620/","zbetcheckin"
 "250619","2019-11-01 06:15:06","http://83.224.156.131:39749/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/250619/","zbetcheckin"
-"250618","2019-11-01 06:07:05","http://intersel-idf.org/ecrire/iterateur/w2.exe","offline","malware_download","exe,Pony","https://urlhaus.abuse.ch/url/250618/","zbetcheckin"
+"250618","2019-11-01 06:07:05","http://intersel-idf.org/ecrire/iterateur/w2.exe","online","malware_download","exe,Pony","https://urlhaus.abuse.ch/url/250618/","zbetcheckin"
 "250617","2019-11-01 06:04:26","http://192.99.154.217/powerpc-440fp","offline","malware_download","None","https://urlhaus.abuse.ch/url/250617/","bjornruberg"
 "250616","2019-11-01 06:04:24","http://cdn.discordapp.com/attachments/430556909351731200/603688724831797250/day1_signed.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/250616/","JayTHL"
 "250615","2019-11-01 06:04:23","http://185.112.250.133/lickty.i586","offline","malware_download","elf","https://urlhaus.abuse.ch/url/250615/","Gandylyan1"
@@ -103581,15 +103959,15 @@
 "250608","2019-11-01 06:04:10","http://cdn.discordapp.com/attachments/633781821427023884/633781973826928640/PDF.PO6202792-3674687545_PDF.gz","offline","malware_download","None","https://urlhaus.abuse.ch/url/250608/","JayTHL"
 "250607","2019-11-01 06:04:08","http://mkontakt.az/rorabanks.exe","offline","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/250607/","wwp96"
 "250606","2019-11-01 06:02:10","http://151.80.8.7/wrkf/svchost.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/250606/","zbetcheckin"
-"250605","2019-11-01 06:02:07","http://intersel-idf.org/ecrire/crimgroup.exe","offline","malware_download","exe,Pony","https://urlhaus.abuse.ch/url/250605/","zbetcheckin"
-"250604","2019-11-01 06:02:05","http://intersel-idf.org/ecrire/req/w2.exe","offline","malware_download","exe,Formbook","https://urlhaus.abuse.ch/url/250604/","zbetcheckin"
-"250603","2019-11-01 06:02:02","http://intersel-idf.org/ecrire/lang/w2.exe","offline","malware_download","exe,Pony","https://urlhaus.abuse.ch/url/250603/","zbetcheckin"
-"250602","2019-11-01 05:58:13","http://intersel-idf.org/ecrire/maj/w2.exe","offline","malware_download","exe,Pony","https://urlhaus.abuse.ch/url/250602/","zbetcheckin"
+"250605","2019-11-01 06:02:07","http://intersel-idf.org/ecrire/crimgroup.exe","online","malware_download","exe,Pony","https://urlhaus.abuse.ch/url/250605/","zbetcheckin"
+"250604","2019-11-01 06:02:05","http://intersel-idf.org/ecrire/req/w2.exe","online","malware_download","exe,Formbook","https://urlhaus.abuse.ch/url/250604/","zbetcheckin"
+"250603","2019-11-01 06:02:02","http://intersel-idf.org/ecrire/lang/w2.exe","online","malware_download","exe,Pony","https://urlhaus.abuse.ch/url/250603/","zbetcheckin"
+"250602","2019-11-01 05:58:13","http://intersel-idf.org/ecrire/maj/w2.exe","online","malware_download","exe,Pony","https://urlhaus.abuse.ch/url/250602/","zbetcheckin"
 "250601","2019-11-01 05:58:11","http://151.80.8.7/lue/svchost.exe","offline","malware_download","exe,Pony","https://urlhaus.abuse.ch/url/250601/","zbetcheckin"
-"250600","2019-11-01 05:58:09","http://intersel-idf.org/local/w2.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/250600/","zbetcheckin"
-"250599","2019-11-01 05:58:07","http://intersel-idf.org/squelettes-dist/w2.exe","offline","malware_download","exe,Pony","https://urlhaus.abuse.ch/url/250599/","zbetcheckin"
-"250597","2019-11-01 05:58:04","http://intersel-idf.org/prive/payreceipt.exe","offline","malware_download","exe,Pony","https://urlhaus.abuse.ch/url/250597/","zbetcheckin"
-"250596","2019-11-01 05:54:05","http://intersel-idf.org/ecrire/base/crimgroup.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/250596/","zbetcheckin"
+"250600","2019-11-01 05:58:09","http://intersel-idf.org/local/w2.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/250600/","zbetcheckin"
+"250599","2019-11-01 05:58:07","http://intersel-idf.org/squelettes-dist/w2.exe","online","malware_download","exe,Pony","https://urlhaus.abuse.ch/url/250599/","zbetcheckin"
+"250597","2019-11-01 05:58:04","http://intersel-idf.org/prive/payreceipt.exe","online","malware_download","exe,Pony","https://urlhaus.abuse.ch/url/250597/","zbetcheckin"
+"250596","2019-11-01 05:54:05","http://intersel-idf.org/ecrire/base/crimgroup.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/250596/","zbetcheckin"
 "250595","2019-11-01 05:49:07","http://151.80.8.7/morito/svchost.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/250595/","zbetcheckin"
 "250593","2019-11-01 05:49:04","http://151.80.8.7/angel/vbc.exe","offline","malware_download","exe,Formbook","https://urlhaus.abuse.ch/url/250593/","zbetcheckin"
 "250592","2019-11-01 05:45:02","http://151.80.8.7/bin/word.doc","offline","malware_download","RTF","https://urlhaus.abuse.ch/url/250592/","zbetcheckin"
@@ -107065,7 +107443,7 @@
 "246874","2019-10-21 05:20:22","http://107.160.244.6/zehir/z3hir.ppc","offline","malware_download","elf","https://urlhaus.abuse.ch/url/246874/","zbetcheckin"
 "246873","2019-10-21 05:20:19","http://95.216.136.4/razor/r4z0r.mips","offline","malware_download","elf","https://urlhaus.abuse.ch/url/246873/","zbetcheckin"
 "246872","2019-10-21 05:20:17","http://95.216.136.4/razor/r4z0r.arm5","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/246872/","zbetcheckin"
-"246871","2019-10-21 05:20:15","http://145.255.26.115:25869/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/246871/","zbetcheckin"
+"246871","2019-10-21 05:20:15","http://145.255.26.115:25869/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/246871/","zbetcheckin"
 "246870","2019-10-21 05:20:13","http://95.216.136.4/razor/r4z0r.sh4","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/246870/","zbetcheckin"
 "246869","2019-10-21 05:20:11","http://95.216.136.4/razor/r4z0r.ppc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/246869/","zbetcheckin"
 "246868","2019-10-21 05:20:09","http://95.216.136.4/razor/r4z0r.arm7","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/246868/","zbetcheckin"
@@ -111080,7 +111458,7 @@
 "242594","2019-10-10 08:23:21","http://114.79.172.42:55889/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/242594/","Petras_Simeon"
 "242593","2019-10-10 08:23:15","http://110.77.172.124:18716/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242593/","Petras_Simeon"
 "242592","2019-10-10 08:23:04","http://109.172.167.183:42305/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242592/","Petras_Simeon"
-"242591","2019-10-10 08:22:18","http://201.184.163.170:30427/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242591/","Petras_Simeon"
+"242591","2019-10-10 08:22:18","http://201.184.163.170:30427/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/242591/","Petras_Simeon"
 "242590","2019-10-10 08:22:13","https://www.xuperweb.com/og6pj/ctvn4fzzpht8r6zgj3dnpq8eefab_1llkzbapl1-01650495/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/242590/","zbetcheckin"
 "242589","2019-10-10 08:08:40","http://89.210.83.134:1975/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242589/","Petras_Simeon"
 "242588","2019-10-10 08:08:31","http://5.75.28.70:25058/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242588/","Petras_Simeon"
@@ -111116,7 +111494,7 @@
 "242558","2019-10-10 07:53:42","http://177.215.75.17:41197/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242558/","Petras_Simeon"
 "242557","2019-10-10 07:53:33","http://152.249.242.195:1689/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242557/","Petras_Simeon"
 "242556","2019-10-10 07:53:18","http://109.248.65.72:46542/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242556/","Petras_Simeon"
-"242555","2019-10-10 07:53:09","http://103.31.47.214:10422/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/242555/","Petras_Simeon"
+"242555","2019-10-10 07:53:09","http://103.31.47.214:10422/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242555/","Petras_Simeon"
 "242554","2019-10-10 07:46:03","https://www.soleilbeautynyc.com/config.noon/parts_service/vxs1bottyi2u_7wf0pxh8r-84007613556759/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/242554/","zbetcheckin"
 "242553","2019-10-10 07:39:33","http://www.bilisimnokta.com/cgi-bin/XNQfSeH/","offline","malware_download","emotet,epoch3,exe,heodo","https://urlhaus.abuse.ch/url/242553/","abuse_ch"
 "242552","2019-10-10 07:39:27","http://www.mutasinsaat.com/eski/cBndMGO/","offline","malware_download","emotet,epoch3,exe,heodo","https://urlhaus.abuse.ch/url/242552/","abuse_ch"
@@ -111382,7 +111760,7 @@
 "242291","2019-10-09 19:52:10","http://187.35.13.175:33316/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242291/","Petras_Simeon"
 "242290","2019-10-09 19:51:27","http://177.130.46.26:46105/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242290/","Petras_Simeon"
 "242289","2019-10-09 19:51:20","http://177.102.127.154:2313/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242289/","Petras_Simeon"
-"242288","2019-10-09 19:51:13","http://163.47.145.202:30616/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/242288/","Petras_Simeon"
+"242288","2019-10-09 19:51:13","http://163.47.145.202:30616/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242288/","Petras_Simeon"
 "242287","2019-10-09 19:51:07","http://143.255.1.198:20164/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242287/","Petras_Simeon"
 "242286","2019-10-09 19:50:55","http://130.43.124.213:36441/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242286/","Petras_Simeon"
 "242285","2019-10-09 19:50:48","http://128.65.152.225:16647/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242285/","Petras_Simeon"
@@ -112861,7 +113239,7 @@
 "240809","2019-10-07 09:57:31","http://92.8.204.13:36307/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240809/","Petras_Simeon"
 "240808","2019-10-07 09:57:25","http://92.38.122.218:46781/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240808/","Petras_Simeon"
 "240807","2019-10-07 09:57:17","http://92.242.221.118:36790/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240807/","Petras_Simeon"
-"240806","2019-10-07 09:57:11","http://91.196.36.84:13091/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240806/","Petras_Simeon"
+"240806","2019-10-07 09:57:11","http://91.196.36.84:13091/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/240806/","Petras_Simeon"
 "240805","2019-10-07 09:57:01","http://89.174.10.107:35443/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240805/","Petras_Simeon"
 "240804","2019-10-07 09:56:57","http://85.97.206.161:25268/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240804/","Petras_Simeon"
 "240803","2019-10-07 09:56:53","http://85.108.63.13:58595/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240803/","Petras_Simeon"
@@ -113186,7 +113564,7 @@
 "240478","2019-10-07 06:27:04","http://177.12.156.246:56290/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240478/","Petras_Simeon"
 "240477","2019-10-07 06:26:58","http://176.216.112.48:46967/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240477/","Petras_Simeon"
 "240476","2019-10-07 06:26:53","http://170.82.22.186:37344/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240476/","Petras_Simeon"
-"240475","2019-10-07 06:26:46","http://165.90.16.5:18437/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/240475/","Petras_Simeon"
+"240475","2019-10-07 06:26:46","http://165.90.16.5:18437/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240475/","Petras_Simeon"
 "240474","2019-10-07 06:26:42","http://159.192.253.209:58612/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240474/","Petras_Simeon"
 "240473","2019-10-07 06:26:35","http://158.181.19.88:35462/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240473/","Petras_Simeon"
 "240472","2019-10-07 06:26:31","http://157.119.214.13:35798/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240472/","Petras_Simeon"
@@ -113369,7 +113747,7 @@
 "240295","2019-10-07 05:09:11","http://45.170.222.135:30557/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240295/","Petras_Simeon"
 "240294","2019-10-07 05:09:03","http://45.165.15.252:34331/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240294/","Petras_Simeon"
 "240293","2019-10-07 05:08:52","http://45.132.200.12:17567/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240293/","Petras_Simeon"
-"240292","2019-10-07 05:08:42","http://45.115.254.154:14279/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240292/","Petras_Simeon"
+"240292","2019-10-07 05:08:42","http://45.115.254.154:14279/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/240292/","Petras_Simeon"
 "240291","2019-10-07 05:08:35","http://45.115.253.82:3755/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/240291/","Petras_Simeon"
 "240290","2019-10-07 05:08:24","http://45.114.68.156:60077/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240290/","Petras_Simeon"
 "240289","2019-10-07 05:08:11","http://45.114.182.82:47052/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240289/","Petras_Simeon"
@@ -113386,7 +113764,7 @@
 "240278","2019-10-07 05:05:40","http://41.45.17.186:33244/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240278/","Petras_Simeon"
 "240277","2019-10-07 05:05:24","http://41.230.125.165:26813/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240277/","Petras_Simeon"
 "240276","2019-10-07 05:05:14","http://41.222.15.154:52648/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240276/","Petras_Simeon"
-"240275","2019-10-07 05:05:05","http://41.219.185.171:46701/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/240275/","Petras_Simeon"
+"240275","2019-10-07 05:05:05","http://41.219.185.171:46701/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240275/","Petras_Simeon"
 "240274","2019-10-07 05:04:57","http://41.215.247.183:1126/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240274/","Petras_Simeon"
 "240273","2019-10-07 05:04:48","http://41.204.79.18:5220/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240273/","Petras_Simeon"
 "240272","2019-10-07 05:04:39","http://41.190.70.238:57656/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/240272/","Petras_Simeon"
@@ -113445,12 +113823,12 @@
 "240219","2019-10-07 04:56:15","http://208.163.58.18:20912/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/240219/","Petras_Simeon"
 "240218","2019-10-07 04:56:11","http://206.248.136.6:44434/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240218/","Petras_Simeon"
 "240217","2019-10-07 04:56:08","http://206.201.0.41:49736/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240217/","Petras_Simeon"
-"240216","2019-10-07 04:56:02","http://203.80.171.149:36958/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240216/","Petras_Simeon"
+"240216","2019-10-07 04:56:02","http://203.80.171.149:36958/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/240216/","Petras_Simeon"
 "240215","2019-10-07 04:55:46","http://203.202.246.246:3587/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/240215/","Petras_Simeon"
 "240214","2019-10-07 04:55:41","http://203.193.173.179:14218/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/240214/","Petras_Simeon"
 "240213","2019-10-07 04:55:36","http://203.193.156.43:39359/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240213/","Petras_Simeon"
 "240212","2019-10-07 04:55:31","http://203.189.150.208:6521/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240212/","Petras_Simeon"
-"240211","2019-10-07 04:55:25","http://203.188.242.148:30100/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240211/","Petras_Simeon"
+"240211","2019-10-07 04:55:25","http://203.188.242.148:30100/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/240211/","Petras_Simeon"
 "240210","2019-10-07 04:55:20","http://203.130.214.235:46779/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240210/","Petras_Simeon"
 "240209","2019-10-07 04:55:13","http://202.91.75.215:13964/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240209/","Petras_Simeon"
 "240208","2019-10-07 04:55:08","http://202.9.123.153:27484/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240208/","Petras_Simeon"
@@ -113511,7 +113889,7 @@
 "240153","2019-10-07 04:45:53","http://200.122.209.122:31038/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240153/","Petras_Simeon"
 "240152","2019-10-07 04:45:20","http://200.105.167.98:18525/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/240152/","Petras_Simeon"
 "240151","2019-10-07 04:45:10","http://197.254.84.218:41878/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240151/","Petras_Simeon"
-"240150","2019-10-07 04:45:04","http://197.254.106.78:45941/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/240150/","Petras_Simeon"
+"240150","2019-10-07 04:45:04","http://197.254.106.78:45941/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240150/","Petras_Simeon"
 "240149","2019-10-07 04:44:57","http://197.245.82.169:9593/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240149/","Petras_Simeon"
 "240148","2019-10-07 04:44:50","http://197.157.217.58:26756/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240148/","Petras_Simeon"
 "240147","2019-10-07 04:44:39","http://196.251.50.41:15155/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240147/","Petras_Simeon"
@@ -113695,7 +114073,7 @@
 "239969","2019-10-07 04:16:06","http://125.164.158.75:2605/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239969/","Petras_Simeon"
 "239968","2019-10-07 04:15:59","http://103.204.70.58:52349/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239968/","Petras_Simeon"
 "239967","2019-10-07 04:15:47","http://149.140.107.240:9108/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239967/","Petras_Simeon"
-"239966","2019-10-07 04:15:43","http://147.91.212.250:51808/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239966/","Petras_Simeon"
+"239966","2019-10-07 04:15:43","http://147.91.212.250:51808/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/239966/","Petras_Simeon"
 "239965","2019-10-07 04:15:20","http://144.139.171.97:2402/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239965/","Petras_Simeon"
 "239964","2019-10-07 04:15:13","http://144.136.155.166:62352/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/239964/","Petras_Simeon"
 "239963","2019-10-07 04:15:08","http://141.237.118.95:23275/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239963/","Petras_Simeon"
@@ -113713,7 +114091,7 @@
 "239951","2019-10-07 04:13:35","http://12.132.247.91:1601/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239951/","Petras_Simeon"
 "239950","2019-10-07 04:13:30","http://119.15.92.126:49862/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239950/","Petras_Simeon"
 "239949","2019-10-07 04:13:24","http://113.11.95.254:54720/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/239949/","Petras_Simeon"
-"239948","2019-10-07 04:13:17","http://109.95.15.210:54462/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/239948/","Petras_Simeon"
+"239948","2019-10-07 04:13:17","http://109.95.15.210:54462/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239948/","Petras_Simeon"
 "239947","2019-10-07 04:13:13","http://109.94.117.17:46660/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239947/","Petras_Simeon"
 "239946","2019-10-07 04:13:05","http://109.94.113.209:36119/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239946/","Petras_Simeon"
 "239945","2019-10-07 04:13:00","http://109.72.192.218:37460/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239945/","Petras_Simeon"
@@ -113890,7 +114268,7 @@
 "239774","2019-10-06 13:35:36","http://222.95.63.172:45889/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239774/","Petras_Simeon"
 "239773","2019-10-06 13:35:30","http://2.187.20.233:48646/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239773/","Petras_Simeon"
 "239772","2019-10-06 13:35:24","http://217.60.196.122:36337/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239772/","Petras_Simeon"
-"239771","2019-10-06 13:35:19","http://213.92.198.8:25100/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239771/","Petras_Simeon"
+"239771","2019-10-06 13:35:19","http://213.92.198.8:25100/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/239771/","Petras_Simeon"
 "239770","2019-10-06 13:35:14","http://202.74.242.143:45100/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239770/","Petras_Simeon"
 "239769","2019-10-06 13:35:08","http://201.94.204.75:29999/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239769/","Petras_Simeon"
 "239768","2019-10-06 13:34:35","http://201.26.11.14:55118/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239768/","Petras_Simeon"
@@ -113971,7 +114349,7 @@
 "239693","2019-10-06 11:27:37","http://62.69.241.72:35641/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/239693/","Petras_Simeon"
 "239692","2019-10-06 11:27:33","http://5.236.170.251:52212/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239692/","Petras_Simeon"
 "239691","2019-10-06 11:27:26","http://37.6.178.118:14987/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239691/","Petras_Simeon"
-"239690","2019-10-06 11:27:21","http://203.202.245.77:64580/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/239690/","Petras_Simeon"
+"239690","2019-10-06 11:27:21","http://203.202.245.77:64580/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239690/","Petras_Simeon"
 "239689","2019-10-06 11:27:17","http://202.191.124.185:60284/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/239689/","Petras_Simeon"
 "239688","2019-10-06 11:27:04","http://189.110.222.185:29496/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239688/","Petras_Simeon"
 "239687","2019-10-06 11:26:58","http://185.94.172.29:4396/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/239687/","Petras_Simeon"
@@ -114220,7 +114598,7 @@
 "239443","2019-10-06 08:42:08","http://191.17.20.174:48334/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239443/","Petras_Simeon"
 "239442","2019-10-06 08:42:01","http://191.17.181.28:4660/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239442/","Petras_Simeon"
 "239441","2019-10-06 08:41:55","http://190.92.46.42:5462/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/239441/","Petras_Simeon"
-"239440","2019-10-06 08:41:47","http://190.12.4.98:13461/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/239440/","Petras_Simeon"
+"239440","2019-10-06 08:41:47","http://190.12.4.98:13461/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239440/","Petras_Simeon"
 "239439","2019-10-06 08:41:38","http://189.163.114.218:11586/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239439/","Petras_Simeon"
 "239438","2019-10-06 08:41:34","http://189.110.187.109:29201/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239438/","Petras_Simeon"
 "239437","2019-10-06 08:41:28","http://187.35.9.47:38084/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239437/","Petras_Simeon"
@@ -114299,7 +114677,7 @@
 "239364","2019-10-06 07:43:39","http://5.160.131.230:61361/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239364/","Petras_Simeon"
 "239363","2019-10-06 07:43:29","http://5.138.248.146:24541/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239363/","Petras_Simeon"
 "239362","2019-10-06 07:43:23","http://46.248.42.69:33304/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239362/","Petras_Simeon"
-"239361","2019-10-06 07:43:15","http://46.161.185.15:33155/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/239361/","Petras_Simeon"
+"239361","2019-10-06 07:43:15","http://46.161.185.15:33155/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239361/","Petras_Simeon"
 "239360","2019-10-06 07:43:09","http://45.70.5.16:15575/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239360/","Petras_Simeon"
 "239359","2019-10-06 07:43:03","http://45.174.176.203:53968/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239359/","Petras_Simeon"
 "239358","2019-10-06 07:42:57","http://41.190.63.174:31982/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/239358/","Petras_Simeon"
@@ -114434,7 +114812,7 @@
 "239229","2019-10-06 07:21:04","http://31.148.120.121:30286/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/239229/","Petras_Simeon"
 "239228","2019-10-06 07:20:59","http://24.135.239.98:22456/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/239228/","Petras_Simeon"
 "239227","2019-10-06 07:20:55","http://203.115.102.243:16200/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/239227/","Petras_Simeon"
-"239226","2019-10-06 07:20:51","http://202.79.46.30:57770/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/239226/","Petras_Simeon"
+"239226","2019-10-06 07:20:51","http://202.79.46.30:57770/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/239226/","Petras_Simeon"
 "239225","2019-10-06 07:20:46","http://202.159.123.66:19084/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/239225/","Petras_Simeon"
 "239224","2019-10-06 07:20:41","http://201.27.56.103:17301/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/239224/","Petras_Simeon"
 "239223","2019-10-06 07:20:09","http://201.1.15.166:14014/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/239223/","Petras_Simeon"
@@ -114597,7 +114975,7 @@
 "239065","2019-10-06 06:58:03","http://5.160.111.35:51750/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/239065/","Petras_Simeon"
 "239064","2019-10-06 06:57:57","http://5.154.55.196:22350/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/239064/","Petras_Simeon"
 "239063","2019-10-06 06:57:52","http://5.154.54.221:55288/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/239063/","Petras_Simeon"
-"239062","2019-10-06 06:57:44","http://5.128.62.127:15933/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/239062/","Petras_Simeon"
+"239062","2019-10-06 06:57:44","http://5.128.62.127:15933/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/239062/","Petras_Simeon"
 "239061","2019-10-06 06:57:38","http://46.243.152.48:40663/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/239061/","Petras_Simeon"
 "239060","2019-10-06 06:57:33","http://46.236.65.83:54661/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/239060/","Petras_Simeon"
 "239059","2019-10-06 06:57:28","http://46.236.65.108:55511/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/239059/","Petras_Simeon"
@@ -114674,7 +115052,7 @@
 "238988","2019-10-06 06:46:22","http://203.112.79.66:21628/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238988/","Petras_Simeon"
 "238987","2019-10-06 06:46:15","http://202.70.82.221:50211/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238987/","Petras_Simeon"
 "238986","2019-10-06 06:45:43","http://202.148.23.114:50605/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238986/","Petras_Simeon"
-"238985","2019-10-06 06:45:33","http://202.148.20.130:62268/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238985/","Petras_Simeon"
+"238985","2019-10-06 06:45:33","http://202.148.20.130:62268/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238985/","Petras_Simeon"
 "238984","2019-10-06 06:45:28","http://201.87.112.79:57489/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238984/","Petras_Simeon"
 "238983","2019-10-06 06:45:23","http://201.68.28.77:63703/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238983/","Petras_Simeon"
 "238982","2019-10-06 06:45:16","http://201.49.234.121:64901/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238982/","Petras_Simeon"
@@ -115234,8 +115612,8 @@
 "238391","2019-10-05 13:29:31","http://95.70.188.162:14029/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238391/","Petras_Simeon"
 "238390","2019-10-05 13:29:27","http://95.38.18.252:47797/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238390/","Petras_Simeon"
 "238389","2019-10-05 13:29:20","http://95.133.17.105:29716/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238389/","Petras_Simeon"
-"238388","2019-10-05 13:29:16","http://94.64.246.247:46706/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238388/","Petras_Simeon"
-"238387","2019-10-05 13:29:11","http://93.93.62.183:18711/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238387/","Petras_Simeon"
+"238388","2019-10-05 13:29:16","http://94.64.246.247:46706/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238388/","Petras_Simeon"
+"238387","2019-10-05 13:29:11","http://93.93.62.183:18711/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238387/","Petras_Simeon"
 "238386","2019-10-05 13:29:06","http://93.117.20.88:14813/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238386/","Petras_Simeon"
 "238385","2019-10-05 13:28:35","http://87.107.143.42:31261/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238385/","Petras_Simeon"
 "238384","2019-10-05 13:28:33","http://81.163.33.96:1434/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238384/","Petras_Simeon"
@@ -115359,11 +115737,11 @@
 "238266","2019-10-05 12:02:52","http://152.249.31.198:32564/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238266/","Petras_Simeon"
 "238265","2019-10-05 12:02:46","http://139.255.24.243:56324/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238265/","Petras_Simeon"
 "238264","2019-10-05 12:02:41","http://138.121.130.68:23935/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238264/","Petras_Simeon"
-"238263","2019-10-05 12:02:35","http://116.206.164.46:18267/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238263/","Petras_Simeon"
+"238263","2019-10-05 12:02:35","http://116.206.164.46:18267/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238263/","Petras_Simeon"
 "238262","2019-10-05 12:02:27","http://103.99.189.244:47926/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238262/","Petras_Simeon"
 "238261","2019-10-05 12:02:22","http://103.233.122.177:19458/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238261/","Petras_Simeon"
 "238260","2019-10-05 12:02:17","http://103.109.179.206:60402/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238260/","Petras_Simeon"
-"238259","2019-10-05 12:02:12","http://102.68.153.66:12603/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238259/","Petras_Simeon"
+"238259","2019-10-05 12:02:12","http://102.68.153.66:12603/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238259/","Petras_Simeon"
 "238258","2019-10-05 11:37:09","http://3.15.158.164:81/mpsl","offline","malware_download","elf","https://urlhaus.abuse.ch/url/238258/","Petras_Simeon"
 "238257","2019-10-05 11:37:07","http://3.15.158.164:81/mips","offline","malware_download","elf","https://urlhaus.abuse.ch/url/238257/","Petras_Simeon"
 "238256","2019-10-05 11:37:05","http://3.15.158.164:81/arm7","offline","malware_download","elf","https://urlhaus.abuse.ch/url/238256/","Petras_Simeon"
@@ -115495,7 +115873,7 @@
 "238130","2019-10-05 10:40:38","http://115.134.0.22:63433/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238130/","Petras_Simeon"
 "238129","2019-10-05 10:40:33","http://114.47.112.134:61005/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238129/","Petras_Simeon"
 "238128","2019-10-05 10:40:26","http://1.1.226.93:61093/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238128/","Petras_Simeon"
-"238127","2019-10-05 10:40:21","http://109.248.58.238:50004/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238127/","Petras_Simeon"
+"238127","2019-10-05 10:40:21","http://109.248.58.238:50004/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238127/","Petras_Simeon"
 "238126","2019-10-05 10:40:17","http://103.73.183.53:44671/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238126/","Petras_Simeon"
 "238125","2019-10-05 10:40:12","http://103.209.176.85:54764/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238125/","Petras_Simeon"
 "238124","2019-10-05 10:40:07","http://103.124.173.72:13616/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238124/","Petras_Simeon"
@@ -115752,7 +116130,7 @@
 "237873","2019-10-05 07:40:49","http://109.1.183.254:61200/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/237873/","Petras_Simeon"
 "237872","2019-10-05 07:40:43","http://105.225.22.122:33227/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/237872/","Petras_Simeon"
 "237871","2019-10-05 07:40:36","http://103.90.204.135:34370/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/237871/","Petras_Simeon"
-"237870","2019-10-05 07:40:30","http://103.234.226.133:20102/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/237870/","Petras_Simeon"
+"237870","2019-10-05 07:40:30","http://103.234.226.133:20102/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/237870/","Petras_Simeon"
 "237869","2019-10-05 07:40:23","http://103.23.133.187:31459/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/237869/","Petras_Simeon"
 "237868","2019-10-05 07:40:17","http://103.199.115.14:40870/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/237868/","Petras_Simeon"
 "237867","2019-10-05 07:40:12","http://103.73.182.55:30817/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/237867/","Petras_Simeon"
@@ -119910,7 +120288,7 @@
 "233607","2019-09-20 12:18:13","http://matomo.meerai.eu/lang/2c.jpg","offline","malware_download","Ransomware,Shade,Troldesh","https://urlhaus.abuse.ch/url/233607/","JAMESWT_MHT"
 "233606","2019-09-20 12:17:50","http://meta.meerai.io/public/assets/avatars/2c.jpg","offline","malware_download","Ransomware,Shade,Troldesh","https://urlhaus.abuse.ch/url/233606/","JAMESWT_MHT"
 "233605","2019-09-20 12:17:40","http://appointments.meerai.eu/storage/cache/2c.jpg","offline","malware_download","Ransomware,Shade","https://urlhaus.abuse.ch/url/233605/","JAMESWT_MHT"
-"233604","2019-09-20 12:17:39","http://intertradeassociates.com.au/awstats/data/2c.jpg","offline","malware_download","Ransomware,Shade,Troldesh","https://urlhaus.abuse.ch/url/233604/","JAMESWT_MHT"
+"233604","2019-09-20 12:17:39","http://intertradeassociates.com.au/awstats/data/2c.jpg","online","malware_download","Ransomware,Shade,Troldesh","https://urlhaus.abuse.ch/url/233604/","JAMESWT_MHT"
 "233603","2019-09-20 12:17:21","http://www.anniechase.com/wp-content/themes/garfunkel/js/2c.jpg","offline","malware_download","Ransomware,Shade,Troldesh","https://urlhaus.abuse.ch/url/233603/","JAMESWT_MHT"
 "233602","2019-09-20 12:17:12","http://thiennamhomeland.com/wp-content/themes/thiennam/database/2c.jpg","offline","malware_download","Ransomware,Shade,Troldesh","https://urlhaus.abuse.ch/url/233602/","JAMESWT_MHT"
 "233601","2019-09-20 12:17:06","http://michaelkensy.de/wp-content/themes/twentyseventeen/template-parts/footer/2c.jpg","offline","malware_download","Ransomware,Shade,Troldesh","https://urlhaus.abuse.ch/url/233601/","JAMESWT_MHT"
@@ -123026,7 +123404,7 @@
 "230346","2019-09-10 20:20:06","http://23.82.185.164/bins/Hilix.m68k","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/230346/","zbetcheckin"
 "230345","2019-09-10 20:20:04","http://23.82.185.164/bins/Hilix.arm6","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/230345/","zbetcheckin"
 "230344","2019-09-10 20:15:21","http://185.244.25.60/bins/owari.sh4","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/230344/","zbetcheckin"
-"230343","2019-09-10 20:15:19","http://218.159.238.10:46093/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/230343/","zbetcheckin"
+"230343","2019-09-10 20:15:19","http://218.159.238.10:46093/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/230343/","zbetcheckin"
 "230342","2019-09-10 20:15:15","http://192.200.195.199/mi3307","offline","malware_download","elf","https://urlhaus.abuse.ch/url/230342/","zbetcheckin"
 "230341","2019-09-10 20:15:10","http://185.244.25.60/bins/owari.spc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/230341/","zbetcheckin"
 "230340","2019-09-10 20:15:09","http://185.244.25.60/bins/owari.mpsl","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/230340/","zbetcheckin"
@@ -123464,7 +123842,7 @@
 "229907","2019-09-08 17:04:14","http://188.241.73.110/bins/DEMONS.ppc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/229907/","zbetcheckin"
 "229906","2019-09-08 17:04:05","http://188.241.73.110/bins/DEMONS.m68k","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/229906/","zbetcheckin"
 "229905","2019-09-08 17:04:02","http://167.71.248.156/razor/r4z0r.arm6","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/229905/","zbetcheckin"
-"229904","2019-09-08 15:55:04","http://88.201.34.243:10759/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/229904/","zbetcheckin"
+"229904","2019-09-08 15:55:04","http://88.201.34.243:10759/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/229904/","zbetcheckin"
 "229903","2019-09-08 15:54:15","http://185.112.82.89/bins/mpsl.handymanny","offline","malware_download","elf","https://urlhaus.abuse.ch/url/229903/","Gandylyan1"
 "229902","2019-09-08 15:54:13","http://185.112.82.89/bins/arm.handymanny","offline","malware_download","elf","https://urlhaus.abuse.ch/url/229902/","Gandylyan1"
 "229901","2019-09-08 15:54:11","http://185.112.82.89/bins/arm5.handymanny","offline","malware_download","elf","https://urlhaus.abuse.ch/url/229901/","Gandylyan1"
@@ -126253,7 +126631,7 @@
 "227057","2019-08-26 10:21:32","http://209.97.142.42/bins/UnHAnaAW.arm7","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/227057/","zbetcheckin"
 "227056","2019-08-26 10:13:02","http://posqit.net/PE/60380.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/227056/","zbetcheckin"
 "227055","2019-08-26 10:08:06","http://jiraiya.info/horigin221.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/227055/","zbetcheckin"
-"227054","2019-08-26 09:55:15","http://202.107.233.41:81/fuzhu/sxd2.6.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/227054/","zbetcheckin"
+"227054","2019-08-26 09:55:15","http://202.107.233.41:81/fuzhu/sxd2.6.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/227054/","zbetcheckin"
 "227053","2019-08-26 09:55:05","https://goldlngroup.com/ok/order.exe","offline","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/227053/","JAMESWT_MHT"
 "227052","2019-08-26 09:46:26","http://xn--lckualb2a5j3cymb6854r9e7a.xyz/2c.jpg","offline","malware_download","Troldesh","https://urlhaus.abuse.ch/url/227052/","JAMESWT_MHT"
 "227051","2019-08-26 09:45:06","https://balovivu.com/wp-admin/css/colors/blue/2c.jpg","offline","malware_download","None","https://urlhaus.abuse.ch/url/227051/","JAMESWT_MHT"
@@ -126719,7 +127097,7 @@
 "226589","2019-08-24 01:07:08","http://apnatarka.com/old/wp-admin/css/colors/blue/1c.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/226589/","zbetcheckin"
 "226588","2019-08-24 01:07:06","http://hileyapak.net/hek/realenvanter.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/226588/","zbetcheckin"
 "226587","2019-08-24 01:02:09","http://faridalhusain.xyz/.well-known/pki-validation/2c.jpg","offline","malware_download","exe,Troldesh","https://urlhaus.abuse.ch/url/226587/","zbetcheckin"
-"226586","2019-08-24 00:58:39","http://gxx.monerov10.com:8800/gx.exe","online","malware_download","CoinMiner,exe","https://urlhaus.abuse.ch/url/226586/","zbetcheckin"
+"226586","2019-08-24 00:58:39","http://gxx.monerov10.com:8800/gx.exe","offline","malware_download","CoinMiner,exe","https://urlhaus.abuse.ch/url/226586/","zbetcheckin"
 "226585","2019-08-24 00:58:14","https://sunnypower.xsrv.jp/1c.jpg","offline","malware_download","exe,Troldesh","https://urlhaus.abuse.ch/url/226585/","zbetcheckin"
 "226584","2019-08-24 00:58:05","http://sunnypower.xsrv.jp/2c.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/226584/","zbetcheckin"
 "226583","2019-08-24 00:58:03","https://www.boothie.gr/wp-admin/css/colors/blue/1c.jpg","offline","malware_download","exe,Troldesh","https://urlhaus.abuse.ch/url/226583/","zbetcheckin"
@@ -126963,7 +127341,7 @@
 "226345","2019-08-23 11:36:06","http://zlayla20.com/qtra/ttqr.php?l=lpop3.j12","offline","malware_download","CAN,exe,geofenced,Gozi,USA","https://urlhaus.abuse.ch/url/226345/","anonymous"
 "226344","2019-08-23 11:36:05","http://zlayla20.com/qtra/ttqr.php?l=lpop1.j12","offline","malware_download","CAN,exe,geofenced,Gozi,USA","https://urlhaus.abuse.ch/url/226344/","anonymous"
 "226343","2019-08-23 11:36:03","http://zlayla20.com/qtra/ttqr.php?l=lpop2.j12","offline","malware_download","CAN,exe,geofenced,Gozi,USA","https://urlhaus.abuse.ch/url/226343/","anonymous"
-"226342","2019-08-23 11:07:32","http://185.172.110.214/mipsel","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/226342/","zbetcheckin"
+"226342","2019-08-23 11:07:32","http://185.172.110.214/mipsel","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/226342/","zbetcheckin"
 "226341","2019-08-23 10:54:02","http://185.172.110.237//mipsel","offline","malware_download","elf","https://urlhaus.abuse.ch/url/226341/","Gandylyan1"
 "226340","2019-08-23 10:09:05","http://skleprowerowy.bike/bin/1c.jpg","offline","malware_download","None","https://urlhaus.abuse.ch/url/226340/","JAMESWT_MHT"
 "226339","2019-08-23 10:09:03","https://studiomonforte.com/.tmb/1c.jpg","offline","malware_download","None","https://urlhaus.abuse.ch/url/226339/","JAMESWT_MHT"
@@ -135500,7 +135878,7 @@
 "217578","2019-07-17 11:56:04","http://shmajik.gq/cutt.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/217578/","zbetcheckin"
 "217577","2019-07-17 11:56:03","http://shmajik.gq/brt.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/217577/","zbetcheckin"
 "217576","2019-07-17 11:43:06","http://onholyland.com/JUN/JOJ.exe","offline","malware_download","exe,NanoCore","https://urlhaus.abuse.ch/url/217576/","zbetcheckin"
-"217575","2019-07-17 11:35:40","http://202.107.233.41:81/FUZHU/WWSGV0.1.EXE","online","malware_download","exe","https://urlhaus.abuse.ch/url/217575/","zbetcheckin"
+"217575","2019-07-17 11:35:40","http://202.107.233.41:81/FUZHU/WWSGV0.1.EXE","offline","malware_download","exe","https://urlhaus.abuse.ch/url/217575/","zbetcheckin"
 "217574","2019-07-17 11:07:03","http://shmajik.gq/powerad.jpg","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/217574/","abuse_ch"
 "217573","2019-07-17 10:52:06","http://autosyan.com/dj/dj.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/217573/","zbetcheckin"
 "217572","2019-07-17 10:47:04","http://danmaxexpress.com/ssl/ssl.exe","offline","malware_download","exe,RemcosRAT","https://urlhaus.abuse.ch/url/217572/","zbetcheckin"
@@ -139012,7 +139390,7 @@
 "213970","2019-07-05 09:13:24","http://empowwwer.com/templates/rt_myriad/admin/presets/1c.jpg","offline","malware_download","exe,Troldesh","https://urlhaus.abuse.ch/url/213970/","zbetcheckin"
 "213969","2019-07-05 09:13:16","http://websiteprivacypolicy.org/includes/database/mysql/1c.jpg","offline","malware_download","exe,Troldesh","https://urlhaus.abuse.ch/url/213969/","zbetcheckin"
 "213968","2019-07-05 09:13:08","http://fusion105.com/wp-content/themes/goodnews47/builder/js_composer/assets/bootstrap/css/1c.jpg","offline","malware_download","exe,Troldesh","https://urlhaus.abuse.ch/url/213968/","zbetcheckin"
-"213967","2019-07-05 09:13:03","http://kupaliskohs.sk/wp-content/themes/kupaliskohs/styles/1c.jpg","online","malware_download","exe,Troldesh","https://urlhaus.abuse.ch/url/213967/","zbetcheckin"
+"213967","2019-07-05 09:13:03","http://kupaliskohs.sk/wp-content/themes/kupaliskohs/styles/1c.jpg","offline","malware_download","exe,Troldesh","https://urlhaus.abuse.ch/url/213967/","zbetcheckin"
 "213966","2019-07-05 09:09:08","http://christen.dybenko.net/_wp-admin/css/1c.jpg","offline","malware_download","exe,Troldesh","https://urlhaus.abuse.ch/url/213966/","zbetcheckin"
 "213965","2019-07-05 09:09:06","http://unaniherbalist.com/new/1c.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/213965/","zbetcheckin"
 "213964","2019-07-05 09:09:05","http://crowdercabinets.com/templates/beez3/html/com_contact/categories/1c.jpg","offline","malware_download","exe,Troldesh","https://urlhaus.abuse.ch/url/213964/","zbetcheckin"
@@ -142428,7 +142806,7 @@
 "210527","2019-06-20 01:47:03","http://51.79.53.247/lmaoWTF/loligang.ppc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/210527/","zbetcheckin"
 "210526","2019-06-20 01:47:02","http://51.79.53.247/lmaoWTF/loligang.mips","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/210526/","zbetcheckin"
 "210525","2019-06-20 01:39:07","http://fakers.co.jp/20.06.2019_130.22.doc","offline","malware_download","doc","https://urlhaus.abuse.ch/url/210525/","zbetcheckin"
-"210524","2019-06-20 01:06:53","http://indonesias.me:9998/c64.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/210524/","zbetcheckin"
+"210524","2019-06-20 01:06:53","http://indonesias.me:9998/c64.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/210524/","zbetcheckin"
 "210523","2019-06-20 00:37:03","http://179.43.147.77/pm1","offline","malware_download","msi","https://urlhaus.abuse.ch/url/210523/","zbetcheckin"
 "210521","2019-06-20 00:20:06","http://46.101.218.87/bins/BaCkTrAcK.arm7","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/210521/","zbetcheckin"
 "210520","2019-06-20 00:20:06","http://46.101.218.87:80/bins/BaCkTrAcK.arm","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/210520/","zbetcheckin"
@@ -146113,7 +146491,7 @@
 "206831","2019-06-07 12:00:09","http://157.230.107.225:80/lmaoWTF/loligang.x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/206831/","zbetcheckin"
 "206830","2019-06-07 12:00:03","http://207.246.96.195/bins/UnHAnaAW.x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/206830/","zbetcheckin"
 "206829","2019-06-07 11:51:11","http://stfoods.ru/westyunioncopypayment.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/206829/","zbetcheckin"
-"206828","2019-06-07 11:51:09","http://oa.fnysw.com/weaverplugin/chinaexcel.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/206828/","zbetcheckin"
+"206828","2019-06-07 11:51:09","http://oa.fnysw.com/weaverplugin/chinaexcel.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/206828/","zbetcheckin"
 "206827","2019-06-07 11:42:03","http://healthshop.pk/hdsf/newcrypt.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/206827/","zbetcheckin"
 "206826","2019-06-07 11:26:05","http://207.246.96.195/bins/UnHAnaAW.arm7","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/206826/","zbetcheckin"
 "206825","2019-06-07 11:26:03","http://207.246.96.195/bins/UnHAnaAW.arm5","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/206825/","zbetcheckin"
@@ -149235,7 +149613,7 @@
 "203697","2019-05-29 22:55:03","http://softhotel.com/cgi-bin/hsKPeXHFNs/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/203697/","spamhaus"
 "203696","2019-05-29 22:54:02","http://sneezy.be/files/lm/trlnuyp6txuxkahdf140m_b2ofh0v-1283763430810/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/203696/","spamhaus"
 "203695","2019-05-29 22:46:02","http://snippen.de/301/sites/ICmlFyqgGCmcBnjoVnpOGzHE/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/203695/","spamhaus"
-"203694","2019-05-29 22:43:40","http://download.ktkt.com/setupKtkt_V2.0.6.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/203694/","zbetcheckin"
+"203694","2019-05-29 22:43:40","http://download.ktkt.com/setupKtkt_V2.0.6.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/203694/","zbetcheckin"
 "203693","2019-05-29 22:40:03","http://solutions4brands.com/CREATion_files/INC/ka96r6o5ysrymdmfs9r_kplh9-4260408219/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/203693/","Cryptolaemus1"
 "203692","2019-05-29 22:38:03","http://softem.de/TSV_1861_Mainburg/Pages/IhTNCxjEfBayZzNzqUKWY/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/203692/","spamhaus"
 "203691","2019-05-29 22:34:06","http://dreamtrips.icu/dreamtrips_us1.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/203691/","zbetcheckin"
@@ -149337,7 +149715,7 @@
 "203595","2019-05-29 18:58:05","http://siranagi.sakura.ne.jp/201611/4tyn6g6083pgtqzcieoz6y2cc2z0b_5db7in3ch3-6524113546/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/203595/","spamhaus"
 "203594","2019-05-29 18:55:04","http://sampling-group.com/local-cgi/DOC/b1qyz9zd6u7fkraw74s4h2_67zmznv-7279456399299/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/203594/","spamhaus"
 "203593","2019-05-29 18:50:05","http://schockenhoff.net/cgi-bin/SUljGppBcglbQygpSLapbPaSpHg/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/203593/","spamhaus"
-"203592","2019-05-29 18:49:46","http://download.ktkt.com/setupktkt_v2.0.9.exe","offline","malware_download","exe,Trickbot","https://urlhaus.abuse.ch/url/203592/","zbetcheckin"
+"203592","2019-05-29 18:49:46","http://download.ktkt.com/setupktkt_v2.0.9.exe","online","malware_download","exe,Trickbot","https://urlhaus.abuse.ch/url/203592/","zbetcheckin"
 "203591","2019-05-29 18:46:03","http://timdudley.net/piano/DOC/DuOnqJSi/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/203591/","spamhaus"
 "203590","2019-05-29 18:40:03","https://tischlereigrund.de/cgi-bin/DOC/hjhh4vqnlgf1bp_y3a4z-779938398181/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/203590/","spamhaus"
 "203589","2019-05-29 18:37:04","http://elitetoys.dk/alcotell.com/1c.jpg","offline","malware_download","exe,Troldesh","https://urlhaus.abuse.ch/url/203589/","zbetcheckin"
@@ -149630,7 +150008,7 @@
 "203299","2019-05-29 04:58:03","http://188.119.65.131:80/lmaoWTF/loligang.arm","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/203299/","zbetcheckin"
 "203297","2019-05-29 04:53:04","http://dreamtrips.cheap/dreamtrips_us4.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/203297/","zbetcheckin"
 "203296","2019-05-29 04:52:23","http://192.243.100.181/miori.arm7","offline","malware_download","elf","https://urlhaus.abuse.ch/url/203296/","zbetcheckin"
-"203295","2019-05-29 04:52:22","http://111.185.48.248:7724/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/203295/","zbetcheckin"
+"203295","2019-05-29 04:52:22","http://111.185.48.248:7724/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/203295/","zbetcheckin"
 "203294","2019-05-29 04:52:17","http://177.96.184.114:21785/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/203294/","zbetcheckin"
 "203293","2019-05-29 04:52:14","http://152.250.29.82:35790/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/203293/","zbetcheckin"
 "203292","2019-05-29 04:52:11","http://188.119.65.131/lmaoWTF/loligang.mips","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/203292/","zbetcheckin"
@@ -155294,14 +155672,14 @@
 "197610","2019-05-17 00:39:25","http://www.lmichellewebb.com/wp-includes/sites/lsiUKvhcKlmkTYybaSHJLJ/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/197610/","Cryptolaemus1"
 "197609","2019-05-17 00:39:16","http://www.zorem.com/wp-content/public_segment/sec/Eng/accs/open_resourse/","offline","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/197609/","Cryptolaemus1"
 "197608","2019-05-17 00:39:15","https://engenerconstrucao.com.br/nfuvi/trusted_network/sec/ENG_US/accs/send_files/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/197608/","Cryptolaemus1"
-"197607","2019-05-17 00:39:10","http://buhleni.co.za/images/Wolf.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/197607/","zbetcheckin"
+"197607","2019-05-17 00:39:10","http://buhleni.co.za/images/Wolf.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/197607/","zbetcheckin"
 "197606","2019-05-17 00:36:07","http://ygraphx.com/DEPARTURES_MAY3/DOC/DiCLLsMFNTLXBwNMLIfFEpOIrupJ/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/197606/","spamhaus"
 "197605","2019-05-17 00:28:03","http://biomedmat.org/INC/erNNZoxosDTbeJAaGHmcdAzgZrJryi/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/197605/","spamhaus"
 "197604","2019-05-17 00:25:04","https://uniquedestination.mitsishotels.com/wp-content/uploads/DOC/UdDQpPobKlwrngQGyHLzwyp/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/197604/","spamhaus"
 "197603","2019-05-17 00:24:12","http://down1.xt70.com/soft/170331/12037.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/197603/","zbetcheckin"
 "197602","2019-05-17 00:16:06","http://gorinkan.org/DVedit/INC/cgyfeo3enwqh1db8t6a3_13xbr8q-1836727870671/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/197602/","spamhaus"
 "197601","2019-05-17 00:12:13","http://great.cl/ortuzar.cl/esp/ixjwtev0k5ze2_6pt2rqck3-52580352/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/197601/","spamhaus"
-"197600","2019-05-17 00:11:41","http://buhleni.co.za/images/Spyder.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/197600/","zbetcheckin"
+"197600","2019-05-17 00:11:41","http://buhleni.co.za/images/Spyder.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/197600/","zbetcheckin"
 "197599","2019-05-17 00:06:05","http://congnghexanhtn.vn/cgi-bin/lm/HXiFZxIhssOosIxXZEDO/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/197599/","spamhaus"
 "197598","2019-05-17 00:02:22","http://congnghexanhtn.vn/cgi-bin/sites/oi2h8eb32rlswyhyoe274vh802q_vd3boc2o-7590611699/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/197598/","spamhaus"
 "197597","2019-05-16 23:59:10","http://mysterylover.com/corenascreations/zencartcatalog/cache/LLC/tYTXviiUWFyKjmIVRksMFt/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/197597/","spamhaus"
@@ -156956,7 +157334,7 @@
 "195932","2019-05-14 06:51:26","http://89.32.62.100:59306/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/195932/","UrBogan"
 "195931","2019-05-14 06:51:23","http://93.78.52.109:19844/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/195931/","UrBogan"
 "195930","2019-05-14 06:51:18","http://221.158.52.96:31273/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/195930/","UrBogan"
-"195929","2019-05-14 06:51:14","http://86.107.167.93:5333/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/195929/","UrBogan"
+"195929","2019-05-14 06:51:14","http://86.107.167.93:5333/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/195929/","UrBogan"
 "195928","2019-05-14 06:51:09","http://176.230.127.229:43697/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/195928/","UrBogan"
 "195927","2019-05-14 06:51:04","http://151.177.105.32:1152/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/195927/","UrBogan"
 "195926","2019-05-14 06:50:12","http://109.185.43.219:3763/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/195926/","UrBogan"
@@ -157858,7 +158236,7 @@
 "195023","2019-05-12 08:28:04","http://www.axens-archi.com/5.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/195023/","zbetcheckin"
 "195022","2019-05-12 08:24:04","http://23.254.217.198/miori.mips","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/195022/","zbetcheckin"
 "195021","2019-05-12 08:24:02","http://paiklawgroup.com/tracking/parcel_details_PDF.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/195021/","zbetcheckin"
-"195020","2019-05-12 08:23:07","http://68.129.32.96:17523/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/195020/","UrBogan"
+"195020","2019-05-12 08:23:07","http://68.129.32.96:17523/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/195020/","UrBogan"
 "195019","2019-05-12 08:15:14","http://axens-archi.com/vv.exe","offline","malware_download","exe,ImminentRAT","https://urlhaus.abuse.ch/url/195019/","zbetcheckin"
 "195018","2019-05-12 08:15:10","http://systemservicex.azurewebsites.net/Files/SearchFile.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/195018/","zbetcheckin"
 "195017","2019-05-12 08:15:07","http://5.56.124.92:21643/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/195017/","UrBogan"
@@ -160980,7 +161358,7 @@
 "191816","2019-05-06 23:46:03","http://allenheim.dk/wwvvv/trusted.en.signed.public.sec/","offline","malware_download","None","https://urlhaus.abuse.ch/url/191816/","spamhaus"
 "191815","2019-05-06 23:43:03","http://alphaterapi.no/verif.Eng.logged.public.biz/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/191815/","spamhaus"
 "191814","2019-05-06 23:38:03","http://alliancelk.com/kiffsnew/wp-content/uploads/open.En.myacc.docs.com/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/191814/","spamhaus"
-"191813","2019-05-06 23:27:08","http://consultingcy.com/bdrkm/trusted.EN.anyone.office.com/","online","malware_download","None","https://urlhaus.abuse.ch/url/191813/","spamhaus"
+"191813","2019-05-06 23:27:08","http://consultingcy.com/bdrkm/trusted.EN.anyone.office.com/","offline","malware_download","None","https://urlhaus.abuse.ch/url/191813/","spamhaus"
 "191812","2019-05-06 23:23:05","http://anareborn.com.br/atendimento/trusted.Eng.signed.public.com/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/191812/","spamhaus"
 "191811","2019-05-06 23:18:03","http://andrewsleepa.com/pandarealestateflorida.com/secure.Eng.myaccount.docs.net/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/191811/","spamhaus"
 "191810","2019-05-06 23:17:05","http://andyelliott.us/AIF/r67g80lujgz0p77gg6ecp8r4_o4akncrwh-465247106455076/","offline","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/191810/","spamhaus"
@@ -165538,7 +165916,7 @@
 "187219","2019-04-29 15:24:05","http://103.136.40.183:80/bins/DEMONS.mips","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/187219/","zbetcheckin"
 "187218","2019-04-29 15:24:03","http://134.209.156.37:80/bins/orphic.arm5","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/187218/","zbetcheckin"
 "187217","2019-04-29 15:20:36","http://134.209.156.37:80/bins/orphic.arm","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/187217/","zbetcheckin"
-"187216","2019-04-29 15:20:34","http://112.184.88.60:42417/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/187216/","zbetcheckin"
+"187216","2019-04-29 15:20:34","http://112.184.88.60:42417/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/187216/","zbetcheckin"
 "187215","2019-04-29 15:20:16","http://134.209.156.37:80/bins/orphic.arm7","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/187215/","zbetcheckin"
 "187214","2019-04-29 15:20:13","http://27.238.33.39:36204/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/187214/","zbetcheckin"
 "187213","2019-04-29 15:20:03","http://139.59.78.79:80/bins/hoho.arm","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/187213/","zbetcheckin"
@@ -167033,7 +167411,7 @@
 "185716","2019-04-26 19:22:06","https://mackprints.com/clean.exe","offline","malware_download","exe,Formbook","https://urlhaus.abuse.ch/url/185716/","zbetcheckin"
 "185715","2019-04-26 19:20:05","http://mywebnerd.com/moodle/XEcYR-UXE2Bb0IBkAUuyE_jTYXuGRd-70q/","offline","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/185715/","Cryptolaemus1"
 "185714","2019-04-26 19:20:04","http://todomuta.com/tm/INC/jXQ6wZkLswqp/","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/185714/","spamhaus"
-"185713","2019-04-26 19:17:06","http://xiaoma-10021647.file.myqcloud.com/qrtb.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/185713/","zbetcheckin"
+"185713","2019-04-26 19:17:06","http://xiaoma-10021647.file.myqcloud.com/qrtb.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/185713/","zbetcheckin"
 "185712","2019-04-26 19:16:08","http://heke.net/images/grbZW-zBzuxgmP6whmiz_GMJxbDwu-ay/","offline","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/185712/","Cryptolaemus1"
 "185711","2019-04-26 19:16:06","http://tohkatsukumiai.or.jp/img/INC/XPm3QwY1C0W/","offline","malware_download","None","https://urlhaus.abuse.ch/url/185711/","spamhaus"
 "185710","2019-04-26 19:08:04","http://hermagi.ir/wp-includes/tvhIv-9wayRECj2S3bI9_paHMqLmlH-fN/","offline","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/185710/","Cryptolaemus1"
@@ -167387,7 +167765,7 @@
 "185361","2019-04-26 10:54:51","http://rjxz-1253334198.file.myqcloud.com/QQ%E7%BE%A4%E6%88%90%E5%91%98%E5%88%A0%E9%99%A4%E5%99%A8.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/185361/","zbetcheckin"
 "185360","2019-04-26 10:53:12","https://www.rezeptevegetarisch.com/iwouiey.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/185360/","zbetcheckin"
 "185359","2019-04-26 10:46:37","http://rjxz-1253334198.file.myqcloud.com/QQ%E7%A9%BA%E9%97%B4%E6%89%B9%E9%87%8F%E5%B1%8F%E8%94%BD%E6%8C%87%E5%AE%9A%E5%A5%BD%E5%8F%8B%E5%8A%A8%E6%80%81.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/185359/","zbetcheckin"
-"185358","2019-04-26 10:45:56","http://yuyu02004-10043918.file.myqcloud.com/cc.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/185358/","zbetcheckin"
+"185358","2019-04-26 10:45:56","http://yuyu02004-10043918.file.myqcloud.com/cc.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/185358/","zbetcheckin"
 "185357","2019-04-26 10:28:15","http://loadedrones.tk/Oj/oj.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/185357/","abuse_ch"
 "185356","2019-04-26 10:28:04","http://loadedrones.tk/Oj/Oj/oj.doc","offline","malware_download","doc,Loki","https://urlhaus.abuse.ch/url/185356/","abuse_ch"
 "185355","2019-04-26 10:27:21","http://zahiretnadia.free.fr/dl/up.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/185355/","zbetcheckin"
@@ -168702,7 +169080,7 @@
 "184013","2019-04-24 16:44:25","http://baldorclip.icu/clp/2.exe","offline","malware_download","ArkeiStealer,exe","https://urlhaus.abuse.ch/url/184013/","x42x5a"
 "184012","2019-04-24 16:44:12","http://baldorclip.icu/clp/1.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/184012/","x42x5a"
 "184011","2019-04-24 16:44:03","http://nehty-maki.cz/wp-content/LLC/A4LYwMGwFg/","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/184011/","spamhaus"
-"184010","2019-04-24 16:43:19","http://mutec.jp/.www/aloha.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/184010/","x42x5a"
+"184010","2019-04-24 16:43:19","http://mutec.jp/.www/aloha.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/184010/","x42x5a"
 "184009","2019-04-24 16:41:42","http://www.sunnysani.com/hasr/REMEME.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/184009/","de_aviation"
 "184008","2019-04-24 16:41:06","http://92.38.135.134/dom2","offline","malware_download","None","https://urlhaus.abuse.ch/url/184008/","de_aviation"
 "184007","2019-04-24 16:40:06","http://beautybusiness.by/bitrix/admin/css/order.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/184007/","de_aviation"
@@ -169681,7 +170059,7 @@
 "183031","2019-04-23 15:03:08","http://www.lafoulee.com/calendar/ai9tx-pyen5zi-tdmaf/","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/183031/","spamhaus"
 "183030","2019-04-23 15:02:16","https://pureprotea.com/ynibgkd65jf/IjpU-jPXjRcx2PfQ9tT_NhYiukhD-ZP3/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/183030/","Cryptolaemus1"
 "183029","2019-04-23 15:02:05","http://www.lecombava.com/wp-content/FILE/PRs3CWUiT/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/183029/","Cryptolaemus1"
-"183028","2019-04-23 15:01:14","http://dl.iqilie.com/znsrf/180814/QianYueSetup-4534.exe","online","malware_download","BlackShades,exe","https://urlhaus.abuse.ch/url/183028/","zbetcheckin"
+"183028","2019-04-23 15:01:14","http://dl.iqilie.com/znsrf/180814/QianYueSetup-4534.exe","offline","malware_download","BlackShades,exe","https://urlhaus.abuse.ch/url/183028/","zbetcheckin"
 "183027","2019-04-23 14:59:06","http://hmjanealamhs.edu.bd/cgi-bin/uXHn-pGwIfHqUsigbTA_psXmtoirs-iWq/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/183027/","Cryptolaemus1"
 "183026","2019-04-23 14:58:15","https://lcced.com.ve/images/FILE/RQmoqv2qet/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/183026/","Cryptolaemus1"
 "183025","2019-04-23 14:57:03","https://www.eigenheim4life.de/s/p89km6e-q1l97-beryri/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/183025/","Cryptolaemus1"
@@ -188394,7 +188772,7 @@
 "163835","2019-03-22 05:16:03","http://turismolenzarote.com/accounting/documents/download.php?file=ODQ3Mjk5NjI2OF9fX19lbGV3dWwuZXhl","offline","malware_download","exe","https://urlhaus.abuse.ch/url/163835/","zbetcheckin"
 "163834","2019-03-22 05:08:08","http://declic-prospection.com/installation_declic.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/163834/","zbetcheckin"
 "163833","2019-03-22 05:08:02","http://turismolenzarote.com/accounting/documents/download.php?file=NDg0ODU5MDQyNl9fX19zY2FuczM0LnBuZw==","offline","malware_download","exe","https://urlhaus.abuse.ch/url/163833/","zbetcheckin"
-"163832","2019-03-22 05:03:14","http://s14b.groundyun.cn/20151218/%E5%B0%8F%E9%B8%A1%E5%85%A5%E4%BE%B5%E8%80%853.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/163832/","zbetcheckin"
+"163832","2019-03-22 05:03:14","http://s14b.groundyun.cn/20151218/%E5%B0%8F%E9%B8%A1%E5%85%A5%E4%BE%B5%E8%80%853.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/163832/","zbetcheckin"
 "163831","2019-03-22 05:02:43","http://rrbmexico.com/license.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/163831/","zbetcheckin"
 "163830","2019-03-22 04:51:04","https://www.drivingwitharrow.com/wp-content/plugins/w8KF86/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/163830/","Cryptolaemus1"
 "163829","2019-03-22 04:49:06","http://www.winkniga.ru/installw.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/163829/","zbetcheckin"
@@ -189051,7 +189429,7 @@
 "163172","2019-03-21 01:35:13","http://allthegoodparts.com/wp-includes/llprm-tfsir2-hegod/","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/163172/","spamhaus"
 "163171","2019-03-21 01:35:07","http://108studija.lt/wp-includes/86re-7cfvn-jtjidycsf/","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/163171/","spamhaus"
 "163169","2019-03-21 01:26:02","http://134.209.88.23/2kr.txt","offline","malware_download","GandCrab,js,KOR,Ransomware","https://urlhaus.abuse.ch/url/163169/","anonymous"
-"163168","2019-03-21 01:20:08","http://dudulm.com/dududj2.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/163168/","zbetcheckin"
+"163168","2019-03-21 01:20:08","http://dudulm.com/dududj2.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/163168/","zbetcheckin"
 "163167","2019-03-21 01:11:35","http://www.dot.state.mn.us/materials/software/MnPAVE-Rigid.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/163167/","zbetcheckin"
 "163164","2019-03-21 01:01:36","https://frame25-dev.co.uk:443/wp-includes/sendincsecure/service/verif/EN/201903/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/163164/","Cryptolaemus1"
 "163163","2019-03-21 01:01:35","http://kanittha.rpu.ac.th/wp-content/uploads/2016/sec.myaccount.docs.com/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/163163/","Cryptolaemus1"
@@ -194042,7 +194420,7 @@
 "158151","2019-03-13 09:55:11","http://188.209.49.189/nyKnYe6khg/fbot.x86","offline","malware_download","elf,fbot","https://urlhaus.abuse.ch/url/158151/","0xrb"
 "158150","2019-03-13 09:55:10","http://188.209.49.189/nyKnYe6khg/fbot.x86_64","offline","malware_download","elf,fbot","https://urlhaus.abuse.ch/url/158150/","0xrb"
 "158149","2019-03-13 09:55:08","http://hohesc.donebox.hu/wp-admin/0uofhz-550nrs-rznrde/","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/158149/","spamhaus"
-"158148","2019-03-13 09:53:08","http://www.hmpmall.co.kr/statics/images/HMPMall.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/158148/","zbetcheckin"
+"158148","2019-03-13 09:53:08","http://www.hmpmall.co.kr/statics/images/HMPMall.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/158148/","zbetcheckin"
 "158145","2019-03-13 09:39:09","http://185.244.25.169/H18/sh4","offline","malware_download","None","https://urlhaus.abuse.ch/url/158145/","VtLyra"
 "158147","2019-03-13 09:39:09","http://185.244.25.169/H18/spc","offline","malware_download","None","https://urlhaus.abuse.ch/url/158147/","VtLyra"
 "158146","2019-03-13 09:39:09","http://185.244.25.169:80/H18/sh4","offline","malware_download","None","https://urlhaus.abuse.ch/url/158146/","VtLyra"
@@ -199704,7 +200082,7 @@
 "152468","2019-03-05 12:50:10","http://blog.atxin.cc/wp-admin/sendincsec/messages/trust/EN/032019/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/152468/","Cryptolaemus1"
 "152467","2019-03-05 12:45:05","http://project.hoangnq.com/tour/images/catalog/sendincverif/service/secure/EN_en/03-2019/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/152467/","Cryptolaemus1"
 "152466","2019-03-05 12:35:02","http://ozemag.com/wp-content/themes/emag/template-parts/ashan.russia.zakaz.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/152466/","zbetcheckin"
-"152465","2019-03-05 12:34:07","http://ozemag.com/wp-content/themes/emag/template-parts/metro.cash.and.carry.zakaz.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/152465/","zbetcheckin"
+"152465","2019-03-05 12:34:07","http://ozemag.com/wp-content/themes/emag/template-parts/metro.cash.and.carry.zakaz.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/152465/","zbetcheckin"
 "152464","2019-03-05 12:34:04","http://46.29.160.82/mips","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/152464/","zbetcheckin"
 "152463","2019-03-05 12:33:03","http://pantone-iq.com/wp-admin/kboh-1vr6p-jzks.view/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/152463/","Cryptolaemus1"
 "152462","2019-03-05 12:30:44","http://mohidigi.com/wp-admin/woic5-n2xz2-qjlnc.view/","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/152462/","spamhaus"
@@ -206780,7 +207158,7 @@
 "145166","2019-02-25 06:30:05","http://gweboffice.co.uk/admin1@office3.doc","offline","malware_download","doc","https://urlhaus.abuse.ch/url/145166/","abuse_ch"
 "145165","2019-02-25 06:27:02","http://77.73.70.115/dkfjb/ke1.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/145165/","zbetcheckin"
 "145164","2019-02-25 06:26:03","http://baycityfence.com/BUBA-PO.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/145164/","abuse_ch"
-"145163","2019-02-25 06:13:07","http://down.tgjkbx.cn/openlink/xzq1.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/145163/","zbetcheckin"
+"145163","2019-02-25 06:13:07","http://down.tgjkbx.cn/openlink/xzq1.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/145163/","zbetcheckin"
 "145161","2019-02-25 06:01:57","http://80.211.172.75/armv5l","offline","malware_download","elf,gafgyt","https://urlhaus.abuse.ch/url/145161/","0xrb"
 "145162","2019-02-25 06:01:57","http://80.211.172.75/powerpc-440fp","offline","malware_download","elf,gafgyt","https://urlhaus.abuse.ch/url/145162/","0xrb"
 "145160","2019-02-25 06:01:54","http://80.211.172.75/armv4l","offline","malware_download","elf,gafgyt","https://urlhaus.abuse.ch/url/145160/","0xrb"
@@ -211464,7 +211842,7 @@
 "140334","2019-02-20 02:59:05","http://152.249.231.35:6929/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/140334/","zbetcheckin"
 "140333","2019-02-20 02:58:09","http://189.113.32.35:10708/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/140333/","zbetcheckin"
 "140332","2019-02-20 02:58:06","http://157.230.208.195:80/x86","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/140332/","zbetcheckin"
-"140331","2019-02-20 02:58:05","http://181.49.241.50:32292/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/140331/","zbetcheckin"
+"140331","2019-02-20 02:58:05","http://181.49.241.50:32292/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/140331/","zbetcheckin"
 "140330","2019-02-20 02:56:03","http://162.216.156.173/rebirth.arm5","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/140330/","zbetcheckin"
 "140329","2019-02-20 02:56:02","http://157.230.49.203/bins/xova.m68k","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/140329/","zbetcheckin"
 "140328","2019-02-20 02:55:05","http://162.216.156.173/ffrebirth.arm6","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/140328/","zbetcheckin"
@@ -211480,7 +211858,7 @@
 "140318","2019-02-20 02:22:02","http://chuthapdobg.org.vn/tmp/Invoice/hgjz-zS1_rC-tl3","offline","malware_download","doc","https://urlhaus.abuse.ch/url/140318/","zbetcheckin"
 "140317","2019-02-20 02:21:10","http://yrsmartshoppy.com/t.exe","offline","malware_download","exe,GandCrab","https://urlhaus.abuse.ch/url/140317/","zbetcheckin"
 "140316","2019-02-20 02:21:06","http://139.99.186.18/xml/akin.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/140316/","zbetcheckin"
-"140315","2019-02-20 02:15:08","http://static.topxgun.com/1465810383951_443.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/140315/","zbetcheckin"
+"140315","2019-02-20 02:15:08","http://static.topxgun.com/1465810383951_443.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/140315/","zbetcheckin"
 "140314","2019-02-20 02:13:05","http://kamagra4uk.com/sa/jo/jeo.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/140314/","zbetcheckin"
 "140313","2019-02-20 02:13:04","http://oliveiraejesus.com.br/js/p.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/140313/","zbetcheckin"
 "140312","2019-02-20 02:06:07","http://nondollarreport.com/wp-content/cache/jboy.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/140312/","zbetcheckin"
@@ -242916,7 +243294,7 @@
 "108396","2019-01-23 12:18:05","http://frankshedy.5gbfree.com/mys.exe","offline","malware_download","exe,NanoCore","https://urlhaus.abuse.ch/url/108396/","oppimaniac"
 "108395","2019-01-23 12:11:10","http://vaytienlaocai.com/wp-content/themes/flatsome/woocommerce/cart/sserv.jpg","offline","malware_download","exe,Troldesh","https://urlhaus.abuse.ch/url/108395/","zbetcheckin"
 "108394","2019-01-23 12:05:05","http://www.mytrains.net/administrator/templates/isis/less/bootstrap/Payment%20Challan.zip","online","malware_download","Kutaki,zipped-exe","https://urlhaus.abuse.ch/url/108394/","anonymous"
-"108393","2019-01-23 11:58:16","http://yesky.xzstatic.com/2017/08/02/yxlmLOLpfzj_v14.6.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/108393/","zbetcheckin"
+"108393","2019-01-23 11:58:16","http://yesky.xzstatic.com/2017/08/02/yxlmLOLpfzj_v14.6.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/108393/","zbetcheckin"
 "108392","2019-01-23 11:56:05","http://iparkingtest.com/wp-content/themes/noyah/css/theme/ssj.jpg","offline","malware_download","exe,Troldesh","https://urlhaus.abuse.ch/url/108392/","zbetcheckin"
 "108391","2019-01-23 11:55:32","http://ceronamtinclube.icu/opuba/unit.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/108391/","oppimaniac"
 "108390","2019-01-23 11:51:03","http://csb-co-id.ga/file/sweed.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/108390/","oppimaniac"
@@ -245252,7 +245630,7 @@
 "105999","2019-01-19 21:43:05","http://cdn-10049480.file.myqcloud.com/qcoin/qcoin142.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/105999/","zbetcheckin"
 "105998","2019-01-19 21:43:03","http://cdn-10049480.file.myqcloud.com/jd/jd124.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/105998/","zbetcheckin"
 "105997","2019-01-19 21:42:06","http://cdn-10049480.file.myqcloud.com/qcoin/qcoin141.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/105997/","zbetcheckin"
-"105996","2019-01-19 21:32:05","http://cdn-10049480.file.myqcloud.com/jd/jd127.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/105996/","zbetcheckin"
+"105996","2019-01-19 21:32:05","http://cdn-10049480.file.myqcloud.com/jd/jd127.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/105996/","zbetcheckin"
 "105994","2019-01-19 21:31:03","http://cdn-10049480.file.myqcloud.com/qcoin/qcoin146.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/105994/","zbetcheckin"
 "105993","2019-01-19 21:29:10","http://ah.download.cycore.cn/rrt/32287da69c40a12819fe3874d0b63e66/73728155/684642c35e6d9fa859d961031ed2f626.doc","offline","malware_download","doc","https://urlhaus.abuse.ch/url/105993/","zbetcheckin"
 "105992","2019-01-19 21:29:07","http://cdn-10049480.file.myqcloud.com/jd/jd145.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/105992/","zbetcheckin"
@@ -251581,7 +251959,7 @@
 "99524","2018-12-25 04:00:04","http://tendep.com/hinhanh/thuvienanh/sad.exe","offline","malware_download","exe,njRAT","https://urlhaus.abuse.ch/url/99524/","zbetcheckin"
 "99523","2018-12-25 03:58:10","http://tendep.com/hinhanh/rosinject.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/99523/","zbetcheckin"
 "99522","2018-12-25 03:42:04","http://tendep.com/hinhanh/payload.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/99522/","zbetcheckin"
-"99521","2018-12-25 03:39:32","http://mv360.net/MV360_ACTIVEX_2.5.2.EXE","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/99521/","zbetcheckin"
+"99521","2018-12-25 03:39:32","http://mv360.net/MV360_ACTIVEX_2.5.2.EXE","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/99521/","zbetcheckin"
 "99518","2018-12-25 03:16:28","http://mv360.net/mv360_activex.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/99518/","zbetcheckin"
 "99517","2018-12-25 03:06:04","http://81.133.236.83:13241/.i","offline","malware_download","elf","https://urlhaus.abuse.ch/url/99517/","zbetcheckin"
 "99516","2018-12-25 02:46:04","http://inscribesignage.com/wp-admin/js/mt.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/99516/","zbetcheckin"
@@ -251759,7 +252137,7 @@
 "99329","2018-12-24 08:44:06","http://statsrichwork.com/def.exe","offline","malware_download","exe,GandCrab,Ransomware,Ransomware.GandCrab","https://urlhaus.abuse.ch/url/99329/","de_aviation"
 "99328","2018-12-24 08:37:06","http://jbcc.asia/maritime/nza.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/99328/","zbetcheckin"
 "99327","2018-12-24 08:25:11","http://179.110.70.23:9696/.i","offline","malware_download","elf","https://urlhaus.abuse.ch/url/99327/","zbetcheckin"
-"99326","2018-12-24 08:25:05","http://88.250.196.101:61781/.i","online","malware_download","elf","https://urlhaus.abuse.ch/url/99326/","zbetcheckin"
+"99326","2018-12-24 08:25:05","http://88.250.196.101:61781/.i","offline","malware_download","elf","https://urlhaus.abuse.ch/url/99326/","zbetcheckin"
 "99325","2018-12-24 08:09:03","https://solacesoup.com/mainto/Scans073.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/99325/","zbetcheckin"
 "99324","2018-12-24 06:51:12","http://209.141.43.15/bins/x86","offline","malware_download","elf","https://urlhaus.abuse.ch/url/99324/","Gandylyan1"
 "99323","2018-12-24 06:51:11","http://209.141.43.15/bins/mips","offline","malware_download","elf","https://urlhaus.abuse.ch/url/99323/","Gandylyan1"
@@ -255545,7 +255923,7 @@
 "95434","2018-12-14 23:01:09","http://www.reparaties-ipad.nl/vxXg-U9xPLQZ3m2ioweb_nlMNOlgI-JoD/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/95434/","Cryptolaemus1"
 "95432","2018-12-14 23:01:08","http://sk.news-front.info/quIiD-Rn48S9zj7KZkkl_fUUDQlNz-pg/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/95432/","Cryptolaemus1"
 "95431","2018-12-14 23:01:07","http://movil-sales.ru/jePAx-6mz3uC25K1r5bLW_XzzoCLQxR-Gx/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/95431/","Cryptolaemus1"
-"95430","2018-12-14 23:01:06","http://gd2.greenxf.com:8099/DOWNCAIJI/5/@GREENXFB2P.RAR","online","malware_download","rar","https://urlhaus.abuse.ch/url/95430/","zbetcheckin"
+"95430","2018-12-14 23:01:06","http://gd2.greenxf.com:8099/DOWNCAIJI/5/@GREENXFB2P.RAR","offline","malware_download","rar","https://urlhaus.abuse.ch/url/95430/","zbetcheckin"
 "95429","2018-12-14 23:00:02","http://35.242.233.97/PhVw-B4imOOgsVwgNuKk_BJfLDKbr-GI/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/95429/","Cryptolaemus1"
 "95428","2018-12-14 22:49:36","http://xn----etbbfqobtix.xn--p1ai/IsSD-lXzcQ7FPQ9LkmJ2_PzKTjKmG-xx/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/95428/","Cryptolaemus1"
 "95427","2018-12-14 22:49:35","http://www.tintafinarestaurante.com/GGZg-3gG1i6jYjWpWB6f_pJvUskrqu-LpE/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/95427/","Cryptolaemus1"
@@ -256119,7 +256497,7 @@
 "94856","2018-12-14 05:48:02","http://spth.virii.lu/monad.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/94856/","zbetcheckin"
 "94855","2018-12-14 05:47:11","http://ini.egkj.com/soft/58wangwei/musicclub.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/94855/","zbetcheckin"
 "94854","2018-12-14 05:47:10","http://s.51shijuan.com/cz09/51cz200908105172se.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/94854/","zbetcheckin"
-"94853","2018-12-14 05:47:05","http://ini.egkj.com/soft/58wangwei/merlin.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/94853/","zbetcheckin"
+"94853","2018-12-14 05:47:05","http://ini.egkj.com/soft/58wangwei/merlin.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/94853/","zbetcheckin"
 "94852","2018-12-14 05:46:07","http://teamfluegel.com/WU_Receipt01.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/94852/","zbetcheckin"
 "94851","2018-12-14 05:46:04","https://sites.google.com/a/cvcatholic.org/middle-school-reading/home/participation-discussion-rubric/participation:discussionrubric.doc","offline","malware_download","doc","https://urlhaus.abuse.ch/url/94851/","zbetcheckin"
 "94850","2018-12-14 05:46:03","http://www.itwss.com/wp-content/themes/sydney/bolu.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/94850/","zbetcheckin"
@@ -259963,7 +260341,7 @@
 "90837","2018-12-07 02:57:25","http://e-saantech.com/wwvvv/sites/EN_en/New-order/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/90837/","Cryptolaemus1"
 "90836","2018-12-07 02:57:23","http://e-saantech.com/wwvvv/sites/EN_en/New-order","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/90836/","Cryptolaemus1"
 "90835","2018-12-07 02:57:20","http://drvictormarques.com.br/Dec2018/En_us/Invoices-attached/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/90835/","Cryptolaemus1"
-"90834","2018-12-07 02:57:19","http://digilib.dianhusada.ac.id/Y1MPmmhL9QtIZ12vyrX/DE/200-Jahre/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/90834/","Cryptolaemus1"
+"90834","2018-12-07 02:57:19","http://digilib.dianhusada.ac.id/Y1MPmmhL9QtIZ12vyrX/DE/200-Jahre/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/90834/","Cryptolaemus1"
 "90833","2018-12-07 02:57:15","http://darkparticle.com/IRS/Internal-Revenue-Service/Tax-Account-Transcript/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/90833/","Cryptolaemus1"
 "90832","2018-12-07 02:57:14","http://comidasecia.com.br/IRS/IRS-irsonline-treasury-gov/Tax-Return-Transcript/12062018/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/90832/","Cryptolaemus1"
 "90831","2018-12-07 02:57:12","http://ccc.ac.th/default/US_us/Invoice-7572566-December/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/90831/","Cryptolaemus1"
@@ -261739,7 +262117,7 @@
 "89037","2018-12-05 00:12:07","http://iberias.ge/PFGbVX0Nl","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/89037/","Cryptolaemus1"
 "89036","2018-12-05 00:12:05","http://fortifi.com/bECoyZ4dr","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/89036/","Cryptolaemus1"
 "89035","2018-12-05 00:12:03","http://kosses.nl/s7U7gvF","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/89035/","Cryptolaemus1"
-"89034","2018-12-04 23:21:13","http://tcy.198424.com/SUIJICHOUQIANCX.ZIP","offline","malware_download","zip","https://urlhaus.abuse.ch/url/89034/","zbetcheckin"
+"89034","2018-12-04 23:21:13","http://tcy.198424.com/SUIJICHOUQIANCX.ZIP","online","malware_download","zip","https://urlhaus.abuse.ch/url/89034/","zbetcheckin"
 "89033","2018-12-04 23:21:09","http://46.17.47.73/vodity.mips","offline","malware_download","elf","https://urlhaus.abuse.ch/url/89033/","zbetcheckin"
 "89032","2018-12-04 22:46:09","http://websitedesigngarden.com/k7Xp","offline","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/89032/","Cryptolaemus1"
 "89031","2018-12-04 22:46:06","http://itbparnamirim.org/fj","offline","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/89031/","Cryptolaemus1"
@@ -263215,7 +263593,7 @@
 "87533","2018-11-30 15:44:07","http://macecraft.site/modules/geoip/geofile/dll/popup.dbs","offline","malware_download","exe","https://urlhaus.abuse.ch/url/87533/","de_aviation"
 "87532","2018-11-30 15:44:04","http://ddl3.data.hu/get/300095/11552248/2018112810098HTG.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/87532/","de_aviation"
 "87531","2018-11-30 15:44:03","https://share.dmca.gripe/3MPMOJEMMqUSlT7v.jpg","offline","malware_download","exe,NanoCore,rat","https://urlhaus.abuse.ch/url/87531/","de_aviation"
-"87530","2018-11-30 15:29:01","http://www.tandenblekenhoofddorp.nl/files/EN_en/Sales-Invoice/","offline","malware_download","emotet,heodo,word doc","https://urlhaus.abuse.ch/url/87530/","malware_traffic"
+"87530","2018-11-30 15:29:01","http://www.tandenblekenhoofddorp.nl/files/EN_en/Sales-Invoice/","online","malware_download","emotet,heodo,word doc","https://urlhaus.abuse.ch/url/87530/","malware_traffic"
 "87529","2018-11-30 15:29:00","http://wowter.com/files/US/Invoice-for-i/w-11/29/2018/","offline","malware_download","emotet,heodo,word doc","https://urlhaus.abuse.ch/url/87529/","malware_traffic"
 "87528","2018-11-30 15:28:58","http://winnieobrien.com/doc/En/Past-Due-Invoice/","offline","malware_download","emotet,heodo,word doc","https://urlhaus.abuse.ch/url/87528/","malware_traffic"
 "87527","2018-11-30 15:28:56","http://whysquare.co.nz/EN/Clients_Coupons/","offline","malware_download","emotet,heodo,word doc","https://urlhaus.abuse.ch/url/87527/","malware_traffic"
@@ -265890,7 +266268,7 @@
 "84824","2018-11-25 12:31:04","http://tabungansiswa.tk/wp-admin/css/En_us/BF_Coupons/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/84824/","cocaman"
 "84823","2018-11-25 06:14:04","http://1.254.80.184:53397/.i","offline","malware_download","elf","https://urlhaus.abuse.ch/url/84823/","zbetcheckin"
 "84822","2018-11-25 06:05:10","http://chippingscottage.customer.netspace.net.au/9Mf.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/84822/","zbetcheckin"
-"84821","2018-11-25 05:51:56","http://down.haote.com/xiaoyuduanxi.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/84821/","zbetcheckin"
+"84821","2018-11-25 05:51:56","http://down.haote.com/xiaoyuduanxi.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/84821/","zbetcheckin"
 "84820","2018-11-25 05:45:01","http://chippingscottage.customer.netspace.net.au/hf1o936n/gRYKj7.exe","offline","malware_download","exe,zeus","https://urlhaus.abuse.ch/url/84820/","zbetcheckin"
 "84819","2018-11-25 05:44:48","http://down.haote.com/lkwgwg.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/84819/","zbetcheckin"
 "84818","2018-11-25 05:36:41","http://down.haote.com/adzhuru232.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/84818/","zbetcheckin"
@@ -283549,14 +283927,14 @@
 "66809","2018-10-11 15:36:08","http://mandala.mn/update/chidori.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/66809/","zbetcheckin"
 "66808","2018-10-11 15:36:02","http://185.244.25.200/bins/gemini.m68k","offline","malware_download","elf","https://urlhaus.abuse.ch/url/66808/","zbetcheckin"
 "66807","2018-10-11 15:26:03","http://payesh-co.com/po.doc","offline","malware_download","RTF","https://urlhaus.abuse.ch/url/66807/","zbetcheckin"
-"66806","2018-10-11 15:18:07","http://dx1.qqtn.com/qq/qqdlq.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/66806/","zbetcheckin"
-"66805","2018-10-11 15:15:06","http://dx1.qqtn.com/qq/ddz.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/66805/","zbetcheckin"
+"66806","2018-10-11 15:18:07","http://dx1.qqtn.com/qq/qqdlq.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/66806/","zbetcheckin"
+"66805","2018-10-11 15:15:06","http://dx1.qqtn.com/qq/ddz.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/66805/","zbetcheckin"
 "66803","2018-10-11 15:05:07","http://dx1.qqtn.com/qq/csoldl.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/66803/","zbetcheckin"
 "66802","2018-10-11 14:58:02","http://cascinadellemele.it/uCpTB/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/66802/","abuse_ch"
 "66801","2018-10-11 14:57:03","http://sfbotvinnik.icu/folua/dwrite.exe","offline","malware_download","exe,Smoke Loader","https://urlhaus.abuse.ch/url/66801/","abuse_ch"
-"66800","2018-10-11 14:56:07","http://dx1.qqtn.com/qq/qqpetnurse.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/66800/","zbetcheckin"
+"66800","2018-10-11 14:56:07","http://dx1.qqtn.com/qq/qqpetnurse.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/66800/","zbetcheckin"
 "66799","2018-10-11 14:47:08","http://dx1.qqtn.com/qq/kjzb.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/66799/","zbetcheckin"
-"66798","2018-10-11 14:39:09","http://dx1.qqtn.com/qq/qqmfkp.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/66798/","zbetcheckin"
+"66798","2018-10-11 14:39:09","http://dx1.qqtn.com/qq/qqmfkp.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/66798/","zbetcheckin"
 "66796","2018-10-11 14:27:02","http://185.244.25.200/bins/gemini.arm","offline","malware_download","elf","https://urlhaus.abuse.ch/url/66796/","zbetcheckin"
 "66795","2018-10-11 14:22:04","http://stroysfera.com.ua/93-78520502289-7208613143877289106.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/66795/","zbetcheckin"
 "66794","2018-10-11 14:17:32","http://pondokarsitek.com/wp-content/themes/west/page-templates/inform.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/66794/","lam_esrever"
@@ -283568,7 +283946,7 @@
 "66788","2018-10-11 13:28:14","http://octap.igg.biz/1/brown1.msi","offline","malware_download","msi","https://urlhaus.abuse.ch/url/66788/","zbetcheckin"
 "66787","2018-10-11 13:28:08","http://mandala.mn/update/rasenga.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/66787/","zbetcheckin"
 "66786","2018-10-11 13:16:08","http://patch3.99ddd.com/2013/ALI213-MortalKKe+8Tr-LinGon.v1.0.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/66786/","zbetcheckin"
-"66785","2018-10-11 13:07:08","http://patch3.99ddd.com/newpatch4/ra2trn5.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/66785/","zbetcheckin"
+"66785","2018-10-11 13:07:08","http://patch3.99ddd.com/newpatch4/ra2trn5.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/66785/","zbetcheckin"
 "66784","2018-10-11 12:58:04","http://medipedics.com/ponygrace/Panel/chucksboy.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/66784/","cocaman"
 "66783","2018-10-11 12:38:02","https://d.coka.la/NWp40R.jpg","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/66783/","zbetcheckin"
 "66782","2018-10-11 12:07:02","http://memeconi.com/TNT/index.php?l=anti2.tkn","offline","malware_download","ursnif","https://urlhaus.abuse.ch/url/66782/","seikenDEV"
@@ -283941,20 +284319,20 @@
 "66395","2018-10-10 01:51:03","http://94.177.233.199/Demon.arm4","offline","malware_download","elf","https://urlhaus.abuse.ch/url/66395/","zbetcheckin"
 "66394","2018-10-10 01:39:03","http://ecuadortrust.org.uk/images/two/jon001.exe","offline","malware_download","exe,NetWire","https://urlhaus.abuse.ch/url/66394/","zbetcheckin"
 "66393","2018-10-10 01:38:03","http://ecuadortrust.org.uk/images/two/saguy.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/66393/","zbetcheckin"
-"66392","2018-10-10 00:51:03","http://dx2.qqtn.com/qq/XXHZW2.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/66392/","zbetcheckin"
+"66392","2018-10-10 00:51:03","http://dx2.qqtn.com/qq/XXHZW2.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/66392/","zbetcheckin"
 "66391","2018-10-10 00:50:12","http://dx2.qqtn.com/QQ/llkxuser.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/66391/","zbetcheckin"
 "66390","2018-10-10 00:50:10","http://gallery.mailchimp.com/e5e323f8390ddd27a48e175ca/files/Factura_Crezcamos.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/66390/","zbetcheckin"
 "66389","2018-10-10 00:50:07","http://dx2.qqtn.com/QQ/QQPetNurse3.01_Beta1.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/66389/","zbetcheckin"
 "66388","2018-10-10 00:45:04","https://gallery.mailchimp.com/30bdf0edb8faf4fb164f8c865/files/WBINBOUNDS.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/66388/","zbetcheckin"
 "66387","2018-10-10 00:38:03","http://gallery.mailchimp.com/5182e3ac85debb9b3b14915a4/files/Swift_Copy.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/66387/","zbetcheckin"
-"66386","2018-10-10 00:37:07","http://dx2.qqtn.com/QQ/olaQQddz1.37.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/66386/","zbetcheckin"
-"66385","2018-10-10 00:37:04","http://dx2.qqtn.com/QQ2/xxjpq.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/66385/","zbetcheckin"
+"66386","2018-10-10 00:37:07","http://dx2.qqtn.com/QQ/olaQQddz1.37.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/66386/","zbetcheckin"
+"66385","2018-10-10 00:37:04","http://dx2.qqtn.com/QQ2/xxjpq.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/66385/","zbetcheckin"
 "66384","2018-10-10 00:37:03","http://dx2.qqtn.com/qq2/jywgxrj.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/66384/","zbetcheckin"
 "66383","2018-10-10 00:36:07","http://gallery.mailchimp.com/8fda4e1d3758c37f74f3de96d/files/inv0ice_0019936.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/66383/","zbetcheckin"
-"66382","2018-10-10 00:36:05","http://dx2.qqtn.com/qq3/bdjpq.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/66382/","zbetcheckin"
+"66382","2018-10-10 00:36:05","http://dx2.qqtn.com/qq3/bdjpq.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/66382/","zbetcheckin"
 "66381","2018-10-10 00:29:10","http://198.1.188.107/ys808e","offline","malware_download","elf","https://urlhaus.abuse.ch/url/66381/","zbetcheckin"
-"66380","2018-10-10 00:29:08","http://dx2.qqtn.com/qq3/qqlogins.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/66380/","zbetcheckin"
-"66379","2018-10-10 00:29:06","http://dx2.qqtn.com/qq3/x5lydt.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/66379/","zbetcheckin"
+"66380","2018-10-10 00:29:08","http://dx2.qqtn.com/qq3/qqlogins.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/66380/","zbetcheckin"
+"66379","2018-10-10 00:29:06","http://dx2.qqtn.com/qq3/x5lydt.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/66379/","zbetcheckin"
 "66378","2018-10-10 00:28:07","http://dx2.qqtn.com/qq/qq4ddz1.10.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/66378/","zbetcheckin"
 "66377","2018-10-09 23:40:04","https://luckswatch.com/manageaccount/159AL42425-order-status-fulfilled","offline","malware_download","lnk,sLoad,zip","https://urlhaus.abuse.ch/url/66377/","ps66uk"
 "66376","2018-10-09 23:40:03","https://peoplewithai.com/manageaccount/09D2I543-order-status-fulfilled","offline","malware_download","lnk,sLoad,zip","https://urlhaus.abuse.ch/url/66376/","ps66uk"
@@ -283973,7 +284351,7 @@
 "66363","2018-10-09 20:01:06","http://toshioco.com/doc/WIZ.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/66363/","zbetcheckin"
 "66362","2018-10-09 19:55:03","https://oohrdg.by.files.1drv.com/y4mZDL-iW1ATb_5qP8sh7ES7NpyccZvqZHry3LC3St09_q_hEstXReFPyPlHsNx_Fs4kLcFsDeOVjhpBpwUbTHsekv5mbsslVN_K6u4rCHcdQh3obDsPyDeP3bWQfz7WRSt8KlihgrkGmnGNQKcjlmHvRicNb6RTtYHB71qUXVkL6mGAB3-HikMVdW2UKW6CgzBdZcYMH5RNxjoahr_1HAfvQ/DHL%20TRACKING%20REF.scr?download&psid=1","offline","malware_download","exe,NanoCore","https://urlhaus.abuse.ch/url/66362/","zbetcheckin"
 "66361","2018-10-09 19:52:31","http://geolegno.eu/9722653CVAPKJIT/PAYMENT/Business","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/66361/","JayTHL"
-"66360","2018-10-09 19:42:11","http://dx2.qqtn.com/qq/qqangel.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/66360/","zbetcheckin"
+"66360","2018-10-09 19:42:11","http://dx2.qqtn.com/qq/qqangel.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/66360/","zbetcheckin"
 "66359","2018-10-09 19:42:03","http://23.249.161.109/chf/agnt.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/66359/","zbetcheckin"
 "66358","2018-10-09 18:45:03","https://uc5b7b21c37968941e15f53c6c93.dl.dropboxusercontent.com/cd/0/get/ASk5k-lxl6XDzNY8iP8YHtpqx6wXfSOwugyXWql_qNFfmMBsl1kfMDkh1BOloPMNyzAPmln_3kW-7a2WfpGzvCgDDdHGhN92ikkMROYmfuwCnAvD3ZoBcDZHzdqLzawVYBwCLirGgJg5vL35jJlnLdkZ7xrGWGLKM5qwBsUENoQ_s9HWDRSxyv17hd6ROmBUQ3E/file?dl=1","offline","malware_download","zip","https://urlhaus.abuse.ch/url/66358/","zbetcheckin"
 "66357","2018-10-09 18:22:02","http://readyteam.org/29c.msi","offline","malware_download","msi","https://urlhaus.abuse.ch/url/66357/","zbetcheckin"
@@ -286691,7 +287069,7 @@
 "63609","2018-10-02 14:20:07","http://77190.prohoster.biz/Fuhacksgameijctr.exe","offline","malware_download","CoinMiner,exe,W64","https://urlhaus.abuse.ch/url/63609/","MJRooter"
 "63608","2018-10-02 14:20:06","http://77190.prohoster.biz/Fuhackssafebanprtct.exe","offline","malware_download","exe,spyware,Themida","https://urlhaus.abuse.ch/url/63608/","MJRooter"
 "63607","2018-10-02 14:20:03","http://very.ruvmp.ru/77777.exe","offline","malware_download","ArkeiStealer,Dapato,dropper,exe","https://urlhaus.abuse.ch/url/63607/","MJRooter"
-"63606","2018-10-02 14:06:09","http://bd11.52lishi.com/bd75837.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/63606/","zbetcheckin"
+"63606","2018-10-02 14:06:09","http://bd11.52lishi.com/bd75837.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/63606/","zbetcheckin"
 "63605","2018-10-02 14:06:03","http://darnellsim.us/doc/WIZZY.exe","offline","malware_download","exe,HawkEye","https://urlhaus.abuse.ch/url/63605/","zbetcheckin"
 "63604","2018-10-02 14:01:08","http://cosmictone.com.au/lHyBcgn/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/63604/","abuse_ch"
 "63603","2018-10-02 14:01:06","http://www.expressarsetelagoas.com.br/8tr1wP/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/63603/","abuse_ch"
@@ -291205,7 +291583,7 @@
 "58996","2018-09-22 07:51:06","http://51.68.120.61/real.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/58996/","zbetcheckin"
 "58995","2018-09-22 07:50:03","http://habarimoto24.com/34147LUV/ACH/Business/","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/58995/","zbetcheckin"
 "58994","2018-09-22 07:49:06","http://focuscapitalcorp.com/3151500668.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/58994/","zbetcheckin"
-"58993","2018-09-22 07:42:08","http://dw.58wangdun.com/sf5/testrgcom.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/58993/","zbetcheckin"
+"58993","2018-09-22 07:42:08","http://dw.58wangdun.com/sf5/testrgcom.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/58993/","zbetcheckin"
 "58992","2018-09-22 06:50:08","http://dongybavi.com/wp-includes/FILE/US/Open-invoices","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/58992/","zbetcheckin"
 "58991","2018-09-22 06:26:06","http://millenniumusic.com/1461739.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/58991/","zbetcheckin"
 "58990","2018-09-22 06:24:06","http://zeanhxxjotpqfeu.usa.cc/ex.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/58990/","zbetcheckin"
@@ -328181,7 +328559,7 @@
 "21356","2018-06-20 06:06:03","http://74.222.1.38:8888/close.bat","offline","malware_download","Smominru","https://urlhaus.abuse.ch/url/21356/","anonymous"
 "21355","2018-06-20 06:02:47","http://ca.hashnice.org:443/123.exe","offline","malware_download","exe,Redosdru","https://urlhaus.abuse.ch/url/21355/","anonymous"
 "21354","2018-06-20 06:02:38","http://118.184.31.215/gg.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/21354/","anonymous"
-"21353","2018-06-20 06:00:36","http://da.alibuf.com:3/mado.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/21353/","anonymous"
+"21353","2018-06-20 06:00:36","http://da.alibuf.com:3/mado.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/21353/","anonymous"
 "21352","2018-06-20 06:00:29","http://da.alibuf.com:3/445.exe","online","malware_download","CoinMiner,exe","https://urlhaus.abuse.ch/url/21352/","anonymous"
 "21351","2018-06-20 05:55:05","http://104.223.213.141/mi3307","offline","malware_download","elf","https://urlhaus.abuse.ch/url/21351/","anonymous"
 "21350","2018-06-20 05:50:09","http://60.250.99.131:9998/liux","offline","malware_download","CoinMiner,elf,xmrig","https://urlhaus.abuse.ch/url/21350/","anonymous"
@@ -332352,7 +332730,7 @@
 "17069","2018-06-11 04:45:10","http://23.249.161.109/wrd/mamez.exe","offline","malware_download","exe,Formbook,Pony","https://urlhaus.abuse.ch/url/17069/","lovemalware"
 "17068","2018-06-11 04:45:08","http://inova-tech.net/x1/m.exe","offline","malware_download","exe,Pony","https://urlhaus.abuse.ch/url/17068/","lovemalware"
 "17067","2018-06-11 04:45:04","http://betaqq.ru/cl.exe","offline","malware_download","exe,Pony","https://urlhaus.abuse.ch/url/17067/","lovemalware"
-"17066","2018-06-10 22:45:08","http://221.226.86.151/group1/M01/05/3D/CsRgBlsPuU-AR033AA7SAMhUHuA993.doc","online","malware_download","doc,downloader","https://urlhaus.abuse.ch/url/17066/","lovemalware"
+"17066","2018-06-10 22:45:08","http://221.226.86.151/group1/M01/05/3D/CsRgBlsPuU-AR033AA7SAMhUHuA993.doc","offline","malware_download","doc,downloader","https://urlhaus.abuse.ch/url/17066/","lovemalware"
 "17065","2018-06-10 19:07:17","http://80.211.185.189:80/AB4g5/Josho.x86","offline","malware_download","None","https://urlhaus.abuse.ch/url/17065/","bjornruberg"
 "17064","2018-06-10 16:46:08","http://gabsten.dedicated.co.za/sites/default/files/11/bnv.exe","offline","malware_download","exe,HawkEye,Pony","https://urlhaus.abuse.ch/url/17064/","lovemalware"
 "17063","2018-06-10 16:46:04","http://mail.yellowstone-club.org/dl/facture_431977465.doc","offline","malware_download","doc,downloader","https://urlhaus.abuse.ch/url/17063/","lovemalware"
@@ -343560,7 +343938,7 @@
 "1491","2018-03-29 14:42:52","http://cosmeticoslindas.com/Mar-20-01-58-05/Quantum-View/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/1491/","abuse_ch"
 "1490","2018-03-29 14:42:48","http://coolsculptingbeforeafter.com/PayPal-US/Corporation/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/1490/","abuse_ch"
 "1489","2018-03-29 14:42:45","http://clients.steadfast.digital/QQV-206648272849/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/1489/","abuse_ch"
-"1488","2018-03-29 14:42:44","http://cista-dobra-voda.com/WIRE-FORM/PK-4143542213772/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/1488/","abuse_ch"
+"1488","2018-03-29 14:42:44","http://cista-dobra-voda.com/WIRE-FORM/PK-4143542213772/","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/1488/","abuse_ch"
 "1487","2018-03-29 14:42:23","http://chungcuirisgardenmydinh.info/WIRE-FORM/QCQ-44937/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/1487/","abuse_ch"
 "1486","2018-03-29 14:42:05","http://chovaytienmatdanang.info/WIRE-FORM/CUB-89915244/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/1486/","abuse_ch"
 "1485","2018-03-29 14:41:45","http://chdagent.com/PayPal-US/INFO/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/1485/","abuse_ch"
diff --git a/urlhaus-filter-bind-online.conf b/urlhaus-filter-bind-online.conf
index cd8e236f..049cbe3a 100644
--- a/urlhaus-filter-bind-online.conf
+++ b/urlhaus-filter-bind-online.conf
@@ -1,5 +1,5 @@
 # Title: abuse.ch URLhaus Malicious Domains BIND Blocklist
-# Updated: Sat, 02 May 2020 00:09:31 UTC
+# Updated: Sat, 02 May 2020 12:09:27 UTC
 # Repo: https://gitlab.com/curben/urlhaus-filter
 # License: https://creativecommons.org/publicdomain/zero/1.0/
 # Source: https://urlhaus.abuse.ch/api/
@@ -24,6 +24,7 @@ zone "88mscco.com" { type master; notify no; file "null.zone.file"; };
 zone "a-reality.co.uk" { type master; notify no; file "null.zone.file"; };
 zone "a.xiazai163.com" { type master; notify no; file "null.zone.file"; };
 zone "aaasolution.co.th" { type master; notify no; file "null.zone.file"; };
+zone "accentlandscapes.com" { type master; notify no; file "null.zone.file"; };
 zone "accessyouraudience.com" { type master; notify no; file "null.zone.file"; };
 zone "acdesignhub.com" { type master; notify no; file "null.zone.file"; };
 zone "acteon.com.ar" { type master; notify no; file "null.zone.file"; };
@@ -49,9 +50,7 @@ zone "alohasoftware.net" { type master; notify no; file "null.zone.file"; };
 zone "alphaconsumer.net" { type master; notify no; file "null.zone.file"; };
 zone "am-concepts.ca" { type master; notify no; file "null.zone.file"; };
 zone "amd.alibuf.com" { type master; notify no; file "null.zone.file"; };
-zone "amedeoscognamiglio.329263.com" { type master; notify no; file "null.zone.file"; };
 zone "amemarine.co.th" { type master; notify no; file "null.zone.file"; };
-zone "americanrange.com" { type master; notify no; file "null.zone.file"; };
 zone "anadolutatili.com" { type master; notify no; file "null.zone.file"; };
 zone "anamikaindanegas.in" { type master; notify no; file "null.zone.file"; };
 zone "andreelapeyre.com" { type master; notify no; file "null.zone.file"; };
@@ -68,7 +67,6 @@ zone "arcticprospectus.com" { type master; notify no; file "null.zone.file"; };
 zone "areac-agr.com" { type master; notify no; file "null.zone.file"; };
 zone "aresorganics.com" { type master; notify no; file "null.zone.file"; };
 zone "arowanafishforsale.com" { type master; notify no; file "null.zone.file"; };
-zone "asadairtravel.com" { type master; notify no; file "null.zone.file"; };
 zone "ascentive.com" { type master; notify no; file "null.zone.file"; };
 zone "ashoakacharya.com" { type master; notify no; file "null.zone.file"; };
 zone "askarindo.or.id" { type master; notify no; file "null.zone.file"; };
@@ -91,6 +89,7 @@ zone "bamakobleach.free.fr" { type master; notify no; file "null.zone.file"; };
 zone "bangkok-orchids.com" { type master; notify no; file "null.zone.file"; };
 zone "banzaimonkey.com" { type master; notify no; file "null.zone.file"; };
 zone "bapo.granudan.cn" { type master; notify no; file "null.zone.file"; };
+zone "baritaco.com" { type master; notify no; file "null.zone.file"; };
 zone "baybars.xyz" { type master; notify no; file "null.zone.file"; };
 zone "bbs.sunwy.org" { type master; notify no; file "null.zone.file"; };
 zone "bbs1.marisfrolg.com" { type master; notify no; file "null.zone.file"; };
@@ -106,7 +105,6 @@ zone "beta.pterosol.com" { type master; notify no; file "null.zone.file"; };
 zone "bflow.security-portal.cz" { type master; notify no; file "null.zone.file"; };
 zone "bildeboks.no" { type master; notify no; file "null.zone.file"; };
 zone "bilim-pavlodar.gov.kz" { type master; notify no; file "null.zone.file"; };
-zone "billieellish.org" { type master; notify no; file "null.zone.file"; };
 zone "bingxiong.vip" { type master; notify no; file "null.zone.file"; };
 zone "bjkumdo.com" { type master; notify no; file "null.zone.file"; };
 zone "blog.241optical.com" { type master; notify no; file "null.zone.file"; };
@@ -122,7 +120,6 @@ zone "brbs.customer.netspace.net.au" { type master; notify no; file "null.zone.f
 zone "brenleyquartzgh.com" { type master; notify no; file "null.zone.file"; };
 zone "brewmethods.com" { type master; notify no; file "null.zone.file"; };
 zone "btlocum.pl" { type master; notify no; file "null.zone.file"; };
-zone "bucketstrong.s3-us-west-1.amazonaws.com" { type master; notify no; file "null.zone.file"; };
 zone "bugansavings.com" { type master; notify no; file "null.zone.file"; };
 zone "buhleni.co.za" { type master; notify no; file "null.zone.file"; };
 zone "buydishtv.in" { type master; notify no; file "null.zone.file"; };
@@ -139,6 +136,8 @@ zone "castmart.ga" { type master; notify no; file "null.zone.file"; };
 zone "cbk.m.dodo52.com" { type master; notify no; file "null.zone.file"; };
 zone "ccnn.xiaomier.cn" { type master; notify no; file "null.zone.file"; };
 zone "cdn-10049480.file.myqcloud.com" { type master; notify no; file "null.zone.file"; };
+zone "cdn.truelife.vn" { type master; notify no; file "null.zone.file"; };
+zone "cdn.xiaoduoai.com" { type master; notify no; file "null.zone.file"; };
 zone "cdnus.laboratoryconecpttoday.com" { type master; notify no; file "null.zone.file"; };
 zone "ceirecrear.com.br" { type master; notify no; file "null.zone.file"; };
 zone "cellas.sk" { type master; notify no; file "null.zone.file"; };
@@ -149,7 +148,6 @@ zone "ch.rmu.ac.th" { type master; notify no; file "null.zone.file"; };
 zone "changematterscounselling.com" { type master; notify no; file "null.zone.file"; };
 zone "chanvribloc.com" { type master; notify no; file "null.zone.file"; };
 zone "charm.bizfxr.com" { type master; notify no; file "null.zone.file"; };
-zone "chattosport.com" { type master; notify no; file "null.zone.file"; };
 zone "chauffeursontravel.com" { type master; notify no; file "null.zone.file"; };
 zone "chedea.eu" { type master; notify no; file "null.zone.file"; };
 zone "chinhdropfile.myvnc.com" { type master; notify no; file "null.zone.file"; };
@@ -157,27 +155,25 @@ zone "chinhdropfile80.myvnc.com" { type master; notify no; file "null.zone.file"
 zone "chipmarkets.com" { type master; notify no; file "null.zone.file"; };
 zone "chj.m.dodo52.com" { type master; notify no; file "null.zone.file"; };
 zone "chuckweiss.com" { type master; notify no; file "null.zone.file"; };
+zone "cinnamoncreations.com.au" { type master; notify no; file "null.zone.file"; };
 zone "cirugiagenital.com.mx" { type master; notify no; file "null.zone.file"; };
+zone "cista-dobra-voda.com" { type master; notify no; file "null.zone.file"; };
 zone "clareiamente.clareiamente.com" { type master; notify no; file "null.zone.file"; };
 zone "clearwaterriveroutfitting.com" { type master; notify no; file "null.zone.file"; };
 zone "client.yaap.co.uk" { type master; notify no; file "null.zone.file"; };
 zone "clinicamariademolina.com" { type master; notify no; file "null.zone.file"; };
 zone "cloud-server-updater2.co.za" { type master; notify no; file "null.zone.file"; };
-zone "colombet-taxi.fr" { type master; notify no; file "null.zone.file"; };
 zone "colourcreative.co.za" { type master; notify no; file "null.zone.file"; };
 zone "compesat.com" { type master; notify no; file "null.zone.file"; };
 zone "complan.hu" { type master; notify no; file "null.zone.file"; };
 zone "complanbt.hu" { type master; notify no; file "null.zone.file"; };
 zone "comtechadsl.com" { type master; notify no; file "null.zone.file"; };
 zone "config.kuaisousou.top" { type master; notify no; file "null.zone.file"; };
-zone "consultingcy.com" { type master; notify no; file "null.zone.file"; };
 zone "counciloflight.bravepages.com" { type master; notify no; file "null.zone.file"; };
-zone "cp-30.theborough.com.au" { type master; notify no; file "null.zone.file"; };
 zone "cqjcc.org" { type master; notify no; file "null.zone.file"; };
 zone "crimebranch.in" { type master; notify no; file "null.zone.file"; };
 zone "crittersbythebay.com" { type master; notify no; file "null.zone.file"; };
 zone "cryline.net" { type master; notify no; file "null.zone.file"; };
-zone "cryptoomarket.com" { type master; notify no; file "null.zone.file"; };
 zone "csnserver.com" { type master; notify no; file "null.zone.file"; };
 zone "csw.hu" { type master; notify no; file "null.zone.file"; };
 zone "cuacuonsieure.com" { type master; notify no; file "null.zone.file"; };
@@ -212,10 +208,10 @@ zone "dfd.zhzy999.net" { type master; notify no; file "null.zone.file"; };
 zone "dfzm.91756.cn" { type master; notify no; file "null.zone.file"; };
 zone "dgecolesdepolice.bf" { type master; notify no; file "null.zone.file"; };
 zone "dgnj.cn" { type master; notify no; file "null.zone.file"; };
-zone "dhlservices.duckdns.org" { type master; notify no; file "null.zone.file"; };
 zone "diazavendano.cl" { type master; notify no; file "null.zone.file"; };
 zone "dichvuvesinhcongnghiep.top" { type master; notify no; file "null.zone.file"; };
 zone "dienmaycu.vn" { type master; notify no; file "null.zone.file"; };
+zone "dieselmoreno.cl" { type master; notify no; file "null.zone.file"; };
 zone "digilib.dianhusada.ac.id" { type master; notify no; file "null.zone.file"; };
 zone "digital-marketing-institute-delhi.empeeevents.com" { type master; notify no; file "null.zone.file"; };
 zone "digitaldog.de" { type master; notify no; file "null.zone.file"; };
@@ -227,7 +223,6 @@ zone "dl-gameplayer.dmm.com" { type master; notify no; file "null.zone.file"; };
 zone "dl.1003b.56a.com" { type master; notify no; file "null.zone.file"; };
 zone "dl.198424.com" { type master; notify no; file "null.zone.file"; };
 zone "dl.dzqzd.com" { type master; notify no; file "null.zone.file"; };
-zone "dl.iqilie.com" { type master; notify no; file "null.zone.file"; };
 zone "dl.kuaile-u.com" { type master; notify no; file "null.zone.file"; };
 zone "dl2.soft-lenta.ru" { type master; notify no; file "null.zone.file"; };
 zone "dlist.iqilie.com" { type master; notify no; file "null.zone.file"; };
@@ -236,7 +231,6 @@ zone "dnn.alibuf.com" { type master; notify no; file "null.zone.file"; };
 zone "dns.alibuf.com" { type master; notify no; file "null.zone.file"; };
 zone "dodsonimaging.com" { type master; notify no; file "null.zone.file"; };
 zone "don.viameventos.com.br" { type master; notify no; file "null.zone.file"; };
-zone "dongiln.co" { type master; notify no; file "null.zone.file"; };
 zone "donmago.com" { type master; notify no; file "null.zone.file"; };
 zone "doostansocks.ir" { type master; notify no; file "null.zone.file"; };
 zone "doransky.info" { type master; notify no; file "null.zone.file"; };
@@ -264,18 +258,19 @@ zone "download301.wanmei.com" { type master; notify no; file "null.zone.file"; }
 zone "dpeasesummithilltoppers.pbworks.com" { type master; notify no; file "null.zone.file"; };
 zone "dr080.com" { type master; notify no; file "null.zone.file"; };
 zone "dralpaslan.com" { type master; notify no; file "null.zone.file"; };
+zone "dreamtrips.cheap" { type master; notify no; file "null.zone.file"; };
 zone "drivolani.us" { type master; notify no; file "null.zone.file"; };
 zone "drools-moved.46999.n3.nabble.com" { type master; notify no; file "null.zone.file"; };
 zone "druzim.freewww.biz" { type master; notify no; file "null.zone.file"; };
 zone "drwendyellis.com" { type master; notify no; file "null.zone.file"; };
 zone "dsiun.com" { type master; notify no; file "null.zone.file"; };
 zone "dtsay.xyz" { type master; notify no; file "null.zone.file"; };
-zone "dudulm.com" { type master; notify no; file "null.zone.file"; };
+zone "duongfpt.ga" { type master; notify no; file "null.zone.file"; };
 zone "dusdn.mireene.com" { type master; notify no; file "null.zone.file"; };
+zone "dw.58wangdun.com" { type master; notify no; file "null.zone.file"; };
 zone "dx.qqyewu.com" { type master; notify no; file "null.zone.file"; };
 zone "dx1.qqtn.com" { type master; notify no; file "null.zone.file"; };
 zone "dx2.qqtn.com" { type master; notify no; file "null.zone.file"; };
-zone "dx30.siweidaoxiang.com" { type master; notify no; file "null.zone.file"; };
 zone "dx60.siweidaoxiang.com" { type master; notify no; file "null.zone.file"; };
 zone "dzinestudio87.co.uk" { type master; notify no; file "null.zone.file"; };
 zone "e.dangeana.com" { type master; notify no; file "null.zone.file"; };
@@ -316,24 +311,23 @@ zone "fitmanacademy.com" { type master; notify no; file "null.zone.file"; };
 zone "flood-protection.org" { type master; notify no; file "null.zone.file"; };
 zone "fordlamdong.com.vn" { type master; notify no; file "null.zone.file"; };
 zone "foreverprecious.org" { type master; notify no; file "null.zone.file"; };
+zone "foxfennecs.com" { type master; notify no; file "null.zone.file"; };
 zone "frin.ng" { type master; notify no; file "null.zone.file"; };
 zone "fte.m.dodo52.com" { type master; notify no; file "null.zone.file"; };
 zone "ftpcnc-p2sp.pconline.com.cn" { type master; notify no; file "null.zone.file"; };
 zone "ftpftpftp.com" { type master; notify no; file "null.zone.file"; };
 zone "funletters.net" { type master; notify no; file "null.zone.file"; };
+zone "funpartyrent.com" { type master; notify no; file "null.zone.file"; };
 zone "futuregraphics.com.ar" { type master; notify no; file "null.zone.file"; };
 zone "g.7230.com" { type master; notify no; file "null.zone.file"; };
 zone "g0ogle.free.fr" { type master; notify no; file "null.zone.file"; };
-zone "gainsdirectory.com" { type master; notify no; file "null.zone.file"; };
 zone "galuhtea.com" { type master; notify no; file "null.zone.file"; };
 zone "gamee.top" { type master; notify no; file "null.zone.file"; };
-zone "garage.themebuffets.com" { type master; notify no; file "null.zone.file"; };
 zone "garenanow.myvnc.com" { type master; notify no; file "null.zone.file"; };
 zone "garenanow4.myvnc.com" { type master; notify no; file "null.zone.file"; };
 zone "gargiulo.com.ar" { type master; notify no; file "null.zone.file"; };
 zone "gateway-heide.de" { type master; notify no; file "null.zone.file"; };
 zone "gateway.ethlqd.com" { type master; notify no; file "null.zone.file"; };
-zone "gd2.greenxf.com" { type master; notify no; file "null.zone.file"; };
 zone "geenicreations.com" { type master; notify no; file "null.zone.file"; };
 zone "genesisconstruction.co.za" { type master; notify no; file "null.zone.file"; };
 zone "germistonmiraclecentre.co.za" { type master; notify no; file "null.zone.file"; };
@@ -347,6 +341,7 @@ zone "gnimelf.net" { type master; notify no; file "null.zone.file"; };
 zone "go.xsuad.com" { type master; notify no; file "null.zone.file"; };
 zone "gocanada.vn" { type master; notify no; file "null.zone.file"; };
 zone "google.ghststr.com" { type master; notify no; file "null.zone.file"; };
+zone "gov.kr" { type master; notify no; file "null.zone.file"; };
 zone "govhotel.us" { type master; notify no; file "null.zone.file"; };
 zone "grafchekloder.rebatesrule.net" { type master; notify no; file "null.zone.file"; };
 zone "granportale.com.br" { type master; notify no; file "null.zone.file"; };
@@ -355,7 +350,6 @@ zone "greenfood.sa.com" { type master; notify no; file "null.zone.file"; };
 zone "greenleaveperu.com" { type master; notify no; file "null.zone.file"; };
 zone "gssgroups.com" { type master; notify no; file "null.zone.file"; };
 zone "gx-10012947.file.myqcloud.com" { type master; notify no; file "null.zone.file"; };
-zone "gxx.monerov10.com" { type master; notify no; file "null.zone.file"; };
 zone "habbotips.free.fr" { type master; notify no; file "null.zone.file"; };
 zone "hagebakken.no" { type master; notify no; file "null.zone.file"; };
 zone "haisannhatrang.com.vn" { type master; notify no; file "null.zone.file"; };
@@ -367,12 +361,12 @@ zone "hazel-azure.co.th" { type master; notify no; file "null.zone.file"; };
 zone "hdxa.net" { type master; notify no; file "null.zone.file"; };
 zone "healtina.com" { type master; notify no; file "null.zone.file"; };
 zone "heavenif.co.za" { type master; notify no; file "null.zone.file"; };
+zone "hediyeler10gb-ramazan.net" { type master; notify no; file "null.zone.file"; };
 zone "hellomessager.com" { type master; notify no; file "null.zone.file"; };
 zone "hfsoftware.cl" { type master; notify no; file "null.zone.file"; };
 zone "hingcheong.hk" { type master; notify no; file "null.zone.file"; };
 zone "hldschool.com" { type master; notify no; file "null.zone.file"; };
 zone "hmbwgroup.com" { type master; notify no; file "null.zone.file"; };
-zone "hmpmall.co.kr" { type master; notify no; file "null.zone.file"; };
 zone "hoayeuthuong-my.sharepoint.com" { type master; notify no; file "null.zone.file"; };
 zone "homedecors.com.au" { type master; notify no; file "null.zone.file"; };
 zone "hostzaa.com" { type master; notify no; file "null.zone.file"; };
@@ -390,6 +384,7 @@ zone "hyvat-olutravintolat.fi" { type master; notify no; file "null.zone.file";
 zone "i333.wang" { type master; notify no; file "null.zone.file"; };
 zone "ibda.adv.br" { type master; notify no; file "null.zone.file"; };
 zone "ideadom.pl" { type master; notify no; file "null.zone.file"; };
+zone "ileolaherbalcare.com.ng" { type master; notify no; file "null.zone.file"; };
 zone "iletisimbakanligi20gb.com" { type master; notify no; file "null.zone.file"; };
 zone "imellda.com" { type master; notify no; file "null.zone.file"; };
 zone "impression-gobelet.com" { type master; notify no; file "null.zone.file"; };
@@ -398,9 +393,13 @@ zone "inapadvance.com" { type master; notify no; file "null.zone.file"; };
 zone "incrediblepixels.com" { type master; notify no; file "null.zone.file"; };
 zone "incredicole.com" { type master; notify no; file "null.zone.file"; };
 zone "ineyes360.com" { type master; notify no; file "null.zone.file"; };
+zone "ini.egkj.com" { type master; notify no; file "null.zone.file"; };
 zone "innovation4crisis.org" { type master; notify no; file "null.zone.file"; };
 zone "instanttechnology.com.au" { type master; notify no; file "null.zone.file"; };
 zone "intelicasa.ro" { type master; notify no; file "null.zone.file"; };
+zone "interbus.cz" { type master; notify no; file "null.zone.file"; };
+zone "intersel-idf.org" { type master; notify no; file "null.zone.file"; };
+zone "intertradeassociates.com.au" { type master; notify no; file "null.zone.file"; };
 zone "intoxicated-twilight.com" { type master; notify no; file "null.zone.file"; };
 zone "iremart.es" { type master; notify no; file "null.zone.file"; };
 zone "isso.ps" { type master; notify no; file "null.zone.file"; };
@@ -410,7 +409,6 @@ zone "itrigger.cn" { type master; notify no; file "null.zone.file"; };
 zone "itsnixielou.com" { type master; notify no; file "null.zone.file"; };
 zone "ixlonbcc.com" { type master; notify no; file "null.zone.file"; };
 zone "izu.co.jp" { type master; notify no; file "null.zone.file"; };
-zone "jahesa.com" { type master; notify no; file "null.zone.file"; };
 zone "jaincakes.xyz" { type master; notify no; file "null.zone.file"; };
 zone "jamiekaylive.com" { type master; notify no; file "null.zone.file"; };
 zone "jansen-heesch.nl" { type master; notify no; file "null.zone.file"; };
@@ -443,10 +441,9 @@ zone "kanok.co.th" { type master; notify no; file "null.zone.file"; };
 zone "kar.big-pro.com" { type master; notify no; file "null.zone.file"; };
 zone "karavantekstil.com" { type master; notify no; file "null.zone.file"; };
 zone "kassohome.com.tr" { type master; notify no; file "null.zone.file"; };
-zone "kazanin20gbturkiye.com" { type master; notify no; file "null.zone.file"; };
 zone "kdsp.co.kr" { type master; notify no; file "null.zone.file"; };
-zone "keckarangdadap.pekalongankab.go.id" { type master; notify no; file "null.zone.file"; };
 zone "kejpa.com" { type master; notify no; file "null.zone.file"; };
+zone "kenareh-gostare-aras.ir" { type master; notify no; file "null.zone.file"; };
 zone "kgfs3.329263.com" { type master; notify no; file "null.zone.file"; };
 zone "khan-associates.net" { type master; notify no; file "null.zone.file"; };
 zone "khunnapap.com" { type master; notify no; file "null.zone.file"; };
@@ -459,7 +456,6 @@ zone "koppemotta.com.br" { type master; notify no; file "null.zone.file"; };
 zone "koralli.if.ua" { type master; notify no; file "null.zone.file"; };
 zone "kqq.kz" { type master; notify no; file "null.zone.file"; };
 zone "kristofferdaniels.com" { type master; notify no; file "null.zone.file"; };
-zone "kupaliskohs.sk" { type master; notify no; file "null.zone.file"; };
 zone "kuznetsov.ca" { type master; notify no; file "null.zone.file"; };
 zone "kwanfromhongkong.com" { type master; notify no; file "null.zone.file"; };
 zone "kwikomfi-lab.com" { type master; notify no; file "null.zone.file"; };
@@ -468,6 +464,7 @@ zone "lameguard.ru" { type master; notify no; file "null.zone.file"; };
 zone "lammaixep.com" { type master; notify no; file "null.zone.file"; };
 zone "landmarktreks.com" { type master; notify no; file "null.zone.file"; };
 zone "langyabbs.05yun.cn" { type master; notify no; file "null.zone.file"; };
+zone "lapurisima.cl" { type master; notify no; file "null.zone.file"; };
 zone "lastmorgoth.com" { type master; notify no; file "null.zone.file"; };
 zone "lcfurtado.com.br" { type master; notify no; file "null.zone.file"; };
 zone "lcmsystem.com" { type master; notify no; file "null.zone.file"; };
@@ -479,11 +476,11 @@ zone "lecafedesartistes.com" { type master; notify no; file "null.zone.file"; };
 zone "lengendryme.com" { type master; notify no; file "null.zone.file"; };
 zone "lesawilson.com" { type master; notify no; file "null.zone.file"; };
 zone "lhbfirst.com" { type master; notify no; file "null.zone.file"; };
+zone "libya-info.com" { type master; notify no; file "null.zone.file"; };
 zone "lifeapt.biz" { type master; notify no; file "null.zone.file"; };
 zone "linx.li" { type master; notify no; file "null.zone.file"; };
 zone "lists.ibiblio.org" { type master; notify no; file "null.zone.file"; };
 zone "lists.mplayerhq.hu" { type master; notify no; file "null.zone.file"; };
-zone "livetrack.in" { type master; notify no; file "null.zone.file"; };
 zone "livetvsports.ml" { type master; notify no; file "null.zone.file"; };
 zone "lodergord.com" { type master; notify no; file "null.zone.file"; };
 zone "log.yundabao.cn" { type master; notify no; file "null.zone.file"; };
@@ -492,7 +489,6 @@ zone "lt02.datacomspecialists.net" { type master; notify no; file "null.zone.fil
 zone "luatminhthuan.com" { type master; notify no; file "null.zone.file"; };
 zone "luckytriumph.com" { type master; notify no; file "null.zone.file"; };
 zone "luisnacht.com.ar" { type master; notify no; file "null.zone.file"; };
-zone "luyalu.net" { type master; notify no; file "null.zone.file"; };
 zone "lvr.samacomplus.com" { type master; notify no; file "null.zone.file"; };
 zone "m.0757kd.cn" { type master; notify no; file "null.zone.file"; };
 zone "m93701t2.beget.tech" { type master; notify no; file "null.zone.file"; };
@@ -554,16 +550,12 @@ zone "msecurity.ro" { type master; notify no; file "null.zone.file"; };
 zone "mteng.mmj7.com" { type master; notify no; file "null.zone.file"; };
 zone "mtfelektroteknik.com" { type master; notify no; file "null.zone.file"; };
 zone "mueblesjcp.cl" { type master; notify no; file "null.zone.file"; };
-zone "mutec.jp" { type master; notify no; file "null.zone.file"; };
-zone "mv360.net" { type master; notify no; file "null.zone.file"; };
 zone "mvb.kz" { type master; notify no; file "null.zone.file"; };
 zone "mxpiqw.am.files.1drv.com" { type master; notify no; file "null.zone.file"; };
-zone "mybook22.s3-us-west-1.amazonaws.com" { type master; notify no; file "null.zone.file"; };
 zone "myexpertca.in" { type master; notify no; file "null.zone.file"; };
 zone "myhood.cl" { type master; notify no; file "null.zone.file"; };
 zone "myo.net.au" { type master; notify no; file "null.zone.file"; };
 zone "myofficeplus.com" { type master; notify no; file "null.zone.file"; };
-zone "myonlinepokiesblog.com" { type master; notify no; file "null.zone.file"; };
 zone "mytex.pe" { type master; notify no; file "null.zone.file"; };
 zone "mytrains.net" { type master; notify no; file "null.zone.file"; };
 zone "mywp.asia" { type master; notify no; file "null.zone.file"; };
@@ -573,6 +565,7 @@ zone "narty.laserteam.pl" { type master; notify no; file "null.zone.file"; };
 zone "naturalma.es" { type master; notify no; file "null.zone.file"; };
 zone "naturepack.cc" { type master; notify no; file "null.zone.file"; };
 zone "ncmt2w.bn.files.1drv.com" { type master; notify no; file "null.zone.file"; };
+zone "ncpcgov.com" { type master; notify no; file "null.zone.file"; };
 zone "ndrs.cloud" { type master; notify no; file "null.zone.file"; };
 zone "nebraskacharters.com.au" { type master; notify no; file "null.zone.file"; };
 zone "nemo.herc.ws" { type master; notify no; file "null.zone.file"; };
@@ -590,17 +583,16 @@ zone "norperuinge.com.pe" { type master; notify no; file "null.zone.file"; };
 zone "nprg.ru" { type master; notify no; file "null.zone.file"; };
 zone "nst-corporation.com" { type master; notify no; file "null.zone.file"; };
 zone "nwcsvcs.com" { type master; notify no; file "null.zone.file"; };
-zone "oa.fnysw.com" { type master; notify no; file "null.zone.file"; };
 zone "oa.hys.cn" { type master; notify no; file "null.zone.file"; };
 zone "obinspirations.com" { type master; notify no; file "null.zone.file"; };
 zone "obnova.zzux.com" { type master; notify no; file "null.zone.file"; };
 zone "obseques-conseils.com" { type master; notify no; file "null.zone.file"; };
 zone "ohe.ie" { type master; notify no; file "null.zone.file"; };
-zone "oknoplastik.sk" { type master; notify no; file "null.zone.file"; };
 zone "omega.az" { type master; notify no; file "null.zone.file"; };
 zone "omsk-osma.ru" { type master; notify no; file "null.zone.file"; };
 zone "omuzgor.tj" { type master; notify no; file "null.zone.file"; };
 zone "onestin.ro" { type master; notify no; file "null.zone.file"; };
+zone "openarts.com.br" { type master; notify no; file "null.zone.file"; };
 zone "openclient.sroinfo.com" { type master; notify no; file "null.zone.file"; };
 zone "operasanpiox.bravepages.com" { type master; notify no; file "null.zone.file"; };
 zone "ophtalmiccenter.com" { type master; notify no; file "null.zone.file"; };
@@ -639,7 +631,6 @@ zone "phamchilong.com" { type master; notify no; file "null.zone.file"; };
 zone "phudieusongma.com" { type master; notify no; file "null.zone.file"; };
 zone "phuphamca.com" { type master; notify no; file "null.zone.file"; };
 zone "piapendet.com" { type master; notify no; file "null.zone.file"; };
-zone "piedmontrescue.org" { type master; notify no; file "null.zone.file"; };
 zone "pink99.com" { type master; notify no; file "null.zone.file"; };
 zone "pitmansticks.com" { type master; notify no; file "null.zone.file"; };
 zone "platisher.xyz" { type master; notify no; file "null.zone.file"; };
@@ -648,7 +639,6 @@ zone "podrska.com.hr" { type master; notify no; file "null.zone.file"; };
 zone "ponto50.com.br" { type master; notify no; file "null.zone.file"; };
 zone "poolbook.ir" { type master; notify no; file "null.zone.file"; };
 zone "ppl.ac.id" { type master; notify no; file "null.zone.file"; };
-zone "prepaenunsoloexamen.academiagalileoac.com" { type master; notify no; file "null.zone.file"; };
 zone "probost.cz" { type master; notify no; file "null.zone.file"; };
 zone "profitcoach.net" { type master; notify no; file "null.zone.file"; };
 zone "prosoc.nl" { type master; notify no; file "null.zone.file"; };
@@ -657,7 +647,6 @@ zone "pujashoppe.in" { type master; notify no; file "null.zone.file"; };
 zone "purelondonhyg.com" { type master; notify no; file "null.zone.file"; };
 zone "pyxalis.com" { type master; notify no; file "null.zone.file"; };
 zone "qchms.qcpro.vn" { type master; notify no; file "null.zone.file"; };
-zone "qelie.com" { type master; notify no; file "null.zone.file"; };
 zone "qfjys.com.img.800cdn.com" { type master; notify no; file "null.zone.file"; };
 zone "qmsled.com" { type master; notify no; file "null.zone.file"; };
 zone "qppl.angiang.gov.vn" { type master; notify no; file "null.zone.file"; };
@@ -667,6 +656,7 @@ zone "quehagoencartagena.com" { type master; notify no; file "null.zone.file"; }
 zone "quickuploader.xyz" { type master; notify no; file "null.zone.file"; };
 zone "raacts.in" { type master; notify no; file "null.zone.file"; };
 zone "raifix.com.br" { type master; notify no; file "null.zone.file"; };
+zone "ramazan20gbinternet.com" { type master; notify no; file "null.zone.file"; };
 zone "ramazanda20gb.xyz" { type master; notify no; file "null.zone.file"; };
 zone "rangebroadcasting.com" { type master; notify no; file "null.zone.file"; };
 zone "rapidex.co.rs" { type master; notify no; file "null.zone.file"; };
@@ -687,7 +677,6 @@ zone "riyanenterprise.com" { type master; notify no; file "null.zone.file"; };
 zone "rkverify.securestudies.com" { type master; notify no; file "null.zone.file"; };
 zone "robertmcardle.com" { type master; notify no; file "null.zone.file"; };
 zone "robotrade.com.vn" { type master; notify no; file "null.zone.file"; };
-zone "rockersdolphin.co.za" { type master; notify no; file "null.zone.file"; };
 zone "rollingmill.in" { type master; notify no; file "null.zone.file"; };
 zone "rollscar.pk" { type master; notify no; file "null.zone.file"; };
 zone "rossogato.com" { type master; notify no; file "null.zone.file"; };
@@ -697,10 +686,10 @@ zone "ruisgood.ru" { type master; notify no; file "null.zone.file"; };
 zone "s.51shijuan.com" { type master; notify no; file "null.zone.file"; };
 zone "s.kk30.com" { type master; notify no; file "null.zone.file"; };
 zone "s14b.91danji.com" { type master; notify no; file "null.zone.file"; };
-zone "s14b.groundyun.cn" { type master; notify no; file "null.zone.file"; };
 zone "sabiupd.compress.to" { type master; notify no; file "null.zone.file"; };
 zone "saboorjaam.ir" { type master; notify no; file "null.zone.file"; };
 zone "sabupda.vizvaz.com" { type master; notify no; file "null.zone.file"; };
+zone "saglikbakanligi-destek.org" { type master; notify no; file "null.zone.file"; };
 zone "sahathaikasetpan.com" { type master; notify no; file "null.zone.file"; };
 zone "salvationbd.com" { type master; notify no; file "null.zone.file"; };
 zone "sandovalgraphics.com" { type master; notify no; file "null.zone.file"; };
@@ -708,11 +697,11 @@ zone "sarvghamatan.ir" { type master; notify no; file "null.zone.file"; };
 zone "saskklo.com" { type master; notify no; file "null.zone.file"; };
 zone "scglobal.co.th" { type master; notify no; file "null.zone.file"; };
 zone "schollaert.eu" { type master; notify no; file "null.zone.file"; };
-zone "securefileinterneationaltransferthroughm.duckdns.org" { type master; notify no; file "null.zone.file"; };
 zone "sefp-boispro.fr" { type master; notify no; file "null.zone.file"; };
 zone "selekture.com" { type master; notify no; file "null.zone.file"; };
 zone "selfuseproperty.com" { type master; notify no; file "null.zone.file"; };
 zone "selvikoyunciftligi.com" { type master; notify no; file "null.zone.file"; };
+zone "senevdekaldiyehediye.com" { type master; notify no; file "null.zone.file"; };
 zone "senevdekaldiyehediyenet.com" { type master; notify no; file "null.zone.file"; };
 zone "serpentrising.com" { type master; notify no; file "null.zone.file"; };
 zone "servicemhkd.myvnc.com" { type master; notify no; file "null.zone.file"; };
@@ -724,7 +713,6 @@ zone "sgm.pc6.com" { type master; notify no; file "null.zone.file"; };
 zone "shacked.webdepot.co.il" { type master; notify no; file "null.zone.file"; };
 zone "shahtoba.faqserv.com" { type master; notify no; file "null.zone.file"; };
 zone "shaoxiaofei.cn" { type master; notify no; file "null.zone.file"; };
-zone "share.dmca.gripe" { type master; notify no; file "null.zone.file"; };
 zone "sharjahas.com" { type master; notify no; file "null.zone.file"; };
 zone "shembefoundation.com" { type master; notify no; file "null.zone.file"; };
 zone "shopjumpn.ch" { type master; notify no; file "null.zone.file"; };
@@ -761,7 +749,9 @@ zone "ss.cybersoft-vn.com" { type master; notify no; file "null.zone.file"; };
 zone "sslv3.at" { type master; notify no; file "null.zone.file"; };
 zone "staging.popclusive.asia" { type master; notify no; file "null.zone.file"; };
 zone "starcountry.net" { type master; notify no; file "null.zone.file"; };
+zone "static.3001.net" { type master; notify no; file "null.zone.file"; };
 zone "static.ilclock.com" { type master; notify no; file "null.zone.file"; };
+zone "static.topxgun.com" { type master; notify no; file "null.zone.file"; };
 zone "stationaryhome.com" { type master; notify no; file "null.zone.file"; };
 zone "stecit.nl" { type master; notify no; file "null.zone.file"; };
 zone "stevewalker.com.au" { type master; notify no; file "null.zone.file"; };
@@ -781,15 +771,16 @@ zone "sylvaclouds.eu" { type master; notify no; file "null.zone.file"; };
 zone "symanreni.mysecondarydns.com" { type master; notify no; file "null.zone.file"; };
 zone "szxypt.com" { type master; notify no; file "null.zone.file"; };
 zone "t.honker.info" { type master; notify no; file "null.zone.file"; };
+zone "tandenblekenhoofddorp.nl" { type master; notify no; file "null.zone.file"; };
 zone "taraward.com" { type master; notify no; file "null.zone.file"; };
 zone "taxpos.com" { type master; notify no; file "null.zone.file"; };
 zone "tcy.198424.com" { type master; notify no; file "null.zone.file"; };
 zone "teardrop-productions.ro" { type master; notify no; file "null.zone.file"; };
 zone "technoites.com" { type master; notify no; file "null.zone.file"; };
-zone "tecnobella.cl" { type master; notify no; file "null.zone.file"; };
 zone "tehrenberg.com" { type master; notify no; file "null.zone.file"; };
 zone "telescopelms.com" { type master; notify no; file "null.zone.file"; };
 zone "telsiai.info" { type master; notify no; file "null.zone.file"; };
+zone "tepatitlan.gob.mx" { type master; notify no; file "null.zone.file"; };
 zone "test.iyibakkendine.com" { type master; notify no; file "null.zone.file"; };
 zone "testdatabaseforcepoint.com" { type master; notify no; file "null.zone.file"; };
 zone "thaibbqculver.com" { type master; notify no; file "null.zone.file"; };
@@ -805,7 +796,6 @@ zone "thornadops.com" { type master; notify no; file "null.zone.file"; };
 zone "thosewebbs.com" { type master; notify no; file "null.zone.file"; };
 zone "thuong.bidiworks.com" { type master; notify no; file "null.zone.file"; };
 zone "tianangdep.com" { type master; notify no; file "null.zone.file"; };
-zone "tianzi8.cn" { type master; notify no; file "null.zone.file"; };
 zone "tibinst.mefound.com" { type master; notify no; file "null.zone.file"; };
 zone "tibok.lflink.com" { type master; notify no; file "null.zone.file"; };
 zone "ticte.in" { type master; notify no; file "null.zone.file"; };
@@ -836,10 +826,10 @@ zone "unicorpbrunei.com" { type master; notify no; file "null.zone.file"; };
 zone "unilevercopabr.mbiz20.net" { type master; notify no; file "null.zone.file"; };
 zone "uniquehall.net" { type master; notify no; file "null.zone.file"; };
 zone "unokaoeojoejfghr.ru" { type master; notify no; file "null.zone.file"; };
+zone "up4net.com" { type master; notify no; file "null.zone.file"; };
 zone "upd.m.dodo52.com" { type master; notify no; file "null.zone.file"; };
 zone "update.iwang8.com" { type master; notify no; file "null.zone.file"; };
 zone "update.my.99.com" { type master; notify no; file "null.zone.file"; };
-zone "upendiveterinariovalencia.es" { type master; notify no; file "null.zone.file"; };
 zone "urgentmessage.org" { type master; notify no; file "null.zone.file"; };
 zone "usd-gold.com" { type master; notify no; file "null.zone.file"; };
 zone "users.skynet.be" { type master; notify no; file "null.zone.file"; };
@@ -851,7 +841,6 @@ zone "valedchap.ir" { type master; notify no; file "null.zone.file"; };
 zone "valencaagora.com.br" { type master; notify no; file "null.zone.file"; };
 zone "vasoccernews.com" { type master; notify no; file "null.zone.file"; };
 zone "vaziri.echobit.ir" { type master; notify no; file "null.zone.file"; };
-zone "vdotrip.blog" { type master; notify no; file "null.zone.file"; };
 zone "vfocus.net" { type master; notify no; file "null.zone.file"; };
 zone "vibicloud.com" { type master; notify no; file "null.zone.file"; };
 zone "videoswebcammsn.free.fr" { type master; notify no; file "null.zone.file"; };
@@ -866,7 +855,6 @@ zone "vitromed.ro" { type master; notify no; file "null.zone.file"; };
 zone "vrrumover0.vrrum0.farted.net" { type master; notify no; file "null.zone.file"; };
 zone "vvff.in" { type master; notify no; file "null.zone.file"; };
 zone "w.zhzy999.net" { type master; notify no; file "null.zone.file"; };
-zone "wakecar.cn" { type master; notify no; file "null.zone.file"; };
 zone "wangtong7.siweidaoxiang.com" { type master; notify no; file "null.zone.file"; };
 zone "wangzonghang.cn" { type master; notify no; file "null.zone.file"; };
 zone "wap.dosame.com" { type master; notify no; file "null.zone.file"; };
@@ -881,7 +869,6 @@ zone "welcometothefuture.com" { type master; notify no; file "null.zone.file"; }
 zone "whgaty.com" { type master; notify no; file "null.zone.file"; };
 zone "wiebe-sanitaer.de" { type master; notify no; file "null.zone.file"; };
 zone "wmd9e.a3i1vvv.feteboc.com" { type master; notify no; file "null.zone.file"; };
-zone "wmi.1217bye.host" { type master; notify no; file "null.zone.file"; };
 zone "wnksupply.co.th" { type master; notify no; file "null.zone.file"; };
 zone "wood-expert.net" { type master; notify no; file "null.zone.file"; };
 zone "woodsytech.com" { type master; notify no; file "null.zone.file"; };
@@ -891,11 +878,11 @@ zone "writesofpassage.co.za" { type master; notify no; file "null.zone.file"; };
 zone "wsg.com.sg" { type master; notify no; file "null.zone.file"; };
 zone "wt8.siweidaoxiang.com" { type master; notify no; file "null.zone.file"; };
 zone "wt9.siweidaoxiang.com" { type master; notify no; file "null.zone.file"; };
-zone "wwealthllc.com" { type master; notify no; file "null.zone.file"; };
 zone "www2.recepty5.com" { type master; notify no; file "null.zone.file"; };
 zone "x2vn.com" { type master; notify no; file "null.zone.file"; };
 zone "xia.vzboot.com" { type master; notify no; file "null.zone.file"; };
 zone "xiaidown.com" { type master; notify no; file "null.zone.file"; };
+zone "xiaoma-10021647.file.myqcloud.com" { type master; notify no; file "null.zone.file"; };
 zone "xiegushi.cn" { type master; notify no; file "null.zone.file"; };
 zone "xirfad.com" { type master; notify no; file "null.zone.file"; };
 zone "xn--transfgran-mgbbb600b.ro" { type master; notify no; file "null.zone.file"; };
@@ -905,11 +892,11 @@ zone "xxwl.kuaiyunds.com" { type master; notify no; file "null.zone.file"; };
 zone "xxxze.co.nu" { type master; notify no; file "null.zone.file"; };
 zone "yeez.net" { type master; notify no; file "null.zone.file"; };
 zone "yesky.51down.org.cn" { type master; notify no; file "null.zone.file"; };
-zone "yesky.xzstatic.com" { type master; notify no; file "null.zone.file"; };
 zone "yiyangjz.cn" { type master; notify no; file "null.zone.file"; };
 zone "yolks.bestsellertwo.net" { type master; notify no; file "null.zone.file"; };
 zone "yuluobo.com" { type master; notify no; file "null.zone.file"; };
 zone "yun-1.lenku.cn" { type master; notify no; file "null.zone.file"; };
+zone "yuyu02004-10043918.file.myqcloud.com" { type master; notify no; file "null.zone.file"; };
 zone "yx.m.dodo52.com" { type master; notify no; file "null.zone.file"; };
 zone "zagruz.dnset.com" { type master; notify no; file "null.zone.file"; };
 zone "zagruz.toh.info" { type master; notify no; file "null.zone.file"; };
@@ -928,5 +915,4 @@ zone "zoetermeerov.nl" { type master; notify no; file "null.zone.file"; };
 zone "zoeydeutchweb.com" { type master; notify no; file "null.zone.file"; };
 zone "zonefound.com.cn" { type master; notify no; file "null.zone.file"; };
 zone "zskyjov.cz" { type master; notify no; file "null.zone.file"; };
-zone "ztqsc.com.cn" { type master; notify no; file "null.zone.file"; };
 zone "zumodelima.com" { type master; notify no; file "null.zone.file"; };
diff --git a/urlhaus-filter-bind.conf b/urlhaus-filter-bind.conf
index ba717470..7a2c8785 100644
--- a/urlhaus-filter-bind.conf
+++ b/urlhaus-filter-bind.conf
@@ -1,5 +1,5 @@
 # Title: abuse.ch URLhaus Malicious Domains BIND Blocklist
-# Updated: Sat, 02 May 2020 00:09:31 UTC
+# Updated: Sat, 02 May 2020 12:09:27 UTC
 # Repo: https://gitlab.com/curben/urlhaus-filter
 # License: https://creativecommons.org/publicdomain/zero/1.0/
 # Source: https://urlhaus.abuse.ch/api/
@@ -607,6 +607,7 @@ zone "2ndoffice.ph" { type master; notify no; file "null.zone.file"; };
 zone "2ndpub.com" { type master; notify no; file "null.zone.file"; };
 zone "2ndscreensociety.com" { type master; notify no; file "null.zone.file"; };
 zone "2nell.com" { type master; notify no; file "null.zone.file"; };
+zone "2no.co" { type master; notify no; file "null.zone.file"; };
 zone "2pjcza.db.files.1drv.com" { type master; notify no; file "null.zone.file"; };
 zone "2q1wea3rdsf.000webhostapp.com" { type master; notify no; file "null.zone.file"; };
 zone "2q3w.com" { type master; notify no; file "null.zone.file"; };
@@ -724,6 +725,7 @@ zone "3c-one.ru" { type master; notify no; file "null.zone.file"; };
 zone "3cfilati.it" { type master; notify no; file "null.zone.file"; };
 zone "3cxtraining.com" { type master; notify no; file "null.zone.file"; };
 zone "3d-designcenter.com" { type master; notify no; file "null.zone.file"; };
+zone "3d-universal.com" { type master; notify no; file "null.zone.file"; };
 zone "3d.co.th" { type master; notify no; file "null.zone.file"; };
 zone "3d.tdselectronics.com" { type master; notify no; file "null.zone.file"; };
 zone "3dcentral.hu" { type master; notify no; file "null.zone.file"; };
@@ -945,6 +947,7 @@ zone "4wereareyou.icu" { type master; notify no; file "null.zone.file"; };
 zone "4you.by" { type master; notify no; file "null.zone.file"; };
 zone "5-shampurov.ru" { type master; notify no; file "null.zone.file"; };
 zone "5.fjwt1.crsky.com" { type master; notify no; file "null.zone.file"; };
+zone "5.top4top.io" { type master; notify no; file "null.zone.file"; };
 zone "5.u0148466.z8.ru" { type master; notify no; file "null.zone.file"; };
 zone "5.unplugrevolution.com" { type master; notify no; file "null.zone.file"; };
 zone "5003.arentuspecial.com" { type master; notify no; file "null.zone.file"; };
@@ -1562,7 +1565,6 @@ zone "aapdasia.com" { type master; notify no; file "null.zone.file"; };
 zone "aapi.co.in" { type master; notify no; file "null.zone.file"; };
 zone "aapic.emarathon.or.kr" { type master; notify no; file "null.zone.file"; };
 zone "aapkitayari.com" { type master; notify no; file "null.zone.file"; };
-zone "aaplindia.com" { type master; notify no; file "null.zone.file"; };
 zone "aapnewslive.com" { type master; notify no; file "null.zone.file"; };
 zone "aapnnihotel.in" { type master; notify no; file "null.zone.file"; };
 zone "aapr.org.au" { type master; notify no; file "null.zone.file"; };
@@ -1978,7 +1980,6 @@ zone "acetraining24.com" { type master; notify no; file "null.zone.file"; };
 zone "acewatch.vn" { type master; notify no; file "null.zone.file"; };
 zone "acewm.org" { type master; notify no; file "null.zone.file"; };
 zone "aceyz.com" { type master; notify no; file "null.zone.file"; };
-zone "acfacilities.co.uk" { type master; notify no; file "null.zone.file"; };
 zone "acffiorentina.ru" { type master; notify no; file "null.zone.file"; };
 zone "acg-capital.com" { type master; notify no; file "null.zone.file"; };
 zone "acg.com.my" { type master; notify no; file "null.zone.file"; };
@@ -2399,6 +2400,7 @@ zone "adrite.com" { type master; notify no; file "null.zone.file"; };
 zone "adroitlyadvertising.com" { type master; notify no; file "null.zone.file"; };
 zone "adrolling.co.uk" { type master; notify no; file "null.zone.file"; };
 zone "ads.actmol.by" { type master; notify no; file "null.zone.file"; };
+zone "ads.hanggiadinh.com" { type master; notify no; file "null.zone.file"; };
 zone "ads.kalabisim.com" { type master; notify no; file "null.zone.file"; };
 zone "adsapomg.space" { type master; notify no; file "null.zone.file"; };
 zone "adsdeedee.com" { type master; notify no; file "null.zone.file"; };
@@ -2650,7 +2652,6 @@ zone "africaanalytics.tristargl.com" { type master; notify no; file "null.zone.f
 zone "africabluewebs.co.ke" { type master; notify no; file "null.zone.file"; };
 zone "africabootcampacademy.influencetec.net" { type master; notify no; file "null.zone.file"; };
 zone "africahousingawards.com" { type master; notify no; file "null.zone.file"; };
-zone "africainnovates.org" { type master; notify no; file "null.zone.file"; };
 zone "africamarket.shop" { type master; notify no; file "null.zone.file"; };
 zone "africamissions.ca" { type master; notify no; file "null.zone.file"; };
 zone "african-trips.com" { type master; notify no; file "null.zone.file"; };
@@ -3053,6 +3054,7 @@ zone "aigavicenza.it" { type master; notify no; file "null.zone.file"; };
 zone "aigforms.myap.co.za" { type master; notify no; file "null.zone.file"; };
 zone "aiglemovies.com" { type master; notify no; file "null.zone.file"; };
 zone "aihealth.vn" { type master; notify no; file "null.zone.file"; };
+zone "aiiaiafrzrueuedur.ru" { type master; notify no; file "null.zone.file"; };
 zone "aiineh.com" { type master; notify no; file "null.zone.file"; };
 zone "aiit.ahbys.com" { type master; notify no; file "null.zone.file"; };
 zone "aijdjy.com" { type master; notify no; file "null.zone.file"; };
@@ -3121,6 +3123,7 @@ zone "airgc.in" { type master; notify no; file "null.zone.file"; };
 zone "airinovasi-indonesia.com" { type master; notify no; file "null.zone.file"; };
 zone "airisu-syumikonparty.com" { type master; notify no; file "null.zone.file"; };
 zone "airlife.bget.ru" { type master; notify no; file "null.zone.file"; };
+zone "airliness.info" { type master; notify no; file "null.zone.file"; };
 zone "airlinkcpl.net" { type master; notify no; file "null.zone.file"; };
 zone "airmaildata.com" { type master; notify no; file "null.zone.file"; };
 zone "airmanship.nl" { type master; notify no; file "null.zone.file"; };
@@ -3409,6 +3412,7 @@ zone "alandenz.dk" { type master; notify no; file "null.zone.file"; };
 zone "alanhkatz.on-rev.com" { type master; notify no; file "null.zone.file"; };
 zone "alankeef-co.tk" { type master; notify no; file "null.zone.file"; };
 zone "alankippax.info" { type master; notify no; file "null.zone.file"; };
+zone "alannonce.fr" { type master; notify no; file "null.zone.file"; };
 zone "alanvarin2.hopto.org" { type master; notify no; file "null.zone.file"; };
 zone "alanvarin3.ddns.net" { type master; notify no; file "null.zone.file"; };
 zone "alanyacilingirbilal.com" { type master; notify no; file "null.zone.file"; };
@@ -4396,7 +4400,6 @@ zone "americanhaircuts.com" { type master; notify no; file "null.zone.file"; };
 zone "americanhomecenter.com" { type master; notify no; file "null.zone.file"; };
 zone "americanmicrosoftclouddepartment.duckdns.org" { type master; notify no; file "null.zone.file"; };
 zone "americanpatriotlife.com" { type master; notify no; file "null.zone.file"; };
-zone "americanrange.com" { type master; notify no; file "null.zone.file"; };
 zone "americanreliefhub.com" { type master; notify no; file "null.zone.file"; };
 zone "americanstaffordshireterrier.it" { type master; notify no; file "null.zone.file"; };
 zone "americanxdrive.gq" { type master; notify no; file "null.zone.file"; };
@@ -5652,6 +5655,7 @@ zone "archst.it" { type master; notify no; file "null.zone.file"; };
 zone "arcid.org" { type master; notify no; file "null.zone.file"; };
 zone "arcnyc.com" { type master; notify no; file "null.zone.file"; };
 zone "arcoarquitetura.arq.br" { type master; notify no; file "null.zone.file"; };
+zone "arcoelectric-idaho.com" { type master; notify no; file "null.zone.file"; };
 zone "arcoelectrico.cl" { type master; notify no; file "null.zone.file"; };
 zone "arcoiris.org.pt" { type master; notify no; file "null.zone.file"; };
 zone "arconarchitects.com" { type master; notify no; file "null.zone.file"; };
@@ -5773,6 +5777,7 @@ zone "ariba.develop.kdm1.ru" { type master; notify no; file "null.zone.file"; };
 zone "aridostlari.com" { type master; notify no; file "null.zone.file"; };
 zone "arie-industrie.com" { type master; notify no; file "null.zone.file"; };
 zone "arielaspa.com" { type master; notify no; file "null.zone.file"; };
+zone "arielcarter.com" { type master; notify no; file "null.zone.file"; };
 zone "arielluxhair.com" { type master; notify no; file "null.zone.file"; };
 zone "arieloutdoors.com" { type master; notify no; file "null.zone.file"; };
 zone "arieloutdoors.in" { type master; notify no; file "null.zone.file"; };
@@ -5790,7 +5795,6 @@ zone "arihantchemcorp.com" { type master; notify no; file "null.zone.file"; };
 zone "arija.lt" { type master; notify no; file "null.zone.file"; };
 zone "ariko.vn" { type master; notify no; file "null.zone.file"; };
 zone "arimmo.ch" { type master; notify no; file "null.zone.file"; };
-zone "arimonza.it" { type master; notify no; file "null.zone.file"; };
 zone "arina.jsin.ru" { type master; notify no; file "null.zone.file"; };
 zone "arinidentalcare.com" { type master; notify no; file "null.zone.file"; };
 zone "arinlays.com" { type master; notify no; file "null.zone.file"; };
@@ -6140,6 +6144,7 @@ zone "artworkshopsinternational.com" { type master; notify no; file "null.zone.f
 zone "artydesign.co" { type master; notify no; file "null.zone.file"; };
 zone "artzkaypharmacy.com.au" { type master; notify no; file "null.zone.file"; };
 zone "artzvuk.by" { type master; notify no; file "null.zone.file"; };
+zone "arufels.com" { type master; notify no; file "null.zone.file"; };
 zone "aruljothi.xyz" { type master; notify no; file "null.zone.file"; };
 zone "arundel.net" { type master; notify no; file "null.zone.file"; };
 zone "arvd.begrip.sk" { type master; notify no; file "null.zone.file"; };
@@ -6244,7 +6249,6 @@ zone "aseloud.com" { type master; notify no; file "null.zone.file"; };
 zone "aseman-co.com" { type master; notify no; file "null.zone.file"; };
 zone "asemancard.com" { type master; notify no; file "null.zone.file"; };
 zone "asemanehco.ir" { type master; notify no; file "null.zone.file"; };
-zone "aseprom.com" { type master; notify no; file "null.zone.file"; };
 zone "asepspa.cl" { type master; notify no; file "null.zone.file"; };
 zone "aserraderoelaleman.com.ar" { type master; notify no; file "null.zone.file"; };
 zone "asertiva.cl" { type master; notify no; file "null.zone.file"; };
@@ -6317,6 +6321,7 @@ zone "asia-star.info" { type master; notify no; file "null.zone.file"; };
 zone "asia-taxsolutions.com" { type master; notify no; file "null.zone.file"; };
 zone "asiaherbalpharmacy.com" { type master; notify no; file "null.zone.file"; };
 zone "asiains.com.ph" { type master; notify no; file "null.zone.file"; };
+zone "asialinklogistics.com" { type master; notify no; file "null.zone.file"; };
 zone "asiamedia.tw" { type master; notify no; file "null.zone.file"; };
 zone "asiana.cf" { type master; notify no; file "null.zone.file"; };
 zone "asianacrylates.com" { type master; notify no; file "null.zone.file"; };
@@ -6347,6 +6352,7 @@ zone "asifapparels.com" { type master; notify no; file "null.zone.file"; };
 zone "asiffidatanoli.com" { type master; notify no; file "null.zone.file"; };
 zone "asight.com.au" { type master; notify no; file "null.zone.file"; };
 zone "asiltorna.com" { type master; notify no; file "null.zone.file"; };
+zone "asiluxury.com" { type master; notify no; file "null.zone.file"; };
 zone "asinaptali.com" { type master; notify no; file "null.zone.file"; };
 zone "asined.es" { type master; notify no; file "null.zone.file"; };
 zone "asinfotech.net" { type master; notify no; file "null.zone.file"; };
@@ -6537,7 +6543,6 @@ zone "astroblu.win" { type master; notify no; file "null.zone.file"; };
 zone "astrocricketpredictions.com" { type master; notify no; file "null.zone.file"; };
 zone "astrodeepakdubey.in" { type master; notify no; file "null.zone.file"; };
 zone "astrodolly.com" { type master; notify no; file "null.zone.file"; };
-zone "astrojyoti.com" { type master; notify no; file "null.zone.file"; };
 zone "astrolabioeditorial.com" { type master; notify no; file "null.zone.file"; };
 zone "astroland.space" { type master; notify no; file "null.zone.file"; };
 zone "astrologerpanchmukhijyotish.com" { type master; notify no; file "null.zone.file"; };
@@ -6780,7 +6785,6 @@ zone "atskiysatana.ml" { type master; notify no; file "null.zone.file"; };
 zone "atskiysatana.tk" { type master; notify no; file "null.zone.file"; };
 zone "atso.kz" { type master; notify no; file "null.zone.file"; };
 zone "atso.pt" { type master; notify no; file "null.zone.file"; };
-zone "att-0748.fileshare-storage.com" { type master; notify no; file "null.zone.file"; };
 zone "att-hellolab.com" { type master; notify no; file "null.zone.file"; };
 zone "att1.bigmir.net" { type master; notify no; file "null.zone.file"; };
 zone "atta2tata.monster" { type master; notify no; file "null.zone.file"; };
@@ -7212,6 +7216,7 @@ zone "aviharmony.com.au" { type master; notify no; file "null.zone.file"; };
 zone "avila-ventures.com" { type master; notify no; file "null.zone.file"; };
 zone "avilacare.com" { type master; notify no; file "null.zone.file"; };
 zone "avinash1.free.fr" { type master; notify no; file "null.zone.file"; };
+zone "avioaircurtain.com" { type master; notify no; file "null.zone.file"; };
 zone "avion-x.com" { type master; notify no; file "null.zone.file"; };
 zone "avioncargoets.com" { type master; notify no; file "null.zone.file"; };
 zone "aviontravelgroup.com" { type master; notify no; file "null.zone.file"; };
@@ -7646,6 +7651,7 @@ zone "babystep.biz" { type master; notify no; file "null.zone.file"; };
 zone "babysteps.ge" { type master; notify no; file "null.zone.file"; };
 zone "babyvogel.nl" { type master; notify no; file "null.zone.file"; };
 zone "babzon.club" { type master; notify no; file "null.zone.file"; };
+zone "bac.edu.my" { type master; notify no; file "null.zone.file"; };
 zone "bacamanect.com" { type master; notify no; file "null.zone.file"; };
 zone "baccaosutritue.vn" { type master; notify no; file "null.zone.file"; };
 zone "baceldeniz.com" { type master; notify no; file "null.zone.file"; };
@@ -7712,6 +7718,7 @@ zone "badintentionsprod.com" { type master; notify no; file "null.zone.file"; };
 zone "badisse.com" { type master; notify no; file "null.zone.file"; };
 zone "badkamer-sanitair.nl" { type master; notify no; file "null.zone.file"; };
 zone "badmildiou.com" { type master; notify no; file "null.zone.file"; };
+zone "badzena.com" { type master; notify no; file "null.zone.file"; };
 zone "baerbl-volz.de" { type master; notify no; file "null.zone.file"; };
 zone "baeren-schlatt.ch" { type master; notify no; file "null.zone.file"; };
 zone "baermedia.ch" { type master; notify no; file "null.zone.file"; };
@@ -7761,7 +7768,6 @@ zone "bahisreklami.com" { type master; notify no; file "null.zone.file"; };
 zone "bahku.ru" { type master; notify no; file "null.zone.file"; };
 zone "bahl.com.au" { type master; notify no; file "null.zone.file"; };
 zone "bahlcom.au" { type master; notify no; file "null.zone.file"; };
-zone "bahoma.com" { type master; notify no; file "null.zone.file"; };
 zone "bahomacom" { type master; notify no; file "null.zone.file"; };
 zone "bahrain-escorts.com" { type master; notify no; file "null.zone.file"; };
 zone "bahrainbordir.com" { type master; notify no; file "null.zone.file"; };
@@ -8494,7 +8500,6 @@ zone "beachcondolife.tk" { type master; notify no; file "null.zone.file"; };
 zone "beachview.co.za" { type master; notify no; file "null.zone.file"; };
 zone "beachvillas.gr" { type master; notify no; file "null.zone.file"; };
 zone "beachwoodproperty.com.au" { type master; notify no; file "null.zone.file"; };
-zone "beaconacademy.net" { type master; notify no; file "null.zone.file"; };
 zone "beaconhousediscovery.com" { type master; notify no; file "null.zone.file"; };
 zone "beaconr.rungta.ac.in" { type master; notify no; file "null.zone.file"; };
 zone "beactivedigital.com" { type master; notify no; file "null.zone.file"; };
@@ -9203,7 +9208,6 @@ zone "beysel.com" { type master; notify no; file "null.zone.file"; };
 zone "beytepefoodcenter.com" { type master; notify no; file "null.zone.file"; };
 zone "beytriali.com" { type master; notify no; file "null.zone.file"; };
 zone "bezambici.com" { type master; notify no; file "null.zone.file"; };
-zone "bezier.com" { type master; notify no; file "null.zone.file"; };
 zone "bezlive.com" { type master; notify no; file "null.zone.file"; };
 zone "bezoekbosnie.nl" { type master; notify no; file "null.zone.file"; };
 zone "bezoporu.wtie.tu.koszalin.pl" { type master; notify no; file "null.zone.file"; };
@@ -10404,7 +10408,6 @@ zone "bloodybits.com" { type master; notify no; file "null.zone.file"; };
 zone "bloombrainz.com" { type master; notify no; file "null.zone.file"; };
 zone "bloomcommunityproject.org" { type master; notify no; file "null.zone.file"; };
 zone "bloomestatelitigation.ca" { type master; notify no; file "null.zone.file"; };
-zone "bloomfire.com" { type master; notify no; file "null.zone.file"; };
 zone "bloomflores.com" { type master; notify no; file "null.zone.file"; };
 zone "bloomhomes.in" { type master; notify no; file "null.zone.file"; };
 zone "bloomingbridal.com.au" { type master; notify no; file "null.zone.file"; };
@@ -10732,7 +10735,6 @@ zone "bonaccount.com" { type master; notify no; file "null.zone.file"; };
 zone "bonakma.com" { type master; notify no; file "null.zone.file"; };
 zone "bonallegro.5v.pl" { type master; notify no; file "null.zone.file"; };
 zone "bonattiholding.com" { type master; notify no; file "null.zone.file"; };
-zone "bonavigator.pl" { type master; notify no; file "null.zone.file"; };
 zone "bond.com.vn" { type master; notify no; file "null.zone.file"; };
 zone "bondagetrip.com" { type master; notify no; file "null.zone.file"; };
 zone "bondbengals.info" { type master; notify no; file "null.zone.file"; };
@@ -11244,7 +11246,6 @@ zone "bridgesearch.com" { type master; notify no; file "null.zone.file"; };
 zone "bridgeventuresllc.com" { type master; notify no; file "null.zone.file"; };
 zone "briefmarkenpower.de" { type master; notify no; file "null.zone.file"; };
 zone "brifing.info" { type master; notify no; file "null.zone.file"; };
-zone "brightachieversltd.com" { type master; notify no; file "null.zone.file"; };
 zone "brightasia.com.sg" { type master; notify no; file "null.zone.file"; };
 zone "brightbat.com" { type master; notify no; file "null.zone.file"; };
 zone "brightbook.ir" { type master; notify no; file "null.zone.file"; };
@@ -11935,7 +11936,6 @@ zone "bytosti.cz" { type master; notify no; file "null.zone.file"; };
 zone "byttd.com.cn" { type master; notify no; file "null.zone.file"; };
 zone "byukattie.top" { type master; notify no; file "null.zone.file"; };
 zone "byvejen.dk" { type master; notify no; file "null.zone.file"; };
-zone "byworks.com" { type master; notify no; file "null.zone.file"; };
 zone "byxaru.com" { type master; notify no; file "null.zone.file"; };
 zone "byxxyz.com" { type master; notify no; file "null.zone.file"; };
 zone "byz2.com" { type master; notify no; file "null.zone.file"; };
@@ -12503,7 +12503,6 @@ zone "carbtecgh.com" { type master; notify no; file "null.zone.file"; };
 zone "carc-astrology.in" { type master; notify no; file "null.zone.file"; };
 zone "carcorxox.com" { type master; notify no; file "null.zone.file"; };
 zone "carcounsel.com" { type master; notify no; file "null.zone.file"; };
-zone "cardbankph.com" { type master; notify no; file "null.zone.file"; };
 zone "cardboardspaceshiptoys.com" { type master; notify no; file "null.zone.file"; };
 zone "cardea-immobilien.de" { type master; notify no; file "null.zone.file"; };
 zone "cardealersforbadcredit.net" { type master; notify no; file "null.zone.file"; };
@@ -13032,6 +13031,7 @@ zone "cc14927-wordpress.tw1.ru" { type master; notify no; file "null.zone.file";
 zone "cc78.bg" { type master; notify no; file "null.zone.file"; };
 zone "cc8848.xyz" { type master; notify no; file "null.zone.file"; };
 zone "cc9.ne.jp" { type master; notify no; file "null.zone.file"; };
+zone "ccamatil1-my.sharepoint.com" { type master; notify no; file "null.zone.file"; };
 zone "ccandcbrand.com" { type master; notify no; file "null.zone.file"; };
 zone "ccash.xyz" { type master; notify no; file "null.zone.file"; };
 zone "ccat.biz" { type master; notify no; file "null.zone.file"; };
@@ -13129,6 +13129,8 @@ zone "cdn.siv.cc" { type master; notify no; file "null.zone.file"; };
 zone "cdn.slty.de" { type master; notify no; file "null.zone.file"; };
 zone "cdn.timebuyer.org" { type master; notify no; file "null.zone.file"; };
 zone "cdn.top4top.net" { type master; notify no; file "null.zone.file"; };
+zone "cdn.truelife.vn" { type master; notify no; file "null.zone.file"; };
+zone "cdn.xiaoduoai.com" { type master; notify no; file "null.zone.file"; };
 zone "cdn.zecast.com" { type master; notify no; file "null.zone.file"; };
 zone "cdn4.css361.com" { type master; notify no; file "null.zone.file"; };
 zone "cdn5.rvshare.com" { type master; notify no; file "null.zone.file"; };
@@ -13273,7 +13275,6 @@ zone "center-house.ru" { type master; notify no; file "null.zone.file"; };
 zone "center-miami.com" { type master; notify no; file "null.zone.file"; };
 zone "center.1team.pro" { type master; notify no; file "null.zone.file"; };
 zone "center1.co.il" { type master; notify no; file "null.zone.file"; };
-zone "center4cby.com" { type master; notify no; file "null.zone.file"; };
 zone "centerfortheyouth.org" { type master; notify no; file "null.zone.file"; };
 zone "centerline.co.kr" { type master; notify no; file "null.zone.file"; };
 zone "centernadegda.ru" { type master; notify no; file "null.zone.file"; };
@@ -13627,6 +13628,7 @@ zone "charity.vexacom.com" { type master; notify no; file "null.zone.file"; };
 zone "charitycandy.co.uk" { type master; notify no; file "null.zone.file"; };
 zone "charitylov.com" { type master; notify no; file "null.zone.file"; };
 zone "charityshofner.com" { type master; notify no; file "null.zone.file"; };
+zone "charlemagne.fr" { type master; notify no; file "null.zone.file"; };
 zone "charlesbaker.co.uk" { type master; notify no; file "null.zone.file"; };
 zone "charlescuthbertson.com" { type master; notify no; file "null.zone.file"; };
 zone "charlesmessa.info" { type master; notify no; file "null.zone.file"; };
@@ -14053,6 +14055,7 @@ zone "christinalenway.com" { type master; notify no; file "null.zone.file"; };
 zone "christinelebeck.com" { type master; notify no; file "null.zone.file"; };
 zone "christinmunsch.com" { type master; notify no; file "null.zone.file"; };
 zone "christmasatredeemer.org" { type master; notify no; file "null.zone.file"; };
+zone "christoforoskotentos.com" { type master; notify no; file "null.zone.file"; };
 zone "christolandcompany.com" { type master; notify no; file "null.zone.file"; };
 zone "christolar.cz" { type master; notify no; file "null.zone.file"; };
 zone "christom.com.au" { type master; notify no; file "null.zone.file"; };
@@ -14476,6 +14479,7 @@ zone "clcindy.com" { type master; notify no; file "null.zone.file"; };
 zone "cld-net.com" { type master; notify no; file "null.zone.file"; };
 zone "cld.persiangig.com" { type master; notify no; file "null.zone.file"; };
 zone "cld.pt" { type master; notify no; file "null.zone.file"; };
+zone "cle.ae" { type master; notify no; file "null.zone.file"; };
 zone "clean.crypt24.in" { type master; notify no; file "null.zone.file"; };
 zone "clean.olexandry.ru" { type master; notify no; file "null.zone.file"; };
 zone "clean.vanzherke.ru" { type master; notify no; file "null.zone.file"; };
@@ -14536,14 +14540,12 @@ zone "cleverflame.com" { type master; notify no; file "null.zone.file"; };
 zone "cleverlearncebu.com" { type master; notify no; file "null.zone.file"; };
 zone "cleverspain.com" { type master; notify no; file "null.zone.file"; };
 zone "clgafareaitu.com" { type master; notify no; file "null.zone.file"; };
-zone "clgsecurities.com" { type master; notify no; file "null.zone.file"; };
 zone "clhairdesign.com" { type master; notify no; file "null.zone.file"; };
 zone "clhgoody.xyz" { type master; notify no; file "null.zone.file"; };
 zone "clic-douaisis.fr" { type master; notify no; file "null.zone.file"; };
 zone "click-up.co.il" { type master; notify no; file "null.zone.file"; };
 zone "click.danielshomecenter.com" { type master; notify no; file "null.zone.file"; };
 zone "click.expertsmeetings.org" { type master; notify no; file "null.zone.file"; };
-zone "click.senate.go.th" { type master; notify no; file "null.zone.file"; };
 zone "click4amassage.com" { type master; notify no; file "null.zone.file"; };
 zone "click4ship.com" { type master; notify no; file "null.zone.file"; };
 zone "clickara.com" { type master; notify no; file "null.zone.file"; };
@@ -14598,7 +14600,6 @@ zone "clinicacasuo.com.br" { type master; notify no; file "null.zone.file"; };
 zone "clinicacirurgiaplasticasp.com.br" { type master; notify no; file "null.zone.file"; };
 zone "clinicacorporea.com" { type master; notify no; file "null.zone.file"; };
 zone "clinicacorpusmacae.com.br" { type master; notify no; file "null.zone.file"; };
-zone "clinicacrecer.com" { type master; notify no; file "null.zone.file"; };
 zone "clinicadavid.mx" { type master; notify no; file "null.zone.file"; };
 zone "clinicadeldolorgt.com" { type master; notify no; file "null.zone.file"; };
 zone "clinicadentalimagen.pe" { type master; notify no; file "null.zone.file"; };
@@ -14673,7 +14674,6 @@ zone "cloud.chachobills.com" { type master; notify no; file "null.zone.file"; };
 zone "cloud.diminishedvaluecalifornia.com" { type master; notify no; file "null.zone.file"; };
 zone "cloud.hollweck.it" { type master; notify no; file "null.zone.file"; };
 zone "cloud.kryptonia.fr" { type master; notify no; file "null.zone.file"; };
-zone "cloud.patrika.com" { type master; notify no; file "null.zone.file"; };
 zone "cloud.s2lol.com" { type master; notify no; file "null.zone.file"; };
 zone "cloud.wmsinfo.com.br" { type master; notify no; file "null.zone.file"; };
 zone "cloud.xenoris.fr" { type master; notify no; file "null.zone.file"; };
@@ -14682,6 +14682,7 @@ zone "cloudatlas.io" { type master; notify no; file "null.zone.file"; };
 zone "cloudbox-online.net" { type master; notify no; file "null.zone.file"; };
 zone "cloudbytegames.com" { type master; notify no; file "null.zone.file"; };
 zone "cloudcapgames.com" { type master; notify no; file "null.zone.file"; };
+zone "cloudcast.best" { type master; notify no; file "null.zone.file"; };
 zone "cloudcottage.cloud" { type master; notify no; file "null.zone.file"; };
 zone "cloudessy.com" { type master; notify no; file "null.zone.file"; };
 zone "cloudfilesharingdomainurllinksys.duckdns.org" { type master; notify no; file "null.zone.file"; };
@@ -14771,6 +14772,7 @@ zone "cmdaitexpo.com" { type master; notify no; file "null.zone.file"; };
 zone "cmdez.ir" { type master; notify no; file "null.zone.file"; };
 zone "cmdou.com" { type master; notify no; file "null.zone.file"; };
 zone "cmeaststar.de" { type master; notify no; file "null.zone.file"; };
+zone "cmg.asia" { type master; notify no; file "null.zone.file"; };
 zone "cmgroup.com.ua" { type master; notify no; file "null.zone.file"; };
 zone "cmhighschool.edu.bd" { type master; notify no; file "null.zone.file"; };
 zone "cmhmfgoutbound.protection.sketchwefair-watduoliprudential.com.watchdogdns.duckdns.org" { type master; notify no; file "null.zone.file"; };
@@ -15004,7 +15006,6 @@ zone "coffeeking.in" { type master; notify no; file "null.zone.file"; };
 zone "coffeeorcanoeing.com" { type master; notify no; file "null.zone.file"; };
 zone "cofqz.com" { type master; notify no; file "null.zone.file"; };
 zone "cofrex-eg.com" { type master; notify no; file "null.zone.file"; };
-zone "cofusa.com" { type master; notify no; file "null.zone.file"; };
 zone "cogeainternational.com" { type master; notify no; file "null.zone.file"; };
 zone "coges-tn.com" { type master; notify no; file "null.zone.file"; };
 zone "coghlanhealthcare.ie" { type master; notify no; file "null.zone.file"; };
@@ -15809,7 +15810,6 @@ zone "corkmademore.com" { type master; notify no; file "null.zone.file"; };
 zone "corkspeechtherapy.ie" { type master; notify no; file "null.zone.file"; };
 zone "corm-informatique.fr" { type master; notify no; file "null.zone.file"; };
 zone "cormetal.eu" { type master; notify no; file "null.zone.file"; };
-zone "cornejotex.com" { type master; notify no; file "null.zone.file"; };
 zone "cornelbusiness.co.uk" { type master; notify no; file "null.zone.file"; };
 zone "cornelia-ernst.de" { type master; notify no; file "null.zone.file"; };
 zone "cornellekacy.net" { type master; notify no; file "null.zone.file"; };
@@ -16513,7 +16513,6 @@ zone "csp-tfpm.com" { type master; notify no; file "null.zone.file"; };
 zone "csplumbingservices.co.uk" { type master; notify no; file "null.zone.file"; };
 zone "cspn-omsk.ru" { type master; notify no; file "null.zone.file"; };
 zone "csprequiao.pt" { type master; notify no; file "null.zone.file"; };
-zone "csq.es" { type master; notify no; file "null.zone.file"; };
 zone "csrcampaign.com" { type master; notify no; file "null.zone.file"; };
 zone "csrkanjiza.rs" { type master; notify no; file "null.zone.file"; };
 zone "csrngo.in" { type master; notify no; file "null.zone.file"; };
@@ -17354,7 +17353,6 @@ zone "dashfiles.tk" { type master; notify no; file "null.zone.file"; };
 zone "dashkevichseo.ru" { type master; notify no; file "null.zone.file"; };
 zone "dashonweb.com" { type master; notify no; file "null.zone.file"; };
 zone "dashvaanjil.mn" { type master; notify no; file "null.zone.file"; };
-zone "dasjoe.de" { type master; notify no; file "null.zone.file"; };
 zone "daskruelhaus.com" { type master; notify no; file "null.zone.file"; };
 zone "dasleds.com" { type master; notify no; file "null.zone.file"; };
 zone "dastep.com" { type master; notify no; file "null.zone.file"; };
@@ -17401,7 +17399,6 @@ zone "datascienceexcellence.net" { type master; notify no; file "null.zone.file"
 zone "datascienceexcellence.org" { type master; notify no; file "null.zone.file"; };
 zone "dataseru.com" { type master; notify no; file "null.zone.file"; };
 zone "dataserver.c0.pl" { type master; notify no; file "null.zone.file"; };
-zone "datasheep.co.uk" { type master; notify no; file "null.zone.file"; };
 zone "datasoft-sa.com" { type master; notify no; file "null.zone.file"; };
 zone "datatalentadvisors.com" { type master; notify no; file "null.zone.file"; };
 zone "datatechis.com" { type master; notify no; file "null.zone.file"; };
@@ -17441,6 +17438,7 @@ zone "datswingt.nl" { type master; notify no; file "null.zone.file"; };
 zone "datthocuphuquoc.xyz" { type master; notify no; file "null.zone.file"; };
 zone "dattiec.net" { type master; notify no; file "null.zone.file"; };
 zone "dattopantthengadi.in" { type master; notify no; file "null.zone.file"; };
+zone "datudeli.com" { type master; notify no; file "null.zone.file"; };
 zone "datumu.ga" { type master; notify no; file "null.zone.file"; };
 zone "datumu.ml" { type master; notify no; file "null.zone.file"; };
 zone "datvangthainguyen.com" { type master; notify no; file "null.zone.file"; };
@@ -17598,6 +17596,7 @@ zone "dbcomestic.com" { type master; notify no; file "null.zone.file"; };
 zone "dbecome.top" { type master; notify no; file "null.zone.file"; };
 zone "dbfuppsala.se" { type master; notify no; file "null.zone.file"; };
 zone "dbinario.com" { type master; notify no; file "null.zone.file"; };
+zone "dbo.ca.gov" { type master; notify no; file "null.zone.file"; };
 zone "dboyusa.online" { type master; notify no; file "null.zone.file"; };
 zone "dbravo.pro" { type master; notify no; file "null.zone.file"; };
 zone "dbs-ebank.com" { type master; notify no; file "null.zone.file"; };
@@ -17658,7 +17657,6 @@ zone "dd.loop.coop" { type master; notify no; file "null.zone.file"; };
 zone "dd.smaxdn.com" { type master; notify no; file "null.zone.file"; };
 zone "dda.co.ir" { type master; notify no; file "null.zone.file"; };
 zone "ddaynew.5demo.xyz" { type master; notify no; file "null.zone.file"; };
-zone "ddbuilding.com" { type master; notify no; file "null.zone.file"; };
 zone "ddccs.net" { type master; notify no; file "null.zone.file"; };
 zone "ddd2.pc6.com" { type master; notify no; file "null.zone.file"; };
 zone "dddos.persiangig.com" { type master; notify no; file "null.zone.file"; };
@@ -17805,6 +17803,7 @@ zone "deconmit.com" { type master; notify no; file "null.zone.file"; };
 zone "decons.ai" { type master; notify no; file "null.zone.file"; };
 zone "decons.vn" { type master; notify no; file "null.zone.file"; };
 zone "decoplast-edp.ro" { type master; notify no; file "null.zone.file"; };
+zone "decoprojectme.com" { type master; notify no; file "null.zone.file"; };
 zone "decoracaodeparedes.com.br" { type master; notify no; file "null.zone.file"; };
 zone "decoratingideas.bozkurtfurkan.com" { type master; notify no; file "null.zone.file"; };
 zone "decoration-marine.net" { type master; notify no; file "null.zone.file"; };
@@ -19150,7 +19149,6 @@ zone "digigm.ir" { type master; notify no; file "null.zone.file"; };
 zone "digihashtag.com" { type master; notify no; file "null.zone.file"; };
 zone "digiiital.co.uk" { type master; notify no; file "null.zone.file"; };
 zone "digikow.000webhostapp.com" { type master; notify no; file "null.zone.file"; };
-zone "digilander.libero.it" { type master; notify no; file "null.zone.file"; };
 zone "digileads.ae" { type master; notify no; file "null.zone.file"; };
 zone "digilib.dianhusada.ac.id" { type master; notify no; file "null.zone.file"; };
 zone "digim.asia" { type master; notify no; file "null.zone.file"; };
@@ -19176,6 +19174,7 @@ zone "digital.eudoratrading.com" { type master; notify no; file "null.zone.file"
 zone "digital.gemacipta.asia" { type master; notify no; file "null.zone.file"; };
 zone "digital.syd.fr" { type master; notify no; file "null.zone.file"; };
 zone "digital2home.ecobz.xyz" { type master; notify no; file "null.zone.file"; };
+zone "digital7.com" { type master; notify no; file "null.zone.file"; };
 zone "digitalankur.com" { type master; notify no; file "null.zone.file"; };
 zone "digitalbrit.com" { type master; notify no; file "null.zone.file"; };
 zone "digitalbugs.co.in" { type master; notify no; file "null.zone.file"; };
@@ -19609,7 +19608,6 @@ zone "djyokoo.com" { type master; notify no; file "null.zone.file"; };
 zone "djz313iks60bk4.com" { type master; notify no; file "null.zone.file"; };
 zone "djzmo.com" { type master; notify no; file "null.zone.file"; };
 zone "dk-elbrus.ru" { type master; notify no; file "null.zone.file"; };
-zone "dk-rc.com" { type master; notify no; file "null.zone.file"; };
 zone "dk.sa" { type master; notify no; file "null.zone.file"; };
 zone "dk5gckyelnxjl.cloudfront.net" { type master; notify no; file "null.zone.file"; };
 zone "dkadvisry.com" { type master; notify no; file "null.zone.file"; };
@@ -19673,6 +19671,7 @@ zone "dl2.onedrive-eu.com" { type master; notify no; file "null.zone.file"; };
 zone "dl2.onedrive-us-en.com" { type master; notify no; file "null.zone.file"; };
 zone "dl2.soft-lenta.ru" { type master; notify no; file "null.zone.file"; };
 zone "dl2.storeandshare.singtel.com" { type master; notify no; file "null.zone.file"; };
+zone "dl4.joxi.net" { type master; notify no; file "null.zone.file"; };
 zone "dl63964725.dyn-downloads.com" { type master; notify no; file "null.zone.file"; };
 zone "dlainzyniera.pl" { type master; notify no; file "null.zone.file"; };
 zone "dlawgist.com" { type master; notify no; file "null.zone.file"; };
@@ -20120,6 +20119,7 @@ zone "donnebella.com" { type master; notify no; file "null.zone.file"; };
 zone "donnerreuschel.com" { type master; notify no; file "null.zone.file"; };
 zone "donphenom.al" { type master; notify no; file "null.zone.file"; };
 zone "donpomodoro.com.co" { type master; notify no; file "null.zone.file"; };
+zone "donsinout.info" { type master; notify no; file "null.zone.file"; };
 zone "donsly.usa.cc" { type master; notify no; file "null.zone.file"; };
 zone "donsworld.org" { type master; notify no; file "null.zone.file"; };
 zone "dontlitigate.com" { type master; notify no; file "null.zone.file"; };
@@ -20128,7 +20128,6 @@ zone "donusumhirdavatmetal.com" { type master; notify no; file "null.zone.file";
 zone "donvosphotography.com" { type master; notify no; file "null.zone.file"; };
 zone "donwonda.org" { type master; notify no; file "null.zone.file"; };
 zone "dooball.biz" { type master; notify no; file "null.zone.file"; };
-zone "doobegroup.com" { type master; notify no; file "null.zone.file"; };
 zone "dooch.vn" { type master; notify no; file "null.zone.file"; };
 zone "doodlebug.club" { type master; notify no; file "null.zone.file"; };
 zone "doodleninja.in" { type master; notify no; file "null.zone.file"; };
@@ -20529,7 +20528,6 @@ zone "drdelaluz.com" { type master; notify no; file "null.zone.file"; };
 zone "drdki.com" { type master; notify no; file "null.zone.file"; };
 zone "drdoorbin.com" { type master; notify no; file "null.zone.file"; };
 zone "dream-energy.ru" { type master; notify no; file "null.zone.file"; };
-zone "dream-food.com" { type master; notify no; file "null.zone.file"; };
 zone "dream-girls.club" { type master; notify no; file "null.zone.file"; };
 zone "dream-girls.online" { type master; notify no; file "null.zone.file"; };
 zone "dream-girls.xyz" { type master; notify no; file "null.zone.file"; };
@@ -20570,6 +20568,7 @@ zone "dreamswork.tk" { type master; notify no; file "null.zone.file"; };
 zone "dreamtownpsl.co.ke" { type master; notify no; file "null.zone.file"; };
 zone "dreamtravel.site" { type master; notify no; file "null.zone.file"; };
 zone "dreamtravelonthego.com" { type master; notify no; file "null.zone.file"; };
+zone "dreamtrips.cheap" { type master; notify no; file "null.zone.file"; };
 zone "dreamtrips.icu" { type master; notify no; file "null.zone.file"; };
 zone "dreamvision.bg" { type master; notify no; file "null.zone.file"; };
 zone "dreamwolf.tv" { type master; notify no; file "null.zone.file"; };
@@ -21554,6 +21553,7 @@ zone "ecity.network" { type master; notify no; file "null.zone.file"; };
 zone "ecitytanduclongan.com" { type master; notify no; file "null.zone.file"; };
 zone "eckdor.de" { type master; notify no; file "null.zone.file"; };
 zone "ecker.aidnet.at" { type master; notify no; file "null.zone.file"; };
+zone "ecklund.no" { type master; notify no; file "null.zone.file"; };
 zone "eclairesuits.com" { type master; notify no; file "null.zone.file"; };
 zone "eclatpro.com" { type master; notify no; file "null.zone.file"; };
 zone "eclecticelectronics.net" { type master; notify no; file "null.zone.file"; };
@@ -21722,7 +21722,6 @@ zone "edgingprofile.com" { type master; notify no; file "null.zone.file"; };
 zone "edhec.business-angels.info" { type master; notify no; file "null.zone.file"; };
 zone "edialplast.ru" { type master; notify no; file "null.zone.file"; };
 zone "edicolanazionale.it" { type master; notify no; file "null.zone.file"; };
-zone "edicustoms.com.au" { type master; notify no; file "null.zone.file"; };
 zone "ediet.ir" { type master; notify no; file "null.zone.file"; };
 zone "edificaiconstrucoes.com" { type master; notify no; file "null.zone.file"; };
 zone "edifice-guyane.fr" { type master; notify no; file "null.zone.file"; };
@@ -22103,7 +22102,6 @@ zone "elc.daffodilvarsity.edu.bd" { type master; notify no; file "null.zone.file
 zone "elcampestre.cl" { type master; notify no; file "null.zone.file"; };
 zone "elcaneloautopartes.com.mx" { type master; notify no; file "null.zone.file"; };
 zone "elcapitanno.com" { type master; notify no; file "null.zone.file"; };
-zone "elcarmelohotelhacienda.com" { type master; notify no; file "null.zone.file"; };
 zone "elcarrocafeny.com" { type master; notify no; file "null.zone.file"; };
 zone "elchurrascorestaurante.com" { type master; notify no; file "null.zone.file"; };
 zone "elclasicocml.com" { type master; notify no; file "null.zone.file"; };
@@ -22154,7 +22152,6 @@ zone "electriquestew.com" { type master; notify no; file "null.zone.file"; };
 zone "electro-bike.club" { type master; notify no; file "null.zone.file"; };
 zone "electroautomat.com" { type master; notify no; file "null.zone.file"; };
 zone "electrocad.in" { type master; notify no; file "null.zone.file"; };
-zone "electroenchufe.com" { type master; notify no; file "null.zone.file"; };
 zone "electrofluxequipmentspvtltd.com" { type master; notify no; file "null.zone.file"; };
 zone "electrofyhub.com" { type master; notify no; file "null.zone.file"; };
 zone "electrogc.com.ar" { type master; notify no; file "null.zone.file"; };
@@ -22740,7 +22737,6 @@ zone "enekashoush.com" { type master; notify no; file "null.zone.file"; };
 zone "enemobodoukpaka.com" { type master; notify no; file "null.zone.file"; };
 zone "enequipo.es" { type master; notify no; file "null.zone.file"; };
 zone "enercol.cl" { type master; notify no; file "null.zone.file"; };
-zone "energicaweb.com" { type master; notify no; file "null.zone.file"; };
 zone "energie-service.fr" { type master; notify no; file "null.zone.file"; };
 zone "energie-strom.net" { type master; notify no; file "null.zone.file"; };
 zone "energiemag.fr" { type master; notify no; file "null.zone.file"; };
@@ -23422,7 +23418,6 @@ zone "estomedic.com" { type master; notify no; file "null.zone.file"; };
 zone "estore.qurvex.com" { type master; notify no; file "null.zone.file"; };
 zone "estrategias-corporativas.com" { type master; notify no; file "null.zone.file"; };
 zone "estrategiasdeaprovacao.com.br" { type master; notify no; file "null.zone.file"; };
-zone "estreamnetworks.net" { type master; notify no; file "null.zone.file"; };
 zone "estrindesign.com" { type master; notify no; file "null.zone.file"; };
 zone "estrom.es" { type master; notify no; file "null.zone.file"; };
 zone "estrutura.eng.br" { type master; notify no; file "null.zone.file"; };
@@ -24500,6 +24495,7 @@ zone "fashionandme.ru" { type master; notify no; file "null.zone.file"; };
 zone "fashionattitude.de" { type master; notify no; file "null.zone.file"; };
 zone "fashionbettysam.com" { type master; notify no; file "null.zone.file"; };
 zone "fashionblogandpromo.club" { type master; notify no; file "null.zone.file"; };
+zone "fashiondenver.com" { type master; notify no; file "null.zone.file"; };
 zone "fashionfootprint.leseditextiles.co.za" { type master; notify no; file "null.zone.file"; };
 zone "fashionfootprint.nmco.co.za" { type master; notify no; file "null.zone.file"; };
 zone "fashiongul.com" { type master; notify no; file "null.zone.file"; };
@@ -24742,6 +24738,7 @@ zone "febsmarketingnetwork.com" { type master; notify no; file "null.zone.file";
 zone "febsms.com" { type master; notify no; file "null.zone.file"; };
 zone "fechos.org.br" { type master; notify no; file "null.zone.file"; };
 zone "fecoonde.org" { type master; notify no; file "null.zone.file"; };
+zone "fectrucks.com" { type master; notify no; file "null.zone.file"; };
 zone "fed58f43246844b18d00fb0177352546.download" { type master; notify no; file "null.zone.file"; };
 zone "fedbroker.ru" { type master; notify no; file "null.zone.file"; };
 zone "fedeminersdigital.com" { type master; notify no; file "null.zone.file"; };
@@ -25604,6 +25601,7 @@ zone "floradna.com" { type master; notify no; file "null.zone.file"; };
 zone "floradosventos.com.br" { type master; notify no; file "null.zone.file"; };
 zone "floralcompany.jp" { type master; notify no; file "null.zone.file"; };
 zone "floramatic.com" { type master; notify no; file "null.zone.file"; };
+zone "florandina.com" { type master; notify no; file "null.zone.file"; };
 zone "florandum.com" { type master; notify no; file "null.zone.file"; };
 zone "florean.be" { type master; notify no; file "null.zone.file"; };
 zone "florenceloewy.com" { type master; notify no; file "null.zone.file"; };
@@ -26030,7 +26028,6 @@ zone "fotogar.com" { type master; notify no; file "null.zone.file"; };
 zone "fotograafie.nl" { type master; notify no; file "null.zone.file"; };
 zone "fotografiarnia.pl" { type master; notify no; file "null.zone.file"; };
 zone "fotoground.com" { type master; notify no; file "null.zone.file"; };
-zone "fotojurczak.pl" { type master; notify no; file "null.zone.file"; };
 zone "fotolegko.ru" { type master; notify no; file "null.zone.file"; };
 zone "fotomb.com" { type master; notify no; file "null.zone.file"; };
 zone "fotoms.pl" { type master; notify no; file "null.zone.file"; };
@@ -26588,7 +26585,6 @@ zone "fundacao-algarvia.pt" { type master; notify no; file "null.zone.file"; };
 zone "fundacionafanic.com" { type master; notify no; file "null.zone.file"; };
 zone "fundacioncaminosdepazporcolombiacali.org" { type master; notify no; file "null.zone.file"; };
 zone "fundacioncreatalento.org" { type master; notify no; file "null.zone.file"; };
-zone "fundacionesperanza.org.es" { type master; notify no; file "null.zone.file"; };
 zone "fundacionmontehoreb.org.ve" { type master; notify no; file "null.zone.file"; };
 zone "fundacionpacma.com" { type master; notify no; file "null.zone.file"; };
 zone "fundacionravera.com" { type master; notify no; file "null.zone.file"; };
@@ -26736,7 +26732,6 @@ zone "fuzoneeducations.com" { type master; notify no; file "null.zone.file"; };
 zone "fuzzyconcepts.com" { type master; notify no; file "null.zone.file"; };
 zone "fuzzylogic.in" { type master; notify no; file "null.zone.file"; };
 zone "fuzzymiles.com" { type master; notify no; file "null.zone.file"; };
-zone "fv1-2.failiem.lv" { type master; notify no; file "null.zone.file"; };
 zone "fv13.failiem.lv" { type master; notify no; file "null.zone.file"; };
 zone "fv15.failiem.lv" { type master; notify no; file "null.zone.file"; };
 zone "fv2-1.failiem.lv" { type master; notify no; file "null.zone.file"; };
@@ -27436,7 +27431,6 @@ zone "genedelibero.com" { type master; notify no; file "null.zone.file"; };
 zone "genelmusavirlik.com.tr" { type master; notify no; file "null.zone.file"; };
 zone "geneomm.com" { type master; notify no; file "null.zone.file"; };
 zone "generactz.com" { type master; notify no; file "null.zone.file"; };
-zone "general.it" { type master; notify no; file "null.zone.file"; };
 zone "generalbikes.com" { type master; notify no; file "null.zone.file"; };
 zone "generalgauffin.se" { type master; notify no; file "null.zone.file"; };
 zone "generalhomemedicalsupply.com" { type master; notify no; file "null.zone.file"; };
@@ -27527,7 +27521,6 @@ zone "geolegno.eu" { type master; notify no; file "null.zone.file"; };
 zone "geolinvestproekt.ru" { type master; notify no; file "null.zone.file"; };
 zone "geolocstar.com" { type master; notify no; file "null.zone.file"; };
 zone "geologia.geoss.pt" { type master; notify no; file "null.zone.file"; };
-zone "geologimarche.it" { type master; notify no; file "null.zone.file"; };
 zone "geolysis.org" { type master; notify no; file "null.zone.file"; };
 zone "geometrai.com" { type master; notify no; file "null.zone.file"; };
 zone "geometrirc.com" { type master; notify no; file "null.zone.file"; };
@@ -27891,7 +27884,6 @@ zone "gilbertceramic.fr" { type master; notify no; file "null.zone.file"; };
 zone "gilbertohair.com" { type master; notify no; file "null.zone.file"; };
 zone "gildlearning.org" { type master; notify no; file "null.zone.file"; };
 zone "gilgaluganda.org" { type master; notify no; file "null.zone.file"; };
-zone "gilhb.com" { type master; notify no; file "null.zone.file"; };
 zone "gilio.com.mx" { type master; notify no; file "null.zone.file"; };
 zone "gill-holiday-2013.gillfoundation.org" { type master; notify no; file "null.zone.file"; };
 zone "gill-holiday-2014.gillfoundation.org" { type master; notify no; file "null.zone.file"; };
@@ -28053,6 +28045,7 @@ zone "glid.jp" { type master; notify no; file "null.zone.file"; };
 zone "gligoricekofood.com" { type master; notify no; file "null.zone.file"; };
 zone "glik.acemlnc.com" { type master; notify no; file "null.zone.file"; };
 zone "glimpse.com.cn" { type master; notify no; file "null.zone.file"; };
+zone "glip-vault-1.s3-accelerate.amazonaws.com" { type master; notify no; file "null.zone.file"; };
 zone "glissandobigband.com" { type master; notify no; file "null.zone.file"; };
 zone "glitchexotika.com" { type master; notify no; file "null.zone.file"; };
 zone "glitzygal.net" { type master; notify no; file "null.zone.file"; };
@@ -28584,7 +28577,6 @@ zone "gordyssensors.com" { type master; notify no; file "null.zone.file"; };
 zone "gorenotoservisi.net" { type master; notify no; file "null.zone.file"; };
 zone "goretimmo.lu" { type master; notify no; file "null.zone.file"; };
 zone "gorgan-clinic.ir" { type master; notify no; file "null.zone.file"; };
-zone "gorglione.com" { type master; notify no; file "null.zone.file"; };
 zone "gorguluyapi.com" { type master; notify no; file "null.zone.file"; };
 zone "gorgunmakina.com" { type master; notify no; file "null.zone.file"; };
 zone "gorillaconcretecoatings.com" { type master; notify no; file "null.zone.file"; };
@@ -28652,6 +28644,7 @@ zone "goudu.club" { type master; notify no; file "null.zone.file"; };
 zone "gourmandd.com" { type master; notify no; file "null.zone.file"; };
 zone "gourmetlab.pe" { type master; notify no; file "null.zone.file"; };
 zone "gourmetreats.in" { type master; notify no; file "null.zone.file"; };
+zone "gov.kr" { type master; notify no; file "null.zone.file"; };
 zone "gov.rsmart-testsolutions.watchdogdns.duckdns.org" { type master; notify no; file "null.zone.file"; };
 zone "govche.in" { type master; notify no; file "null.zone.file"; };
 zone "goveboatclub.com.au" { type master; notify no; file "null.zone.file"; };
@@ -29175,7 +29168,6 @@ zone "grupogeacr.com" { type master; notify no; file "null.zone.file"; };
 zone "grupoglobaliza.com" { type master; notify no; file "null.zone.file"; };
 zone "grupohasar.com" { type master; notify no; file "null.zone.file"; };
 zone "grupoiesp.tk" { type master; notify no; file "null.zone.file"; };
-zone "grupoinalen.com" { type master; notify no; file "null.zone.file"; };
 zone "grupoinfonet.com" { type master; notify no; file "null.zone.file"; };
 zone "grupojg.com.br" { type master; notify no; file "null.zone.file"; };
 zone "grupolaplace.com.br" { type master; notify no; file "null.zone.file"; };
@@ -29392,6 +29384,7 @@ zone "gulluconsulants.com" { type master; notify no; file "null.zone.file"; };
 zone "gullukomurelektronik.com" { type master; notify no; file "null.zone.file"; };
 zone "gulseda.site" { type master; notify no; file "null.zone.file"; };
 zone "gulungdinamo.com" { type master; notify no; file "null.zone.file"; };
+zone "gulzarhomestay.com" { type master; notify no; file "null.zone.file"; };
 zone "gumiviet.com" { type master; notify no; file "null.zone.file"; };
 zone "gumuscorap.com" { type master; notify no; file "null.zone.file"; };
 zone "gumustelkari.com" { type master; notify no; file "null.zone.file"; };
@@ -29539,6 +29532,7 @@ zone "h-surgeon.info" { type master; notify no; file "null.zone.file"; };
 zone "h-w-c.net" { type master; notify no; file "null.zone.file"; };
 zone "h.eurotrading.com.pl" { type master; notify no; file "null.zone.file"; };
 zone "h.j990981.ru" { type master; notify no; file "null.zone.file"; };
+zone "h.top4top.io" { type master; notify no; file "null.zone.file"; };
 zone "h.valerana44.ru" { type master; notify no; file "null.zone.file"; };
 zone "h1.iwakalong.ru" { type master; notify no; file "null.zone.file"; };
 zone "h112321.s08.test-hf.su" { type master; notify no; file "null.zone.file"; };
@@ -30123,6 +30117,7 @@ zone "hayahost.com" { type master; notify no; file "null.zone.file"; };
 zone "hayalbu.com" { type master; notify no; file "null.zone.file"; };
 zone "hayashitoysmart.com" { type master; notify no; file "null.zone.file"; };
 zone "hayatevesigar-10gbnetkazan.com" { type master; notify no; file "null.zone.file"; };
+zone "hayatevesigar-20gb.com" { type master; notify no; file "null.zone.file"; };
 zone "hayatihusada.com" { type master; notify no; file "null.zone.file"; };
 zone "hayatiskele.com" { type master; notify no; file "null.zone.file"; };
 zone "hayatlokma.com" { type master; notify no; file "null.zone.file"; };
@@ -30379,8 +30374,10 @@ zone "hedisetro.5gbfree.com" { type master; notify no; file "null.zone.file"; };
 zone "hediy20gb-internet-online.net" { type master; notify no; file "null.zone.file"; };
 zone "hediye-internet-saglik.org" { type master; notify no; file "null.zone.file"; };
 zone "hediye-internet.site" { type master; notify no; file "null.zone.file"; };
+zone "hediye20gb.online" { type master; notify no; file "null.zone.file"; };
 zone "hediyegapsinternet.com" { type master; notify no; file "null.zone.file"; };
 zone "hediyeinternetpaketim.com" { type master; notify no; file "null.zone.file"; };
+zone "hediyeler10gb-ramazan.net" { type master; notify no; file "null.zone.file"; };
 zone "hediyem20gb-internet.org" { type master; notify no; file "null.zone.file"; };
 zone "hediyenkolay.com" { type master; notify no; file "null.zone.file"; };
 zone "hedrasl.com" { type master; notify no; file "null.zone.file"; };
@@ -30956,6 +30953,7 @@ zone "hjsanders.nl" { type master; notify no; file "null.zone.file"; };
 zone "hjylw66.com" { type master; notify no; file "null.zone.file"; };
 zone "hk.darwd.com" { type master; notify no; file "null.zone.file"; };
 zone "hk.insure" { type master; notify no; file "null.zone.file"; };
+zone "hk.npu.gov.ua" { type master; notify no; file "null.zone.file"; };
 zone "hk026.com" { type master; notify no; file "null.zone.file"; };
 zone "hk3.my" { type master; notify no; file "null.zone.file"; };
 zone "hk3fitness.com" { type master; notify no; file "null.zone.file"; };
@@ -31181,6 +31179,7 @@ zone "home-racing.com" { type master; notify no; file "null.zone.file"; };
 zone "home-spy-shop.com" { type master; notify no; file "null.zone.file"; };
 zone "home.99eurowebsite.ie" { type master; notify no; file "null.zone.file"; };
 zone "home.barley-plus.com" { type master; notify no; file "null.zone.file"; };
+zone "home.earthlink.net" { type master; notify no; file "null.zone.file"; };
 zone "home.evrstudio.com" { type master; notify no; file "null.zone.file"; };
 zone "home.healthiestu.com" { type master; notify no; file "null.zone.file"; };
 zone "home.isdes.com" { type master; notify no; file "null.zone.file"; };
@@ -31651,7 +31650,6 @@ zone "houzess.com" { type master; notify no; file "null.zone.file"; };
 zone "how-to-nampa.com" { type master; notify no; file "null.zone.file"; };
 zone "how-to-tech.com" { type master; notify no; file "null.zone.file"; };
 zone "how.ph" { type master; notify no; file "null.zone.file"; };
-zone "howalshafikings.com" { type master; notify no; file "null.zone.file"; };
 zone "howardbenz.com" { type master; notify no; file "null.zone.file"; };
 zone "howardbragman.com" { type master; notify no; file "null.zone.file"; };
 zone "howardgfranklin.com" { type master; notify no; file "null.zone.file"; };
@@ -33673,6 +33671,7 @@ zone "integraciontotal.com.mx" { type master; notify no; file "null.zone.file";
 zone "integracooperativa.com" { type master; notify no; file "null.zone.file"; };
 zone "integrafika.co.uk" { type master; notify no; file "null.zone.file"; };
 zone "integraga.com" { type master; notify no; file "null.zone.file"; };
+zone "integralc.com" { type master; notify no; file "null.zone.file"; };
 zone "integralcs.com.br" { type master; notify no; file "null.zone.file"; };
 zone "integralestates.in" { type master; notify no; file "null.zone.file"; };
 zone "integralmakeup.com" { type master; notify no; file "null.zone.file"; };
@@ -33709,6 +33708,7 @@ zone "interaktifhaberler.net" { type master; notify no; file "null.zone.file"; }
 zone "interativus.com.br" { type master; notify no; file "null.zone.file"; };
 zone "interbanx.co.id" { type master; notify no; file "null.zone.file"; };
 zone "interbizservices.eu" { type master; notify no; file "null.zone.file"; };
+zone "interbus.cz" { type master; notify no; file "null.zone.file"; };
 zone "interciencia.es" { type master; notify no; file "null.zone.file"; };
 zone "intercitiesfiji.com" { type master; notify no; file "null.zone.file"; };
 zone "intercity-tlt.ru" { type master; notify no; file "null.zone.file"; };
@@ -33769,7 +33769,6 @@ zone "internationalmscareerseminar.com" { type master; notify no; file "null.zon
 zone "internaut.in" { type master; notify no; file "null.zone.file"; };
 zone "internetcasinoweblog.com" { type master; notify no; file "null.zone.file"; };
 zone "internetjogasz.hu" { type master; notify no; file "null.zone.file"; };
-zone "internetlink.com.mx" { type master; notify no; file "null.zone.file"; };
 zone "internetmarketing4pros.com" { type master; notify no; file "null.zone.file"; };
 zone "internetofsmell.com" { type master; notify no; file "null.zone.file"; };
 zone "internetordbogen.dk" { type master; notify no; file "null.zone.file"; };
@@ -33874,6 +33873,7 @@ zone "invernessdesignbuild.ca" { type master; notify no; file "null.zone.file";
 zone "inversionesdambrosio.com" { type master; notify no; file "null.zone.file"; };
 zone "inversioneslopezminaya.com" { type master; notify no; file "null.zone.file"; };
 zone "invertilo.com" { type master; notify no; file "null.zone.file"; };
+zone "invest-logistic.net" { type master; notify no; file "null.zone.file"; };
 zone "invest.hawzentr.com" { type master; notify no; file "null.zone.file"; };
 zone "investasiafoundation.com" { type master; notify no; file "null.zone.file"; };
 zone "investaweb.com" { type master; notify no; file "null.zone.file"; };
@@ -34421,7 +34421,6 @@ zone "itaalabama.org" { type master; notify no; file "null.zone.file"; };
 zone "itafoam.com" { type master; notify no; file "null.zone.file"; };
 zone "itai-ziv.com" { type master; notify no; file "null.zone.file"; };
 zone "italamp.tk" { type master; notify no; file "null.zone.file"; };
-zone "italia-ricci.com" { type master; notify no; file "null.zone.file"; };
 zone "italianfishrestaurantgh.com" { type master; notify no; file "null.zone.file"; };
 zone "italianindoart.com" { type master; notify no; file "null.zone.file"; };
 zone "italiansupercars.net" { type master; notify no; file "null.zone.file"; };
@@ -35010,7 +35009,6 @@ zone "jayambewallpapers.com" { type master; notify no; file "null.zone.file"; };
 zone "jayb.xyz" { type master; notify no; file "null.zone.file"; };
 zone "jayc-productions.com" { type master; notify no; file "null.zone.file"; };
 zone "jaychallenge.com" { type master; notify no; file "null.zone.file"; };
-zone "jaycochemicals.com" { type master; notify no; file "null.zone.file"; };
 zone "jaydeemory.com" { type master; notify no; file "null.zone.file"; };
 zone "jaydipchowdharyblog.com" { type master; notify no; file "null.zone.file"; };
 zone "jayemservicesdev2.site" { type master; notify no; file "null.zone.file"; };
@@ -35349,6 +35347,7 @@ zone "jimbarrell.com" { type master; notify no; file "null.zone.file"; };
 zone "jimbira-sakho.net" { type master; notify no; file "null.zone.file"; };
 zone "jimbowe.com" { type master; notify no; file "null.zone.file"; };
 zone "jimenezdesigngroup.com" { type master; notify no; file "null.zone.file"; };
+zone "jimlaneevangelist.com" { type master; notify no; file "null.zone.file"; };
 zone "jimlowry.com" { type master; notify no; file "null.zone.file"; };
 zone "jimmibroadband.in" { type master; notify no; file "null.zone.file"; };
 zone "jimmit.xyz" { type master; notify no; file "null.zone.file"; };
@@ -36316,6 +36315,7 @@ zone "k.5qa.so" { type master; notify no; file "null.zone.file"; };
 zone "k.adr.com.ua" { type master; notify no; file "null.zone.file"; };
 zone "k.iepedacitodecielo.edu.co" { type master; notify no; file "null.zone.file"; };
 zone "k.ludong.tv" { type master; notify no; file "null.zone.file"; };
+zone "k.top4top.io" { type master; notify no; file "null.zone.file"; };
 zone "k110.ir" { type master; notify no; file "null.zone.file"; };
 zone "k12818.com" { type master; notify no; file "null.zone.file"; };
 zone "k1ristri.ru" { type master; notify no; file "null.zone.file"; };
@@ -38845,7 +38845,6 @@ zone "lalogarcia.es" { type master; notify no; file "null.zone.file"; };
 zone "lalolink.com" { type master; notify no; file "null.zone.file"; };
 zone "lalunafashion.eu" { type master; notify no; file "null.zone.file"; };
 zone "lalunenoire.net" { type master; notify no; file "null.zone.file"; };
-zone "lam.cz" { type master; notify no; file "null.zone.file"; };
 zone "lamacosmetics.com" { type master; notify no; file "null.zone.file"; };
 zone "lamaggiora.it" { type master; notify no; file "null.zone.file"; };
 zone "lamaisongourmande.live" { type master; notify no; file "null.zone.file"; };
@@ -38932,6 +38931,7 @@ zone "landrovermarketplace.com" { type master; notify no; file "null.zone.file";
 zone "landroveroflouisville.com" { type master; notify no; file "null.zone.file"; };
 zone "landscapeton.com" { type master; notify no; file "null.zone.file"; };
 zone "landscapingstoneandmulchwi.com" { type master; notify no; file "null.zone.file"; };
+zone "landschaftsservice-seibold.de" { type master; notify no; file "null.zone.file"; };
 zone "landskronaloppis.se" { type master; notify no; file "null.zone.file"; };
 zone "landskronamatguide.se" { type master; notify no; file "null.zone.file"; };
 zone "landskronaportalen.se" { type master; notify no; file "null.zone.file"; };
@@ -40023,6 +40023,7 @@ zone "lightswitchmarketing.biz" { type master; notify no; file "null.zone.file";
 zone "lightvalleyprune.com" { type master; notify no; file "null.zone.file"; };
 zone "lightwerq.com" { type master; notify no; file "null.zone.file"; };
 zone "lightyard.com" { type master; notify no; file "null.zone.file"; };
+zone "lignar.com" { type master; notify no; file "null.zone.file"; };
 zone "lignarium.se" { type master; notify no; file "null.zone.file"; };
 zone "lignumpolska.com" { type master; notify no; file "null.zone.file"; };
 zone "liguebretagnebillard.fr" { type master; notify no; file "null.zone.file"; };
@@ -40181,6 +40182,7 @@ zone "linkglobalwebsiteaddress.duckdns.org" { type master; notify no; file "null
 zone "linkhome.ga" { type master; notify no; file "null.zone.file"; };
 zone "linki.pro" { type master; notify no; file "null.zone.file"; };
 zone "linkingphase.com" { type master; notify no; file "null.zone.file"; };
+zone "linkmaxbd.com" { type master; notify no; file "null.zone.file"; };
 zone "linkomember.info" { type master; notify no; file "null.zone.file"; };
 zone "linkovani.cz" { type master; notify no; file "null.zone.file"; };
 zone "linkplay.duckdns.org" { type master; notify no; file "null.zone.file"; };
@@ -40379,7 +40381,6 @@ zone "livetechsupport.ca" { type master; notify no; file "null.zone.file"; };
 zone "livetesting.xyz" { type master; notify no; file "null.zone.file"; };
 zone "livetotry.com" { type master; notify no; file "null.zone.file"; };
 zone "livetours.cl" { type master; notify no; file "null.zone.file"; };
-zone "livetrack.in" { type master; notify no; file "null.zone.file"; };
 zone "livetvsports.ml" { type master; notify no; file "null.zone.file"; };
 zone "liveu.lk" { type master; notify no; file "null.zone.file"; };
 zone "liviavicentini.com" { type master; notify no; file "null.zone.file"; };
@@ -43401,7 +43402,6 @@ zone "mbsinfosolution.com" { type master; notify no; file "null.zone.file"; };
 zone "mbslmail.mbslbank.com" { type master; notify no; file "null.zone.file"; };
 zone "mbsolutionssrl.it" { type master; notify no; file "null.zone.file"; };
 zone "mbsou37.ru" { type master; notify no; file "null.zone.file"; };
-zone "mbtechnosolutions.com" { type master; notify no; file "null.zone.file"; };
 zone "mbupress.umbjm.ac.id" { type master; notify no; file "null.zone.file"; };
 zone "mbve.org" { type master; notify no; file "null.zone.file"; };
 zone "mbvvs.dk" { type master; notify no; file "null.zone.file"; };
@@ -46148,6 +46148,7 @@ zone "multifin.com.au" { type master; notify no; file "null.zone.file"; };
 zone "multihouse.fmcode.pl" { type master; notify no; file "null.zone.file"; };
 zone "multila.com" { type master; notify no; file "null.zone.file"; };
 zone "multilingualconnections.com" { type master; notify no; file "null.zone.file"; };
+zone "multilinkspk.com" { type master; notify no; file "null.zone.file"; };
 zone "multimedia.biscast.edu.ph" { type master; notify no; file "null.zone.file"; };
 zone "multimix.hu" { type master; notify no; file "null.zone.file"; };
 zone "multimovebd.com" { type master; notify no; file "null.zone.file"; };
@@ -47240,6 +47241,7 @@ zone "ncledu.org" { type master; notify no; file "null.zone.file"; };
 zone "ncmt2w.bn.files.1drv.com" { type master; notify no; file "null.zone.file"; };
 zone "ncoimbra.pt" { type master; notify no; file "null.zone.file"; };
 zone "ncp.su" { type master; notify no; file "null.zone.file"; };
+zone "ncpcgov.com" { type master; notify no; file "null.zone.file"; };
 zone "ncpll1392.ir" { type master; notify no; file "null.zone.file"; };
 zone "ncronline.in" { type master; notify no; file "null.zone.file"; };
 zone "ncsquared.com" { type master; notify no; file "null.zone.file"; };
@@ -47394,7 +47396,6 @@ zone "neproperty.in" { type master; notify no; file "null.zone.file"; };
 zone "neptanckellek.hu" { type master; notify no; file "null.zone.file"; };
 zone "neracompany.sk" { type master; notify no; file "null.zone.file"; };
 zone "nerasro.sk" { type master; notify no; file "null.zone.file"; };
-zone "nerdassasins.com" { type master; notify no; file "null.zone.file"; };
 zone "nerdsalley.com" { type master; notify no; file "null.zone.file"; };
 zone "nerdtshirtsuk.com" { type master; notify no; file "null.zone.file"; };
 zone "neremarketing.com" { type master; notify no; file "null.zone.file"; };
@@ -47463,7 +47464,6 @@ zone "netin.vn" { type master; notify no; file "null.zone.file"; };
 zone "netizennepal.com" { type master; notify no; file "null.zone.file"; };
 zone "netkafem.org" { type master; notify no; file "null.zone.file"; };
 zone "netking.duckdns.org" { type master; notify no; file "null.zone.file"; };
-zone "netlink.com" { type master; notify no; file "null.zone.file"; };
 zone "netm.club" { type master; notify no; file "null.zone.file"; };
 zone "netmaffia.net" { type master; notify no; file "null.zone.file"; };
 zone "netmansoft.com" { type master; notify no; file "null.zone.file"; };
@@ -48418,6 +48418,7 @@ zone "nonglek.net" { type master; notify no; file "null.zone.file"; };
 zone "nongnghiepgiaphat.com" { type master; notify no; file "null.zone.file"; };
 zone "nongsan24h.com" { type master; notify no; file "null.zone.file"; };
 zone "nongsananhnguyen.com" { type master; notify no; file "null.zone.file"; };
+zone "nongsandungha.com" { type master; notify no; file "null.zone.file"; };
 zone "nonlocality.com" { type master; notify no; file "null.zone.file"; };
 zone "nonnemacher.com.br" { type master; notify no; file "null.zone.file"; };
 zone "nonnewspaper.com" { type master; notify no; file "null.zone.file"; };
@@ -48575,6 +48576,7 @@ zone "notix-test.ru" { type master; notify no; file "null.zone.file"; };
 zone "notiz.dk" { type master; notify no; file "null.zone.file"; };
 zone "notlang.org" { type master; notify no; file "null.zone.file"; };
 zone "notlrealty.com" { type master; notify no; file "null.zone.file"; };
+zone "notomonopoly.com" { type master; notify no; file "null.zone.file"; };
 zone "notonfirstdate.net" { type master; notify no; file "null.zone.file"; };
 zone "notredamedesmines.fr" { type master; notify no; file "null.zone.file"; };
 zone "notriicka.ir" { type master; notify no; file "null.zone.file"; };
@@ -48922,6 +48924,7 @@ zone "nygard.no" { type master; notify no; file "null.zone.file"; };
 zone "nygren.nu" { type master; notify no; file "null.zone.file"; };
 zone "nygryn.net" { type master; notify no; file "null.zone.file"; };
 zone "nygts.com" { type master; notify no; file "null.zone.file"; };
+zone "nyifdmacyzechariah.top" { type master; notify no; file "null.zone.file"; };
 zone "nyky.ir" { type master; notify no; file "null.zone.file"; };
 zone "nylag.org" { type master; notify no; file "null.zone.file"; };
 zone "nylandscaping.com" { type master; notify no; file "null.zone.file"; };
@@ -49292,7 +49295,6 @@ zone "ohscrane.com" { type master; notify no; file "null.zone.file"; };
 zone "ohters.de" { type master; notify no; file "null.zone.file"; };
 zone "ohyellow.nl" { type master; notify no; file "null.zone.file"; };
 zone "oi65.tinypic.com" { type master; notify no; file "null.zone.file"; };
-zone "oi68.tinypic.com" { type master; notify no; file "null.zone.file"; };
 zone "oiainbtaea38.silverabout.ml" { type master; notify no; file "null.zone.file"; };
 zone "oiasdnqweqasd.com" { type master; notify no; file "null.zone.file"; };
 zone "oiflddw.gq" { type master; notify no; file "null.zone.file"; };
@@ -49506,6 +49508,7 @@ zone "omagroup.ru" { type master; notify no; file "null.zone.file"; };
 zone "omaharefugees.com" { type master; notify no; file "null.zone.file"; };
 zone "omaint.ml" { type master; notify no; file "null.zone.file"; };
 zone "omalleyco-my.sharepoint.com" { type master; notify no; file "null.zone.file"; };
+zone "omalll.com" { type master; notify no; file "null.zone.file"; };
 zone "omanfleethtml.neomeric.us" { type master; notify no; file "null.zone.file"; };
 zone "omarelbalshy.com" { type master; notify no; file "null.zone.file"; };
 zone "omartinez.com" { type master; notify no; file "null.zone.file"; };
@@ -49724,6 +49727,7 @@ zone "onlinedukkanim.net" { type master; notify no; file "null.zone.file"; };
 zone "onlineeregistration.com" { type master; notify no; file "null.zone.file"; };
 zone "onlineiascoaching.com" { type master; notify no; file "null.zone.file"; };
 zone "onlineitshop.com" { type master; notify no; file "null.zone.file"; };
+zone "onlinejohnline99.org" { type master; notify no; file "null.zone.file"; };
 zone "onlinekushshop.com" { type master; notify no; file "null.zone.file"; };
 zone "onlinelab.dk" { type master; notify no; file "null.zone.file"; };
 zone "onlinelegalsoftware.com" { type master; notify no; file "null.zone.file"; };
@@ -49973,7 +49977,6 @@ zone "orangeink-tattoo.de" { type master; notify no; file "null.zone.file"; };
 zone "orangeltda.cl" { type master; notify no; file "null.zone.file"; };
 zone "orangemediterranea.es" { type master; notify no; file "null.zone.file"; };
 zone "orangeminingsupply.com.au" { type master; notify no; file "null.zone.file"; };
-zone "orangeph.com" { type master; notify no; file "null.zone.file"; };
 zone "orangereel.co.uk" { type master; notify no; file "null.zone.file"; };
 zone "orangeslonik.com" { type master; notify no; file "null.zone.file"; };
 zone "oransky.org" { type master; notify no; file "null.zone.file"; };
@@ -50937,7 +50940,6 @@ zone "parsintelligent.com" { type master; notify no; file "null.zone.file"; };
 zone "parsrad.ir" { type master; notify no; file "null.zone.file"; };
 zone "parsroman.ir" { type master; notify no; file "null.zone.file"; };
 zone "part-timebusiness.org" { type master; notify no; file "null.zone.file"; };
-zone "partage-fichiers.com" { type master; notify no; file "null.zone.file"; };
 zone "partage.nelmedia.ca" { type master; notify no; file "null.zone.file"; };
 zone "partaususd.ru" { type master; notify no; file "null.zone.file"; };
 zone "partgohar.com" { type master; notify no; file "null.zone.file"; };
@@ -52470,7 +52472,6 @@ zone "pmiec.com" { type master; notify no; file "null.zone.file"; };
 zone "pmil.org" { type master; notify no; file "null.zone.file"; };
 zone "pminfocom.com" { type master; notify no; file "null.zone.file"; };
 zone "pmionline.us" { type master; notify no; file "null.zone.file"; };
-zone "pmjnews.com" { type master; notify no; file "null.zone.file"; };
 zone "pmk-55.ru" { type master; notify no; file "null.zone.file"; };
 zone "pmlsdbs.ac.in" { type master; notify no; file "null.zone.file"; };
 zone "pmmc.ae" { type master; notify no; file "null.zone.file"; };
@@ -53772,7 +53773,6 @@ zone "provio.nl" { type master; notify no; file "null.zone.file"; };
 zone "provisa-centr.ru" { type master; notify no; file "null.zone.file"; };
 zone "provisol.se" { type master; notify no; file "null.zone.file"; };
 zone "provit.fr" { type master; notify no; file "null.zone.file"; };
-zone "provo2.com" { type master; notify no; file "null.zone.file"; };
 zone "provoke.bg" { type master; notify no; file "null.zone.file"; };
 zone "provolt.ro" { type master; notify no; file "null.zone.file"; };
 zone "provost.sterlingstrustbank.tk" { type master; notify no; file "null.zone.file"; };
@@ -53902,6 +53902,7 @@ zone "psychprofiler.com" { type master; notify no; file "null.zone.file"; };
 zone "psymonkee.com" { type master; notify no; file "null.zone.file"; };
 zone "psynchro.org" { type master; notify no; file "null.zone.file"; };
 zone "ptb.com.mx" { type master; notify no; file "null.zone.file"; };
+zone "ptbsda.com" { type master; notify no; file "null.zone.file"; };
 zone "ptci-md.org" { type master; notify no; file "null.zone.file"; };
 zone "ptdtech.tk" { type master; notify no; file "null.zone.file"; };
 zone "pte.vn" { type master; notify no; file "null.zone.file"; };
@@ -55228,6 +55229,7 @@ zone "ramallah.atyafco.com" { type master; notify no; file "null.zone.file"; };
 zone "ramashrayevents.com" { type master; notify no; file "null.zone.file"; };
 zone "ramatfactory.com.sa" { type master; notify no; file "null.zone.file"; };
 zone "ramayanawaterpark.cn" { type master; notify no; file "null.zone.file"; };
+zone "ramazan20gbinternet.com" { type master; notify no; file "null.zone.file"; };
 zone "ramazanda20.site" { type master; notify no; file "null.zone.file"; };
 zone "ramazanda20gb.xyz" { type master; notify no; file "null.zone.file"; };
 zone "rambu.ciamiskab.go.id" { type master; notify no; file "null.zone.file"; };
@@ -55606,6 +55608,7 @@ zone "rebelmavenmastermind.com" { type master; notify no; file "null.zone.file";
 zone "rebobine.com.br" { type master; notify no; file "null.zone.file"; };
 zone "rebomcap.eu" { type master; notify no; file "null.zone.file"; };
 zone "reboot-hack.ru" { type master; notify no; file "null.zone.file"; };
+zone "reboot.pro" { type master; notify no; file "null.zone.file"; };
 zone "reborn.arteviral.com" { type master; notify no; file "null.zone.file"; };
 zone "reborn24.com" { type master; notify no; file "null.zone.file"; };
 zone "reborntechnology.co.uk" { type master; notify no; file "null.zone.file"; };
@@ -55691,7 +55694,6 @@ zone "redironmarketing.com" { type master; notify no; file "null.zone.file"; };
 zone "redklee.com.ar" { type master; notify no; file "null.zone.file"; };
 zone "redlinegt.com" { type master; notify no; file "null.zone.file"; };
 zone "redlk.com" { type master; notify no; file "null.zone.file"; };
-zone "redlogisticsmaroc.com" { type master; notify no; file "null.zone.file"; };
 zone "redloop.io" { type master; notify no; file "null.zone.file"; };
 zone "redmag.by" { type master; notify no; file "null.zone.file"; };
 zone "redmediasigns.com" { type master; notify no; file "null.zone.file"; };
@@ -55711,6 +55713,7 @@ zone "redsnowball.com" { type master; notify no; file "null.zone.file"; };
 zone "redsseammgt.com" { type master; notify no; file "null.zone.file"; };
 zone "redtek0.com" { type master; notify no; file "null.zone.file"; };
 zone "redtv.top" { type master; notify no; file "null.zone.file"; };
+zone "redvalidator.com" { type master; notify no; file "null.zone.file"; };
 zone "redvelvetpatisserie.co.uk" { type master; notify no; file "null.zone.file"; };
 zone "redwing.com.eg" { type master; notify no; file "null.zone.file"; };
 zone "redwingdemo.dukaafrica.com" { type master; notify no; file "null.zone.file"; };
@@ -56677,6 +56680,7 @@ zone "robpepper.co.uk" { type master; notify no; file "null.zone.file"; };
 zone "robshop.lt" { type master; notify no; file "null.zone.file"; };
 zone "robsitbon.net" { type master; notify no; file "null.zone.file"; };
 zone "robustclarity.com" { type master; notify no; file "null.zone.file"; };
+zone "robvanderwoude.com" { type master; notify no; file "null.zone.file"; };
 zone "robwalls.com" { type master; notify no; file "null.zone.file"; };
 zone "robwassotdint.ru" { type master; notify no; file "null.zone.file"; };
 zone "robzandfitness.co.uk" { type master; notify no; file "null.zone.file"; };
@@ -56707,7 +56711,6 @@ zone "rockmusiclives.com" { type master; notify no; file "null.zone.file"; };
 zone "rocknebyvvs.se" { type master; notify no; file "null.zone.file"; };
 zone "rocknrolletco.top" { type master; notify no; file "null.zone.file"; };
 zone "rocknrolltrain.cn" { type master; notify no; file "null.zone.file"; };
-zone "rockpointgroup.com" { type master; notify no; file "null.zone.file"; };
 zone "rockradioni.co.uk" { type master; notify no; file "null.zone.file"; };
 zone "rocksolidproducts.com" { type master; notify no; file "null.zone.file"; };
 zone "rocksolidstickers.com" { type master; notify no; file "null.zone.file"; };
@@ -57696,6 +57699,7 @@ zone "sageo2018.fr" { type master; notify no; file "null.zone.file"; };
 zone "sagestls.com" { type master; notify no; file "null.zone.file"; };
 zone "sageth.net" { type master; notify no; file "null.zone.file"; };
 zone "sagiri.org" { type master; notify no; file "null.zone.file"; };
+zone "saglikbakanligi-destek.org" { type master; notify no; file "null.zone.file"; };
 zone "saglikbakanligi20gbinternet.com" { type master; notify no; file "null.zone.file"; };
 zone "saglikbakanligindanhediye20gb.com" { type master; notify no; file "null.zone.file"; };
 zone "saglikgoalapp.site" { type master; notify no; file "null.zone.file"; };
@@ -58456,7 +58460,6 @@ zone "scandinavian-fashion.dk" { type master; notify no; file "null.zone.file";
 zone "scandinavianman.designmybike.com" { type master; notify no; file "null.zone.file"; };
 zone "scandryer.se" { type master; notify no; file "null.zone.file"; };
 zone "scanelectric.ro" { type master; notify no; file "null.zone.file"; };
-zone "scanliftmaskin.no" { type master; notify no; file "null.zone.file"; };
 zone "scanlisten.sunless.network" { type master; notify no; file "null.zone.file"; };
 zone "scannableid.com" { type master; notify no; file "null.zone.file"; };
 zone "scanthembigbots.mikeysyach.xyz" { type master; notify no; file "null.zone.file"; };
@@ -59103,6 +59106,7 @@ zone "sendsharkreview.com" { type master; notify no; file "null.zone.file"; };
 zone "senehenryinc.ru" { type master; notify no; file "null.zone.file"; };
 zone "senergysafrica.com" { type master; notify no; file "null.zone.file"; };
 zone "seneta.cloud" { type master; notify no; file "null.zone.file"; };
+zone "senevdekaldiyehediye.com" { type master; notify no; file "null.zone.file"; };
 zone "senevdekaldiyehediyenet.com" { type master; notify no; file "null.zone.file"; };
 zone "seniorbudgetsaver.com" { type master; notify no; file "null.zone.file"; };
 zone "seniorenwoningbouwen.nl" { type master; notify no; file "null.zone.file"; };
@@ -59802,6 +59806,7 @@ zone "sheddy.5gbfree.com" { type master; notify no; file "null.zone.file"; };
 zone "shedevildaughterofthedaredevil.com" { type master; notify no; file "null.zone.file"; };
 zone "shedy.5gbfree.com" { type master; notify no; file "null.zone.file"; };
 zone "sheedle.live" { type master; notify no; file "null.zone.file"; };
+zone "sheeni-egypt.com" { type master; notify no; file "null.zone.file"; };
 zone "sheenlandia.com" { type master; notify no; file "null.zone.file"; };
 zone "sheeriuruba.com" { type master; notify no; file "null.zone.file"; };
 zone "shefdomi.com" { type master; notify no; file "null.zone.file"; };
@@ -60625,7 +60630,6 @@ zone "sisubur.xyz" { type master; notify no; file "null.zone.file"; };
 zone "sisustussuunnittelu.fi" { type master; notify no; file "null.zone.file"; };
 zone "sisweb.info" { type master; notify no; file "null.zone.file"; };
 zone "sitagroup.it" { type master; notify no; file "null.zone.file"; };
-zone "sitcomsonline.com" { type master; notify no; file "null.zone.file"; };
 zone "site-2.work" { type master; notify no; file "null.zone.file"; };
 zone "site-4.work" { type master; notify no; file "null.zone.file"; };
 zone "site-internet-belfort.fr" { type master; notify no; file "null.zone.file"; };
@@ -60652,7 +60656,6 @@ zone "siteplaceholder.com" { type master; notify no; file "null.zone.file"; };
 zone "siteradar.com" { type master; notify no; file "null.zone.file"; };
 zone "sites.blueskydigital.com.au" { type master; notify no; file "null.zone.file"; };
 zone "sites.btb.kg" { type master; notify no; file "null.zone.file"; };
-zone "sites.ieee.org" { type master; notify no; file "null.zone.file"; };
 zone "sites.linkysoft.com" { type master; notify no; file "null.zone.file"; };
 zone "sites.webdefy.com" { type master; notify no; file "null.zone.file"; };
 zone "sitesbrgiga.com.br" { type master; notify no; file "null.zone.file"; };
@@ -61140,7 +61143,6 @@ zone "sme.elearning.au.edu" { type master; notify no; file "null.zone.file"; };
 zone "smeare.com" { type master; notify no; file "null.zone.file"; };
 zone "smed13.inducido.com" { type master; notify no; file "null.zone.file"; };
 zone "smedegaarden.dk" { type master; notify no; file "null.zone.file"; };
-zone "smedia.com.au" { type master; notify no; file "null.zone.file"; };
 zone "smeets.ca" { type master; notify no; file "null.zone.file"; };
 zone "smeetspost.nl" { type master; notify no; file "null.zone.file"; };
 zone "smefood.com" { type master; notify no; file "null.zone.file"; };
@@ -61759,6 +61761,7 @@ zone "sophiasuites-santorini.com" { type master; notify no; file "null.zone.file
 zone "sophiebarthelemy.fr" { type master; notify no; file "null.zone.file"; };
 zone "sophieguaremas.com" { type master; notify no; file "null.zone.file"; };
 zone "sophiethomasartist.com" { type master; notify no; file "null.zone.file"; };
+zone "sophis.biz" { type master; notify no; file "null.zone.file"; };
 zone "sophistproduction.com" { type master; notify no; file "null.zone.file"; };
 zone "sophro-zara.com" { type master; notify no; file "null.zone.file"; };
 zone "sophrologie-untempspourmoi.fr" { type master; notify no; file "null.zone.file"; };
@@ -62771,6 +62774,7 @@ zone "stateunico.com" { type master; notify no; file "null.zone.file"; };
 zone "statewidehomesavings.com" { type master; notify no; file "null.zone.file"; };
 zone "statexadver3552mn12.club" { type master; notify no; file "null.zone.file"; };
 zone "static-4matic.club" { type master; notify no; file "null.zone.file"; };
+zone "static.3001.net" { type master; notify no; file "null.zone.file"; };
 zone "static.caregivers.blueweb.md" { type master; notify no; file "null.zone.file"; };
 zone "static.error-soft.net" { type master; notify no; file "null.zone.file"; };
 zone "static.ilclock.com" { type master; notify no; file "null.zone.file"; };
@@ -64536,6 +64540,7 @@ zone "takeiteasy.live" { type master; notify no; file "null.zone.file"; };
 zone "takeitfromtheman.com" { type master; notify no; file "null.zone.file"; };
 zone "takemetohimalayas.com" { type master; notify no; file "null.zone.file"; };
 zone "takenpaybd.com" { type master; notify no; file "null.zone.file"; };
+zone "takernvandrarhem.se" { type master; notify no; file "null.zone.file"; };
 zone "takeshimiyamoto.com" { type master; notify no; file "null.zone.file"; };
 zone "takeshykurosavabest.com" { type master; notify no; file "null.zone.file"; };
 zone "takharandshankertour.com" { type master; notify no; file "null.zone.file"; };
@@ -64625,6 +64630,7 @@ zone "tamoyun.web.tr" { type master; notify no; file "null.zone.file"; };
 zone "tampacigarroller.com" { type master; notify no; file "null.zone.file"; };
 zone "tamparoofing.com" { type master; notify no; file "null.zone.file"; };
 zone "tampaseo.com" { type master; notify no; file "null.zone.file"; };
+zone "tamsu.website" { type master; notify no; file "null.zone.file"; };
 zone "tamsuamy.com" { type master; notify no; file "null.zone.file"; };
 zone "tamsys.net" { type master; notify no; file "null.zone.file"; };
 zone "tamta.gr" { type master; notify no; file "null.zone.file"; };
@@ -65528,6 +65534,7 @@ zone "terramosa.com" { type master; notify no; file "null.zone.file"; };
 zone "terranovaoutdoorliving.com" { type master; notify no; file "null.zone.file"; };
 zone "terranowwa.org" { type master; notify no; file "null.zone.file"; };
 zone "terraoferta.club" { type master; notify no; file "null.zone.file"; };
+zone "terrapersonas.com" { type master; notify no; file "null.zone.file"; };
 zone "terrasol.cl" { type master; notify no; file "null.zone.file"; };
 zone "terratacuara.com" { type master; notify no; file "null.zone.file"; };
 zone "terrats.biz" { type master; notify no; file "null.zone.file"; };
@@ -65881,7 +65888,6 @@ zone "tftt.dairyaustralia.com.au" { type master; notify no; file "null.zone.file
 zone "tfu.ae" { type master; notify no; file "null.zone.file"; };
 zone "tfulf.host" { type master; notify no; file "null.zone.file"; };
 zone "tfullerton.com" { type master; notify no; file "null.zone.file"; };
-zone "tfvn.com.vn" { type master; notify no; file "null.zone.file"; };
 zone "tgbabcrfv.1apps.com" { type master; notify no; file "null.zone.file"; };
 zone "tgbot.cf" { type master; notify no; file "null.zone.file"; };
 zone "tgcool.gq" { type master; notify no; file "null.zone.file"; };
@@ -66282,6 +66288,7 @@ zone "theinspiredblogger.com" { type master; notify no; file "null.zone.file"; }
 zone "theinspireddrive.com" { type master; notify no; file "null.zone.file"; };
 zone "theintelligencer.com.ng" { type master; notify no; file "null.zone.file"; };
 zone "theinvestmentinvestigator.com" { type master; notify no; file "null.zone.file"; };
+zone "theipgenerators.com" { type master; notify no; file "null.zone.file"; };
 zone "theirishhouse.dk" { type master; notify no; file "null.zone.file"; };
 zone "theiro.com" { type master; notify no; file "null.zone.file"; };
 zone "theisel.de" { type master; notify no; file "null.zone.file"; };
@@ -68550,6 +68557,7 @@ zone "tuvandauthau.net" { type master; notify no; file "null.zone.file"; };
 zone "tuvandoanhnghiep.org" { type master; notify no; file "null.zone.file"; };
 zone "tuvanduhocdaiviet.com.vn" { type master; notify no; file "null.zone.file"; };
 zone "tuvanduhocduc.org" { type master; notify no; file "null.zone.file"; };
+zone "tuvanduhocmap.com" { type master; notify no; file "null.zone.file"; };
 zone "tuvangamenet.com" { type master; notify no; file "null.zone.file"; };
 zone "tuvangioitinh.com" { type master; notify no; file "null.zone.file"; };
 zone "tuvanluat.vn" { type master; notify no; file "null.zone.file"; };
@@ -68691,7 +68699,6 @@ zone "u-uploads.com" { type master; notify no; file "null.zone.file"; };
 zone "u.coka.la" { type master; notify no; file "null.zone.file"; };
 zone "u.jimdo.com" { type master; notify no; file "null.zone.file"; };
 zone "u.lewd.se" { type master; notify no; file "null.zone.file"; };
-zone "u.teknik.io" { type master; notify no; file "null.zone.file"; };
 zone "u0005132m0005jp.u023jp9938.info" { type master; notify no; file "null.zone.file"; };
 zone "u0039435.cp.regruhosting.ru" { type master; notify no; file "null.zone.file"; };
 zone "u0287442.isp.regruhosting.ru" { type master; notify no; file "null.zone.file"; };
@@ -69330,6 +69337,7 @@ zone "up.oxvkeq.co" { type master; notify no; file "null.zone.file"; };
 zone "up.qatarw.com" { type master; notify no; file "null.zone.file"; };
 zone "up.vltk1ctc.com" { type master; notify no; file "null.zone.file"; };
 zone "up2m.politanisamarinda.ac.id" { type master; notify no; file "null.zone.file"; };
+zone "up4net.com" { type master; notify no; file "null.zone.file"; };
 zone "up9.co.99.com" { type master; notify no; file "null.zone.file"; };
 zone "upa1.hognoob.se" { type master; notify no; file "null.zone.file"; };
 zone "upa2.hognoob.se" { type master; notify no; file "null.zone.file"; };
@@ -69541,7 +69549,6 @@ zone "url.246546.com" { type master; notify no; file "null.zone.file"; };
 zone "url.57569.fr.snd52.ch" { type master; notify no; file "null.zone.file"; };
 zone "url.edu" { type master; notify no; file "null.zone.file"; };
 zone "url.sg" { type master; notify no; file "null.zone.file"; };
-zone "url2.mailanyone.net" { type master; notify no; file "null.zone.file"; };
 zone "url3.mailanyone.net" { type master; notify no; file "null.zone.file"; };
 zone "url5459.41southbar.com" { type master; notify no; file "null.zone.file"; };
 zone "url9823.ville.labrecque.qc.ca" { type master; notify no; file "null.zone.file"; };
@@ -70753,6 +70760,7 @@ zone "vip-rocket.net" { type master; notify no; file "null.zone.file"; };
 zone "vip-watch.store" { type master; notify no; file "null.zone.file"; };
 zone "vip.lijinxi.com" { type master; notify no; file "null.zone.file"; };
 zone "vip.maohuagong.com" { type master; notify no; file "null.zone.file"; };
+zone "vip.muabannhanh.com" { type master; notify no; file "null.zone.file"; };
 zone "vip.recommendedtoyoo.com" { type master; notify no; file "null.zone.file"; };
 zone "vip.zbfcxx.cn" { type master; notify no; file "null.zone.file"; };
 zone "vip163.cf" { type master; notify no; file "null.zone.file"; };
@@ -71785,6 +71793,7 @@ zone "web.gotham.com.au" { type master; notify no; file "null.zone.file"; };
 zone "web.hfsistemas.com" { type master; notify no; file "null.zone.file"; };
 zone "web.ismt.pt" { type master; notify no; file "null.zone.file"; };
 zone "web.muasam360.com" { type master; notify no; file "null.zone.file"; };
+zone "web.opendrive.com" { type master; notify no; file "null.zone.file"; };
 zone "web.pa-cirebon.go.id" { type master; notify no; file "null.zone.file"; };
 zone "web.plf.vn" { type master; notify no; file "null.zone.file"; };
 zone "web.riderit.com" { type master; notify no; file "null.zone.file"; };
@@ -72507,7 +72516,6 @@ zone "win.tue.nl" { type master; notify no; file "null.zone.file"; };
 zone "win1more.com" { type master; notify no; file "null.zone.file"; };
 zone "win32.x10host.com" { type master; notify no; file "null.zone.file"; };
 zone "winactive.host" { type master; notify no; file "null.zone.file"; };
-zone "winandgo-dz.com" { type master; notify no; file "null.zone.file"; };
 zone "winapp24.pl" { type master; notify no; file "null.zone.file"; };
 zone "winast.com" { type master; notify no; file "null.zone.file"; };
 zone "winbacklostlove.com" { type master; notify no; file "null.zone.file"; };
@@ -72713,7 +72721,6 @@ zone "wmdcustoms.com" { type master; notify no; file "null.zone.file"; };
 zone "wmebbiz.co.za" { type master; notify no; file "null.zone.file"; };
 zone "wmf.desevens.com.ng" { type master; notify no; file "null.zone.file"; };
 zone "wmg128.com" { type master; notify no; file "null.zone.file"; };
-zone "wmi.1217bye.host" { type master; notify no; file "null.zone.file"; };
 zone "wmkatz.com" { type master; notify no; file "null.zone.file"; };
 zone "wmo-raad.inov.me" { type master; notify no; file "null.zone.file"; };
 zone "wmpatagonia.cl" { type master; notify no; file "null.zone.file"; };
@@ -72814,7 +72821,6 @@ zone "woodmeister.nl" { type master; notify no; file "null.zone.file"; };
 zone "woodmillcreek.com" { type master; notify no; file "null.zone.file"; };
 zone "woodnbitz.com" { type master; notify no; file "null.zone.file"; };
 zone "woodofkosta.com" { type master; notify no; file "null.zone.file"; };
-zone "woodsiam.com" { type master; notify no; file "null.zone.file"; };
 zone "woodstocktimbers.com" { type master; notify no; file "null.zone.file"; };
 zone "woodstoneltd.com" { type master; notify no; file "null.zone.file"; };
 zone "woodsytech.com" { type master; notify no; file "null.zone.file"; };
@@ -73311,6 +73317,7 @@ zone "wz-architekten.de" { type master; notify no; file "null.zone.file"; };
 zone "wz6.com.cn" { type master; notify no; file "null.zone.file"; };
 zone "wzgysg.com" { type master; notify no; file "null.zone.file"; };
 zone "wzjp.boyuberq.ru" { type master; notify no; file "null.zone.file"; };
+zone "wzlegal.com" { type master; notify no; file "null.zone.file"; };
 zone "wzry173.com" { type master; notify no; file "null.zone.file"; };
 zone "wzrysp.com" { type master; notify no; file "null.zone.file"; };
 zone "wzsfkq.dm.files.1drv.com" { type master; notify no; file "null.zone.file"; };
@@ -73487,6 +73494,7 @@ zone "xinblasta.us" { type master; notify no; file "null.zone.file"; };
 zone "xinchao.asia" { type master; notify no; file "null.zone.file"; };
 zone "xindetrading.000webhostapp.com" { type master; notify no; file "null.zone.file"; };
 zone "xing.monerov9.com" { type master; notify no; file "null.zone.file"; };
+zone "xingyang-glove.com" { type master; notify no; file "null.zone.file"; };
 zone "xingyiqinhang.com" { type master; notify no; file "null.zone.file"; };
 zone "xinhkorea.com" { type master; notify no; file "null.zone.file"; };
 zone "xinlou.info" { type master; notify no; file "null.zone.file"; };
@@ -75372,6 +75380,7 @@ zone "zstar.top" { type master; notify no; file "null.zone.file"; };
 zone "zsxzfgg.com" { type master; notify no; file "null.zone.file"; };
 zone "zsz-spb.ru" { type master; notify no; file "null.zone.file"; };
 zone "ztbearing68.com" { type master; notify no; file "null.zone.file"; };
+zone "ztds.online" { type master; notify no; file "null.zone.file"; };
 zone "ztds2.online" { type master; notify no; file "null.zone.file"; };
 zone "zteandroid.com" { type master; notify no; file "null.zone.file"; };
 zone "ztecom.cn" { type master; notify no; file "null.zone.file"; };
diff --git a/urlhaus-filter-dnsmasq-online.conf b/urlhaus-filter-dnsmasq-online.conf
index 5ccdec79..425d2d04 100644
--- a/urlhaus-filter-dnsmasq-online.conf
+++ b/urlhaus-filter-dnsmasq-online.conf
@@ -1,5 +1,5 @@
 # Title: abuse.ch URLhaus Malicious Domains dnsmasq Blocklist
-# Updated: Sat, 02 May 2020 00:09:31 UTC
+# Updated: Sat, 02 May 2020 12:09:27 UTC
 # Repo: https://gitlab.com/curben/urlhaus-filter
 # License: https://creativecommons.org/publicdomain/zero/1.0/
 # Source: https://urlhaus.abuse.ch/api/
@@ -24,6 +24,7 @@ address=/88mscco.com/0.0.0.0
 address=/a-reality.co.uk/0.0.0.0
 address=/a.xiazai163.com/0.0.0.0
 address=/aaasolution.co.th/0.0.0.0
+address=/accentlandscapes.com/0.0.0.0
 address=/accessyouraudience.com/0.0.0.0
 address=/acdesignhub.com/0.0.0.0
 address=/acteon.com.ar/0.0.0.0
@@ -49,9 +50,7 @@ address=/alohasoftware.net/0.0.0.0
 address=/alphaconsumer.net/0.0.0.0
 address=/am-concepts.ca/0.0.0.0
 address=/amd.alibuf.com/0.0.0.0
-address=/amedeoscognamiglio.329263.com/0.0.0.0
 address=/amemarine.co.th/0.0.0.0
-address=/americanrange.com/0.0.0.0
 address=/anadolutatili.com/0.0.0.0
 address=/anamikaindanegas.in/0.0.0.0
 address=/andreelapeyre.com/0.0.0.0
@@ -68,7 +67,6 @@ address=/arcticprospectus.com/0.0.0.0
 address=/areac-agr.com/0.0.0.0
 address=/aresorganics.com/0.0.0.0
 address=/arowanafishforsale.com/0.0.0.0
-address=/asadairtravel.com/0.0.0.0
 address=/ascentive.com/0.0.0.0
 address=/ashoakacharya.com/0.0.0.0
 address=/askarindo.or.id/0.0.0.0
@@ -91,6 +89,7 @@ address=/bamakobleach.free.fr/0.0.0.0
 address=/bangkok-orchids.com/0.0.0.0
 address=/banzaimonkey.com/0.0.0.0
 address=/bapo.granudan.cn/0.0.0.0
+address=/baritaco.com/0.0.0.0
 address=/baybars.xyz/0.0.0.0
 address=/bbs.sunwy.org/0.0.0.0
 address=/bbs1.marisfrolg.com/0.0.0.0
@@ -106,7 +105,6 @@ address=/beta.pterosol.com/0.0.0.0
 address=/bflow.security-portal.cz/0.0.0.0
 address=/bildeboks.no/0.0.0.0
 address=/bilim-pavlodar.gov.kz/0.0.0.0
-address=/billieellish.org/0.0.0.0
 address=/bingxiong.vip/0.0.0.0
 address=/bjkumdo.com/0.0.0.0
 address=/blog.241optical.com/0.0.0.0
@@ -122,7 +120,6 @@ address=/brbs.customer.netspace.net.au/0.0.0.0
 address=/brenleyquartzgh.com/0.0.0.0
 address=/brewmethods.com/0.0.0.0
 address=/btlocum.pl/0.0.0.0
-address=/bucketstrong.s3-us-west-1.amazonaws.com/0.0.0.0
 address=/bugansavings.com/0.0.0.0
 address=/buhleni.co.za/0.0.0.0
 address=/buydishtv.in/0.0.0.0
@@ -139,6 +136,8 @@ address=/castmart.ga/0.0.0.0
 address=/cbk.m.dodo52.com/0.0.0.0
 address=/ccnn.xiaomier.cn/0.0.0.0
 address=/cdn-10049480.file.myqcloud.com/0.0.0.0
+address=/cdn.truelife.vn/0.0.0.0
+address=/cdn.xiaoduoai.com/0.0.0.0
 address=/cdnus.laboratoryconecpttoday.com/0.0.0.0
 address=/ceirecrear.com.br/0.0.0.0
 address=/cellas.sk/0.0.0.0
@@ -149,7 +148,6 @@ address=/ch.rmu.ac.th/0.0.0.0
 address=/changematterscounselling.com/0.0.0.0
 address=/chanvribloc.com/0.0.0.0
 address=/charm.bizfxr.com/0.0.0.0
-address=/chattosport.com/0.0.0.0
 address=/chauffeursontravel.com/0.0.0.0
 address=/chedea.eu/0.0.0.0
 address=/chinhdropfile.myvnc.com/0.0.0.0
@@ -157,27 +155,25 @@ address=/chinhdropfile80.myvnc.com/0.0.0.0
 address=/chipmarkets.com/0.0.0.0
 address=/chj.m.dodo52.com/0.0.0.0
 address=/chuckweiss.com/0.0.0.0
+address=/cinnamoncreations.com.au/0.0.0.0
 address=/cirugiagenital.com.mx/0.0.0.0
+address=/cista-dobra-voda.com/0.0.0.0
 address=/clareiamente.clareiamente.com/0.0.0.0
 address=/clearwaterriveroutfitting.com/0.0.0.0
 address=/client.yaap.co.uk/0.0.0.0
 address=/clinicamariademolina.com/0.0.0.0
 address=/cloud-server-updater2.co.za/0.0.0.0
-address=/colombet-taxi.fr/0.0.0.0
 address=/colourcreative.co.za/0.0.0.0
 address=/compesat.com/0.0.0.0
 address=/complan.hu/0.0.0.0
 address=/complanbt.hu/0.0.0.0
 address=/comtechadsl.com/0.0.0.0
 address=/config.kuaisousou.top/0.0.0.0
-address=/consultingcy.com/0.0.0.0
 address=/counciloflight.bravepages.com/0.0.0.0
-address=/cp-30.theborough.com.au/0.0.0.0
 address=/cqjcc.org/0.0.0.0
 address=/crimebranch.in/0.0.0.0
 address=/crittersbythebay.com/0.0.0.0
 address=/cryline.net/0.0.0.0
-address=/cryptoomarket.com/0.0.0.0
 address=/csnserver.com/0.0.0.0
 address=/csw.hu/0.0.0.0
 address=/cuacuonsieure.com/0.0.0.0
@@ -212,10 +208,10 @@ address=/dfd.zhzy999.net/0.0.0.0
 address=/dfzm.91756.cn/0.0.0.0
 address=/dgecolesdepolice.bf/0.0.0.0
 address=/dgnj.cn/0.0.0.0
-address=/dhlservices.duckdns.org/0.0.0.0
 address=/diazavendano.cl/0.0.0.0
 address=/dichvuvesinhcongnghiep.top/0.0.0.0
 address=/dienmaycu.vn/0.0.0.0
+address=/dieselmoreno.cl/0.0.0.0
 address=/digilib.dianhusada.ac.id/0.0.0.0
 address=/digital-marketing-institute-delhi.empeeevents.com/0.0.0.0
 address=/digitaldog.de/0.0.0.0
@@ -227,7 +223,6 @@ address=/dl-gameplayer.dmm.com/0.0.0.0
 address=/dl.1003b.56a.com/0.0.0.0
 address=/dl.198424.com/0.0.0.0
 address=/dl.dzqzd.com/0.0.0.0
-address=/dl.iqilie.com/0.0.0.0
 address=/dl.kuaile-u.com/0.0.0.0
 address=/dl2.soft-lenta.ru/0.0.0.0
 address=/dlist.iqilie.com/0.0.0.0
@@ -236,7 +231,6 @@ address=/dnn.alibuf.com/0.0.0.0
 address=/dns.alibuf.com/0.0.0.0
 address=/dodsonimaging.com/0.0.0.0
 address=/don.viameventos.com.br/0.0.0.0
-address=/dongiln.co/0.0.0.0
 address=/donmago.com/0.0.0.0
 address=/doostansocks.ir/0.0.0.0
 address=/doransky.info/0.0.0.0
@@ -264,18 +258,19 @@ address=/download301.wanmei.com/0.0.0.0
 address=/dpeasesummithilltoppers.pbworks.com/0.0.0.0
 address=/dr080.com/0.0.0.0
 address=/dralpaslan.com/0.0.0.0
+address=/dreamtrips.cheap/0.0.0.0
 address=/drivolani.us/0.0.0.0
 address=/drools-moved.46999.n3.nabble.com/0.0.0.0
 address=/druzim.freewww.biz/0.0.0.0
 address=/drwendyellis.com/0.0.0.0
 address=/dsiun.com/0.0.0.0
 address=/dtsay.xyz/0.0.0.0
-address=/dudulm.com/0.0.0.0
+address=/duongfpt.ga/0.0.0.0
 address=/dusdn.mireene.com/0.0.0.0
+address=/dw.58wangdun.com/0.0.0.0
 address=/dx.qqyewu.com/0.0.0.0
 address=/dx1.qqtn.com/0.0.0.0
 address=/dx2.qqtn.com/0.0.0.0
-address=/dx30.siweidaoxiang.com/0.0.0.0
 address=/dx60.siweidaoxiang.com/0.0.0.0
 address=/dzinestudio87.co.uk/0.0.0.0
 address=/e.dangeana.com/0.0.0.0
@@ -316,24 +311,23 @@ address=/fitmanacademy.com/0.0.0.0
 address=/flood-protection.org/0.0.0.0
 address=/fordlamdong.com.vn/0.0.0.0
 address=/foreverprecious.org/0.0.0.0
+address=/foxfennecs.com/0.0.0.0
 address=/frin.ng/0.0.0.0
 address=/fte.m.dodo52.com/0.0.0.0
 address=/ftpcnc-p2sp.pconline.com.cn/0.0.0.0
 address=/ftpftpftp.com/0.0.0.0
 address=/funletters.net/0.0.0.0
+address=/funpartyrent.com/0.0.0.0
 address=/futuregraphics.com.ar/0.0.0.0
 address=/g.7230.com/0.0.0.0
 address=/g0ogle.free.fr/0.0.0.0
-address=/gainsdirectory.com/0.0.0.0
 address=/galuhtea.com/0.0.0.0
 address=/gamee.top/0.0.0.0
-address=/garage.themebuffets.com/0.0.0.0
 address=/garenanow.myvnc.com/0.0.0.0
 address=/garenanow4.myvnc.com/0.0.0.0
 address=/gargiulo.com.ar/0.0.0.0
 address=/gateway-heide.de/0.0.0.0
 address=/gateway.ethlqd.com/0.0.0.0
-address=/gd2.greenxf.com/0.0.0.0
 address=/geenicreations.com/0.0.0.0
 address=/genesisconstruction.co.za/0.0.0.0
 address=/germistonmiraclecentre.co.za/0.0.0.0
@@ -347,6 +341,7 @@ address=/gnimelf.net/0.0.0.0
 address=/go.xsuad.com/0.0.0.0
 address=/gocanada.vn/0.0.0.0
 address=/google.ghststr.com/0.0.0.0
+address=/gov.kr/0.0.0.0
 address=/govhotel.us/0.0.0.0
 address=/grafchekloder.rebatesrule.net/0.0.0.0
 address=/granportale.com.br/0.0.0.0
@@ -355,7 +350,6 @@ address=/greenfood.sa.com/0.0.0.0
 address=/greenleaveperu.com/0.0.0.0
 address=/gssgroups.com/0.0.0.0
 address=/gx-10012947.file.myqcloud.com/0.0.0.0
-address=/gxx.monerov10.com/0.0.0.0
 address=/habbotips.free.fr/0.0.0.0
 address=/hagebakken.no/0.0.0.0
 address=/haisannhatrang.com.vn/0.0.0.0
@@ -367,12 +361,12 @@ address=/hazel-azure.co.th/0.0.0.0
 address=/hdxa.net/0.0.0.0
 address=/healtina.com/0.0.0.0
 address=/heavenif.co.za/0.0.0.0
+address=/hediyeler10gb-ramazan.net/0.0.0.0
 address=/hellomessager.com/0.0.0.0
 address=/hfsoftware.cl/0.0.0.0
 address=/hingcheong.hk/0.0.0.0
 address=/hldschool.com/0.0.0.0
 address=/hmbwgroup.com/0.0.0.0
-address=/hmpmall.co.kr/0.0.0.0
 address=/hoayeuthuong-my.sharepoint.com/0.0.0.0
 address=/homedecors.com.au/0.0.0.0
 address=/hostzaa.com/0.0.0.0
@@ -390,6 +384,7 @@ address=/hyvat-olutravintolat.fi/0.0.0.0
 address=/i333.wang/0.0.0.0
 address=/ibda.adv.br/0.0.0.0
 address=/ideadom.pl/0.0.0.0
+address=/ileolaherbalcare.com.ng/0.0.0.0
 address=/iletisimbakanligi20gb.com/0.0.0.0
 address=/imellda.com/0.0.0.0
 address=/impression-gobelet.com/0.0.0.0
@@ -398,9 +393,13 @@ address=/inapadvance.com/0.0.0.0
 address=/incrediblepixels.com/0.0.0.0
 address=/incredicole.com/0.0.0.0
 address=/ineyes360.com/0.0.0.0
+address=/ini.egkj.com/0.0.0.0
 address=/innovation4crisis.org/0.0.0.0
 address=/instanttechnology.com.au/0.0.0.0
 address=/intelicasa.ro/0.0.0.0
+address=/interbus.cz/0.0.0.0
+address=/intersel-idf.org/0.0.0.0
+address=/intertradeassociates.com.au/0.0.0.0
 address=/intoxicated-twilight.com/0.0.0.0
 address=/iremart.es/0.0.0.0
 address=/isso.ps/0.0.0.0
@@ -410,7 +409,6 @@ address=/itrigger.cn/0.0.0.0
 address=/itsnixielou.com/0.0.0.0
 address=/ixlonbcc.com/0.0.0.0
 address=/izu.co.jp/0.0.0.0
-address=/jahesa.com/0.0.0.0
 address=/jaincakes.xyz/0.0.0.0
 address=/jamiekaylive.com/0.0.0.0
 address=/jansen-heesch.nl/0.0.0.0
@@ -443,10 +441,9 @@ address=/kanok.co.th/0.0.0.0
 address=/kar.big-pro.com/0.0.0.0
 address=/karavantekstil.com/0.0.0.0
 address=/kassohome.com.tr/0.0.0.0
-address=/kazanin20gbturkiye.com/0.0.0.0
 address=/kdsp.co.kr/0.0.0.0
-address=/keckarangdadap.pekalongankab.go.id/0.0.0.0
 address=/kejpa.com/0.0.0.0
+address=/kenareh-gostare-aras.ir/0.0.0.0
 address=/kgfs3.329263.com/0.0.0.0
 address=/khan-associates.net/0.0.0.0
 address=/khunnapap.com/0.0.0.0
@@ -459,7 +456,6 @@ address=/koppemotta.com.br/0.0.0.0
 address=/koralli.if.ua/0.0.0.0
 address=/kqq.kz/0.0.0.0
 address=/kristofferdaniels.com/0.0.0.0
-address=/kupaliskohs.sk/0.0.0.0
 address=/kuznetsov.ca/0.0.0.0
 address=/kwanfromhongkong.com/0.0.0.0
 address=/kwikomfi-lab.com/0.0.0.0
@@ -468,6 +464,7 @@ address=/lameguard.ru/0.0.0.0
 address=/lammaixep.com/0.0.0.0
 address=/landmarktreks.com/0.0.0.0
 address=/langyabbs.05yun.cn/0.0.0.0
+address=/lapurisima.cl/0.0.0.0
 address=/lastmorgoth.com/0.0.0.0
 address=/lcfurtado.com.br/0.0.0.0
 address=/lcmsystem.com/0.0.0.0
@@ -479,11 +476,11 @@ address=/lecafedesartistes.com/0.0.0.0
 address=/lengendryme.com/0.0.0.0
 address=/lesawilson.com/0.0.0.0
 address=/lhbfirst.com/0.0.0.0
+address=/libya-info.com/0.0.0.0
 address=/lifeapt.biz/0.0.0.0
 address=/linx.li/0.0.0.0
 address=/lists.ibiblio.org/0.0.0.0
 address=/lists.mplayerhq.hu/0.0.0.0
-address=/livetrack.in/0.0.0.0
 address=/livetvsports.ml/0.0.0.0
 address=/lodergord.com/0.0.0.0
 address=/log.yundabao.cn/0.0.0.0
@@ -492,7 +489,6 @@ address=/lt02.datacomspecialists.net/0.0.0.0
 address=/luatminhthuan.com/0.0.0.0
 address=/luckytriumph.com/0.0.0.0
 address=/luisnacht.com.ar/0.0.0.0
-address=/luyalu.net/0.0.0.0
 address=/lvr.samacomplus.com/0.0.0.0
 address=/m.0757kd.cn/0.0.0.0
 address=/m93701t2.beget.tech/0.0.0.0
@@ -554,16 +550,12 @@ address=/msecurity.ro/0.0.0.0
 address=/mteng.mmj7.com/0.0.0.0
 address=/mtfelektroteknik.com/0.0.0.0
 address=/mueblesjcp.cl/0.0.0.0
-address=/mutec.jp/0.0.0.0
-address=/mv360.net/0.0.0.0
 address=/mvb.kz/0.0.0.0
 address=/mxpiqw.am.files.1drv.com/0.0.0.0
-address=/mybook22.s3-us-west-1.amazonaws.com/0.0.0.0
 address=/myexpertca.in/0.0.0.0
 address=/myhood.cl/0.0.0.0
 address=/myo.net.au/0.0.0.0
 address=/myofficeplus.com/0.0.0.0
-address=/myonlinepokiesblog.com/0.0.0.0
 address=/mytex.pe/0.0.0.0
 address=/mytrains.net/0.0.0.0
 address=/mywp.asia/0.0.0.0
@@ -573,6 +565,7 @@ address=/narty.laserteam.pl/0.0.0.0
 address=/naturalma.es/0.0.0.0
 address=/naturepack.cc/0.0.0.0
 address=/ncmt2w.bn.files.1drv.com/0.0.0.0
+address=/ncpcgov.com/0.0.0.0
 address=/ndrs.cloud/0.0.0.0
 address=/nebraskacharters.com.au/0.0.0.0
 address=/nemo.herc.ws/0.0.0.0
@@ -590,17 +583,16 @@ address=/norperuinge.com.pe/0.0.0.0
 address=/nprg.ru/0.0.0.0
 address=/nst-corporation.com/0.0.0.0
 address=/nwcsvcs.com/0.0.0.0
-address=/oa.fnysw.com/0.0.0.0
 address=/oa.hys.cn/0.0.0.0
 address=/obinspirations.com/0.0.0.0
 address=/obnova.zzux.com/0.0.0.0
 address=/obseques-conseils.com/0.0.0.0
 address=/ohe.ie/0.0.0.0
-address=/oknoplastik.sk/0.0.0.0
 address=/omega.az/0.0.0.0
 address=/omsk-osma.ru/0.0.0.0
 address=/omuzgor.tj/0.0.0.0
 address=/onestin.ro/0.0.0.0
+address=/openarts.com.br/0.0.0.0
 address=/openclient.sroinfo.com/0.0.0.0
 address=/operasanpiox.bravepages.com/0.0.0.0
 address=/ophtalmiccenter.com/0.0.0.0
@@ -639,7 +631,6 @@ address=/phamchilong.com/0.0.0.0
 address=/phudieusongma.com/0.0.0.0
 address=/phuphamca.com/0.0.0.0
 address=/piapendet.com/0.0.0.0
-address=/piedmontrescue.org/0.0.0.0
 address=/pink99.com/0.0.0.0
 address=/pitmansticks.com/0.0.0.0
 address=/platisher.xyz/0.0.0.0
@@ -648,7 +639,6 @@ address=/podrska.com.hr/0.0.0.0
 address=/ponto50.com.br/0.0.0.0
 address=/poolbook.ir/0.0.0.0
 address=/ppl.ac.id/0.0.0.0
-address=/prepaenunsoloexamen.academiagalileoac.com/0.0.0.0
 address=/probost.cz/0.0.0.0
 address=/profitcoach.net/0.0.0.0
 address=/prosoc.nl/0.0.0.0
@@ -657,7 +647,6 @@ address=/pujashoppe.in/0.0.0.0
 address=/purelondonhyg.com/0.0.0.0
 address=/pyxalis.com/0.0.0.0
 address=/qchms.qcpro.vn/0.0.0.0
-address=/qelie.com/0.0.0.0
 address=/qfjys.com.img.800cdn.com/0.0.0.0
 address=/qmsled.com/0.0.0.0
 address=/qppl.angiang.gov.vn/0.0.0.0
@@ -667,6 +656,7 @@ address=/quehagoencartagena.com/0.0.0.0
 address=/quickuploader.xyz/0.0.0.0
 address=/raacts.in/0.0.0.0
 address=/raifix.com.br/0.0.0.0
+address=/ramazan20gbinternet.com/0.0.0.0
 address=/ramazanda20gb.xyz/0.0.0.0
 address=/rangebroadcasting.com/0.0.0.0
 address=/rapidex.co.rs/0.0.0.0
@@ -687,7 +677,6 @@ address=/riyanenterprise.com/0.0.0.0
 address=/rkverify.securestudies.com/0.0.0.0
 address=/robertmcardle.com/0.0.0.0
 address=/robotrade.com.vn/0.0.0.0
-address=/rockersdolphin.co.za/0.0.0.0
 address=/rollingmill.in/0.0.0.0
 address=/rollscar.pk/0.0.0.0
 address=/rossogato.com/0.0.0.0
@@ -697,10 +686,10 @@ address=/ruisgood.ru/0.0.0.0
 address=/s.51shijuan.com/0.0.0.0
 address=/s.kk30.com/0.0.0.0
 address=/s14b.91danji.com/0.0.0.0
-address=/s14b.groundyun.cn/0.0.0.0
 address=/sabiupd.compress.to/0.0.0.0
 address=/saboorjaam.ir/0.0.0.0
 address=/sabupda.vizvaz.com/0.0.0.0
+address=/saglikbakanligi-destek.org/0.0.0.0
 address=/sahathaikasetpan.com/0.0.0.0
 address=/salvationbd.com/0.0.0.0
 address=/sandovalgraphics.com/0.0.0.0
@@ -708,11 +697,11 @@ address=/sarvghamatan.ir/0.0.0.0
 address=/saskklo.com/0.0.0.0
 address=/scglobal.co.th/0.0.0.0
 address=/schollaert.eu/0.0.0.0
-address=/securefileinterneationaltransferthroughm.duckdns.org/0.0.0.0
 address=/sefp-boispro.fr/0.0.0.0
 address=/selekture.com/0.0.0.0
 address=/selfuseproperty.com/0.0.0.0
 address=/selvikoyunciftligi.com/0.0.0.0
+address=/senevdekaldiyehediye.com/0.0.0.0
 address=/senevdekaldiyehediyenet.com/0.0.0.0
 address=/serpentrising.com/0.0.0.0
 address=/servicemhkd.myvnc.com/0.0.0.0
@@ -724,7 +713,6 @@ address=/sgm.pc6.com/0.0.0.0
 address=/shacked.webdepot.co.il/0.0.0.0
 address=/shahtoba.faqserv.com/0.0.0.0
 address=/shaoxiaofei.cn/0.0.0.0
-address=/share.dmca.gripe/0.0.0.0
 address=/sharjahas.com/0.0.0.0
 address=/shembefoundation.com/0.0.0.0
 address=/shopjumpn.ch/0.0.0.0
@@ -761,7 +749,9 @@ address=/ss.cybersoft-vn.com/0.0.0.0
 address=/sslv3.at/0.0.0.0
 address=/staging.popclusive.asia/0.0.0.0
 address=/starcountry.net/0.0.0.0
+address=/static.3001.net/0.0.0.0
 address=/static.ilclock.com/0.0.0.0
+address=/static.topxgun.com/0.0.0.0
 address=/stationaryhome.com/0.0.0.0
 address=/stecit.nl/0.0.0.0
 address=/stevewalker.com.au/0.0.0.0
@@ -781,15 +771,16 @@ address=/sylvaclouds.eu/0.0.0.0
 address=/symanreni.mysecondarydns.com/0.0.0.0
 address=/szxypt.com/0.0.0.0
 address=/t.honker.info/0.0.0.0
+address=/tandenblekenhoofddorp.nl/0.0.0.0
 address=/taraward.com/0.0.0.0
 address=/taxpos.com/0.0.0.0
 address=/tcy.198424.com/0.0.0.0
 address=/teardrop-productions.ro/0.0.0.0
 address=/technoites.com/0.0.0.0
-address=/tecnobella.cl/0.0.0.0
 address=/tehrenberg.com/0.0.0.0
 address=/telescopelms.com/0.0.0.0
 address=/telsiai.info/0.0.0.0
+address=/tepatitlan.gob.mx/0.0.0.0
 address=/test.iyibakkendine.com/0.0.0.0
 address=/testdatabaseforcepoint.com/0.0.0.0
 address=/thaibbqculver.com/0.0.0.0
@@ -805,7 +796,6 @@ address=/thornadops.com/0.0.0.0
 address=/thosewebbs.com/0.0.0.0
 address=/thuong.bidiworks.com/0.0.0.0
 address=/tianangdep.com/0.0.0.0
-address=/tianzi8.cn/0.0.0.0
 address=/tibinst.mefound.com/0.0.0.0
 address=/tibok.lflink.com/0.0.0.0
 address=/ticte.in/0.0.0.0
@@ -836,10 +826,10 @@ address=/unicorpbrunei.com/0.0.0.0
 address=/unilevercopabr.mbiz20.net/0.0.0.0
 address=/uniquehall.net/0.0.0.0
 address=/unokaoeojoejfghr.ru/0.0.0.0
+address=/up4net.com/0.0.0.0
 address=/upd.m.dodo52.com/0.0.0.0
 address=/update.iwang8.com/0.0.0.0
 address=/update.my.99.com/0.0.0.0
-address=/upendiveterinariovalencia.es/0.0.0.0
 address=/urgentmessage.org/0.0.0.0
 address=/usd-gold.com/0.0.0.0
 address=/users.skynet.be/0.0.0.0
@@ -851,7 +841,6 @@ address=/valedchap.ir/0.0.0.0
 address=/valencaagora.com.br/0.0.0.0
 address=/vasoccernews.com/0.0.0.0
 address=/vaziri.echobit.ir/0.0.0.0
-address=/vdotrip.blog/0.0.0.0
 address=/vfocus.net/0.0.0.0
 address=/vibicloud.com/0.0.0.0
 address=/videoswebcammsn.free.fr/0.0.0.0
@@ -866,7 +855,6 @@ address=/vitromed.ro/0.0.0.0
 address=/vrrumover0.vrrum0.farted.net/0.0.0.0
 address=/vvff.in/0.0.0.0
 address=/w.zhzy999.net/0.0.0.0
-address=/wakecar.cn/0.0.0.0
 address=/wangtong7.siweidaoxiang.com/0.0.0.0
 address=/wangzonghang.cn/0.0.0.0
 address=/wap.dosame.com/0.0.0.0
@@ -881,7 +869,6 @@ address=/welcometothefuture.com/0.0.0.0
 address=/whgaty.com/0.0.0.0
 address=/wiebe-sanitaer.de/0.0.0.0
 address=/wmd9e.a3i1vvv.feteboc.com/0.0.0.0
-address=/wmi.1217bye.host/0.0.0.0
 address=/wnksupply.co.th/0.0.0.0
 address=/wood-expert.net/0.0.0.0
 address=/woodsytech.com/0.0.0.0
@@ -891,11 +878,11 @@ address=/writesofpassage.co.za/0.0.0.0
 address=/wsg.com.sg/0.0.0.0
 address=/wt8.siweidaoxiang.com/0.0.0.0
 address=/wt9.siweidaoxiang.com/0.0.0.0
-address=/wwealthllc.com/0.0.0.0
 address=/www2.recepty5.com/0.0.0.0
 address=/x2vn.com/0.0.0.0
 address=/xia.vzboot.com/0.0.0.0
 address=/xiaidown.com/0.0.0.0
+address=/xiaoma-10021647.file.myqcloud.com/0.0.0.0
 address=/xiegushi.cn/0.0.0.0
 address=/xirfad.com/0.0.0.0
 address=/xn--transfgran-mgbbb600b.ro/0.0.0.0
@@ -905,11 +892,11 @@ address=/xxwl.kuaiyunds.com/0.0.0.0
 address=/xxxze.co.nu/0.0.0.0
 address=/yeez.net/0.0.0.0
 address=/yesky.51down.org.cn/0.0.0.0
-address=/yesky.xzstatic.com/0.0.0.0
 address=/yiyangjz.cn/0.0.0.0
 address=/yolks.bestsellertwo.net/0.0.0.0
 address=/yuluobo.com/0.0.0.0
 address=/yun-1.lenku.cn/0.0.0.0
+address=/yuyu02004-10043918.file.myqcloud.com/0.0.0.0
 address=/yx.m.dodo52.com/0.0.0.0
 address=/zagruz.dnset.com/0.0.0.0
 address=/zagruz.toh.info/0.0.0.0
@@ -928,5 +915,4 @@ address=/zoetermeerov.nl/0.0.0.0
 address=/zoeydeutchweb.com/0.0.0.0
 address=/zonefound.com.cn/0.0.0.0
 address=/zskyjov.cz/0.0.0.0
-address=/ztqsc.com.cn/0.0.0.0
 address=/zumodelima.com/0.0.0.0
diff --git a/urlhaus-filter-dnsmasq.conf b/urlhaus-filter-dnsmasq.conf
index 6af0a685..656b6ff1 100644
--- a/urlhaus-filter-dnsmasq.conf
+++ b/urlhaus-filter-dnsmasq.conf
@@ -1,5 +1,5 @@
 # Title: abuse.ch URLhaus Malicious Domains dnsmasq Blocklist
-# Updated: Sat, 02 May 2020 00:09:31 UTC
+# Updated: Sat, 02 May 2020 12:09:27 UTC
 # Repo: https://gitlab.com/curben/urlhaus-filter
 # License: https://creativecommons.org/publicdomain/zero/1.0/
 # Source: https://urlhaus.abuse.ch/api/
@@ -607,6 +607,7 @@ address=/2ndoffice.ph/0.0.0.0
 address=/2ndpub.com/0.0.0.0
 address=/2ndscreensociety.com/0.0.0.0
 address=/2nell.com/0.0.0.0
+address=/2no.co/0.0.0.0
 address=/2pjcza.db.files.1drv.com/0.0.0.0
 address=/2q1wea3rdsf.000webhostapp.com/0.0.0.0
 address=/2q3w.com/0.0.0.0
@@ -724,6 +725,7 @@ address=/3c-one.ru/0.0.0.0
 address=/3cfilati.it/0.0.0.0
 address=/3cxtraining.com/0.0.0.0
 address=/3d-designcenter.com/0.0.0.0
+address=/3d-universal.com/0.0.0.0
 address=/3d.co.th/0.0.0.0
 address=/3d.tdselectronics.com/0.0.0.0
 address=/3dcentral.hu/0.0.0.0
@@ -945,6 +947,7 @@ address=/4wereareyou.icu/0.0.0.0
 address=/4you.by/0.0.0.0
 address=/5-shampurov.ru/0.0.0.0
 address=/5.fjwt1.crsky.com/0.0.0.0
+address=/5.top4top.io/0.0.0.0
 address=/5.u0148466.z8.ru/0.0.0.0
 address=/5.unplugrevolution.com/0.0.0.0
 address=/5003.arentuspecial.com/0.0.0.0
@@ -1562,7 +1565,6 @@ address=/aapdasia.com/0.0.0.0
 address=/aapi.co.in/0.0.0.0
 address=/aapic.emarathon.or.kr/0.0.0.0
 address=/aapkitayari.com/0.0.0.0
-address=/aaplindia.com/0.0.0.0
 address=/aapnewslive.com/0.0.0.0
 address=/aapnnihotel.in/0.0.0.0
 address=/aapr.org.au/0.0.0.0
@@ -1978,7 +1980,6 @@ address=/acetraining24.com/0.0.0.0
 address=/acewatch.vn/0.0.0.0
 address=/acewm.org/0.0.0.0
 address=/aceyz.com/0.0.0.0
-address=/acfacilities.co.uk/0.0.0.0
 address=/acffiorentina.ru/0.0.0.0
 address=/acg-capital.com/0.0.0.0
 address=/acg.com.my/0.0.0.0
@@ -2399,6 +2400,7 @@ address=/adrite.com/0.0.0.0
 address=/adroitlyadvertising.com/0.0.0.0
 address=/adrolling.co.uk/0.0.0.0
 address=/ads.actmol.by/0.0.0.0
+address=/ads.hanggiadinh.com/0.0.0.0
 address=/ads.kalabisim.com/0.0.0.0
 address=/adsapomg.space/0.0.0.0
 address=/adsdeedee.com/0.0.0.0
@@ -2650,7 +2652,6 @@ address=/africaanalytics.tristargl.com/0.0.0.0
 address=/africabluewebs.co.ke/0.0.0.0
 address=/africabootcampacademy.influencetec.net/0.0.0.0
 address=/africahousingawards.com/0.0.0.0
-address=/africainnovates.org/0.0.0.0
 address=/africamarket.shop/0.0.0.0
 address=/africamissions.ca/0.0.0.0
 address=/african-trips.com/0.0.0.0
@@ -3053,6 +3054,7 @@ address=/aigavicenza.it/0.0.0.0
 address=/aigforms.myap.co.za/0.0.0.0
 address=/aiglemovies.com/0.0.0.0
 address=/aihealth.vn/0.0.0.0
+address=/aiiaiafrzrueuedur.ru/0.0.0.0
 address=/aiineh.com/0.0.0.0
 address=/aiit.ahbys.com/0.0.0.0
 address=/aijdjy.com/0.0.0.0
@@ -3121,6 +3123,7 @@ address=/airgc.in/0.0.0.0
 address=/airinovasi-indonesia.com/0.0.0.0
 address=/airisu-syumikonparty.com/0.0.0.0
 address=/airlife.bget.ru/0.0.0.0
+address=/airliness.info/0.0.0.0
 address=/airlinkcpl.net/0.0.0.0
 address=/airmaildata.com/0.0.0.0
 address=/airmanship.nl/0.0.0.0
@@ -3409,6 +3412,7 @@ address=/alandenz.dk/0.0.0.0
 address=/alanhkatz.on-rev.com/0.0.0.0
 address=/alankeef-co.tk/0.0.0.0
 address=/alankippax.info/0.0.0.0
+address=/alannonce.fr/0.0.0.0
 address=/alanvarin2.hopto.org/0.0.0.0
 address=/alanvarin3.ddns.net/0.0.0.0
 address=/alanyacilingirbilal.com/0.0.0.0
@@ -4396,7 +4400,6 @@ address=/americanhaircuts.com/0.0.0.0
 address=/americanhomecenter.com/0.0.0.0
 address=/americanmicrosoftclouddepartment.duckdns.org/0.0.0.0
 address=/americanpatriotlife.com/0.0.0.0
-address=/americanrange.com/0.0.0.0
 address=/americanreliefhub.com/0.0.0.0
 address=/americanstaffordshireterrier.it/0.0.0.0
 address=/americanxdrive.gq/0.0.0.0
@@ -5652,6 +5655,7 @@ address=/archst.it/0.0.0.0
 address=/arcid.org/0.0.0.0
 address=/arcnyc.com/0.0.0.0
 address=/arcoarquitetura.arq.br/0.0.0.0
+address=/arcoelectric-idaho.com/0.0.0.0
 address=/arcoelectrico.cl/0.0.0.0
 address=/arcoiris.org.pt/0.0.0.0
 address=/arconarchitects.com/0.0.0.0
@@ -5773,6 +5777,7 @@ address=/ariba.develop.kdm1.ru/0.0.0.0
 address=/aridostlari.com/0.0.0.0
 address=/arie-industrie.com/0.0.0.0
 address=/arielaspa.com/0.0.0.0
+address=/arielcarter.com/0.0.0.0
 address=/arielluxhair.com/0.0.0.0
 address=/arieloutdoors.com/0.0.0.0
 address=/arieloutdoors.in/0.0.0.0
@@ -5790,7 +5795,6 @@ address=/arihantchemcorp.com/0.0.0.0
 address=/arija.lt/0.0.0.0
 address=/ariko.vn/0.0.0.0
 address=/arimmo.ch/0.0.0.0
-address=/arimonza.it/0.0.0.0
 address=/arina.jsin.ru/0.0.0.0
 address=/arinidentalcare.com/0.0.0.0
 address=/arinlays.com/0.0.0.0
@@ -6140,6 +6144,7 @@ address=/artworkshopsinternational.com/0.0.0.0
 address=/artydesign.co/0.0.0.0
 address=/artzkaypharmacy.com.au/0.0.0.0
 address=/artzvuk.by/0.0.0.0
+address=/arufels.com/0.0.0.0
 address=/aruljothi.xyz/0.0.0.0
 address=/arundel.net/0.0.0.0
 address=/arvd.begrip.sk/0.0.0.0
@@ -6244,7 +6249,6 @@ address=/aseloud.com/0.0.0.0
 address=/aseman-co.com/0.0.0.0
 address=/asemancard.com/0.0.0.0
 address=/asemanehco.ir/0.0.0.0
-address=/aseprom.com/0.0.0.0
 address=/asepspa.cl/0.0.0.0
 address=/aserraderoelaleman.com.ar/0.0.0.0
 address=/asertiva.cl/0.0.0.0
@@ -6317,6 +6321,7 @@ address=/asia-star.info/0.0.0.0
 address=/asia-taxsolutions.com/0.0.0.0
 address=/asiaherbalpharmacy.com/0.0.0.0
 address=/asiains.com.ph/0.0.0.0
+address=/asialinklogistics.com/0.0.0.0
 address=/asiamedia.tw/0.0.0.0
 address=/asiana.cf/0.0.0.0
 address=/asianacrylates.com/0.0.0.0
@@ -6347,6 +6352,7 @@ address=/asifapparels.com/0.0.0.0
 address=/asiffidatanoli.com/0.0.0.0
 address=/asight.com.au/0.0.0.0
 address=/asiltorna.com/0.0.0.0
+address=/asiluxury.com/0.0.0.0
 address=/asinaptali.com/0.0.0.0
 address=/asined.es/0.0.0.0
 address=/asinfotech.net/0.0.0.0
@@ -6537,7 +6543,6 @@ address=/astroblu.win/0.0.0.0
 address=/astrocricketpredictions.com/0.0.0.0
 address=/astrodeepakdubey.in/0.0.0.0
 address=/astrodolly.com/0.0.0.0
-address=/astrojyoti.com/0.0.0.0
 address=/astrolabioeditorial.com/0.0.0.0
 address=/astroland.space/0.0.0.0
 address=/astrologerpanchmukhijyotish.com/0.0.0.0
@@ -6780,7 +6785,6 @@ address=/atskiysatana.ml/0.0.0.0
 address=/atskiysatana.tk/0.0.0.0
 address=/atso.kz/0.0.0.0
 address=/atso.pt/0.0.0.0
-address=/att-0748.fileshare-storage.com/0.0.0.0
 address=/att-hellolab.com/0.0.0.0
 address=/att1.bigmir.net/0.0.0.0
 address=/atta2tata.monster/0.0.0.0
@@ -7212,6 +7216,7 @@ address=/aviharmony.com.au/0.0.0.0
 address=/avila-ventures.com/0.0.0.0
 address=/avilacare.com/0.0.0.0
 address=/avinash1.free.fr/0.0.0.0
+address=/avioaircurtain.com/0.0.0.0
 address=/avion-x.com/0.0.0.0
 address=/avioncargoets.com/0.0.0.0
 address=/aviontravelgroup.com/0.0.0.0
@@ -7646,6 +7651,7 @@ address=/babystep.biz/0.0.0.0
 address=/babysteps.ge/0.0.0.0
 address=/babyvogel.nl/0.0.0.0
 address=/babzon.club/0.0.0.0
+address=/bac.edu.my/0.0.0.0
 address=/bacamanect.com/0.0.0.0
 address=/baccaosutritue.vn/0.0.0.0
 address=/baceldeniz.com/0.0.0.0
@@ -7712,6 +7718,7 @@ address=/badintentionsprod.com/0.0.0.0
 address=/badisse.com/0.0.0.0
 address=/badkamer-sanitair.nl/0.0.0.0
 address=/badmildiou.com/0.0.0.0
+address=/badzena.com/0.0.0.0
 address=/baerbl-volz.de/0.0.0.0
 address=/baeren-schlatt.ch/0.0.0.0
 address=/baermedia.ch/0.0.0.0
@@ -7761,7 +7768,6 @@ address=/bahisreklami.com/0.0.0.0
 address=/bahku.ru/0.0.0.0
 address=/bahl.com.au/0.0.0.0
 address=/bahlcom.au/0.0.0.0
-address=/bahoma.com/0.0.0.0
 address=/bahomacom/0.0.0.0
 address=/bahrain-escorts.com/0.0.0.0
 address=/bahrainbordir.com/0.0.0.0
@@ -8494,7 +8500,6 @@ address=/beachcondolife.tk/0.0.0.0
 address=/beachview.co.za/0.0.0.0
 address=/beachvillas.gr/0.0.0.0
 address=/beachwoodproperty.com.au/0.0.0.0
-address=/beaconacademy.net/0.0.0.0
 address=/beaconhousediscovery.com/0.0.0.0
 address=/beaconr.rungta.ac.in/0.0.0.0
 address=/beactivedigital.com/0.0.0.0
@@ -9203,7 +9208,6 @@ address=/beysel.com/0.0.0.0
 address=/beytepefoodcenter.com/0.0.0.0
 address=/beytriali.com/0.0.0.0
 address=/bezambici.com/0.0.0.0
-address=/bezier.com/0.0.0.0
 address=/bezlive.com/0.0.0.0
 address=/bezoekbosnie.nl/0.0.0.0
 address=/bezoporu.wtie.tu.koszalin.pl/0.0.0.0
@@ -10404,7 +10408,6 @@ address=/bloodybits.com/0.0.0.0
 address=/bloombrainz.com/0.0.0.0
 address=/bloomcommunityproject.org/0.0.0.0
 address=/bloomestatelitigation.ca/0.0.0.0
-address=/bloomfire.com/0.0.0.0
 address=/bloomflores.com/0.0.0.0
 address=/bloomhomes.in/0.0.0.0
 address=/bloomingbridal.com.au/0.0.0.0
@@ -10732,7 +10735,6 @@ address=/bonaccount.com/0.0.0.0
 address=/bonakma.com/0.0.0.0
 address=/bonallegro.5v.pl/0.0.0.0
 address=/bonattiholding.com/0.0.0.0
-address=/bonavigator.pl/0.0.0.0
 address=/bond.com.vn/0.0.0.0
 address=/bondagetrip.com/0.0.0.0
 address=/bondbengals.info/0.0.0.0
@@ -11244,7 +11246,6 @@ address=/bridgesearch.com/0.0.0.0
 address=/bridgeventuresllc.com/0.0.0.0
 address=/briefmarkenpower.de/0.0.0.0
 address=/brifing.info/0.0.0.0
-address=/brightachieversltd.com/0.0.0.0
 address=/brightasia.com.sg/0.0.0.0
 address=/brightbat.com/0.0.0.0
 address=/brightbook.ir/0.0.0.0
@@ -11935,7 +11936,6 @@ address=/bytosti.cz/0.0.0.0
 address=/byttd.com.cn/0.0.0.0
 address=/byukattie.top/0.0.0.0
 address=/byvejen.dk/0.0.0.0
-address=/byworks.com/0.0.0.0
 address=/byxaru.com/0.0.0.0
 address=/byxxyz.com/0.0.0.0
 address=/byz2.com/0.0.0.0
@@ -12503,7 +12503,6 @@ address=/carbtecgh.com/0.0.0.0
 address=/carc-astrology.in/0.0.0.0
 address=/carcorxox.com/0.0.0.0
 address=/carcounsel.com/0.0.0.0
-address=/cardbankph.com/0.0.0.0
 address=/cardboardspaceshiptoys.com/0.0.0.0
 address=/cardea-immobilien.de/0.0.0.0
 address=/cardealersforbadcredit.net/0.0.0.0
@@ -13032,6 +13031,7 @@ address=/cc14927-wordpress.tw1.ru/0.0.0.0
 address=/cc78.bg/0.0.0.0
 address=/cc8848.xyz/0.0.0.0
 address=/cc9.ne.jp/0.0.0.0
+address=/ccamatil1-my.sharepoint.com/0.0.0.0
 address=/ccandcbrand.com/0.0.0.0
 address=/ccash.xyz/0.0.0.0
 address=/ccat.biz/0.0.0.0
@@ -13129,6 +13129,8 @@ address=/cdn.siv.cc/0.0.0.0
 address=/cdn.slty.de/0.0.0.0
 address=/cdn.timebuyer.org/0.0.0.0
 address=/cdn.top4top.net/0.0.0.0
+address=/cdn.truelife.vn/0.0.0.0
+address=/cdn.xiaoduoai.com/0.0.0.0
 address=/cdn.zecast.com/0.0.0.0
 address=/cdn4.css361.com/0.0.0.0
 address=/cdn5.rvshare.com/0.0.0.0
@@ -13273,7 +13275,6 @@ address=/center-house.ru/0.0.0.0
 address=/center-miami.com/0.0.0.0
 address=/center.1team.pro/0.0.0.0
 address=/center1.co.il/0.0.0.0
-address=/center4cby.com/0.0.0.0
 address=/centerfortheyouth.org/0.0.0.0
 address=/centerline.co.kr/0.0.0.0
 address=/centernadegda.ru/0.0.0.0
@@ -13627,6 +13628,7 @@ address=/charity.vexacom.com/0.0.0.0
 address=/charitycandy.co.uk/0.0.0.0
 address=/charitylov.com/0.0.0.0
 address=/charityshofner.com/0.0.0.0
+address=/charlemagne.fr/0.0.0.0
 address=/charlesbaker.co.uk/0.0.0.0
 address=/charlescuthbertson.com/0.0.0.0
 address=/charlesmessa.info/0.0.0.0
@@ -14053,6 +14055,7 @@ address=/christinalenway.com/0.0.0.0
 address=/christinelebeck.com/0.0.0.0
 address=/christinmunsch.com/0.0.0.0
 address=/christmasatredeemer.org/0.0.0.0
+address=/christoforoskotentos.com/0.0.0.0
 address=/christolandcompany.com/0.0.0.0
 address=/christolar.cz/0.0.0.0
 address=/christom.com.au/0.0.0.0
@@ -14476,6 +14479,7 @@ address=/clcindy.com/0.0.0.0
 address=/cld-net.com/0.0.0.0
 address=/cld.persiangig.com/0.0.0.0
 address=/cld.pt/0.0.0.0
+address=/cle.ae/0.0.0.0
 address=/clean.crypt24.in/0.0.0.0
 address=/clean.olexandry.ru/0.0.0.0
 address=/clean.vanzherke.ru/0.0.0.0
@@ -14536,14 +14540,12 @@ address=/cleverflame.com/0.0.0.0
 address=/cleverlearncebu.com/0.0.0.0
 address=/cleverspain.com/0.0.0.0
 address=/clgafareaitu.com/0.0.0.0
-address=/clgsecurities.com/0.0.0.0
 address=/clhairdesign.com/0.0.0.0
 address=/clhgoody.xyz/0.0.0.0
 address=/clic-douaisis.fr/0.0.0.0
 address=/click-up.co.il/0.0.0.0
 address=/click.danielshomecenter.com/0.0.0.0
 address=/click.expertsmeetings.org/0.0.0.0
-address=/click.senate.go.th/0.0.0.0
 address=/click4amassage.com/0.0.0.0
 address=/click4ship.com/0.0.0.0
 address=/clickara.com/0.0.0.0
@@ -14598,7 +14600,6 @@ address=/clinicacasuo.com.br/0.0.0.0
 address=/clinicacirurgiaplasticasp.com.br/0.0.0.0
 address=/clinicacorporea.com/0.0.0.0
 address=/clinicacorpusmacae.com.br/0.0.0.0
-address=/clinicacrecer.com/0.0.0.0
 address=/clinicadavid.mx/0.0.0.0
 address=/clinicadeldolorgt.com/0.0.0.0
 address=/clinicadentalimagen.pe/0.0.0.0
@@ -14673,7 +14674,6 @@ address=/cloud.chachobills.com/0.0.0.0
 address=/cloud.diminishedvaluecalifornia.com/0.0.0.0
 address=/cloud.hollweck.it/0.0.0.0
 address=/cloud.kryptonia.fr/0.0.0.0
-address=/cloud.patrika.com/0.0.0.0
 address=/cloud.s2lol.com/0.0.0.0
 address=/cloud.wmsinfo.com.br/0.0.0.0
 address=/cloud.xenoris.fr/0.0.0.0
@@ -14682,6 +14682,7 @@ address=/cloudatlas.io/0.0.0.0
 address=/cloudbox-online.net/0.0.0.0
 address=/cloudbytegames.com/0.0.0.0
 address=/cloudcapgames.com/0.0.0.0
+address=/cloudcast.best/0.0.0.0
 address=/cloudcottage.cloud/0.0.0.0
 address=/cloudessy.com/0.0.0.0
 address=/cloudfilesharingdomainurllinksys.duckdns.org/0.0.0.0
@@ -14771,6 +14772,7 @@ address=/cmdaitexpo.com/0.0.0.0
 address=/cmdez.ir/0.0.0.0
 address=/cmdou.com/0.0.0.0
 address=/cmeaststar.de/0.0.0.0
+address=/cmg.asia/0.0.0.0
 address=/cmgroup.com.ua/0.0.0.0
 address=/cmhighschool.edu.bd/0.0.0.0
 address=/cmhmfgoutbound.protection.sketchwefair-watduoliprudential.com.watchdogdns.duckdns.org/0.0.0.0
@@ -15004,7 +15006,6 @@ address=/coffeeking.in/0.0.0.0
 address=/coffeeorcanoeing.com/0.0.0.0
 address=/cofqz.com/0.0.0.0
 address=/cofrex-eg.com/0.0.0.0
-address=/cofusa.com/0.0.0.0
 address=/cogeainternational.com/0.0.0.0
 address=/coges-tn.com/0.0.0.0
 address=/coghlanhealthcare.ie/0.0.0.0
@@ -15809,7 +15810,6 @@ address=/corkmademore.com/0.0.0.0
 address=/corkspeechtherapy.ie/0.0.0.0
 address=/corm-informatique.fr/0.0.0.0
 address=/cormetal.eu/0.0.0.0
-address=/cornejotex.com/0.0.0.0
 address=/cornelbusiness.co.uk/0.0.0.0
 address=/cornelia-ernst.de/0.0.0.0
 address=/cornellekacy.net/0.0.0.0
@@ -16513,7 +16513,6 @@ address=/csp-tfpm.com/0.0.0.0
 address=/csplumbingservices.co.uk/0.0.0.0
 address=/cspn-omsk.ru/0.0.0.0
 address=/csprequiao.pt/0.0.0.0
-address=/csq.es/0.0.0.0
 address=/csrcampaign.com/0.0.0.0
 address=/csrkanjiza.rs/0.0.0.0
 address=/csrngo.in/0.0.0.0
@@ -17354,7 +17353,6 @@ address=/dashfiles.tk/0.0.0.0
 address=/dashkevichseo.ru/0.0.0.0
 address=/dashonweb.com/0.0.0.0
 address=/dashvaanjil.mn/0.0.0.0
-address=/dasjoe.de/0.0.0.0
 address=/daskruelhaus.com/0.0.0.0
 address=/dasleds.com/0.0.0.0
 address=/dastep.com/0.0.0.0
@@ -17401,7 +17399,6 @@ address=/datascienceexcellence.net/0.0.0.0
 address=/datascienceexcellence.org/0.0.0.0
 address=/dataseru.com/0.0.0.0
 address=/dataserver.c0.pl/0.0.0.0
-address=/datasheep.co.uk/0.0.0.0
 address=/datasoft-sa.com/0.0.0.0
 address=/datatalentadvisors.com/0.0.0.0
 address=/datatechis.com/0.0.0.0
@@ -17441,6 +17438,7 @@ address=/datswingt.nl/0.0.0.0
 address=/datthocuphuquoc.xyz/0.0.0.0
 address=/dattiec.net/0.0.0.0
 address=/dattopantthengadi.in/0.0.0.0
+address=/datudeli.com/0.0.0.0
 address=/datumu.ga/0.0.0.0
 address=/datumu.ml/0.0.0.0
 address=/datvangthainguyen.com/0.0.0.0
@@ -17598,6 +17596,7 @@ address=/dbcomestic.com/0.0.0.0
 address=/dbecome.top/0.0.0.0
 address=/dbfuppsala.se/0.0.0.0
 address=/dbinario.com/0.0.0.0
+address=/dbo.ca.gov/0.0.0.0
 address=/dboyusa.online/0.0.0.0
 address=/dbravo.pro/0.0.0.0
 address=/dbs-ebank.com/0.0.0.0
@@ -17658,7 +17657,6 @@ address=/dd.loop.coop/0.0.0.0
 address=/dd.smaxdn.com/0.0.0.0
 address=/dda.co.ir/0.0.0.0
 address=/ddaynew.5demo.xyz/0.0.0.0
-address=/ddbuilding.com/0.0.0.0
 address=/ddccs.net/0.0.0.0
 address=/ddd2.pc6.com/0.0.0.0
 address=/dddos.persiangig.com/0.0.0.0
@@ -17805,6 +17803,7 @@ address=/deconmit.com/0.0.0.0
 address=/decons.ai/0.0.0.0
 address=/decons.vn/0.0.0.0
 address=/decoplast-edp.ro/0.0.0.0
+address=/decoprojectme.com/0.0.0.0
 address=/decoracaodeparedes.com.br/0.0.0.0
 address=/decoratingideas.bozkurtfurkan.com/0.0.0.0
 address=/decoration-marine.net/0.0.0.0
@@ -19150,7 +19149,6 @@ address=/digigm.ir/0.0.0.0
 address=/digihashtag.com/0.0.0.0
 address=/digiiital.co.uk/0.0.0.0
 address=/digikow.000webhostapp.com/0.0.0.0
-address=/digilander.libero.it/0.0.0.0
 address=/digileads.ae/0.0.0.0
 address=/digilib.dianhusada.ac.id/0.0.0.0
 address=/digim.asia/0.0.0.0
@@ -19176,6 +19174,7 @@ address=/digital.eudoratrading.com/0.0.0.0
 address=/digital.gemacipta.asia/0.0.0.0
 address=/digital.syd.fr/0.0.0.0
 address=/digital2home.ecobz.xyz/0.0.0.0
+address=/digital7.com/0.0.0.0
 address=/digitalankur.com/0.0.0.0
 address=/digitalbrit.com/0.0.0.0
 address=/digitalbugs.co.in/0.0.0.0
@@ -19609,7 +19608,6 @@ address=/djyokoo.com/0.0.0.0
 address=/djz313iks60bk4.com/0.0.0.0
 address=/djzmo.com/0.0.0.0
 address=/dk-elbrus.ru/0.0.0.0
-address=/dk-rc.com/0.0.0.0
 address=/dk.sa/0.0.0.0
 address=/dk5gckyelnxjl.cloudfront.net/0.0.0.0
 address=/dkadvisry.com/0.0.0.0
@@ -19673,6 +19671,7 @@ address=/dl2.onedrive-eu.com/0.0.0.0
 address=/dl2.onedrive-us-en.com/0.0.0.0
 address=/dl2.soft-lenta.ru/0.0.0.0
 address=/dl2.storeandshare.singtel.com/0.0.0.0
+address=/dl4.joxi.net/0.0.0.0
 address=/dl63964725.dyn-downloads.com/0.0.0.0
 address=/dlainzyniera.pl/0.0.0.0
 address=/dlawgist.com/0.0.0.0
@@ -20120,6 +20119,7 @@ address=/donnebella.com/0.0.0.0
 address=/donnerreuschel.com/0.0.0.0
 address=/donphenom.al/0.0.0.0
 address=/donpomodoro.com.co/0.0.0.0
+address=/donsinout.info/0.0.0.0
 address=/donsly.usa.cc/0.0.0.0
 address=/donsworld.org/0.0.0.0
 address=/dontlitigate.com/0.0.0.0
@@ -20128,7 +20128,6 @@ address=/donusumhirdavatmetal.com/0.0.0.0
 address=/donvosphotography.com/0.0.0.0
 address=/donwonda.org/0.0.0.0
 address=/dooball.biz/0.0.0.0
-address=/doobegroup.com/0.0.0.0
 address=/dooch.vn/0.0.0.0
 address=/doodlebug.club/0.0.0.0
 address=/doodleninja.in/0.0.0.0
@@ -20529,7 +20528,6 @@ address=/drdelaluz.com/0.0.0.0
 address=/drdki.com/0.0.0.0
 address=/drdoorbin.com/0.0.0.0
 address=/dream-energy.ru/0.0.0.0
-address=/dream-food.com/0.0.0.0
 address=/dream-girls.club/0.0.0.0
 address=/dream-girls.online/0.0.0.0
 address=/dream-girls.xyz/0.0.0.0
@@ -20570,6 +20568,7 @@ address=/dreamswork.tk/0.0.0.0
 address=/dreamtownpsl.co.ke/0.0.0.0
 address=/dreamtravel.site/0.0.0.0
 address=/dreamtravelonthego.com/0.0.0.0
+address=/dreamtrips.cheap/0.0.0.0
 address=/dreamtrips.icu/0.0.0.0
 address=/dreamvision.bg/0.0.0.0
 address=/dreamwolf.tv/0.0.0.0
@@ -21554,6 +21553,7 @@ address=/ecity.network/0.0.0.0
 address=/ecitytanduclongan.com/0.0.0.0
 address=/eckdor.de/0.0.0.0
 address=/ecker.aidnet.at/0.0.0.0
+address=/ecklund.no/0.0.0.0
 address=/eclairesuits.com/0.0.0.0
 address=/eclatpro.com/0.0.0.0
 address=/eclecticelectronics.net/0.0.0.0
@@ -21722,7 +21722,6 @@ address=/edgingprofile.com/0.0.0.0
 address=/edhec.business-angels.info/0.0.0.0
 address=/edialplast.ru/0.0.0.0
 address=/edicolanazionale.it/0.0.0.0
-address=/edicustoms.com.au/0.0.0.0
 address=/ediet.ir/0.0.0.0
 address=/edificaiconstrucoes.com/0.0.0.0
 address=/edifice-guyane.fr/0.0.0.0
@@ -22103,7 +22102,6 @@ address=/elc.daffodilvarsity.edu.bd/0.0.0.0
 address=/elcampestre.cl/0.0.0.0
 address=/elcaneloautopartes.com.mx/0.0.0.0
 address=/elcapitanno.com/0.0.0.0
-address=/elcarmelohotelhacienda.com/0.0.0.0
 address=/elcarrocafeny.com/0.0.0.0
 address=/elchurrascorestaurante.com/0.0.0.0
 address=/elclasicocml.com/0.0.0.0
@@ -22154,7 +22152,6 @@ address=/electriquestew.com/0.0.0.0
 address=/electro-bike.club/0.0.0.0
 address=/electroautomat.com/0.0.0.0
 address=/electrocad.in/0.0.0.0
-address=/electroenchufe.com/0.0.0.0
 address=/electrofluxequipmentspvtltd.com/0.0.0.0
 address=/electrofyhub.com/0.0.0.0
 address=/electrogc.com.ar/0.0.0.0
@@ -22740,7 +22737,6 @@ address=/enekashoush.com/0.0.0.0
 address=/enemobodoukpaka.com/0.0.0.0
 address=/enequipo.es/0.0.0.0
 address=/enercol.cl/0.0.0.0
-address=/energicaweb.com/0.0.0.0
 address=/energie-service.fr/0.0.0.0
 address=/energie-strom.net/0.0.0.0
 address=/energiemag.fr/0.0.0.0
@@ -23422,7 +23418,6 @@ address=/estomedic.com/0.0.0.0
 address=/estore.qurvex.com/0.0.0.0
 address=/estrategias-corporativas.com/0.0.0.0
 address=/estrategiasdeaprovacao.com.br/0.0.0.0
-address=/estreamnetworks.net/0.0.0.0
 address=/estrindesign.com/0.0.0.0
 address=/estrom.es/0.0.0.0
 address=/estrutura.eng.br/0.0.0.0
@@ -24500,6 +24495,7 @@ address=/fashionandme.ru/0.0.0.0
 address=/fashionattitude.de/0.0.0.0
 address=/fashionbettysam.com/0.0.0.0
 address=/fashionblogandpromo.club/0.0.0.0
+address=/fashiondenver.com/0.0.0.0
 address=/fashionfootprint.leseditextiles.co.za/0.0.0.0
 address=/fashionfootprint.nmco.co.za/0.0.0.0
 address=/fashiongul.com/0.0.0.0
@@ -24742,6 +24738,7 @@ address=/febsmarketingnetwork.com/0.0.0.0
 address=/febsms.com/0.0.0.0
 address=/fechos.org.br/0.0.0.0
 address=/fecoonde.org/0.0.0.0
+address=/fectrucks.com/0.0.0.0
 address=/fed58f43246844b18d00fb0177352546.download/0.0.0.0
 address=/fedbroker.ru/0.0.0.0
 address=/fedeminersdigital.com/0.0.0.0
@@ -25604,6 +25601,7 @@ address=/floradna.com/0.0.0.0
 address=/floradosventos.com.br/0.0.0.0
 address=/floralcompany.jp/0.0.0.0
 address=/floramatic.com/0.0.0.0
+address=/florandina.com/0.0.0.0
 address=/florandum.com/0.0.0.0
 address=/florean.be/0.0.0.0
 address=/florenceloewy.com/0.0.0.0
@@ -26030,7 +26028,6 @@ address=/fotogar.com/0.0.0.0
 address=/fotograafie.nl/0.0.0.0
 address=/fotografiarnia.pl/0.0.0.0
 address=/fotoground.com/0.0.0.0
-address=/fotojurczak.pl/0.0.0.0
 address=/fotolegko.ru/0.0.0.0
 address=/fotomb.com/0.0.0.0
 address=/fotoms.pl/0.0.0.0
@@ -26588,7 +26585,6 @@ address=/fundacao-algarvia.pt/0.0.0.0
 address=/fundacionafanic.com/0.0.0.0
 address=/fundacioncaminosdepazporcolombiacali.org/0.0.0.0
 address=/fundacioncreatalento.org/0.0.0.0
-address=/fundacionesperanza.org.es/0.0.0.0
 address=/fundacionmontehoreb.org.ve/0.0.0.0
 address=/fundacionpacma.com/0.0.0.0
 address=/fundacionravera.com/0.0.0.0
@@ -26736,7 +26732,6 @@ address=/fuzoneeducations.com/0.0.0.0
 address=/fuzzyconcepts.com/0.0.0.0
 address=/fuzzylogic.in/0.0.0.0
 address=/fuzzymiles.com/0.0.0.0
-address=/fv1-2.failiem.lv/0.0.0.0
 address=/fv13.failiem.lv/0.0.0.0
 address=/fv15.failiem.lv/0.0.0.0
 address=/fv2-1.failiem.lv/0.0.0.0
@@ -27436,7 +27431,6 @@ address=/genedelibero.com/0.0.0.0
 address=/genelmusavirlik.com.tr/0.0.0.0
 address=/geneomm.com/0.0.0.0
 address=/generactz.com/0.0.0.0
-address=/general.it/0.0.0.0
 address=/generalbikes.com/0.0.0.0
 address=/generalgauffin.se/0.0.0.0
 address=/generalhomemedicalsupply.com/0.0.0.0
@@ -27527,7 +27521,6 @@ address=/geolegno.eu/0.0.0.0
 address=/geolinvestproekt.ru/0.0.0.0
 address=/geolocstar.com/0.0.0.0
 address=/geologia.geoss.pt/0.0.0.0
-address=/geologimarche.it/0.0.0.0
 address=/geolysis.org/0.0.0.0
 address=/geometrai.com/0.0.0.0
 address=/geometrirc.com/0.0.0.0
@@ -27891,7 +27884,6 @@ address=/gilbertceramic.fr/0.0.0.0
 address=/gilbertohair.com/0.0.0.0
 address=/gildlearning.org/0.0.0.0
 address=/gilgaluganda.org/0.0.0.0
-address=/gilhb.com/0.0.0.0
 address=/gilio.com.mx/0.0.0.0
 address=/gill-holiday-2013.gillfoundation.org/0.0.0.0
 address=/gill-holiday-2014.gillfoundation.org/0.0.0.0
@@ -28053,6 +28045,7 @@ address=/glid.jp/0.0.0.0
 address=/gligoricekofood.com/0.0.0.0
 address=/glik.acemlnc.com/0.0.0.0
 address=/glimpse.com.cn/0.0.0.0
+address=/glip-vault-1.s3-accelerate.amazonaws.com/0.0.0.0
 address=/glissandobigband.com/0.0.0.0
 address=/glitchexotika.com/0.0.0.0
 address=/glitzygal.net/0.0.0.0
@@ -28584,7 +28577,6 @@ address=/gordyssensors.com/0.0.0.0
 address=/gorenotoservisi.net/0.0.0.0
 address=/goretimmo.lu/0.0.0.0
 address=/gorgan-clinic.ir/0.0.0.0
-address=/gorglione.com/0.0.0.0
 address=/gorguluyapi.com/0.0.0.0
 address=/gorgunmakina.com/0.0.0.0
 address=/gorillaconcretecoatings.com/0.0.0.0
@@ -28652,6 +28644,7 @@ address=/goudu.club/0.0.0.0
 address=/gourmandd.com/0.0.0.0
 address=/gourmetlab.pe/0.0.0.0
 address=/gourmetreats.in/0.0.0.0
+address=/gov.kr/0.0.0.0
 address=/gov.rsmart-testsolutions.watchdogdns.duckdns.org/0.0.0.0
 address=/govche.in/0.0.0.0
 address=/goveboatclub.com.au/0.0.0.0
@@ -29175,7 +29168,6 @@ address=/grupogeacr.com/0.0.0.0
 address=/grupoglobaliza.com/0.0.0.0
 address=/grupohasar.com/0.0.0.0
 address=/grupoiesp.tk/0.0.0.0
-address=/grupoinalen.com/0.0.0.0
 address=/grupoinfonet.com/0.0.0.0
 address=/grupojg.com.br/0.0.0.0
 address=/grupolaplace.com.br/0.0.0.0
@@ -29392,6 +29384,7 @@ address=/gulluconsulants.com/0.0.0.0
 address=/gullukomurelektronik.com/0.0.0.0
 address=/gulseda.site/0.0.0.0
 address=/gulungdinamo.com/0.0.0.0
+address=/gulzarhomestay.com/0.0.0.0
 address=/gumiviet.com/0.0.0.0
 address=/gumuscorap.com/0.0.0.0
 address=/gumustelkari.com/0.0.0.0
@@ -29539,6 +29532,7 @@ address=/h-surgeon.info/0.0.0.0
 address=/h-w-c.net/0.0.0.0
 address=/h.eurotrading.com.pl/0.0.0.0
 address=/h.j990981.ru/0.0.0.0
+address=/h.top4top.io/0.0.0.0
 address=/h.valerana44.ru/0.0.0.0
 address=/h1.iwakalong.ru/0.0.0.0
 address=/h112321.s08.test-hf.su/0.0.0.0
@@ -30123,6 +30117,7 @@ address=/hayahost.com/0.0.0.0
 address=/hayalbu.com/0.0.0.0
 address=/hayashitoysmart.com/0.0.0.0
 address=/hayatevesigar-10gbnetkazan.com/0.0.0.0
+address=/hayatevesigar-20gb.com/0.0.0.0
 address=/hayatihusada.com/0.0.0.0
 address=/hayatiskele.com/0.0.0.0
 address=/hayatlokma.com/0.0.0.0
@@ -30379,8 +30374,10 @@ address=/hedisetro.5gbfree.com/0.0.0.0
 address=/hediy20gb-internet-online.net/0.0.0.0
 address=/hediye-internet-saglik.org/0.0.0.0
 address=/hediye-internet.site/0.0.0.0
+address=/hediye20gb.online/0.0.0.0
 address=/hediyegapsinternet.com/0.0.0.0
 address=/hediyeinternetpaketim.com/0.0.0.0
+address=/hediyeler10gb-ramazan.net/0.0.0.0
 address=/hediyem20gb-internet.org/0.0.0.0
 address=/hediyenkolay.com/0.0.0.0
 address=/hedrasl.com/0.0.0.0
@@ -30956,6 +30953,7 @@ address=/hjsanders.nl/0.0.0.0
 address=/hjylw66.com/0.0.0.0
 address=/hk.darwd.com/0.0.0.0
 address=/hk.insure/0.0.0.0
+address=/hk.npu.gov.ua/0.0.0.0
 address=/hk026.com/0.0.0.0
 address=/hk3.my/0.0.0.0
 address=/hk3fitness.com/0.0.0.0
@@ -31181,6 +31179,7 @@ address=/home-racing.com/0.0.0.0
 address=/home-spy-shop.com/0.0.0.0
 address=/home.99eurowebsite.ie/0.0.0.0
 address=/home.barley-plus.com/0.0.0.0
+address=/home.earthlink.net/0.0.0.0
 address=/home.evrstudio.com/0.0.0.0
 address=/home.healthiestu.com/0.0.0.0
 address=/home.isdes.com/0.0.0.0
@@ -31651,7 +31650,6 @@ address=/houzess.com/0.0.0.0
 address=/how-to-nampa.com/0.0.0.0
 address=/how-to-tech.com/0.0.0.0
 address=/how.ph/0.0.0.0
-address=/howalshafikings.com/0.0.0.0
 address=/howardbenz.com/0.0.0.0
 address=/howardbragman.com/0.0.0.0
 address=/howardgfranklin.com/0.0.0.0
@@ -33673,6 +33671,7 @@ address=/integraciontotal.com.mx/0.0.0.0
 address=/integracooperativa.com/0.0.0.0
 address=/integrafika.co.uk/0.0.0.0
 address=/integraga.com/0.0.0.0
+address=/integralc.com/0.0.0.0
 address=/integralcs.com.br/0.0.0.0
 address=/integralestates.in/0.0.0.0
 address=/integralmakeup.com/0.0.0.0
@@ -33709,6 +33708,7 @@ address=/interaktifhaberler.net/0.0.0.0
 address=/interativus.com.br/0.0.0.0
 address=/interbanx.co.id/0.0.0.0
 address=/interbizservices.eu/0.0.0.0
+address=/interbus.cz/0.0.0.0
 address=/interciencia.es/0.0.0.0
 address=/intercitiesfiji.com/0.0.0.0
 address=/intercity-tlt.ru/0.0.0.0
@@ -33769,7 +33769,6 @@ address=/internationalmscareerseminar.com/0.0.0.0
 address=/internaut.in/0.0.0.0
 address=/internetcasinoweblog.com/0.0.0.0
 address=/internetjogasz.hu/0.0.0.0
-address=/internetlink.com.mx/0.0.0.0
 address=/internetmarketing4pros.com/0.0.0.0
 address=/internetofsmell.com/0.0.0.0
 address=/internetordbogen.dk/0.0.0.0
@@ -33874,6 +33873,7 @@ address=/invernessdesignbuild.ca/0.0.0.0
 address=/inversionesdambrosio.com/0.0.0.0
 address=/inversioneslopezminaya.com/0.0.0.0
 address=/invertilo.com/0.0.0.0
+address=/invest-logistic.net/0.0.0.0
 address=/invest.hawzentr.com/0.0.0.0
 address=/investasiafoundation.com/0.0.0.0
 address=/investaweb.com/0.0.0.0
@@ -34421,7 +34421,6 @@ address=/itaalabama.org/0.0.0.0
 address=/itafoam.com/0.0.0.0
 address=/itai-ziv.com/0.0.0.0
 address=/italamp.tk/0.0.0.0
-address=/italia-ricci.com/0.0.0.0
 address=/italianfishrestaurantgh.com/0.0.0.0
 address=/italianindoart.com/0.0.0.0
 address=/italiansupercars.net/0.0.0.0
@@ -35010,7 +35009,6 @@ address=/jayambewallpapers.com/0.0.0.0
 address=/jayb.xyz/0.0.0.0
 address=/jayc-productions.com/0.0.0.0
 address=/jaychallenge.com/0.0.0.0
-address=/jaycochemicals.com/0.0.0.0
 address=/jaydeemory.com/0.0.0.0
 address=/jaydipchowdharyblog.com/0.0.0.0
 address=/jayemservicesdev2.site/0.0.0.0
@@ -35349,6 +35347,7 @@ address=/jimbarrell.com/0.0.0.0
 address=/jimbira-sakho.net/0.0.0.0
 address=/jimbowe.com/0.0.0.0
 address=/jimenezdesigngroup.com/0.0.0.0
+address=/jimlaneevangelist.com/0.0.0.0
 address=/jimlowry.com/0.0.0.0
 address=/jimmibroadband.in/0.0.0.0
 address=/jimmit.xyz/0.0.0.0
@@ -36316,6 +36315,7 @@ address=/k.5qa.so/0.0.0.0
 address=/k.adr.com.ua/0.0.0.0
 address=/k.iepedacitodecielo.edu.co/0.0.0.0
 address=/k.ludong.tv/0.0.0.0
+address=/k.top4top.io/0.0.0.0
 address=/k110.ir/0.0.0.0
 address=/k12818.com/0.0.0.0
 address=/k1ristri.ru/0.0.0.0
@@ -38845,7 +38845,6 @@ address=/lalogarcia.es/0.0.0.0
 address=/lalolink.com/0.0.0.0
 address=/lalunafashion.eu/0.0.0.0
 address=/lalunenoire.net/0.0.0.0
-address=/lam.cz/0.0.0.0
 address=/lamacosmetics.com/0.0.0.0
 address=/lamaggiora.it/0.0.0.0
 address=/lamaisongourmande.live/0.0.0.0
@@ -38932,6 +38931,7 @@ address=/landrovermarketplace.com/0.0.0.0
 address=/landroveroflouisville.com/0.0.0.0
 address=/landscapeton.com/0.0.0.0
 address=/landscapingstoneandmulchwi.com/0.0.0.0
+address=/landschaftsservice-seibold.de/0.0.0.0
 address=/landskronaloppis.se/0.0.0.0
 address=/landskronamatguide.se/0.0.0.0
 address=/landskronaportalen.se/0.0.0.0
@@ -40023,6 +40023,7 @@ address=/lightswitchmarketing.biz/0.0.0.0
 address=/lightvalleyprune.com/0.0.0.0
 address=/lightwerq.com/0.0.0.0
 address=/lightyard.com/0.0.0.0
+address=/lignar.com/0.0.0.0
 address=/lignarium.se/0.0.0.0
 address=/lignumpolska.com/0.0.0.0
 address=/liguebretagnebillard.fr/0.0.0.0
@@ -40181,6 +40182,7 @@ address=/linkglobalwebsiteaddress.duckdns.org/0.0.0.0
 address=/linkhome.ga/0.0.0.0
 address=/linki.pro/0.0.0.0
 address=/linkingphase.com/0.0.0.0
+address=/linkmaxbd.com/0.0.0.0
 address=/linkomember.info/0.0.0.0
 address=/linkovani.cz/0.0.0.0
 address=/linkplay.duckdns.org/0.0.0.0
@@ -40379,7 +40381,6 @@ address=/livetechsupport.ca/0.0.0.0
 address=/livetesting.xyz/0.0.0.0
 address=/livetotry.com/0.0.0.0
 address=/livetours.cl/0.0.0.0
-address=/livetrack.in/0.0.0.0
 address=/livetvsports.ml/0.0.0.0
 address=/liveu.lk/0.0.0.0
 address=/liviavicentini.com/0.0.0.0
@@ -43401,7 +43402,6 @@ address=/mbsinfosolution.com/0.0.0.0
 address=/mbslmail.mbslbank.com/0.0.0.0
 address=/mbsolutionssrl.it/0.0.0.0
 address=/mbsou37.ru/0.0.0.0
-address=/mbtechnosolutions.com/0.0.0.0
 address=/mbupress.umbjm.ac.id/0.0.0.0
 address=/mbve.org/0.0.0.0
 address=/mbvvs.dk/0.0.0.0
@@ -46148,6 +46148,7 @@ address=/multifin.com.au/0.0.0.0
 address=/multihouse.fmcode.pl/0.0.0.0
 address=/multila.com/0.0.0.0
 address=/multilingualconnections.com/0.0.0.0
+address=/multilinkspk.com/0.0.0.0
 address=/multimedia.biscast.edu.ph/0.0.0.0
 address=/multimix.hu/0.0.0.0
 address=/multimovebd.com/0.0.0.0
@@ -47240,6 +47241,7 @@ address=/ncledu.org/0.0.0.0
 address=/ncmt2w.bn.files.1drv.com/0.0.0.0
 address=/ncoimbra.pt/0.0.0.0
 address=/ncp.su/0.0.0.0
+address=/ncpcgov.com/0.0.0.0
 address=/ncpll1392.ir/0.0.0.0
 address=/ncronline.in/0.0.0.0
 address=/ncsquared.com/0.0.0.0
@@ -47394,7 +47396,6 @@ address=/neproperty.in/0.0.0.0
 address=/neptanckellek.hu/0.0.0.0
 address=/neracompany.sk/0.0.0.0
 address=/nerasro.sk/0.0.0.0
-address=/nerdassasins.com/0.0.0.0
 address=/nerdsalley.com/0.0.0.0
 address=/nerdtshirtsuk.com/0.0.0.0
 address=/neremarketing.com/0.0.0.0
@@ -47463,7 +47464,6 @@ address=/netin.vn/0.0.0.0
 address=/netizennepal.com/0.0.0.0
 address=/netkafem.org/0.0.0.0
 address=/netking.duckdns.org/0.0.0.0
-address=/netlink.com/0.0.0.0
 address=/netm.club/0.0.0.0
 address=/netmaffia.net/0.0.0.0
 address=/netmansoft.com/0.0.0.0
@@ -48418,6 +48418,7 @@ address=/nonglek.net/0.0.0.0
 address=/nongnghiepgiaphat.com/0.0.0.0
 address=/nongsan24h.com/0.0.0.0
 address=/nongsananhnguyen.com/0.0.0.0
+address=/nongsandungha.com/0.0.0.0
 address=/nonlocality.com/0.0.0.0
 address=/nonnemacher.com.br/0.0.0.0
 address=/nonnewspaper.com/0.0.0.0
@@ -48575,6 +48576,7 @@ address=/notix-test.ru/0.0.0.0
 address=/notiz.dk/0.0.0.0
 address=/notlang.org/0.0.0.0
 address=/notlrealty.com/0.0.0.0
+address=/notomonopoly.com/0.0.0.0
 address=/notonfirstdate.net/0.0.0.0
 address=/notredamedesmines.fr/0.0.0.0
 address=/notriicka.ir/0.0.0.0
@@ -48922,6 +48924,7 @@ address=/nygard.no/0.0.0.0
 address=/nygren.nu/0.0.0.0
 address=/nygryn.net/0.0.0.0
 address=/nygts.com/0.0.0.0
+address=/nyifdmacyzechariah.top/0.0.0.0
 address=/nyky.ir/0.0.0.0
 address=/nylag.org/0.0.0.0
 address=/nylandscaping.com/0.0.0.0
@@ -49292,7 +49295,6 @@ address=/ohscrane.com/0.0.0.0
 address=/ohters.de/0.0.0.0
 address=/ohyellow.nl/0.0.0.0
 address=/oi65.tinypic.com/0.0.0.0
-address=/oi68.tinypic.com/0.0.0.0
 address=/oiainbtaea38.silverabout.ml/0.0.0.0
 address=/oiasdnqweqasd.com/0.0.0.0
 address=/oiflddw.gq/0.0.0.0
@@ -49506,6 +49508,7 @@ address=/omagroup.ru/0.0.0.0
 address=/omaharefugees.com/0.0.0.0
 address=/omaint.ml/0.0.0.0
 address=/omalleyco-my.sharepoint.com/0.0.0.0
+address=/omalll.com/0.0.0.0
 address=/omanfleethtml.neomeric.us/0.0.0.0
 address=/omarelbalshy.com/0.0.0.0
 address=/omartinez.com/0.0.0.0
@@ -49724,6 +49727,7 @@ address=/onlinedukkanim.net/0.0.0.0
 address=/onlineeregistration.com/0.0.0.0
 address=/onlineiascoaching.com/0.0.0.0
 address=/onlineitshop.com/0.0.0.0
+address=/onlinejohnline99.org/0.0.0.0
 address=/onlinekushshop.com/0.0.0.0
 address=/onlinelab.dk/0.0.0.0
 address=/onlinelegalsoftware.com/0.0.0.0
@@ -49973,7 +49977,6 @@ address=/orangeink-tattoo.de/0.0.0.0
 address=/orangeltda.cl/0.0.0.0
 address=/orangemediterranea.es/0.0.0.0
 address=/orangeminingsupply.com.au/0.0.0.0
-address=/orangeph.com/0.0.0.0
 address=/orangereel.co.uk/0.0.0.0
 address=/orangeslonik.com/0.0.0.0
 address=/oransky.org/0.0.0.0
@@ -50937,7 +50940,6 @@ address=/parsintelligent.com/0.0.0.0
 address=/parsrad.ir/0.0.0.0
 address=/parsroman.ir/0.0.0.0
 address=/part-timebusiness.org/0.0.0.0
-address=/partage-fichiers.com/0.0.0.0
 address=/partage.nelmedia.ca/0.0.0.0
 address=/partaususd.ru/0.0.0.0
 address=/partgohar.com/0.0.0.0
@@ -52470,7 +52472,6 @@ address=/pmiec.com/0.0.0.0
 address=/pmil.org/0.0.0.0
 address=/pminfocom.com/0.0.0.0
 address=/pmionline.us/0.0.0.0
-address=/pmjnews.com/0.0.0.0
 address=/pmk-55.ru/0.0.0.0
 address=/pmlsdbs.ac.in/0.0.0.0
 address=/pmmc.ae/0.0.0.0
@@ -53772,7 +53773,6 @@ address=/provio.nl/0.0.0.0
 address=/provisa-centr.ru/0.0.0.0
 address=/provisol.se/0.0.0.0
 address=/provit.fr/0.0.0.0
-address=/provo2.com/0.0.0.0
 address=/provoke.bg/0.0.0.0
 address=/provolt.ro/0.0.0.0
 address=/provost.sterlingstrustbank.tk/0.0.0.0
@@ -53902,6 +53902,7 @@ address=/psychprofiler.com/0.0.0.0
 address=/psymonkee.com/0.0.0.0
 address=/psynchro.org/0.0.0.0
 address=/ptb.com.mx/0.0.0.0
+address=/ptbsda.com/0.0.0.0
 address=/ptci-md.org/0.0.0.0
 address=/ptdtech.tk/0.0.0.0
 address=/pte.vn/0.0.0.0
@@ -55228,6 +55229,7 @@ address=/ramallah.atyafco.com/0.0.0.0
 address=/ramashrayevents.com/0.0.0.0
 address=/ramatfactory.com.sa/0.0.0.0
 address=/ramayanawaterpark.cn/0.0.0.0
+address=/ramazan20gbinternet.com/0.0.0.0
 address=/ramazanda20.site/0.0.0.0
 address=/ramazanda20gb.xyz/0.0.0.0
 address=/rambu.ciamiskab.go.id/0.0.0.0
@@ -55606,6 +55608,7 @@ address=/rebelmavenmastermind.com/0.0.0.0
 address=/rebobine.com.br/0.0.0.0
 address=/rebomcap.eu/0.0.0.0
 address=/reboot-hack.ru/0.0.0.0
+address=/reboot.pro/0.0.0.0
 address=/reborn.arteviral.com/0.0.0.0
 address=/reborn24.com/0.0.0.0
 address=/reborntechnology.co.uk/0.0.0.0
@@ -55691,7 +55694,6 @@ address=/redironmarketing.com/0.0.0.0
 address=/redklee.com.ar/0.0.0.0
 address=/redlinegt.com/0.0.0.0
 address=/redlk.com/0.0.0.0
-address=/redlogisticsmaroc.com/0.0.0.0
 address=/redloop.io/0.0.0.0
 address=/redmag.by/0.0.0.0
 address=/redmediasigns.com/0.0.0.0
@@ -55711,6 +55713,7 @@ address=/redsnowball.com/0.0.0.0
 address=/redsseammgt.com/0.0.0.0
 address=/redtek0.com/0.0.0.0
 address=/redtv.top/0.0.0.0
+address=/redvalidator.com/0.0.0.0
 address=/redvelvetpatisserie.co.uk/0.0.0.0
 address=/redwing.com.eg/0.0.0.0
 address=/redwingdemo.dukaafrica.com/0.0.0.0
@@ -56677,6 +56680,7 @@ address=/robpepper.co.uk/0.0.0.0
 address=/robshop.lt/0.0.0.0
 address=/robsitbon.net/0.0.0.0
 address=/robustclarity.com/0.0.0.0
+address=/robvanderwoude.com/0.0.0.0
 address=/robwalls.com/0.0.0.0
 address=/robwassotdint.ru/0.0.0.0
 address=/robzandfitness.co.uk/0.0.0.0
@@ -56707,7 +56711,6 @@ address=/rockmusiclives.com/0.0.0.0
 address=/rocknebyvvs.se/0.0.0.0
 address=/rocknrolletco.top/0.0.0.0
 address=/rocknrolltrain.cn/0.0.0.0
-address=/rockpointgroup.com/0.0.0.0
 address=/rockradioni.co.uk/0.0.0.0
 address=/rocksolidproducts.com/0.0.0.0
 address=/rocksolidstickers.com/0.0.0.0
@@ -57696,6 +57699,7 @@ address=/sageo2018.fr/0.0.0.0
 address=/sagestls.com/0.0.0.0
 address=/sageth.net/0.0.0.0
 address=/sagiri.org/0.0.0.0
+address=/saglikbakanligi-destek.org/0.0.0.0
 address=/saglikbakanligi20gbinternet.com/0.0.0.0
 address=/saglikbakanligindanhediye20gb.com/0.0.0.0
 address=/saglikgoalapp.site/0.0.0.0
@@ -58456,7 +58460,6 @@ address=/scandinavian-fashion.dk/0.0.0.0
 address=/scandinavianman.designmybike.com/0.0.0.0
 address=/scandryer.se/0.0.0.0
 address=/scanelectric.ro/0.0.0.0
-address=/scanliftmaskin.no/0.0.0.0
 address=/scanlisten.sunless.network/0.0.0.0
 address=/scannableid.com/0.0.0.0
 address=/scanthembigbots.mikeysyach.xyz/0.0.0.0
@@ -59103,6 +59106,7 @@ address=/sendsharkreview.com/0.0.0.0
 address=/senehenryinc.ru/0.0.0.0
 address=/senergysafrica.com/0.0.0.0
 address=/seneta.cloud/0.0.0.0
+address=/senevdekaldiyehediye.com/0.0.0.0
 address=/senevdekaldiyehediyenet.com/0.0.0.0
 address=/seniorbudgetsaver.com/0.0.0.0
 address=/seniorenwoningbouwen.nl/0.0.0.0
@@ -59802,6 +59806,7 @@ address=/sheddy.5gbfree.com/0.0.0.0
 address=/shedevildaughterofthedaredevil.com/0.0.0.0
 address=/shedy.5gbfree.com/0.0.0.0
 address=/sheedle.live/0.0.0.0
+address=/sheeni-egypt.com/0.0.0.0
 address=/sheenlandia.com/0.0.0.0
 address=/sheeriuruba.com/0.0.0.0
 address=/shefdomi.com/0.0.0.0
@@ -60625,7 +60630,6 @@ address=/sisubur.xyz/0.0.0.0
 address=/sisustussuunnittelu.fi/0.0.0.0
 address=/sisweb.info/0.0.0.0
 address=/sitagroup.it/0.0.0.0
-address=/sitcomsonline.com/0.0.0.0
 address=/site-2.work/0.0.0.0
 address=/site-4.work/0.0.0.0
 address=/site-internet-belfort.fr/0.0.0.0
@@ -60652,7 +60656,6 @@ address=/siteplaceholder.com/0.0.0.0
 address=/siteradar.com/0.0.0.0
 address=/sites.blueskydigital.com.au/0.0.0.0
 address=/sites.btb.kg/0.0.0.0
-address=/sites.ieee.org/0.0.0.0
 address=/sites.linkysoft.com/0.0.0.0
 address=/sites.webdefy.com/0.0.0.0
 address=/sitesbrgiga.com.br/0.0.0.0
@@ -61140,7 +61143,6 @@ address=/sme.elearning.au.edu/0.0.0.0
 address=/smeare.com/0.0.0.0
 address=/smed13.inducido.com/0.0.0.0
 address=/smedegaarden.dk/0.0.0.0
-address=/smedia.com.au/0.0.0.0
 address=/smeets.ca/0.0.0.0
 address=/smeetspost.nl/0.0.0.0
 address=/smefood.com/0.0.0.0
@@ -61759,6 +61761,7 @@ address=/sophiasuites-santorini.com/0.0.0.0
 address=/sophiebarthelemy.fr/0.0.0.0
 address=/sophieguaremas.com/0.0.0.0
 address=/sophiethomasartist.com/0.0.0.0
+address=/sophis.biz/0.0.0.0
 address=/sophistproduction.com/0.0.0.0
 address=/sophro-zara.com/0.0.0.0
 address=/sophrologie-untempspourmoi.fr/0.0.0.0
@@ -62771,6 +62774,7 @@ address=/stateunico.com/0.0.0.0
 address=/statewidehomesavings.com/0.0.0.0
 address=/statexadver3552mn12.club/0.0.0.0
 address=/static-4matic.club/0.0.0.0
+address=/static.3001.net/0.0.0.0
 address=/static.caregivers.blueweb.md/0.0.0.0
 address=/static.error-soft.net/0.0.0.0
 address=/static.ilclock.com/0.0.0.0
@@ -64536,6 +64540,7 @@ address=/takeiteasy.live/0.0.0.0
 address=/takeitfromtheman.com/0.0.0.0
 address=/takemetohimalayas.com/0.0.0.0
 address=/takenpaybd.com/0.0.0.0
+address=/takernvandrarhem.se/0.0.0.0
 address=/takeshimiyamoto.com/0.0.0.0
 address=/takeshykurosavabest.com/0.0.0.0
 address=/takharandshankertour.com/0.0.0.0
@@ -64625,6 +64630,7 @@ address=/tamoyun.web.tr/0.0.0.0
 address=/tampacigarroller.com/0.0.0.0
 address=/tamparoofing.com/0.0.0.0
 address=/tampaseo.com/0.0.0.0
+address=/tamsu.website/0.0.0.0
 address=/tamsuamy.com/0.0.0.0
 address=/tamsys.net/0.0.0.0
 address=/tamta.gr/0.0.0.0
@@ -65528,6 +65534,7 @@ address=/terramosa.com/0.0.0.0
 address=/terranovaoutdoorliving.com/0.0.0.0
 address=/terranowwa.org/0.0.0.0
 address=/terraoferta.club/0.0.0.0
+address=/terrapersonas.com/0.0.0.0
 address=/terrasol.cl/0.0.0.0
 address=/terratacuara.com/0.0.0.0
 address=/terrats.biz/0.0.0.0
@@ -65881,7 +65888,6 @@ address=/tftt.dairyaustralia.com.au/0.0.0.0
 address=/tfu.ae/0.0.0.0
 address=/tfulf.host/0.0.0.0
 address=/tfullerton.com/0.0.0.0
-address=/tfvn.com.vn/0.0.0.0
 address=/tgbabcrfv.1apps.com/0.0.0.0
 address=/tgbot.cf/0.0.0.0
 address=/tgcool.gq/0.0.0.0
@@ -66282,6 +66288,7 @@ address=/theinspiredblogger.com/0.0.0.0
 address=/theinspireddrive.com/0.0.0.0
 address=/theintelligencer.com.ng/0.0.0.0
 address=/theinvestmentinvestigator.com/0.0.0.0
+address=/theipgenerators.com/0.0.0.0
 address=/theirishhouse.dk/0.0.0.0
 address=/theiro.com/0.0.0.0
 address=/theisel.de/0.0.0.0
@@ -68550,6 +68557,7 @@ address=/tuvandauthau.net/0.0.0.0
 address=/tuvandoanhnghiep.org/0.0.0.0
 address=/tuvanduhocdaiviet.com.vn/0.0.0.0
 address=/tuvanduhocduc.org/0.0.0.0
+address=/tuvanduhocmap.com/0.0.0.0
 address=/tuvangamenet.com/0.0.0.0
 address=/tuvangioitinh.com/0.0.0.0
 address=/tuvanluat.vn/0.0.0.0
@@ -68691,7 +68699,6 @@ address=/u-uploads.com/0.0.0.0
 address=/u.coka.la/0.0.0.0
 address=/u.jimdo.com/0.0.0.0
 address=/u.lewd.se/0.0.0.0
-address=/u.teknik.io/0.0.0.0
 address=/u0005132m0005jp.u023jp9938.info/0.0.0.0
 address=/u0039435.cp.regruhosting.ru/0.0.0.0
 address=/u0287442.isp.regruhosting.ru/0.0.0.0
@@ -69330,6 +69337,7 @@ address=/up.oxvkeq.co/0.0.0.0
 address=/up.qatarw.com/0.0.0.0
 address=/up.vltk1ctc.com/0.0.0.0
 address=/up2m.politanisamarinda.ac.id/0.0.0.0
+address=/up4net.com/0.0.0.0
 address=/up9.co.99.com/0.0.0.0
 address=/upa1.hognoob.se/0.0.0.0
 address=/upa2.hognoob.se/0.0.0.0
@@ -69541,7 +69549,6 @@ address=/url.246546.com/0.0.0.0
 address=/url.57569.fr.snd52.ch/0.0.0.0
 address=/url.edu/0.0.0.0
 address=/url.sg/0.0.0.0
-address=/url2.mailanyone.net/0.0.0.0
 address=/url3.mailanyone.net/0.0.0.0
 address=/url5459.41southbar.com/0.0.0.0
 address=/url9823.ville.labrecque.qc.ca/0.0.0.0
@@ -70753,6 +70760,7 @@ address=/vip-rocket.net/0.0.0.0
 address=/vip-watch.store/0.0.0.0
 address=/vip.lijinxi.com/0.0.0.0
 address=/vip.maohuagong.com/0.0.0.0
+address=/vip.muabannhanh.com/0.0.0.0
 address=/vip.recommendedtoyoo.com/0.0.0.0
 address=/vip.zbfcxx.cn/0.0.0.0
 address=/vip163.cf/0.0.0.0
@@ -71785,6 +71793,7 @@ address=/web.gotham.com.au/0.0.0.0
 address=/web.hfsistemas.com/0.0.0.0
 address=/web.ismt.pt/0.0.0.0
 address=/web.muasam360.com/0.0.0.0
+address=/web.opendrive.com/0.0.0.0
 address=/web.pa-cirebon.go.id/0.0.0.0
 address=/web.plf.vn/0.0.0.0
 address=/web.riderit.com/0.0.0.0
@@ -72507,7 +72516,6 @@ address=/win.tue.nl/0.0.0.0
 address=/win1more.com/0.0.0.0
 address=/win32.x10host.com/0.0.0.0
 address=/winactive.host/0.0.0.0
-address=/winandgo-dz.com/0.0.0.0
 address=/winapp24.pl/0.0.0.0
 address=/winast.com/0.0.0.0
 address=/winbacklostlove.com/0.0.0.0
@@ -72713,7 +72721,6 @@ address=/wmdcustoms.com/0.0.0.0
 address=/wmebbiz.co.za/0.0.0.0
 address=/wmf.desevens.com.ng/0.0.0.0
 address=/wmg128.com/0.0.0.0
-address=/wmi.1217bye.host/0.0.0.0
 address=/wmkatz.com/0.0.0.0
 address=/wmo-raad.inov.me/0.0.0.0
 address=/wmpatagonia.cl/0.0.0.0
@@ -72814,7 +72821,6 @@ address=/woodmeister.nl/0.0.0.0
 address=/woodmillcreek.com/0.0.0.0
 address=/woodnbitz.com/0.0.0.0
 address=/woodofkosta.com/0.0.0.0
-address=/woodsiam.com/0.0.0.0
 address=/woodstocktimbers.com/0.0.0.0
 address=/woodstoneltd.com/0.0.0.0
 address=/woodsytech.com/0.0.0.0
@@ -73311,6 +73317,7 @@ address=/wz-architekten.de/0.0.0.0
 address=/wz6.com.cn/0.0.0.0
 address=/wzgysg.com/0.0.0.0
 address=/wzjp.boyuberq.ru/0.0.0.0
+address=/wzlegal.com/0.0.0.0
 address=/wzry173.com/0.0.0.0
 address=/wzrysp.com/0.0.0.0
 address=/wzsfkq.dm.files.1drv.com/0.0.0.0
@@ -73487,6 +73494,7 @@ address=/xinblasta.us/0.0.0.0
 address=/xinchao.asia/0.0.0.0
 address=/xindetrading.000webhostapp.com/0.0.0.0
 address=/xing.monerov9.com/0.0.0.0
+address=/xingyang-glove.com/0.0.0.0
 address=/xingyiqinhang.com/0.0.0.0
 address=/xinhkorea.com/0.0.0.0
 address=/xinlou.info/0.0.0.0
@@ -75372,6 +75380,7 @@ address=/zstar.top/0.0.0.0
 address=/zsxzfgg.com/0.0.0.0
 address=/zsz-spb.ru/0.0.0.0
 address=/ztbearing68.com/0.0.0.0
+address=/ztds.online/0.0.0.0
 address=/ztds2.online/0.0.0.0
 address=/zteandroid.com/0.0.0.0
 address=/ztecom.cn/0.0.0.0
diff --git a/urlhaus-filter-domains-online.txt b/urlhaus-filter-domains-online.txt
index 386e50bd..4fc349c3 100644
--- a/urlhaus-filter-domains-online.txt
+++ b/urlhaus-filter-domains-online.txt
@@ -1,5 +1,5 @@
 # Title: abuse.ch URLhaus Online Malicious Domains Blocklist
-# Updated: Sat, 02 May 2020 00:09:31 UTC
+# Updated: Sat, 02 May 2020 12:09:27 UTC
 # Repo: https://gitlab.com/curben/urlhaus-filter
 # License: https://creativecommons.org/publicdomain/zero/1.0/
 # Source: https://urlhaus.abuse.ch/api/
@@ -20,7 +20,6 @@
 1.246.222.20
 1.246.222.228
 1.246.222.232
-1.246.222.234
 1.246.222.237
 1.246.222.245
 1.246.222.249
@@ -39,7 +38,6 @@
 1.246.222.98
 1.246.223.103
 1.246.223.109
-1.246.223.125
 1.246.223.126
 1.246.223.127
 1.246.223.130
@@ -54,7 +52,6 @@
 1.246.223.35
 1.246.223.39
 1.246.223.44
-1.246.223.49
 1.246.223.52
 1.246.223.54
 1.246.223.55
@@ -76,19 +73,20 @@
 101.255.36.154
 101.255.54.38
 102.182.126.91
+102.68.153.66
 103.139.219.9
 103.16.145.25
 103.204.168.34
 103.214.6.199
 103.221.254.130
 103.230.62.146
+103.234.226.133
 103.237.173.218
 103.240.249.121
 103.245.199.222
 103.247.217.147
 103.254.205.135
 103.255.235.219
-103.31.47.214
 103.49.56.38
 103.50.4.235
 103.51.249.64
@@ -125,7 +123,6 @@
 108.220.3.201
 108.237.60.93
 108.77.246.129
-108.95.162.21
 109.104.197.153
 109.124.90.229
 109.167.200.82
@@ -134,9 +131,9 @@
 109.185.229.159
 109.185.26.178
 109.233.196.232
+109.248.58.238
 109.86.85.253
 109.88.185.119
-109.95.15.210
 109.96.57.246
 110.154.15.122
 110.154.250.225
@@ -159,6 +156,7 @@
 111.185.227.170
 111.185.231.198
 111.185.235.13
+111.185.48.248
 111.38.25.230
 111.38.25.34
 111.38.25.89
@@ -173,23 +171,11 @@
 111.38.30.47
 111.38.9.115
 111.40.79.79
-111.42.102.70
 111.42.102.71
-111.42.102.78
 111.42.103.107
 111.42.103.28
 111.42.103.48
-111.42.66.30
-111.42.66.53
-111.43.223.112
-111.43.223.136
-111.43.223.156
-111.43.223.159
-111.43.223.167
-111.43.223.24
-111.43.223.38
-111.43.223.54
-111.43.223.67
+111.42.66.55
 111.61.52.53
 111.90.150.64
 111.90.187.162
@@ -197,7 +183,8 @@
 112.122.61.250
 112.123.109.196
 112.123.61.18
-112.123.61.9
+112.156.36.178
+112.160.193.57
 112.160.56.81
 112.163.80.114
 112.166.251.121
@@ -211,8 +198,6 @@
 112.170.205.85
 112.170.23.21
 112.184.231.90
-112.184.88.60
-112.185.140.99
 112.187.143.180
 112.187.217.80
 112.187.5.125
@@ -223,6 +208,7 @@
 112.27.91.247
 112.78.45.158
 113.11.95.254
+113.219.81.166
 113.221.50.64
 113.240.186.132
 113.254.169.251
@@ -235,11 +221,13 @@
 114.226.84.3
 114.226.9.206
 114.227.1.22
+114.228.63.106
 114.229.18.229
 114.229.42.210
 114.232.176.199
 114.234.104.158
 114.234.150.187
+114.234.46.95
 114.234.69.205
 114.235.202.95
 114.235.208.243
@@ -256,30 +244,24 @@
 115.216.210.105
 115.229.200.2
 115.49.154.25
-115.49.246.62
+115.49.37.132
 115.50.166.178
 115.53.130.208
-115.56.51.119
 115.58.127.178
 115.59.17.176
-115.59.3.153
 115.77.186.182
 115.85.65.211
 116.100.249.121
-116.114.95.108
-116.114.95.186
-116.114.95.230
-116.114.95.234
-116.114.95.50
-116.114.95.89
+116.114.95.86
 116.177.178.206
 116.177.179.202
+116.206.164.46
+117.123.171.105
 117.206.159.20
 117.55.133.56
 117.63.51.128
 117.86.24.209
 117.87.44.106
-117.87.72.41
 117.90.128.14
 117.90.89.95
 117.93.176.207
@@ -295,13 +277,13 @@
 118.32.199.219
 118.35.65.115
 118.37.91.137
+118.38.242.167
 118.40.183.176
 118.42.208.62
 118.46.36.186
 118.46.7.246
 118.99.179.164
 118.99.239.217
-119.102.153.184
 119.194.91.157
 119.2.48.159
 119.203.9.192
@@ -339,12 +321,9 @@
 121.159.208.28
 121.163.48.30
 121.165.140.117
-121.168.227.85
-121.176.31.174
 121.177.37.127
 121.178.96.50
 121.179.232.246
-121.180.181.177
 121.180.75.151
 121.184.131.249
 121.186.105.200
@@ -358,19 +337,19 @@
 121.233.24.190
 121.233.68.89
 121.86.113.254
-122.243.173.3
 123.0.198.186
 123.0.209.88
-123.10.101.22
 123.10.159.88
 123.11.194.45
 123.11.25.79
-123.12.196.225
+123.11.78.157
+123.12.222.242
 123.194.235.37
 123.194.60.238
 123.241.112.94
+123.4.156.19
+123.4.54.173
 123.51.152.54
-123.9.37.45
 124.67.89.238
 125.125.44.18
 125.130.59.163
@@ -380,8 +359,7 @@
 125.18.28.170
 125.209.71.6
 125.26.165.244
-125.40.75.189
-125.47.248.28
+125.47.80.74
 128.65.183.8
 128.65.187.123
 129.121.176.89
@@ -391,9 +369,9 @@
 139.5.177.10
 139.5.177.19
 13pope.com
-14.113.231.72
 14.141.175.107
 14.161.4.53
+14.33.86.236
 14.34.165.243
 14.37.6.148
 14.41.57.152
@@ -407,14 +385,16 @@
 141.0.178.134
 141.226.28.195
 141.226.94.115
+142.11.194.209
 142.11.195.135
 142.11.206.45
-142.11.232.26
 142.169.129.243
 144.132.166.70
 144.136.155.166
-145.255.26.115
+144.217.117.146
 146.71.79.230
+147.91.212.250
+149.56.84.15
 150.co.il
 151.232.56.134
 151.236.38.234
@@ -425,28 +405,25 @@
 159.224.23.120
 159.224.74.112
 162.212.113.149
+162.212.113.168
 162.212.113.70
-162.212.114.107
 162.212.114.196
 162.212.114.65
-162.212.115.118
 162.250.126.186
 163.13.182.105
 163.22.51.1
-163.47.145.202
 164.132.92.180
 165.227.220.53
 165.73.60.72
-165.90.16.5
 167.114.85.125
 167.250.49.155
 168.121.239.172
 171.232.106.147
+171.235.177.250
 171.248.114.46
 171.42.97.178
 172.84.255.201
 172.90.37.142
-173.15.162.151
 173.15.162.156
 173.160.86.173
 173.161.208.193
@@ -462,10 +439,11 @@
 174.2.176.60
 174.48.14.129
 175.10.145.138
+175.199.142.182
+175.200.153.48
 175.202.162.120
 175.208.203.123
 175.210.50.4
-175.211.16.150
 175.212.31.241
 175.212.52.9
 175.213.134.89
@@ -480,8 +458,8 @@
 176.113.161.126
 176.113.161.128
 176.113.161.133
-176.113.161.136
 176.113.161.138
+176.113.161.37
 176.113.161.41
 176.113.161.47
 176.113.161.51
@@ -500,7 +478,6 @@
 176.113.161.91
 176.113.161.92
 176.113.161.93
-176.113.161.94
 176.12.117.70
 176.14.234.5
 176.178.184.124
@@ -532,7 +509,6 @@
 178.214.73.181
 178.22.117.102
 178.233.234.188
-178.242.54.236
 178.34.183.30
 178.48.235.59
 179.108.246.34
@@ -544,9 +520,9 @@
 180.104.9.150
 180.115.66.239
 180.116.17.37
+180.116.210.174
 180.116.224.151
 180.116.224.91
-180.116.47.28
 180.116.96.229
 180.117.89.28
 180.117.91.251
@@ -590,13 +566,9 @@
 181.224.242.131
 181.40.117.138
 181.48.187.146
-181.49.241.50
-182.113.220.114
-182.113.240.159
 182.115.245.137
 182.126.101.85
 182.127.242.93
-182.127.88.130
 182.142.119.93
 182.160.101.51
 182.160.125.229
@@ -608,7 +580,8 @@
 183.100.109.156
 183.105.206.26
 183.106.201.118
-183.215.188.45
+183.107.57.170
+183.151.83.28
 183.221.125.206
 183.4.28.24
 183.4.30.251
@@ -619,7 +592,6 @@
 185.138.123.179
 185.14.250.199
 185.153.196.209
-185.172.110.214
 185.172.110.216
 185.172.110.224
 185.172.110.232
@@ -634,7 +606,6 @@
 185.244.39.123
 185.34.16.231
 185.43.19.151
-185.5.229.8
 185.83.88.108
 185.94.172.29
 185.94.33.22
@@ -643,14 +614,13 @@
 186.179.243.112
 186.188.241.98
 186.225.120.173
-186.225.177.46
 186.227.145.138
 186.232.44.86
 186.249.13.62
 186.251.253.134
 186.34.4.40
 186.42.255.230
-186.73.188.132
+187.107.191.197
 187.12.10.98
 187.120.123.187
 187.183.213.88
@@ -684,7 +654,6 @@
 190.109.189.204
 190.110.161.252
 190.119.207.58
-190.12.4.98
 190.12.99.194
 190.128.135.130
 190.130.15.212
@@ -718,6 +687,7 @@
 192.236.147.189
 192.236.147.67
 193.106.57.83
+193.142.146.30
 193.228.135.144
 193.248.246.94
 193.38.51.25
@@ -742,14 +712,15 @@
 196.32.106.85
 197.155.66.202
 197.159.2.106
-197.254.106.78
 197.51.235.38
 198.24.75.52
 199.36.76.2
 199.83.203.104
 199.83.203.137
+199.83.203.70
 199.83.203.85
 199.83.204.89
+199.83.206.243
 2.180.33.118
 2.180.37.166
 2.185.150.180
@@ -774,18 +745,16 @@
 200.69.74.28
 200.85.168.202
 2000kumdo.com
+201.103.20.67
+201.184.163.170
 201.184.241.123
 201.187.102.73
 201.202.55.118
-201.203.212.194
 201.203.27.37
 201.234.138.92
 201.239.99.172
 201.46.27.101
-201.75.4.149
-202.107.233.41
 202.133.193.81
-202.148.20.130
 202.149.90.98
 202.166.206.80
 202.166.21.123
@@ -795,12 +764,13 @@
 202.4.124.58
 202.51.191.174
 202.74.236.9
+202.79.46.30
 203.114.116.37
 203.129.254.50
 203.163.211.46
+203.188.242.148
 203.193.173.179
 203.202.243.233
-203.202.245.77
 203.202.246.246
 203.202.248.237
 203.204.217.4
@@ -808,8 +778,10 @@
 203.70.166.107
 203.77.80.159
 203.80.171.138
+203.80.171.149
 203.82.36.34
 203.83.174.227
+208.113.133.35
 208.163.58.18
 209.141.53.115
 209.45.49.177
@@ -823,9 +795,6 @@
 210.76.64.46
 211.106.11.193
 211.107.230.86
-211.137.225.126
-211.137.225.60
-211.137.225.61
 211.179.143.199
 211.187.75.220
 211.192.121.74
@@ -835,6 +804,7 @@
 211.195.27.69
 211.196.28.116
 211.197.212.57
+211.216.116.40
 211.223.166.51
 211.224.8.211
 211.225.152.102
@@ -849,6 +819,7 @@
 212.126.125.226
 212.133.243.104
 212.143.128.83
+212.154.51.216
 212.159.128.72
 212.179.253.246
 212.186.128.58
@@ -863,6 +834,7 @@
 213.27.8.6
 213.57.78.231
 213.7.222.78
+213.92.198.8
 213.97.24.164
 216.15.112.251
 216.183.54.169
@@ -875,14 +847,12 @@
 217.8.117.23
 217.8.117.76
 218.144.252.19
-218.156.132.7
+218.154.126.150
 218.156.26.85
 218.157.214.219
-218.159.238.10
-218.161.3.200
 218.203.206.137
 218.21.170.244
-218.21.170.84
+218.21.171.51
 218.234.125.7
 218.255.247.58
 218.31.2.125
@@ -892,18 +862,17 @@
 218.35.55.121
 218.52.230.160
 218.72.196.220
-219.154.105.40
 219.154.185.229
 219.155.209.111
 219.68.1.148
 219.68.245.63
 219.68.251.32
+219.70.238.66
 219.70.63.196
 219.80.217.209
 21robo.com
 220.120.114.39
 220.122.180.53
-220.171.194.244
 220.71.176.94
 220.82.140.17
 221.14.13.121
@@ -919,11 +888,9 @@
 221.167.18.122
 221.210.211.132
 221.210.211.16
-221.210.211.60
-221.226.86.151
+221.210.211.25
 222.113.138.43
 222.116.70.13
-222.139.66.54
 222.185.161.165
 222.185.199.202
 222.185.73.210
@@ -933,14 +900,12 @@
 222.188.131.220
 222.242.158.161
 222.242.182.26
-222.243.14.67
 222.81.213.61
+222.81.223.165
 23.122.183.241
 23.228.143.58
-23.238.204.36
 23.247.102.120
 23.254.226.60
-23.95.89.80
 23.95.89.93
 24.0.252.145
 24.10.116.43
@@ -960,10 +925,10 @@
 27.116.84.57
 27.147.29.52
 27.147.40.128
+27.155.87.120
 27.238.33.39
+27.41.176.93
 27.41.178.53
-27.41.181.223
-27.41.213.143
 27.48.138.13
 27.65.63.54
 3.zhzy999.net
@@ -1005,7 +970,6 @@
 36.33.133.226
 36.33.138.140
 36.34.150.235
-36.34.234.8
 36.35.160.240
 36.39.47.194
 36.66.105.159
@@ -1033,8 +997,8 @@
 37.34.228.1
 37.34.250.243
 37.49.226.162
-37.49.226.168
 37.49.226.209
+37.49.226.230
 37.49.230.234
 37.54.14.36
 3mandatesmedia.com
@@ -1044,7 +1008,6 @@
 41.190.63.174
 41.190.70.238
 41.211.112.82
-41.219.185.171
 41.228.175.30
 41.32.132.218
 41.32.170.13
@@ -1054,17 +1017,17 @@
 41.79.234.90
 42.115.12.180
 42.115.25.55
+42.115.86.142
 42.226.73.191
 42.226.74.158
-42.232.224.254
+42.230.250.178
 42.234.117.70
 42.234.202.31
-42.235.63.163
-42.239.99.162
 42.61.99.155
 42.82.191.105
 43.252.8.94
 45.115.253.82
+45.115.254.154
 45.118.165.115
 45.133.9.21
 45.138.97.46
@@ -1072,17 +1035,16 @@
 45.14.150.29
 45.14.151.249
 45.147.228.245
-45.148.122.113
-45.19.201.181
+45.154.1.122
+45.154.1.58
+45.163.149.85
 45.221.78.166
 45.221.78.38
 45.229.22.195
 45.49.113.70
 45.50.228.207
 45.95.168.202
-45.95.168.254
 45.95.168.97
-45.95.169.234
 45.95.169.254
 46.100.251.72
 46.100.56.152
@@ -1090,7 +1052,6 @@
 46.107.48.22
 46.121.82.70
 46.151.9.29
-46.161.185.15
 46.172.75.231
 46.175.138.75
 46.176.44.211
@@ -1114,7 +1075,6 @@
 49.116.212.4
 49.116.214.38
 49.117.189.177
-49.119.56.127
 49.143.43.93
 49.156.35.166
 49.156.44.134
@@ -1133,13 +1093,13 @@
 49.68.235.19
 49.68.250.118
 49.68.54.141
-49.70.137.78
 49.70.234.20
 49.81.134.147
-49.82.14.191
+49.81.238.9
 49.82.192.122
 49.82.196.117
 49.82.249.71
+49.82.252.4
 49.82.252.63
 49.84.125.254
 49.84.93.106
@@ -1152,7 +1112,6 @@
 49parallel.ca
 5.101.196.90
 5.101.213.234
-5.128.62.127
 5.185.85.122
 5.19.248.85
 5.198.241.29
@@ -1178,23 +1137,26 @@
 58.243.123.161
 58.243.124.204
 58.243.124.51
+58.243.126.93
 58.243.127.176
 58.243.190.127
+58.243.20.78
 58.255.191.220
 58.40.122.158
 59.0.224.88
 59.0.78.18
 59.1.81.1
 59.12.134.224
-59.174.151.114
 59.2.40.1
 59.22.144.136
 59.23.208.62
+59.4.104.15
 59.7.40.82
 60.184.150.81
 60.184.172.193
 60.188.104.239
 61.168.136.199
+61.241.170.153
 61.247.224.66
 61.56.182.218
 61.58.174.253
@@ -1203,6 +1165,7 @@
 61.70.110.59
 61.70.45.130
 61.75.111.224
+61.77.146.65
 61.82.215.186
 61.83.40.183
 62.1.98.131
@@ -1212,6 +1175,7 @@
 62.201.230.43
 62.215.101.230
 62.219.131.205
+62.219.227.20
 62.232.203.90
 62.34.210.232
 62.38.149.66
@@ -1220,6 +1184,7 @@
 62.80.231.196
 62.82.172.42
 62.90.219.154
+63.250.42.34
 63.78.214.55
 64.53.172.125
 65.125.128.196
@@ -1232,7 +1197,6 @@
 66.96.241.234
 66.96.252.2
 67.8.138.101
-68.129.32.96
 68.134.186.196
 68.174.119.7
 68.204.73.133
@@ -1260,12 +1224,12 @@
 72.69.204.59
 72.89.84.172
 73.0.143.64
-73.139.46.234
 73.231.235.88
 73.233.67.25
 73.55.122.210
 73.96.196.198
 74.113.230.55
+74.66.217.253
 74.75.165.81
 75.3.198.176
 75.55.248.20
@@ -1351,6 +1315,7 @@
 82.81.196.247
 82.81.197.254
 82.81.207.162
+82.81.215.149
 82.81.230.112
 82.81.232.68
 82.81.25.188
@@ -1366,6 +1331,7 @@
 84.10.31.238
 84.197.14.92
 84.20.68.26
+84.228.102.152
 84.228.95.204
 84.241.16.78
 84.31.23.33
@@ -1377,6 +1343,7 @@
 85.105.155.39
 85.105.165.236
 85.187.253.219
+85.217.170.105
 85.222.91.82
 85.238.105.94
 85.64.181.50
@@ -1385,23 +1352,20 @@
 86.105.60.204
 86.107.163.176
 86.107.163.98
-86.107.167.93
 86.18.117.139
 87.120.235.164
 87.241.175.89
 87.66.219.63
 87.97.154.37
 88.102.33.14
-88.156.169.98
+88.201.34.243
 88.218.16.118
 88.218.16.37
 88.218.16.38
-88.218.17.222
 88.220.80.210
 88.225.222.128
 88.247.194.52
 88.248.121.238
-88.250.196.101
 88.250.85.219
 887sconline.com
 88mscco.com
@@ -1420,16 +1384,15 @@
 90.63.176.144
 91.134.252.221
 91.149.191.182
-91.177.139.132
 91.187.103.32
 91.187.119.26
 91.191.32.34
+91.196.36.84
 91.215.126.208
 91.216.149.130
 91.217.2.120
 91.217.221.68
 91.221.177.94
-91.234.60.94
 91.237.238.242
 91.244.114.198
 91.244.169.139
@@ -1444,6 +1407,7 @@
 92.45.198.60
 92.51.127.94
 92.55.124.64
+93.102.193.254
 93.116.166.51
 93.119.236.72
 93.122.213.217
@@ -1451,10 +1415,10 @@
 93.176.185.223
 93.185.10.131
 93.56.36.84
-93.70.125.94
 93.73.99.102
 93.77.52.138
 93.93.199.254
+93.93.62.183
 94.154.17.170
 94.154.82.190
 94.156.57.84
@@ -1467,6 +1431,7 @@
 94.244.25.21
 94.41.0.174
 94.53.120.109
+94.64.246.247
 95.156.65.14
 95.167.138.250
 95.167.71.245
@@ -1490,6 +1455,7 @@
 a-reality.co.uk
 a.xiazai163.com
 aaasolution.co.th
+accentlandscapes.com
 accessyouraudience.com
 acdesignhub.com
 acteon.com.ar
@@ -1515,9 +1481,7 @@ alohasoftware.net
 alphaconsumer.net
 am-concepts.ca
 amd.alibuf.com
-amedeoscognamiglio.329263.com
 amemarine.co.th
-americanrange.com
 anadolutatili.com
 anamikaindanegas.in
 andreelapeyre.com
@@ -1534,7 +1498,6 @@ arcticprospectus.com
 areac-agr.com
 aresorganics.com
 arowanafishforsale.com
-asadairtravel.com
 ascentive.com
 ashoakacharya.com
 askarindo.or.id
@@ -1557,6 +1520,7 @@ bamakobleach.free.fr
 bangkok-orchids.com
 banzaimonkey.com
 bapo.granudan.cn
+baritaco.com
 baybars.xyz
 bbs.sunwy.org
 bbs1.marisfrolg.com
@@ -1572,7 +1536,6 @@ beta.pterosol.com
 bflow.security-portal.cz
 bildeboks.no
 bilim-pavlodar.gov.kz
-billieellish.org
 bingxiong.vip
 bjkumdo.com
 blog.241optical.com
@@ -1588,7 +1551,6 @@ brbs.customer.netspace.net.au
 brenleyquartzgh.com
 brewmethods.com
 btlocum.pl
-bucketstrong.s3-us-west-1.amazonaws.com
 bugansavings.com
 buhleni.co.za
 buydishtv.in
@@ -1605,6 +1567,8 @@ castmart.ga
 cbk.m.dodo52.com
 ccnn.xiaomier.cn
 cdn-10049480.file.myqcloud.com
+cdn.truelife.vn
+cdn.xiaoduoai.com
 cdnus.laboratoryconecpttoday.com
 ceirecrear.com.br
 cellas.sk
@@ -1615,7 +1579,6 @@ ch.rmu.ac.th
 changematterscounselling.com
 chanvribloc.com
 charm.bizfxr.com
-chattosport.com
 chauffeursontravel.com
 chedea.eu
 chinhdropfile.myvnc.com
@@ -1623,27 +1586,25 @@ chinhdropfile80.myvnc.com
 chipmarkets.com
 chj.m.dodo52.com
 chuckweiss.com
+cinnamoncreations.com.au
 cirugiagenital.com.mx
+cista-dobra-voda.com
 clareiamente.clareiamente.com
 clearwaterriveroutfitting.com
 client.yaap.co.uk
 clinicamariademolina.com
 cloud-server-updater2.co.za
-colombet-taxi.fr
 colourcreative.co.za
 compesat.com
 complan.hu
 complanbt.hu
 comtechadsl.com
 config.kuaisousou.top
-consultingcy.com
 counciloflight.bravepages.com
-cp-30.theborough.com.au
 cqjcc.org
 crimebranch.in
 crittersbythebay.com
 cryline.net
-cryptoomarket.com
 csnserver.com
 csw.hu
 cuacuonsieure.com
@@ -1678,10 +1639,10 @@ dfd.zhzy999.net
 dfzm.91756.cn
 dgecolesdepolice.bf
 dgnj.cn
-dhlservices.duckdns.org
 diazavendano.cl
 dichvuvesinhcongnghiep.top
 dienmaycu.vn
+dieselmoreno.cl
 digilib.dianhusada.ac.id
 digital-marketing-institute-delhi.empeeevents.com
 digitaldog.de
@@ -1693,7 +1654,6 @@ dl-gameplayer.dmm.com
 dl.1003b.56a.com
 dl.198424.com
 dl.dzqzd.com
-dl.iqilie.com
 dl.kuaile-u.com
 dl2.soft-lenta.ru
 dlist.iqilie.com
@@ -1702,7 +1662,6 @@ dnn.alibuf.com
 dns.alibuf.com
 dodsonimaging.com
 don.viameventos.com.br
-dongiln.co
 donmago.com
 doostansocks.ir
 doransky.info
@@ -1730,18 +1689,19 @@ download301.wanmei.com
 dpeasesummithilltoppers.pbworks.com
 dr080.com
 dralpaslan.com
+dreamtrips.cheap
 drivolani.us
 drools-moved.46999.n3.nabble.com
 druzim.freewww.biz
 drwendyellis.com
 dsiun.com
 dtsay.xyz
-dudulm.com
+duongfpt.ga
 dusdn.mireene.com
+dw.58wangdun.com
 dx.qqyewu.com
 dx1.qqtn.com
 dx2.qqtn.com
-dx30.siweidaoxiang.com
 dx60.siweidaoxiang.com
 dzinestudio87.co.uk
 e.dangeana.com
@@ -1782,24 +1742,23 @@ fitmanacademy.com
 flood-protection.org
 fordlamdong.com.vn
 foreverprecious.org
+foxfennecs.com
 frin.ng
 fte.m.dodo52.com
 ftpcnc-p2sp.pconline.com.cn
 ftpftpftp.com
 funletters.net
+funpartyrent.com
 futuregraphics.com.ar
 g.7230.com
 g0ogle.free.fr
-gainsdirectory.com
 galuhtea.com
 gamee.top
-garage.themebuffets.com
 garenanow.myvnc.com
 garenanow4.myvnc.com
 gargiulo.com.ar
 gateway-heide.de
 gateway.ethlqd.com
-gd2.greenxf.com
 geenicreations.com
 genesisconstruction.co.za
 germistonmiraclecentre.co.za
@@ -1813,6 +1772,7 @@ gnimelf.net
 go.xsuad.com
 gocanada.vn
 google.ghststr.com
+gov.kr
 govhotel.us
 grafchekloder.rebatesrule.net
 granportale.com.br
@@ -1821,7 +1781,6 @@ greenfood.sa.com
 greenleaveperu.com
 gssgroups.com
 gx-10012947.file.myqcloud.com
-gxx.monerov10.com
 habbotips.free.fr
 hagebakken.no
 haisannhatrang.com.vn
@@ -1833,12 +1792,12 @@ hazel-azure.co.th
 hdxa.net
 healtina.com
 heavenif.co.za
+hediyeler10gb-ramazan.net
 hellomessager.com
 hfsoftware.cl
 hingcheong.hk
 hldschool.com
 hmbwgroup.com
-hmpmall.co.kr
 hoayeuthuong-my.sharepoint.com
 homedecors.com.au
 hostzaa.com
@@ -1856,6 +1815,7 @@ hyvat-olutravintolat.fi
 i333.wang
 ibda.adv.br
 ideadom.pl
+ileolaherbalcare.com.ng
 iletisimbakanligi20gb.com
 imellda.com
 impression-gobelet.com
@@ -1864,9 +1824,13 @@ inapadvance.com
 incrediblepixels.com
 incredicole.com
 ineyes360.com
+ini.egkj.com
 innovation4crisis.org
 instanttechnology.com.au
 intelicasa.ro
+interbus.cz
+intersel-idf.org
+intertradeassociates.com.au
 intoxicated-twilight.com
 iremart.es
 isso.ps
@@ -1876,7 +1840,6 @@ itrigger.cn
 itsnixielou.com
 ixlonbcc.com
 izu.co.jp
-jahesa.com
 jaincakes.xyz
 jamiekaylive.com
 jansen-heesch.nl
@@ -1909,10 +1872,9 @@ kanok.co.th
 kar.big-pro.com
 karavantekstil.com
 kassohome.com.tr
-kazanin20gbturkiye.com
 kdsp.co.kr
-keckarangdadap.pekalongankab.go.id
 kejpa.com
+kenareh-gostare-aras.ir
 kgfs3.329263.com
 khan-associates.net
 khunnapap.com
@@ -1925,7 +1887,6 @@ koppemotta.com.br
 koralli.if.ua
 kqq.kz
 kristofferdaniels.com
-kupaliskohs.sk
 kuznetsov.ca
 kwanfromhongkong.com
 kwikomfi-lab.com
@@ -1934,6 +1895,7 @@ lameguard.ru
 lammaixep.com
 landmarktreks.com
 langyabbs.05yun.cn
+lapurisima.cl
 lastmorgoth.com
 lcfurtado.com.br
 lcmsystem.com
@@ -1945,11 +1907,11 @@ lecafedesartistes.com
 lengendryme.com
 lesawilson.com
 lhbfirst.com
+libya-info.com
 lifeapt.biz
 linx.li
 lists.ibiblio.org
 lists.mplayerhq.hu
-livetrack.in
 livetvsports.ml
 lodergord.com
 log.yundabao.cn
@@ -1958,7 +1920,6 @@ lt02.datacomspecialists.net
 luatminhthuan.com
 luckytriumph.com
 luisnacht.com.ar
-luyalu.net
 lvr.samacomplus.com
 m.0757kd.cn
 m93701t2.beget.tech
@@ -2020,16 +1981,12 @@ msecurity.ro
 mteng.mmj7.com
 mtfelektroteknik.com
 mueblesjcp.cl
-mutec.jp
-mv360.net
 mvb.kz
 mxpiqw.am.files.1drv.com
-mybook22.s3-us-west-1.amazonaws.com
 myexpertca.in
 myhood.cl
 myo.net.au
 myofficeplus.com
-myonlinepokiesblog.com
 mytex.pe
 mytrains.net
 mywp.asia
@@ -2039,6 +1996,7 @@ narty.laserteam.pl
 naturalma.es
 naturepack.cc
 ncmt2w.bn.files.1drv.com
+ncpcgov.com
 ndrs.cloud
 nebraskacharters.com.au
 nemo.herc.ws
@@ -2056,17 +2014,16 @@ norperuinge.com.pe
 nprg.ru
 nst-corporation.com
 nwcsvcs.com
-oa.fnysw.com
 oa.hys.cn
 obinspirations.com
 obnova.zzux.com
 obseques-conseils.com
 ohe.ie
-oknoplastik.sk
 omega.az
 omsk-osma.ru
 omuzgor.tj
 onestin.ro
+openarts.com.br
 openclient.sroinfo.com
 operasanpiox.bravepages.com
 ophtalmiccenter.com
@@ -2105,7 +2062,6 @@ phamchilong.com
 phudieusongma.com
 phuphamca.com
 piapendet.com
-piedmontrescue.org
 pink99.com
 pitmansticks.com
 platisher.xyz
@@ -2114,7 +2070,6 @@ podrska.com.hr
 ponto50.com.br
 poolbook.ir
 ppl.ac.id
-prepaenunsoloexamen.academiagalileoac.com
 probost.cz
 profitcoach.net
 prosoc.nl
@@ -2123,7 +2078,6 @@ pujashoppe.in
 purelondonhyg.com
 pyxalis.com
 qchms.qcpro.vn
-qelie.com
 qfjys.com.img.800cdn.com
 qmsled.com
 qppl.angiang.gov.vn
@@ -2133,6 +2087,7 @@ quehagoencartagena.com
 quickuploader.xyz
 raacts.in
 raifix.com.br
+ramazan20gbinternet.com
 ramazanda20gb.xyz
 rangebroadcasting.com
 rapidex.co.rs
@@ -2153,7 +2108,6 @@ riyanenterprise.com
 rkverify.securestudies.com
 robertmcardle.com
 robotrade.com.vn
-rockersdolphin.co.za
 rollingmill.in
 rollscar.pk
 rossogato.com
@@ -2163,10 +2117,10 @@ ruisgood.ru
 s.51shijuan.com
 s.kk30.com
 s14b.91danji.com
-s14b.groundyun.cn
 sabiupd.compress.to
 saboorjaam.ir
 sabupda.vizvaz.com
+saglikbakanligi-destek.org
 sahathaikasetpan.com
 salvationbd.com
 sandovalgraphics.com
@@ -2174,11 +2128,11 @@ sarvghamatan.ir
 saskklo.com
 scglobal.co.th
 schollaert.eu
-securefileinterneationaltransferthroughm.duckdns.org
 sefp-boispro.fr
 selekture.com
 selfuseproperty.com
 selvikoyunciftligi.com
+senevdekaldiyehediye.com
 senevdekaldiyehediyenet.com
 serpentrising.com
 servicemhkd.myvnc.com
@@ -2190,7 +2144,6 @@ sgm.pc6.com
 shacked.webdepot.co.il
 shahtoba.faqserv.com
 shaoxiaofei.cn
-share.dmca.gripe
 sharjahas.com
 shembefoundation.com
 shopjumpn.ch
@@ -2227,7 +2180,9 @@ ss.cybersoft-vn.com
 sslv3.at
 staging.popclusive.asia
 starcountry.net
+static.3001.net
 static.ilclock.com
+static.topxgun.com
 stationaryhome.com
 stecit.nl
 stevewalker.com.au
@@ -2247,15 +2202,16 @@ sylvaclouds.eu
 symanreni.mysecondarydns.com
 szxypt.com
 t.honker.info
+tandenblekenhoofddorp.nl
 taraward.com
 taxpos.com
 tcy.198424.com
 teardrop-productions.ro
 technoites.com
-tecnobella.cl
 tehrenberg.com
 telescopelms.com
 telsiai.info
+tepatitlan.gob.mx
 test.iyibakkendine.com
 testdatabaseforcepoint.com
 thaibbqculver.com
@@ -2271,7 +2227,6 @@ thornadops.com
 thosewebbs.com
 thuong.bidiworks.com
 tianangdep.com
-tianzi8.cn
 tibinst.mefound.com
 tibok.lflink.com
 ticte.in
@@ -2302,10 +2257,10 @@ unicorpbrunei.com
 unilevercopabr.mbiz20.net
 uniquehall.net
 unokaoeojoejfghr.ru
+up4net.com
 upd.m.dodo52.com
 update.iwang8.com
 update.my.99.com
-upendiveterinariovalencia.es
 urgentmessage.org
 usd-gold.com
 users.skynet.be
@@ -2317,7 +2272,6 @@ valedchap.ir
 valencaagora.com.br
 vasoccernews.com
 vaziri.echobit.ir
-vdotrip.blog
 vfocus.net
 vibicloud.com
 videoswebcammsn.free.fr
@@ -2332,7 +2286,6 @@ vitromed.ro
 vrrumover0.vrrum0.farted.net
 vvff.in
 w.zhzy999.net
-wakecar.cn
 wangtong7.siweidaoxiang.com
 wangzonghang.cn
 wap.dosame.com
@@ -2347,7 +2300,6 @@ welcometothefuture.com
 whgaty.com
 wiebe-sanitaer.de
 wmd9e.a3i1vvv.feteboc.com
-wmi.1217bye.host
 wnksupply.co.th
 wood-expert.net
 woodsytech.com
@@ -2357,11 +2309,11 @@ writesofpassage.co.za
 wsg.com.sg
 wt8.siweidaoxiang.com
 wt9.siweidaoxiang.com
-wwealthllc.com
 www2.recepty5.com
 x2vn.com
 xia.vzboot.com
 xiaidown.com
+xiaoma-10021647.file.myqcloud.com
 xiegushi.cn
 xirfad.com
 xn--transfgran-mgbbb600b.ro
@@ -2371,11 +2323,11 @@ xxwl.kuaiyunds.com
 xxxze.co.nu
 yeez.net
 yesky.51down.org.cn
-yesky.xzstatic.com
 yiyangjz.cn
 yolks.bestsellertwo.net
 yuluobo.com
 yun-1.lenku.cn
+yuyu02004-10043918.file.myqcloud.com
 yx.m.dodo52.com
 zagruz.dnset.com
 zagruz.toh.info
@@ -2394,5 +2346,4 @@ zoetermeerov.nl
 zoeydeutchweb.com
 zonefound.com.cn
 zskyjov.cz
-ztqsc.com.cn
 zumodelima.com
diff --git a/urlhaus-filter-domains.txt b/urlhaus-filter-domains.txt
index 41fd5047..552861e3 100644
--- a/urlhaus-filter-domains.txt
+++ b/urlhaus-filter-domains.txt
@@ -1,5 +1,5 @@
 # Title: abuse.ch URLhaus Malicious Domains Blocklist
-# Updated: Sat, 02 May 2020 00:09:31 UTC
+# Updated: Sat, 02 May 2020 12:09:27 UTC
 # Repo: https://gitlab.com/curben/urlhaus-filter
 # License: https://creativecommons.org/publicdomain/zero/1.0/
 # Source: https://urlhaus.abuse.ch/api/
@@ -243,6 +243,7 @@
 1.34.12.240
 1.34.12.97
 1.34.120.14
+1.34.120.36
 1.34.128.245
 1.34.131.46
 1.34.138.228
@@ -288,6 +289,7 @@
 1.34.4.192
 1.34.48.13
 1.34.49.63
+1.34.5.89
 1.34.52.145
 1.34.55.127
 1.34.6.193
@@ -2988,6 +2990,7 @@
 112.123.61.18
 112.123.61.204
 112.123.61.42
+112.123.61.78
 112.123.61.9
 112.123.61.90
 112.123.61.96
@@ -3276,6 +3279,7 @@
 113.219.114.242
 113.219.44.157
 113.219.46.9
+113.219.81.166
 113.219.81.204
 113.219.81.96
 113.219.83.189
@@ -3863,6 +3867,7 @@
 114.234.46.113
 114.234.46.206
 114.234.46.28
+114.234.46.95
 114.234.56.109
 114.234.57.214
 114.234.58.44
@@ -4787,6 +4792,7 @@
 115.49.36.24
 115.49.36.79
 115.49.37.122
+115.49.37.132
 115.49.37.175
 115.49.37.179
 115.49.37.198
@@ -5568,6 +5574,7 @@
 115.59.22.220
 115.59.24.169
 115.59.24.190
+115.59.24.255
 115.59.24.85
 115.59.25.169
 115.59.252.66
@@ -7269,6 +7276,7 @@
 118.37.214.103
 118.37.64.100
 118.37.91.137
+118.38.242.167
 118.39.123.115
 118.39.142.34
 118.40.183.176
@@ -8812,6 +8820,7 @@
 123.11.63.72
 123.11.64.31
 123.11.65.225
+123.11.7.1
 123.11.7.109
 123.11.7.153
 123.11.7.167
@@ -8867,6 +8876,7 @@
 123.11.77.209
 123.11.77.33
 123.11.78.153
+123.11.78.157
 123.11.78.22
 123.11.78.244
 123.11.78.49
@@ -8972,6 +8982,7 @@
 123.12.221.54
 123.12.221.62
 123.12.222.177
+123.12.222.242
 123.12.223.39
 123.12.223.97
 123.12.224.105
@@ -9224,6 +9235,7 @@
 123.4.133.125
 123.4.135.233
 123.4.143.229
+123.4.156.19
 123.4.158.122
 123.4.161.210
 123.4.168.136
@@ -9310,6 +9322,7 @@
 123.4.53.91
 123.4.54.13
 123.4.54.168
+123.4.54.173
 123.4.54.219
 123.4.54.99
 123.4.55.108
@@ -10319,6 +10332,7 @@
 125.47.60.138
 125.47.80.107
 125.47.80.15
+125.47.80.74
 125.47.81.222
 125.47.81.46
 125.47.82.14
@@ -11700,6 +11714,7 @@
 144.202.69.45
 144.202.8.114
 144.217.0.194
+144.217.117.146
 144.217.12.66
 144.217.131.227
 144.217.149.61
@@ -11859,6 +11874,7 @@
 149.56.228.32
 149.56.228.38
 149.56.26.173
+149.56.84.15
 149.7.219.71
 149.91.88.55
 14ca1s5asc45.com
@@ -12774,6 +12790,7 @@
 161.35.19.19
 161.35.24.242
 161.35.3.55
+161.35.45.242
 161.35.5.116
 161.35.5.47
 161.35.52.130
@@ -14825,6 +14842,7 @@
 172.36.6.48
 172.36.6.75
 172.36.6.89
+172.36.6.93
 172.36.60.0
 172.36.60.121
 172.36.60.124
@@ -15143,6 +15161,7 @@
 172.39.45.124
 172.39.45.189
 172.39.45.210
+172.39.45.241
 172.39.45.72
 172.39.46.10
 172.39.46.171
@@ -15459,6 +15478,7 @@
 172.39.92.239
 172.39.92.246
 172.39.92.248
+172.39.93.127
 172.39.93.170
 172.39.93.171
 172.39.93.198
@@ -15495,11 +15515,13 @@
 172.45.25.197
 172.45.25.91
 172.45.26.71
+172.45.29.119
 172.45.29.84
 172.45.35.240
 172.45.53.11
 172.45.58.142
 172.45.59.143
+172.45.8.99
 172.45.9.41
 172.81.132.143
 172.81.132.168
@@ -15815,6 +15837,7 @@
 175.193.168.95
 175.195.204.24
 175.198.41.108
+175.199.142.182
 175.199.72.77
 175.200.153.48
 175.200.159.110
@@ -15842,6 +15865,7 @@
 175.212.31.241
 175.212.52.103
 175.212.52.9
+175.212.95.112
 175.213.134.89
 175.214.139.27
 175.214.73.132
@@ -16938,6 +16962,7 @@
 178.62.247.209
 178.62.249.114
 178.62.25.70
+178.62.250.195
 178.62.250.233
 178.62.251.149
 178.62.252.20
@@ -17344,6 +17369,7 @@
 180.116.21.143
 180.116.21.191
 180.116.21.251
+180.116.210.174
 180.116.210.227
 180.116.22.191
 180.116.22.207
@@ -17872,6 +17898,7 @@
 182.113.196.96
 182.113.197.150
 182.113.197.91
+182.113.199.176
 182.113.199.199
 182.113.199.95
 182.113.200.190
@@ -19481,6 +19508,7 @@
 183.151.72.98
 183.151.74.27
 183.151.82.99
+183.151.83.28
 183.151.84.140
 183.151.84.65
 183.151.85.121
@@ -20422,6 +20450,7 @@
 185.244.39.10
 185.244.39.107
 185.244.39.108
+185.244.39.112
 185.244.39.123
 185.244.39.19
 185.244.39.198
@@ -20713,6 +20742,7 @@
 186.78.121.11
 186.88.96.234
 186.90.133.98
+186.93.107.30
 1860poga.co.za
 18655.aqq.ru
 18656c64.ngrok.io
@@ -20753,6 +20783,7 @@
 187.102.61.174
 187.102.61.252
 187.107.132.33
+187.107.191.197
 187.108.17.187
 187.109.113.136
 187.109.113.94
@@ -21954,6 +21985,7 @@
 193.112.160.173
 193.124.188.118
 193.142.146.179
+193.142.146.30
 193.148.68.74
 193.148.69.21
 193.148.69.33
@@ -22457,6 +22489,7 @@
 198.211.117.226
 198.211.118.231
 198.211.96.59
+198.211.98.37
 198.211.99.52
 198.23.130.69
 198.23.146.212
@@ -22704,6 +22737,7 @@
 199.83.206.207
 199.83.206.219
 199.83.206.22
+199.83.206.243
 199.83.206.36
 199.83.206.38
 199.83.206.39
@@ -23087,6 +23121,7 @@
 201.1.188.47
 201.1.68.113
 201.102.202.28
+201.103.20.67
 201.103.67.26
 201.103.89.230
 201.110.4.205
@@ -23803,6 +23838,7 @@
 208.113.130.13
 208.113.130.87
 208.113.133.130
+208.113.133.35
 208.115.113.32
 208.163.58.18
 208.167.239.134
@@ -24207,6 +24243,7 @@
 212.150.65.64
 212.154.23.29
 212.154.5.152
+212.154.51.216
 212.154.81.247
 212.156.209.78
 212.156.212.198
@@ -25217,6 +25254,7 @@
 219.68.242.33
 219.68.245.63
 219.68.251.32
+219.70.238.66
 219.70.63.196
 219.73.13.152
 219.77.113.124
@@ -26528,6 +26566,7 @@
 222.81.191.223
 222.81.213.238
 222.81.213.61
+222.81.223.165
 222.81.223.38
 222.81.28.127
 222.81.28.77
@@ -26780,6 +26819,7 @@
 223.199.248.20
 223.221.194.139
 223.221.194.246
+223.221.97.158
 223.233.100.210
 223.241.10.236
 223.241.11.37
@@ -27272,6 +27312,7 @@
 27.41.175.101
 27.41.175.117
 27.41.175.86
+27.41.176.93
 27.41.177.86
 27.41.178.151
 27.41.178.227
@@ -27419,6 +27460,7 @@
 2ndpub.com
 2ndscreensociety.com
 2nell.com
+2no.co
 2pjcza.db.files.1drv.com
 2q1wea3rdsf.000webhostapp.com
 2q3w.com
@@ -28878,6 +28920,7 @@
 37.49.226.204
 37.49.226.209
 37.49.226.21
+37.49.226.230
 37.49.226.43
 37.49.226.5
 37.49.226.8
@@ -29008,6 +29051,7 @@
 3cfilati.it
 3cxtraining.com
 3d-designcenter.com
+3d-universal.com
 3d.co.th
 3d.tdselectronics.com
 3dcentral.hu
@@ -29862,6 +29906,7 @@
 42.230.25.115
 42.230.25.243
 42.230.25.251
+42.230.250.178
 42.230.251.164
 42.230.251.252
 42.230.252.116
@@ -31132,6 +31177,8 @@
 45.15.253.88
 45.153.184.67
 45.153.240.115
+45.154.1.122
+45.154.1.58
 45.156.180.112
 45.156.195.205
 45.161.253.198
@@ -32711,6 +32758,7 @@
 49.70.126.141
 49.70.126.241
 49.70.126.95
+49.70.127.10
 49.70.127.31
 49.70.13.224
 49.70.131.189
@@ -32851,6 +32899,7 @@
 49.81.237.217
 49.81.238.22
 49.81.238.53
+49.81.238.9
 49.81.238.95
 49.81.239.16
 49.81.242.239
@@ -32925,6 +32974,7 @@
 49.82.251.81
 49.82.252.10
 49.82.252.230
+49.82.252.4
 49.82.252.63
 49.82.254.166
 49.82.254.221
@@ -33564,6 +33614,7 @@
 5.95.226.79
 5.95.59.66
 5.fjwt1.crsky.com
+5.top4top.io
 5.u0148466.z8.ru
 5.unplugrevolution.com
 50.115.165.107
@@ -34108,6 +34159,7 @@
 58.243.125.227
 58.243.126.111
 58.243.126.134
+58.243.126.93
 58.243.127.150
 58.243.127.176
 58.243.127.18
@@ -34128,6 +34180,7 @@
 58.243.20.194
 58.243.20.197
 58.243.20.57
+58.243.20.78
 58.243.20.96
 58.243.22.150
 58.243.23.200
@@ -35445,6 +35498,7 @@
 61.241.170.143
 61.241.170.145
 61.241.170.151
+61.241.170.153
 61.241.170.184
 61.241.170.194
 61.241.170.35
@@ -35712,6 +35766,7 @@
 61.75.36.37
 61.75.73.190
 61.76.178.170
+61.77.146.65
 61.78.72.221
 61.79.165.71
 61.81.183.116
@@ -35808,6 +35863,7 @@
 62.219.127.170
 62.219.129.229
 62.219.131.205
+62.219.227.20
 62.231.70.33
 62.232.203.90
 62.234.102.53
@@ -35846,6 +35902,7 @@
 63.224.132.223
 63.245.122.93
 63.250.42.171
+63.250.42.34
 63.34.12.228
 63.78.214.55
 6306481-0.alojamiento-web.es
@@ -36685,6 +36742,7 @@
 74.222.1.38
 74.222.14.61
 74.222.14.94
+74.66.217.253
 74.75.165.81
 74.90.172.182
 74.91.112.97
@@ -37756,6 +37814,7 @@
 82.81.2.50
 82.81.207.162
 82.81.214.74
+82.81.215.149
 82.81.230.112
 82.81.232.68
 82.81.25.188
@@ -37846,6 +37905,7 @@
 84.22.38.175
 84.221.143.108
 84.224.213.50
+84.228.102.152
 84.228.95.204
 84.232.231.209
 84.232.53.179
@@ -39626,7 +39686,6 @@ aapdasia.com
 aapi.co.in
 aapic.emarathon.or.kr
 aapkitayari.com
-aaplindia.com
 aapnewslive.com
 aapnnihotel.in
 aapr.org.au
@@ -40042,7 +40101,6 @@ acetraining24.com
 acewatch.vn
 acewm.org
 aceyz.com
-acfacilities.co.uk
 acffiorentina.ru
 acg-capital.com
 acg.com.my
@@ -40463,6 +40521,7 @@ adrite.com
 adroitlyadvertising.com
 adrolling.co.uk
 ads.actmol.by
+ads.hanggiadinh.com
 ads.kalabisim.com
 adsapomg.space
 adsdeedee.com
@@ -40714,7 +40773,6 @@ africaanalytics.tristargl.com
 africabluewebs.co.ke
 africabootcampacademy.influencetec.net
 africahousingawards.com
-africainnovates.org
 africamarket.shop
 africamissions.ca
 african-trips.com
@@ -41117,6 +41175,7 @@ aigavicenza.it
 aigforms.myap.co.za
 aiglemovies.com
 aihealth.vn
+aiiaiafrzrueuedur.ru
 aiineh.com
 aiit.ahbys.com
 aijdjy.com
@@ -41185,6 +41244,7 @@ airgc.in
 airinovasi-indonesia.com
 airisu-syumikonparty.com
 airlife.bget.ru
+airliness.info
 airlinkcpl.net
 airmaildata.com
 airmanship.nl
@@ -41473,6 +41533,7 @@ alandenz.dk
 alanhkatz.on-rev.com
 alankeef-co.tk
 alankippax.info
+alannonce.fr
 alanvarin2.hopto.org
 alanvarin3.ddns.net
 alanyacilingirbilal.com
@@ -42460,7 +42521,6 @@ americanhaircuts.com
 americanhomecenter.com
 americanmicrosoftclouddepartment.duckdns.org
 americanpatriotlife.com
-americanrange.com
 americanreliefhub.com
 americanstaffordshireterrier.it
 americanxdrive.gq
@@ -43716,6 +43776,7 @@ archst.it
 arcid.org
 arcnyc.com
 arcoarquitetura.arq.br
+arcoelectric-idaho.com
 arcoelectrico.cl
 arcoiris.org.pt
 arconarchitects.com
@@ -43837,6 +43898,7 @@ ariba.develop.kdm1.ru
 aridostlari.com
 arie-industrie.com
 arielaspa.com
+arielcarter.com
 arielluxhair.com
 arieloutdoors.com
 arieloutdoors.in
@@ -43854,7 +43916,6 @@ arihantchemcorp.com
 arija.lt
 ariko.vn
 arimmo.ch
-arimonza.it
 arina.jsin.ru
 arinidentalcare.com
 arinlays.com
@@ -44204,6 +44265,7 @@ artworkshopsinternational.com
 artydesign.co
 artzkaypharmacy.com.au
 artzvuk.by
+arufels.com
 aruljothi.xyz
 arundel.net
 arvd.begrip.sk
@@ -44308,7 +44370,6 @@ aseloud.com
 aseman-co.com
 asemancard.com
 asemanehco.ir
-aseprom.com
 asepspa.cl
 aserraderoelaleman.com.ar
 asertiva.cl
@@ -44381,6 +44442,7 @@ asia-star.info
 asia-taxsolutions.com
 asiaherbalpharmacy.com
 asiains.com.ph
+asialinklogistics.com
 asiamedia.tw
 asiana.cf
 asianacrylates.com
@@ -44411,6 +44473,7 @@ asifapparels.com
 asiffidatanoli.com
 asight.com.au
 asiltorna.com
+asiluxury.com
 asinaptali.com
 asined.es
 asinfotech.net
@@ -44601,7 +44664,6 @@ astroblu.win
 astrocricketpredictions.com
 astrodeepakdubey.in
 astrodolly.com
-astrojyoti.com
 astrolabioeditorial.com
 astroland.space
 astrologerpanchmukhijyotish.com
@@ -44844,7 +44906,6 @@ atskiysatana.ml
 atskiysatana.tk
 atso.kz
 atso.pt
-att-0748.fileshare-storage.com
 att-hellolab.com
 att1.bigmir.net
 atta2tata.monster
@@ -45276,6 +45337,7 @@ aviharmony.com.au
 avila-ventures.com
 avilacare.com
 avinash1.free.fr
+avioaircurtain.com
 avion-x.com
 avioncargoets.com
 aviontravelgroup.com
@@ -45710,6 +45772,7 @@ babystep.biz
 babysteps.ge
 babyvogel.nl
 babzon.club
+bac.edu.my
 bacamanect.com
 baccaosutritue.vn
 baceldeniz.com
@@ -45776,6 +45839,7 @@ badintentionsprod.com
 badisse.com
 badkamer-sanitair.nl
 badmildiou.com
+badzena.com
 baerbl-volz.de
 baeren-schlatt.ch
 baermedia.ch
@@ -45825,7 +45889,6 @@ bahisreklami.com
 bahku.ru
 bahl.com.au
 bahlcom.au
-bahoma.com
 bahomacom
 bahrain-escorts.com
 bahrainbordir.com
@@ -46558,7 +46621,6 @@ beachcondolife.tk
 beachview.co.za
 beachvillas.gr
 beachwoodproperty.com.au
-beaconacademy.net
 beaconhousediscovery.com
 beaconr.rungta.ac.in
 beactivedigital.com
@@ -47267,7 +47329,6 @@ beysel.com
 beytepefoodcenter.com
 beytriali.com
 bezambici.com
-bezier.com
 bezlive.com
 bezoekbosnie.nl
 bezoporu.wtie.tu.koszalin.pl
@@ -48468,7 +48529,6 @@ bloodybits.com
 bloombrainz.com
 bloomcommunityproject.org
 bloomestatelitigation.ca
-bloomfire.com
 bloomflores.com
 bloomhomes.in
 bloomingbridal.com.au
@@ -48796,7 +48856,6 @@ bonaccount.com
 bonakma.com
 bonallegro.5v.pl
 bonattiholding.com
-bonavigator.pl
 bond.com.vn
 bondagetrip.com
 bondbengals.info
@@ -49308,7 +49367,6 @@ bridgesearch.com
 bridgeventuresllc.com
 briefmarkenpower.de
 brifing.info
-brightachieversltd.com
 brightasia.com.sg
 brightbat.com
 brightbook.ir
@@ -49999,7 +50057,6 @@ bytosti.cz
 byttd.com.cn
 byukattie.top
 byvejen.dk
-byworks.com
 byxaru.com
 byxxyz.com
 byz2.com
@@ -50567,7 +50624,6 @@ carbtecgh.com
 carc-astrology.in
 carcorxox.com
 carcounsel.com
-cardbankph.com
 cardboardspaceshiptoys.com
 cardea-immobilien.de
 cardealersforbadcredit.net
@@ -51096,6 +51152,7 @@ cc14927-wordpress.tw1.ru
 cc78.bg
 cc8848.xyz
 cc9.ne.jp
+ccamatil1-my.sharepoint.com
 ccandcbrand.com
 ccash.xyz
 ccat.biz
@@ -51193,6 +51250,8 @@ cdn.siv.cc
 cdn.slty.de
 cdn.timebuyer.org
 cdn.top4top.net
+cdn.truelife.vn
+cdn.xiaoduoai.com
 cdn.zecast.com
 cdn4.css361.com
 cdn5.rvshare.com
@@ -51337,7 +51396,6 @@ center-house.ru
 center-miami.com
 center.1team.pro
 center1.co.il
-center4cby.com
 centerfortheyouth.org
 centerline.co.kr
 centernadegda.ru
@@ -51691,6 +51749,7 @@ charity.vexacom.com
 charitycandy.co.uk
 charitylov.com
 charityshofner.com
+charlemagne.fr
 charlesbaker.co.uk
 charlescuthbertson.com
 charlesmessa.info
@@ -52117,6 +52176,7 @@ christinalenway.com
 christinelebeck.com
 christinmunsch.com
 christmasatredeemer.org
+christoforoskotentos.com
 christolandcompany.com
 christolar.cz
 christom.com.au
@@ -52540,6 +52600,7 @@ clcindy.com
 cld-net.com
 cld.persiangig.com
 cld.pt
+cle.ae
 clean.crypt24.in
 clean.olexandry.ru
 clean.vanzherke.ru
@@ -52600,14 +52661,12 @@ cleverflame.com
 cleverlearncebu.com
 cleverspain.com
 clgafareaitu.com
-clgsecurities.com
 clhairdesign.com
 clhgoody.xyz
 clic-douaisis.fr
 click-up.co.il
 click.danielshomecenter.com
 click.expertsmeetings.org
-click.senate.go.th
 click4amassage.com
 click4ship.com
 clickara.com
@@ -52662,7 +52721,6 @@ clinicacasuo.com.br
 clinicacirurgiaplasticasp.com.br
 clinicacorporea.com
 clinicacorpusmacae.com.br
-clinicacrecer.com
 clinicadavid.mx
 clinicadeldolorgt.com
 clinicadentalimagen.pe
@@ -52737,7 +52795,6 @@ cloud.chachobills.com
 cloud.diminishedvaluecalifornia.com
 cloud.hollweck.it
 cloud.kryptonia.fr
-cloud.patrika.com
 cloud.s2lol.com
 cloud.wmsinfo.com.br
 cloud.xenoris.fr
@@ -52746,6 +52803,7 @@ cloudatlas.io
 cloudbox-online.net
 cloudbytegames.com
 cloudcapgames.com
+cloudcast.best
 cloudcottage.cloud
 cloudessy.com
 cloudfilesharingdomainurllinksys.duckdns.org
@@ -52835,6 +52893,7 @@ cmdaitexpo.com
 cmdez.ir
 cmdou.com
 cmeaststar.de
+cmg.asia
 cmgroup.com.ua
 cmhighschool.edu.bd
 cmhmfgoutbound.protection.sketchwefair-watduoliprudential.com.watchdogdns.duckdns.org
@@ -53068,7 +53127,6 @@ coffeeking.in
 coffeeorcanoeing.com
 cofqz.com
 cofrex-eg.com
-cofusa.com
 cogeainternational.com
 coges-tn.com
 coghlanhealthcare.ie
@@ -53873,7 +53931,6 @@ corkmademore.com
 corkspeechtherapy.ie
 corm-informatique.fr
 cormetal.eu
-cornejotex.com
 cornelbusiness.co.uk
 cornelia-ernst.de
 cornellekacy.net
@@ -54577,7 +54634,6 @@ csp-tfpm.com
 csplumbingservices.co.uk
 cspn-omsk.ru
 csprequiao.pt
-csq.es
 csrcampaign.com
 csrkanjiza.rs
 csrngo.in
@@ -55418,7 +55474,6 @@ dashfiles.tk
 dashkevichseo.ru
 dashonweb.com
 dashvaanjil.mn
-dasjoe.de
 daskruelhaus.com
 dasleds.com
 dastep.com
@@ -55465,7 +55520,6 @@ datascienceexcellence.net
 datascienceexcellence.org
 dataseru.com
 dataserver.c0.pl
-datasheep.co.uk
 datasoft-sa.com
 datatalentadvisors.com
 datatechis.com
@@ -55505,6 +55559,7 @@ datswingt.nl
 datthocuphuquoc.xyz
 dattiec.net
 dattopantthengadi.in
+datudeli.com
 datumu.ga
 datumu.ml
 datvangthainguyen.com
@@ -55662,6 +55717,7 @@ dbcomestic.com
 dbecome.top
 dbfuppsala.se
 dbinario.com
+dbo.ca.gov
 dboyusa.online
 dbravo.pro
 dbs-ebank.com
@@ -55722,7 +55778,6 @@ dd.loop.coop
 dd.smaxdn.com
 dda.co.ir
 ddaynew.5demo.xyz
-ddbuilding.com
 ddccs.net
 ddd2.pc6.com
 dddos.persiangig.com
@@ -55869,6 +55924,7 @@ deconmit.com
 decons.ai
 decons.vn
 decoplast-edp.ro
+decoprojectme.com
 decoracaodeparedes.com.br
 decoratingideas.bozkurtfurkan.com
 decoration-marine.net
@@ -57214,7 +57270,6 @@ digigm.ir
 digihashtag.com
 digiiital.co.uk
 digikow.000webhostapp.com
-digilander.libero.it
 digileads.ae
 digilib.dianhusada.ac.id
 digim.asia
@@ -57240,6 +57295,7 @@ digital.eudoratrading.com
 digital.gemacipta.asia
 digital.syd.fr
 digital2home.ecobz.xyz
+digital7.com
 digitalankur.com
 digitalbrit.com
 digitalbugs.co.in
@@ -57673,7 +57729,6 @@ djyokoo.com
 djz313iks60bk4.com
 djzmo.com
 dk-elbrus.ru
-dk-rc.com
 dk.sa
 dk5gckyelnxjl.cloudfront.net
 dkadvisry.com
@@ -57737,6 +57792,7 @@ dl2.onedrive-eu.com
 dl2.onedrive-us-en.com
 dl2.soft-lenta.ru
 dl2.storeandshare.singtel.com
+dl4.joxi.net
 dl63964725.dyn-downloads.com
 dlainzyniera.pl
 dlawgist.com
@@ -58184,6 +58240,7 @@ donnebella.com
 donnerreuschel.com
 donphenom.al
 donpomodoro.com.co
+donsinout.info
 donsly.usa.cc
 donsworld.org
 dontlitigate.com
@@ -58192,7 +58249,6 @@ donusumhirdavatmetal.com
 donvosphotography.com
 donwonda.org
 dooball.biz
-doobegroup.com
 dooch.vn
 doodlebug.club
 doodleninja.in
@@ -58593,7 +58649,6 @@ drdelaluz.com
 drdki.com
 drdoorbin.com
 dream-energy.ru
-dream-food.com
 dream-girls.club
 dream-girls.online
 dream-girls.xyz
@@ -58634,6 +58689,7 @@ dreamswork.tk
 dreamtownpsl.co.ke
 dreamtravel.site
 dreamtravelonthego.com
+dreamtrips.cheap
 dreamtrips.icu
 dreamvision.bg
 dreamwolf.tv
@@ -59618,6 +59674,7 @@ ecity.network
 ecitytanduclongan.com
 eckdor.de
 ecker.aidnet.at
+ecklund.no
 eclairesuits.com
 eclatpro.com
 eclecticelectronics.net
@@ -59786,7 +59843,6 @@ edgingprofile.com
 edhec.business-angels.info
 edialplast.ru
 edicolanazionale.it
-edicustoms.com.au
 ediet.ir
 edificaiconstrucoes.com
 edifice-guyane.fr
@@ -60167,7 +60223,6 @@ elc.daffodilvarsity.edu.bd
 elcampestre.cl
 elcaneloautopartes.com.mx
 elcapitanno.com
-elcarmelohotelhacienda.com
 elcarrocafeny.com
 elchurrascorestaurante.com
 elclasicocml.com
@@ -60218,7 +60273,6 @@ electriquestew.com
 electro-bike.club
 electroautomat.com
 electrocad.in
-electroenchufe.com
 electrofluxequipmentspvtltd.com
 electrofyhub.com
 electrogc.com.ar
@@ -60804,7 +60858,6 @@ enekashoush.com
 enemobodoukpaka.com
 enequipo.es
 enercol.cl
-energicaweb.com
 energie-service.fr
 energie-strom.net
 energiemag.fr
@@ -61486,7 +61539,6 @@ estomedic.com
 estore.qurvex.com
 estrategias-corporativas.com
 estrategiasdeaprovacao.com.br
-estreamnetworks.net
 estrindesign.com
 estrom.es
 estrutura.eng.br
@@ -62564,6 +62616,7 @@ fashionandme.ru
 fashionattitude.de
 fashionbettysam.com
 fashionblogandpromo.club
+fashiondenver.com
 fashionfootprint.leseditextiles.co.za
 fashionfootprint.nmco.co.za
 fashiongul.com
@@ -62806,6 +62859,7 @@ febsmarketingnetwork.com
 febsms.com
 fechos.org.br
 fecoonde.org
+fectrucks.com
 fed58f43246844b18d00fb0177352546.download
 fedbroker.ru
 fedeminersdigital.com
@@ -63668,6 +63722,7 @@ floradna.com
 floradosventos.com.br
 floralcompany.jp
 floramatic.com
+florandina.com
 florandum.com
 florean.be
 florenceloewy.com
@@ -64094,7 +64149,6 @@ fotogar.com
 fotograafie.nl
 fotografiarnia.pl
 fotoground.com
-fotojurczak.pl
 fotolegko.ru
 fotomb.com
 fotoms.pl
@@ -64652,7 +64706,6 @@ fundacao-algarvia.pt
 fundacionafanic.com
 fundacioncaminosdepazporcolombiacali.org
 fundacioncreatalento.org
-fundacionesperanza.org.es
 fundacionmontehoreb.org.ve
 fundacionpacma.com
 fundacionravera.com
@@ -64800,7 +64853,6 @@ fuzoneeducations.com
 fuzzyconcepts.com
 fuzzylogic.in
 fuzzymiles.com
-fv1-2.failiem.lv
 fv13.failiem.lv
 fv15.failiem.lv
 fv2-1.failiem.lv
@@ -65500,7 +65552,6 @@ genedelibero.com
 genelmusavirlik.com.tr
 geneomm.com
 generactz.com
-general.it
 generalbikes.com
 generalgauffin.se
 generalhomemedicalsupply.com
@@ -65591,7 +65642,6 @@ geolegno.eu
 geolinvestproekt.ru
 geolocstar.com
 geologia.geoss.pt
-geologimarche.it
 geolysis.org
 geometrai.com
 geometrirc.com
@@ -65955,7 +66005,6 @@ gilbertceramic.fr
 gilbertohair.com
 gildlearning.org
 gilgaluganda.org
-gilhb.com
 gilio.com.mx
 gill-holiday-2013.gillfoundation.org
 gill-holiday-2014.gillfoundation.org
@@ -66117,6 +66166,7 @@ glid.jp
 gligoricekofood.com
 glik.acemlnc.com
 glimpse.com.cn
+glip-vault-1.s3-accelerate.amazonaws.com
 glissandobigband.com
 glitchexotika.com
 glitzygal.net
@@ -66648,7 +66698,6 @@ gordyssensors.com
 gorenotoservisi.net
 goretimmo.lu
 gorgan-clinic.ir
-gorglione.com
 gorguluyapi.com
 gorgunmakina.com
 gorillaconcretecoatings.com
@@ -66716,6 +66765,7 @@ goudu.club
 gourmandd.com
 gourmetlab.pe
 gourmetreats.in
+gov.kr
 gov.rsmart-testsolutions.watchdogdns.duckdns.org
 govche.in
 goveboatclub.com.au
@@ -67239,7 +67289,6 @@ grupogeacr.com
 grupoglobaliza.com
 grupohasar.com
 grupoiesp.tk
-grupoinalen.com
 grupoinfonet.com
 grupojg.com.br
 grupolaplace.com.br
@@ -67456,6 +67505,7 @@ gulluconsulants.com
 gullukomurelektronik.com
 gulseda.site
 gulungdinamo.com
+gulzarhomestay.com
 gumiviet.com
 gumuscorap.com
 gumustelkari.com
@@ -67603,6 +67653,7 @@ h-surgeon.info
 h-w-c.net
 h.eurotrading.com.pl
 h.j990981.ru
+h.top4top.io
 h.valerana44.ru
 h1.iwakalong.ru
 h112321.s08.test-hf.su
@@ -68187,6 +68238,7 @@ hayahost.com
 hayalbu.com
 hayashitoysmart.com
 hayatevesigar-10gbnetkazan.com
+hayatevesigar-20gb.com
 hayatihusada.com
 hayatiskele.com
 hayatlokma.com
@@ -68443,8 +68495,10 @@ hedisetro.5gbfree.com
 hediy20gb-internet-online.net
 hediye-internet-saglik.org
 hediye-internet.site
+hediye20gb.online
 hediyegapsinternet.com
 hediyeinternetpaketim.com
+hediyeler10gb-ramazan.net
 hediyem20gb-internet.org
 hediyenkolay.com
 hedrasl.com
@@ -69020,6 +69074,7 @@ hjsanders.nl
 hjylw66.com
 hk.darwd.com
 hk.insure
+hk.npu.gov.ua
 hk026.com
 hk3.my
 hk3fitness.com
@@ -69245,6 +69300,7 @@ home-racing.com
 home-spy-shop.com
 home.99eurowebsite.ie
 home.barley-plus.com
+home.earthlink.net
 home.evrstudio.com
 home.healthiestu.com
 home.isdes.com
@@ -69715,7 +69771,6 @@ houzess.com
 how-to-nampa.com
 how-to-tech.com
 how.ph
-howalshafikings.com
 howardbenz.com
 howardbragman.com
 howardgfranklin.com
@@ -71737,6 +71792,7 @@ integraciontotal.com.mx
 integracooperativa.com
 integrafika.co.uk
 integraga.com
+integralc.com
 integralcs.com.br
 integralestates.in
 integralmakeup.com
@@ -71773,6 +71829,7 @@ interaktifhaberler.net
 interativus.com.br
 interbanx.co.id
 interbizservices.eu
+interbus.cz
 interciencia.es
 intercitiesfiji.com
 intercity-tlt.ru
@@ -71833,7 +71890,6 @@ internationalmscareerseminar.com
 internaut.in
 internetcasinoweblog.com
 internetjogasz.hu
-internetlink.com.mx
 internetmarketing4pros.com
 internetofsmell.com
 internetordbogen.dk
@@ -71938,6 +71994,7 @@ invernessdesignbuild.ca
 inversionesdambrosio.com
 inversioneslopezminaya.com
 invertilo.com
+invest-logistic.net
 invest.hawzentr.com
 investasiafoundation.com
 investaweb.com
@@ -72485,7 +72542,6 @@ itaalabama.org
 itafoam.com
 itai-ziv.com
 italamp.tk
-italia-ricci.com
 italianfishrestaurantgh.com
 italianindoart.com
 italiansupercars.net
@@ -73074,7 +73130,6 @@ jayambewallpapers.com
 jayb.xyz
 jayc-productions.com
 jaychallenge.com
-jaycochemicals.com
 jaydeemory.com
 jaydipchowdharyblog.com
 jayemservicesdev2.site
@@ -73413,6 +73468,7 @@ jimbarrell.com
 jimbira-sakho.net
 jimbowe.com
 jimenezdesigngroup.com
+jimlaneevangelist.com
 jimlowry.com
 jimmibroadband.in
 jimmit.xyz
@@ -74380,6 +74436,7 @@ k.5qa.so
 k.adr.com.ua
 k.iepedacitodecielo.edu.co
 k.ludong.tv
+k.top4top.io
 k110.ir
 k12818.com
 k1ristri.ru
@@ -76909,7 +76966,6 @@ lalogarcia.es
 lalolink.com
 lalunafashion.eu
 lalunenoire.net
-lam.cz
 lamacosmetics.com
 lamaggiora.it
 lamaisongourmande.live
@@ -76996,6 +77052,7 @@ landrovermarketplace.com
 landroveroflouisville.com
 landscapeton.com
 landscapingstoneandmulchwi.com
+landschaftsservice-seibold.de
 landskronaloppis.se
 landskronamatguide.se
 landskronaportalen.se
@@ -78087,6 +78144,7 @@ lightswitchmarketing.biz
 lightvalleyprune.com
 lightwerq.com
 lightyard.com
+lignar.com
 lignarium.se
 lignumpolska.com
 liguebretagnebillard.fr
@@ -78245,6 +78303,7 @@ linkglobalwebsiteaddress.duckdns.org
 linkhome.ga
 linki.pro
 linkingphase.com
+linkmaxbd.com
 linkomember.info
 linkovani.cz
 linkplay.duckdns.org
@@ -78443,7 +78502,6 @@ livetechsupport.ca
 livetesting.xyz
 livetotry.com
 livetours.cl
-livetrack.in
 livetvsports.ml
 liveu.lk
 liviavicentini.com
@@ -81465,7 +81523,6 @@ mbsinfosolution.com
 mbslmail.mbslbank.com
 mbsolutionssrl.it
 mbsou37.ru
-mbtechnosolutions.com
 mbupress.umbjm.ac.id
 mbve.org
 mbvvs.dk
@@ -84212,6 +84269,7 @@ multifin.com.au
 multihouse.fmcode.pl
 multila.com
 multilingualconnections.com
+multilinkspk.com
 multimedia.biscast.edu.ph
 multimix.hu
 multimovebd.com
@@ -85304,6 +85362,7 @@ ncledu.org
 ncmt2w.bn.files.1drv.com
 ncoimbra.pt
 ncp.su
+ncpcgov.com
 ncpll1392.ir
 ncronline.in
 ncsquared.com
@@ -85458,7 +85517,6 @@ neproperty.in
 neptanckellek.hu
 neracompany.sk
 nerasro.sk
-nerdassasins.com
 nerdsalley.com
 nerdtshirtsuk.com
 neremarketing.com
@@ -85527,7 +85585,6 @@ netin.vn
 netizennepal.com
 netkafem.org
 netking.duckdns.org
-netlink.com
 netm.club
 netmaffia.net
 netmansoft.com
@@ -86482,6 +86539,7 @@ nonglek.net
 nongnghiepgiaphat.com
 nongsan24h.com
 nongsananhnguyen.com
+nongsandungha.com
 nonlocality.com
 nonnemacher.com.br
 nonnewspaper.com
@@ -86639,6 +86697,7 @@ notix-test.ru
 notiz.dk
 notlang.org
 notlrealty.com
+notomonopoly.com
 notonfirstdate.net
 notredamedesmines.fr
 notriicka.ir
@@ -86986,6 +87045,7 @@ nygard.no
 nygren.nu
 nygryn.net
 nygts.com
+nyifdmacyzechariah.top
 nyky.ir
 nylag.org
 nylandscaping.com
@@ -87356,7 +87416,6 @@ ohscrane.com
 ohters.de
 ohyellow.nl
 oi65.tinypic.com
-oi68.tinypic.com
 oiainbtaea38.silverabout.ml
 oiasdnqweqasd.com
 oiflddw.gq
@@ -87570,6 +87629,7 @@ omagroup.ru
 omaharefugees.com
 omaint.ml
 omalleyco-my.sharepoint.com
+omalll.com
 omanfleethtml.neomeric.us
 omarelbalshy.com
 omartinez.com
@@ -87788,6 +87848,7 @@ onlinedukkanim.net
 onlineeregistration.com
 onlineiascoaching.com
 onlineitshop.com
+onlinejohnline99.org
 onlinekushshop.com
 onlinelab.dk
 onlinelegalsoftware.com
@@ -88037,7 +88098,6 @@ orangeink-tattoo.de
 orangeltda.cl
 orangemediterranea.es
 orangeminingsupply.com.au
-orangeph.com
 orangereel.co.uk
 orangeslonik.com
 oransky.org
@@ -89001,7 +89061,6 @@ parsintelligent.com
 parsrad.ir
 parsroman.ir
 part-timebusiness.org
-partage-fichiers.com
 partage.nelmedia.ca
 partaususd.ru
 partgohar.com
@@ -90534,7 +90593,6 @@ pmiec.com
 pmil.org
 pminfocom.com
 pmionline.us
-pmjnews.com
 pmk-55.ru
 pmlsdbs.ac.in
 pmmc.ae
@@ -91836,7 +91894,6 @@ provio.nl
 provisa-centr.ru
 provisol.se
 provit.fr
-provo2.com
 provoke.bg
 provolt.ro
 provost.sterlingstrustbank.tk
@@ -91966,6 +92023,7 @@ psychprofiler.com
 psymonkee.com
 psynchro.org
 ptb.com.mx
+ptbsda.com
 ptci-md.org
 ptdtech.tk
 pte.vn
@@ -93292,6 +93350,7 @@ ramallah.atyafco.com
 ramashrayevents.com
 ramatfactory.com.sa
 ramayanawaterpark.cn
+ramazan20gbinternet.com
 ramazanda20.site
 ramazanda20gb.xyz
 rambu.ciamiskab.go.id
@@ -93670,6 +93729,7 @@ rebelmavenmastermind.com
 rebobine.com.br
 rebomcap.eu
 reboot-hack.ru
+reboot.pro
 reborn.arteviral.com
 reborn24.com
 reborntechnology.co.uk
@@ -93755,7 +93815,6 @@ redironmarketing.com
 redklee.com.ar
 redlinegt.com
 redlk.com
-redlogisticsmaroc.com
 redloop.io
 redmag.by
 redmediasigns.com
@@ -93775,6 +93834,7 @@ redsnowball.com
 redsseammgt.com
 redtek0.com
 redtv.top
+redvalidator.com
 redvelvetpatisserie.co.uk
 redwing.com.eg
 redwingdemo.dukaafrica.com
@@ -94741,6 +94801,7 @@ robpepper.co.uk
 robshop.lt
 robsitbon.net
 robustclarity.com
+robvanderwoude.com
 robwalls.com
 robwassotdint.ru
 robzandfitness.co.uk
@@ -94771,7 +94832,6 @@ rockmusiclives.com
 rocknebyvvs.se
 rocknrolletco.top
 rocknrolltrain.cn
-rockpointgroup.com
 rockradioni.co.uk
 rocksolidproducts.com
 rocksolidstickers.com
@@ -95760,6 +95820,7 @@ sageo2018.fr
 sagestls.com
 sageth.net
 sagiri.org
+saglikbakanligi-destek.org
 saglikbakanligi20gbinternet.com
 saglikbakanligindanhediye20gb.com
 saglikgoalapp.site
@@ -96520,7 +96581,6 @@ scandinavian-fashion.dk
 scandinavianman.designmybike.com
 scandryer.se
 scanelectric.ro
-scanliftmaskin.no
 scanlisten.sunless.network
 scannableid.com
 scanthembigbots.mikeysyach.xyz
@@ -97167,6 +97227,7 @@ sendsharkreview.com
 senehenryinc.ru
 senergysafrica.com
 seneta.cloud
+senevdekaldiyehediye.com
 senevdekaldiyehediyenet.com
 seniorbudgetsaver.com
 seniorenwoningbouwen.nl
@@ -97866,6 +97927,7 @@ sheddy.5gbfree.com
 shedevildaughterofthedaredevil.com
 shedy.5gbfree.com
 sheedle.live
+sheeni-egypt.com
 sheenlandia.com
 sheeriuruba.com
 shefdomi.com
@@ -98689,7 +98751,6 @@ sisubur.xyz
 sisustussuunnittelu.fi
 sisweb.info
 sitagroup.it
-sitcomsonline.com
 site-2.work
 site-4.work
 site-internet-belfort.fr
@@ -98716,7 +98777,6 @@ siteplaceholder.com
 siteradar.com
 sites.blueskydigital.com.au
 sites.btb.kg
-sites.ieee.org
 sites.linkysoft.com
 sites.webdefy.com
 sitesbrgiga.com.br
@@ -99204,7 +99264,6 @@ sme.elearning.au.edu
 smeare.com
 smed13.inducido.com
 smedegaarden.dk
-smedia.com.au
 smeets.ca
 smeetspost.nl
 smefood.com
@@ -99823,6 +99882,7 @@ sophiasuites-santorini.com
 sophiebarthelemy.fr
 sophieguaremas.com
 sophiethomasartist.com
+sophis.biz
 sophistproduction.com
 sophro-zara.com
 sophrologie-untempspourmoi.fr
@@ -100836,6 +100896,7 @@ statewidehomesavings.com
 statexadver3552mn12.club
 static-4matic.club
 static.21.101.69.159.clients.your-server.de
+static.3001.net
 static.43.47.69.159.clients.your-server.de
 static.76.102.69.159.clients.your-server.de
 static.caregivers.blueweb.md
@@ -102603,6 +102664,7 @@ takeiteasy.live
 takeitfromtheman.com
 takemetohimalayas.com
 takenpaybd.com
+takernvandrarhem.se
 takeshimiyamoto.com
 takeshykurosavabest.com
 takharandshankertour.com
@@ -102692,6 +102754,7 @@ tamoyun.web.tr
 tampacigarroller.com
 tamparoofing.com
 tampaseo.com
+tamsu.website
 tamsuamy.com
 tamsys.net
 tamta.gr
@@ -103595,6 +103658,7 @@ terramosa.com
 terranovaoutdoorliving.com
 terranowwa.org
 terraoferta.club
+terrapersonas.com
 terrasol.cl
 terratacuara.com
 terrats.biz
@@ -103948,7 +104012,6 @@ tftt.dairyaustralia.com.au
 tfu.ae
 tfulf.host
 tfullerton.com
-tfvn.com.vn
 tgbabcrfv.1apps.com
 tgbot.cf
 tgcool.gq
@@ -104349,6 +104412,7 @@ theinspiredblogger.com
 theinspireddrive.com
 theintelligencer.com.ng
 theinvestmentinvestigator.com
+theipgenerators.com
 theirishhouse.dk
 theiro.com
 theisel.de
@@ -106617,6 +106681,7 @@ tuvandauthau.net
 tuvandoanhnghiep.org
 tuvanduhocdaiviet.com.vn
 tuvanduhocduc.org
+tuvanduhocmap.com
 tuvangamenet.com
 tuvangioitinh.com
 tuvanluat.vn
@@ -106758,7 +106823,6 @@ u-uploads.com
 u.coka.la
 u.jimdo.com
 u.lewd.se
-u.teknik.io
 u0005132m0005jp.u023jp9938.info
 u0039435.cp.regruhosting.ru
 u0287442.isp.regruhosting.ru
@@ -107397,6 +107461,7 @@ up.oxvkeq.co
 up.qatarw.com
 up.vltk1ctc.com
 up2m.politanisamarinda.ac.id
+up4net.com
 up9.co.99.com
 upa1.hognoob.se
 upa2.hognoob.se
@@ -107608,7 +107673,6 @@ url.246546.com
 url.57569.fr.snd52.ch
 url.edu
 url.sg
-url2.mailanyone.net
 url3.mailanyone.net
 url5459.41southbar.com
 url9823.ville.labrecque.qc.ca
@@ -108820,6 +108884,7 @@ vip-rocket.net
 vip-watch.store
 vip.lijinxi.com
 vip.maohuagong.com
+vip.muabannhanh.com
 vip.recommendedtoyoo.com
 vip.zbfcxx.cn
 vip163.cf
@@ -109852,6 +109917,7 @@ web.gotham.com.au
 web.hfsistemas.com
 web.ismt.pt
 web.muasam360.com
+web.opendrive.com
 web.pa-cirebon.go.id
 web.plf.vn
 web.riderit.com
@@ -110574,7 +110640,6 @@ win.tue.nl
 win1more.com
 win32.x10host.com
 winactive.host
-winandgo-dz.com
 winapp24.pl
 winast.com
 winbacklostlove.com
@@ -110780,7 +110845,6 @@ wmdcustoms.com
 wmebbiz.co.za
 wmf.desevens.com.ng
 wmg128.com
-wmi.1217bye.host
 wmkatz.com
 wmo-raad.inov.me
 wmpatagonia.cl
@@ -110881,7 +110945,6 @@ woodmeister.nl
 woodmillcreek.com
 woodnbitz.com
 woodofkosta.com
-woodsiam.com
 woodstocktimbers.com
 woodstoneltd.com
 woodsytech.com
@@ -111378,6 +111441,7 @@ wz-architekten.de
 wz6.com.cn
 wzgysg.com
 wzjp.boyuberq.ru
+wzlegal.com
 wzry173.com
 wzrysp.com
 wzsfkq.dm.files.1drv.com
@@ -111554,6 +111618,7 @@ xinblasta.us
 xinchao.asia
 xindetrading.000webhostapp.com
 xing.monerov9.com
+xingyang-glove.com
 xingyiqinhang.com
 xinhkorea.com
 xinlou.info
@@ -113439,6 +113504,7 @@ zstar.top
 zsxzfgg.com
 zsz-spb.ru
 ztbearing68.com
+ztds.online
 ztds2.online
 zteandroid.com
 ztecom.cn
diff --git a/urlhaus-filter-hosts-online.txt b/urlhaus-filter-hosts-online.txt
index 35eadced..d353a814 100644
--- a/urlhaus-filter-hosts-online.txt
+++ b/urlhaus-filter-hosts-online.txt
@@ -1,5 +1,5 @@
 # Title: abuse.ch URLhaus Malicious Online Hosts Blocklist
-# Updated: Sat, 02 May 2020 00:09:31 UTC
+# Updated: Sat, 02 May 2020 12:09:27 UTC
 # Repo: https://gitlab.com/curben/urlhaus-filter
 # License: https://creativecommons.org/publicdomain/zero/1.0/
 # Source: https://urlhaus.abuse.ch/api/
@@ -24,6 +24,7 @@
 0.0.0.0 a-reality.co.uk
 0.0.0.0 a.xiazai163.com
 0.0.0.0 aaasolution.co.th
+0.0.0.0 accentlandscapes.com
 0.0.0.0 accessyouraudience.com
 0.0.0.0 acdesignhub.com
 0.0.0.0 acteon.com.ar
@@ -49,9 +50,7 @@
 0.0.0.0 alphaconsumer.net
 0.0.0.0 am-concepts.ca
 0.0.0.0 amd.alibuf.com
-0.0.0.0 amedeoscognamiglio.329263.com
 0.0.0.0 amemarine.co.th
-0.0.0.0 americanrange.com
 0.0.0.0 anadolutatili.com
 0.0.0.0 anamikaindanegas.in
 0.0.0.0 andreelapeyre.com
@@ -68,7 +67,6 @@
 0.0.0.0 areac-agr.com
 0.0.0.0 aresorganics.com
 0.0.0.0 arowanafishforsale.com
-0.0.0.0 asadairtravel.com
 0.0.0.0 ascentive.com
 0.0.0.0 ashoakacharya.com
 0.0.0.0 askarindo.or.id
@@ -91,6 +89,7 @@
 0.0.0.0 bangkok-orchids.com
 0.0.0.0 banzaimonkey.com
 0.0.0.0 bapo.granudan.cn
+0.0.0.0 baritaco.com
 0.0.0.0 baybars.xyz
 0.0.0.0 bbs.sunwy.org
 0.0.0.0 bbs1.marisfrolg.com
@@ -106,7 +105,6 @@
 0.0.0.0 bflow.security-portal.cz
 0.0.0.0 bildeboks.no
 0.0.0.0 bilim-pavlodar.gov.kz
-0.0.0.0 billieellish.org
 0.0.0.0 bingxiong.vip
 0.0.0.0 bjkumdo.com
 0.0.0.0 blog.241optical.com
@@ -122,7 +120,6 @@
 0.0.0.0 brenleyquartzgh.com
 0.0.0.0 brewmethods.com
 0.0.0.0 btlocum.pl
-0.0.0.0 bucketstrong.s3-us-west-1.amazonaws.com
 0.0.0.0 bugansavings.com
 0.0.0.0 buhleni.co.za
 0.0.0.0 buydishtv.in
@@ -139,6 +136,8 @@
 0.0.0.0 cbk.m.dodo52.com
 0.0.0.0 ccnn.xiaomier.cn
 0.0.0.0 cdn-10049480.file.myqcloud.com
+0.0.0.0 cdn.truelife.vn
+0.0.0.0 cdn.xiaoduoai.com
 0.0.0.0 cdnus.laboratoryconecpttoday.com
 0.0.0.0 ceirecrear.com.br
 0.0.0.0 cellas.sk
@@ -149,7 +148,6 @@
 0.0.0.0 changematterscounselling.com
 0.0.0.0 chanvribloc.com
 0.0.0.0 charm.bizfxr.com
-0.0.0.0 chattosport.com
 0.0.0.0 chauffeursontravel.com
 0.0.0.0 chedea.eu
 0.0.0.0 chinhdropfile.myvnc.com
@@ -157,27 +155,25 @@
 0.0.0.0 chipmarkets.com
 0.0.0.0 chj.m.dodo52.com
 0.0.0.0 chuckweiss.com
+0.0.0.0 cinnamoncreations.com.au
 0.0.0.0 cirugiagenital.com.mx
+0.0.0.0 cista-dobra-voda.com
 0.0.0.0 clareiamente.clareiamente.com
 0.0.0.0 clearwaterriveroutfitting.com
 0.0.0.0 client.yaap.co.uk
 0.0.0.0 clinicamariademolina.com
 0.0.0.0 cloud-server-updater2.co.za
-0.0.0.0 colombet-taxi.fr
 0.0.0.0 colourcreative.co.za
 0.0.0.0 compesat.com
 0.0.0.0 complan.hu
 0.0.0.0 complanbt.hu
 0.0.0.0 comtechadsl.com
 0.0.0.0 config.kuaisousou.top
-0.0.0.0 consultingcy.com
 0.0.0.0 counciloflight.bravepages.com
-0.0.0.0 cp-30.theborough.com.au
 0.0.0.0 cqjcc.org
 0.0.0.0 crimebranch.in
 0.0.0.0 crittersbythebay.com
 0.0.0.0 cryline.net
-0.0.0.0 cryptoomarket.com
 0.0.0.0 csnserver.com
 0.0.0.0 csw.hu
 0.0.0.0 cuacuonsieure.com
@@ -212,10 +208,10 @@
 0.0.0.0 dfzm.91756.cn
 0.0.0.0 dgecolesdepolice.bf
 0.0.0.0 dgnj.cn
-0.0.0.0 dhlservices.duckdns.org
 0.0.0.0 diazavendano.cl
 0.0.0.0 dichvuvesinhcongnghiep.top
 0.0.0.0 dienmaycu.vn
+0.0.0.0 dieselmoreno.cl
 0.0.0.0 digilib.dianhusada.ac.id
 0.0.0.0 digital-marketing-institute-delhi.empeeevents.com
 0.0.0.0 digitaldog.de
@@ -227,7 +223,6 @@
 0.0.0.0 dl.1003b.56a.com
 0.0.0.0 dl.198424.com
 0.0.0.0 dl.dzqzd.com
-0.0.0.0 dl.iqilie.com
 0.0.0.0 dl.kuaile-u.com
 0.0.0.0 dl2.soft-lenta.ru
 0.0.0.0 dlist.iqilie.com
@@ -236,7 +231,6 @@
 0.0.0.0 dns.alibuf.com
 0.0.0.0 dodsonimaging.com
 0.0.0.0 don.viameventos.com.br
-0.0.0.0 dongiln.co
 0.0.0.0 donmago.com
 0.0.0.0 doostansocks.ir
 0.0.0.0 doransky.info
@@ -264,18 +258,19 @@
 0.0.0.0 dpeasesummithilltoppers.pbworks.com
 0.0.0.0 dr080.com
 0.0.0.0 dralpaslan.com
+0.0.0.0 dreamtrips.cheap
 0.0.0.0 drivolani.us
 0.0.0.0 drools-moved.46999.n3.nabble.com
 0.0.0.0 druzim.freewww.biz
 0.0.0.0 drwendyellis.com
 0.0.0.0 dsiun.com
 0.0.0.0 dtsay.xyz
-0.0.0.0 dudulm.com
+0.0.0.0 duongfpt.ga
 0.0.0.0 dusdn.mireene.com
+0.0.0.0 dw.58wangdun.com
 0.0.0.0 dx.qqyewu.com
 0.0.0.0 dx1.qqtn.com
 0.0.0.0 dx2.qqtn.com
-0.0.0.0 dx30.siweidaoxiang.com
 0.0.0.0 dx60.siweidaoxiang.com
 0.0.0.0 dzinestudio87.co.uk
 0.0.0.0 e.dangeana.com
@@ -316,24 +311,23 @@
 0.0.0.0 flood-protection.org
 0.0.0.0 fordlamdong.com.vn
 0.0.0.0 foreverprecious.org
+0.0.0.0 foxfennecs.com
 0.0.0.0 frin.ng
 0.0.0.0 fte.m.dodo52.com
 0.0.0.0 ftpcnc-p2sp.pconline.com.cn
 0.0.0.0 ftpftpftp.com
 0.0.0.0 funletters.net
+0.0.0.0 funpartyrent.com
 0.0.0.0 futuregraphics.com.ar
 0.0.0.0 g.7230.com
 0.0.0.0 g0ogle.free.fr
-0.0.0.0 gainsdirectory.com
 0.0.0.0 galuhtea.com
 0.0.0.0 gamee.top
-0.0.0.0 garage.themebuffets.com
 0.0.0.0 garenanow.myvnc.com
 0.0.0.0 garenanow4.myvnc.com
 0.0.0.0 gargiulo.com.ar
 0.0.0.0 gateway-heide.de
 0.0.0.0 gateway.ethlqd.com
-0.0.0.0 gd2.greenxf.com
 0.0.0.0 geenicreations.com
 0.0.0.0 genesisconstruction.co.za
 0.0.0.0 germistonmiraclecentre.co.za
@@ -347,6 +341,7 @@
 0.0.0.0 go.xsuad.com
 0.0.0.0 gocanada.vn
 0.0.0.0 google.ghststr.com
+0.0.0.0 gov.kr
 0.0.0.0 govhotel.us
 0.0.0.0 grafchekloder.rebatesrule.net
 0.0.0.0 granportale.com.br
@@ -355,7 +350,6 @@
 0.0.0.0 greenleaveperu.com
 0.0.0.0 gssgroups.com
 0.0.0.0 gx-10012947.file.myqcloud.com
-0.0.0.0 gxx.monerov10.com
 0.0.0.0 habbotips.free.fr
 0.0.0.0 hagebakken.no
 0.0.0.0 haisannhatrang.com.vn
@@ -367,12 +361,12 @@
 0.0.0.0 hdxa.net
 0.0.0.0 healtina.com
 0.0.0.0 heavenif.co.za
+0.0.0.0 hediyeler10gb-ramazan.net
 0.0.0.0 hellomessager.com
 0.0.0.0 hfsoftware.cl
 0.0.0.0 hingcheong.hk
 0.0.0.0 hldschool.com
 0.0.0.0 hmbwgroup.com
-0.0.0.0 hmpmall.co.kr
 0.0.0.0 hoayeuthuong-my.sharepoint.com
 0.0.0.0 homedecors.com.au
 0.0.0.0 hostzaa.com
@@ -390,6 +384,7 @@
 0.0.0.0 i333.wang
 0.0.0.0 ibda.adv.br
 0.0.0.0 ideadom.pl
+0.0.0.0 ileolaherbalcare.com.ng
 0.0.0.0 iletisimbakanligi20gb.com
 0.0.0.0 imellda.com
 0.0.0.0 impression-gobelet.com
@@ -398,9 +393,13 @@
 0.0.0.0 incrediblepixels.com
 0.0.0.0 incredicole.com
 0.0.0.0 ineyes360.com
+0.0.0.0 ini.egkj.com
 0.0.0.0 innovation4crisis.org
 0.0.0.0 instanttechnology.com.au
 0.0.0.0 intelicasa.ro
+0.0.0.0 interbus.cz
+0.0.0.0 intersel-idf.org
+0.0.0.0 intertradeassociates.com.au
 0.0.0.0 intoxicated-twilight.com
 0.0.0.0 iremart.es
 0.0.0.0 isso.ps
@@ -410,7 +409,6 @@
 0.0.0.0 itsnixielou.com
 0.0.0.0 ixlonbcc.com
 0.0.0.0 izu.co.jp
-0.0.0.0 jahesa.com
 0.0.0.0 jaincakes.xyz
 0.0.0.0 jamiekaylive.com
 0.0.0.0 jansen-heesch.nl
@@ -443,10 +441,9 @@
 0.0.0.0 kar.big-pro.com
 0.0.0.0 karavantekstil.com
 0.0.0.0 kassohome.com.tr
-0.0.0.0 kazanin20gbturkiye.com
 0.0.0.0 kdsp.co.kr
-0.0.0.0 keckarangdadap.pekalongankab.go.id
 0.0.0.0 kejpa.com
+0.0.0.0 kenareh-gostare-aras.ir
 0.0.0.0 kgfs3.329263.com
 0.0.0.0 khan-associates.net
 0.0.0.0 khunnapap.com
@@ -459,7 +456,6 @@
 0.0.0.0 koralli.if.ua
 0.0.0.0 kqq.kz
 0.0.0.0 kristofferdaniels.com
-0.0.0.0 kupaliskohs.sk
 0.0.0.0 kuznetsov.ca
 0.0.0.0 kwanfromhongkong.com
 0.0.0.0 kwikomfi-lab.com
@@ -468,6 +464,7 @@
 0.0.0.0 lammaixep.com
 0.0.0.0 landmarktreks.com
 0.0.0.0 langyabbs.05yun.cn
+0.0.0.0 lapurisima.cl
 0.0.0.0 lastmorgoth.com
 0.0.0.0 lcfurtado.com.br
 0.0.0.0 lcmsystem.com
@@ -479,11 +476,11 @@
 0.0.0.0 lengendryme.com
 0.0.0.0 lesawilson.com
 0.0.0.0 lhbfirst.com
+0.0.0.0 libya-info.com
 0.0.0.0 lifeapt.biz
 0.0.0.0 linx.li
 0.0.0.0 lists.ibiblio.org
 0.0.0.0 lists.mplayerhq.hu
-0.0.0.0 livetrack.in
 0.0.0.0 livetvsports.ml
 0.0.0.0 lodergord.com
 0.0.0.0 log.yundabao.cn
@@ -492,7 +489,6 @@
 0.0.0.0 luatminhthuan.com
 0.0.0.0 luckytriumph.com
 0.0.0.0 luisnacht.com.ar
-0.0.0.0 luyalu.net
 0.0.0.0 lvr.samacomplus.com
 0.0.0.0 m.0757kd.cn
 0.0.0.0 m93701t2.beget.tech
@@ -554,16 +550,12 @@
 0.0.0.0 mteng.mmj7.com
 0.0.0.0 mtfelektroteknik.com
 0.0.0.0 mueblesjcp.cl
-0.0.0.0 mutec.jp
-0.0.0.0 mv360.net
 0.0.0.0 mvb.kz
 0.0.0.0 mxpiqw.am.files.1drv.com
-0.0.0.0 mybook22.s3-us-west-1.amazonaws.com
 0.0.0.0 myexpertca.in
 0.0.0.0 myhood.cl
 0.0.0.0 myo.net.au
 0.0.0.0 myofficeplus.com
-0.0.0.0 myonlinepokiesblog.com
 0.0.0.0 mytex.pe
 0.0.0.0 mytrains.net
 0.0.0.0 mywp.asia
@@ -573,6 +565,7 @@
 0.0.0.0 naturalma.es
 0.0.0.0 naturepack.cc
 0.0.0.0 ncmt2w.bn.files.1drv.com
+0.0.0.0 ncpcgov.com
 0.0.0.0 ndrs.cloud
 0.0.0.0 nebraskacharters.com.au
 0.0.0.0 nemo.herc.ws
@@ -590,17 +583,16 @@
 0.0.0.0 nprg.ru
 0.0.0.0 nst-corporation.com
 0.0.0.0 nwcsvcs.com
-0.0.0.0 oa.fnysw.com
 0.0.0.0 oa.hys.cn
 0.0.0.0 obinspirations.com
 0.0.0.0 obnova.zzux.com
 0.0.0.0 obseques-conseils.com
 0.0.0.0 ohe.ie
-0.0.0.0 oknoplastik.sk
 0.0.0.0 omega.az
 0.0.0.0 omsk-osma.ru
 0.0.0.0 omuzgor.tj
 0.0.0.0 onestin.ro
+0.0.0.0 openarts.com.br
 0.0.0.0 openclient.sroinfo.com
 0.0.0.0 operasanpiox.bravepages.com
 0.0.0.0 ophtalmiccenter.com
@@ -639,7 +631,6 @@
 0.0.0.0 phudieusongma.com
 0.0.0.0 phuphamca.com
 0.0.0.0 piapendet.com
-0.0.0.0 piedmontrescue.org
 0.0.0.0 pink99.com
 0.0.0.0 pitmansticks.com
 0.0.0.0 platisher.xyz
@@ -648,7 +639,6 @@
 0.0.0.0 ponto50.com.br
 0.0.0.0 poolbook.ir
 0.0.0.0 ppl.ac.id
-0.0.0.0 prepaenunsoloexamen.academiagalileoac.com
 0.0.0.0 probost.cz
 0.0.0.0 profitcoach.net
 0.0.0.0 prosoc.nl
@@ -657,7 +647,6 @@
 0.0.0.0 purelondonhyg.com
 0.0.0.0 pyxalis.com
 0.0.0.0 qchms.qcpro.vn
-0.0.0.0 qelie.com
 0.0.0.0 qfjys.com.img.800cdn.com
 0.0.0.0 qmsled.com
 0.0.0.0 qppl.angiang.gov.vn
@@ -667,6 +656,7 @@
 0.0.0.0 quickuploader.xyz
 0.0.0.0 raacts.in
 0.0.0.0 raifix.com.br
+0.0.0.0 ramazan20gbinternet.com
 0.0.0.0 ramazanda20gb.xyz
 0.0.0.0 rangebroadcasting.com
 0.0.0.0 rapidex.co.rs
@@ -687,7 +677,6 @@
 0.0.0.0 rkverify.securestudies.com
 0.0.0.0 robertmcardle.com
 0.0.0.0 robotrade.com.vn
-0.0.0.0 rockersdolphin.co.za
 0.0.0.0 rollingmill.in
 0.0.0.0 rollscar.pk
 0.0.0.0 rossogato.com
@@ -697,10 +686,10 @@
 0.0.0.0 s.51shijuan.com
 0.0.0.0 s.kk30.com
 0.0.0.0 s14b.91danji.com
-0.0.0.0 s14b.groundyun.cn
 0.0.0.0 sabiupd.compress.to
 0.0.0.0 saboorjaam.ir
 0.0.0.0 sabupda.vizvaz.com
+0.0.0.0 saglikbakanligi-destek.org
 0.0.0.0 sahathaikasetpan.com
 0.0.0.0 salvationbd.com
 0.0.0.0 sandovalgraphics.com
@@ -708,11 +697,11 @@
 0.0.0.0 saskklo.com
 0.0.0.0 scglobal.co.th
 0.0.0.0 schollaert.eu
-0.0.0.0 securefileinterneationaltransferthroughm.duckdns.org
 0.0.0.0 sefp-boispro.fr
 0.0.0.0 selekture.com
 0.0.0.0 selfuseproperty.com
 0.0.0.0 selvikoyunciftligi.com
+0.0.0.0 senevdekaldiyehediye.com
 0.0.0.0 senevdekaldiyehediyenet.com
 0.0.0.0 serpentrising.com
 0.0.0.0 servicemhkd.myvnc.com
@@ -724,7 +713,6 @@
 0.0.0.0 shacked.webdepot.co.il
 0.0.0.0 shahtoba.faqserv.com
 0.0.0.0 shaoxiaofei.cn
-0.0.0.0 share.dmca.gripe
 0.0.0.0 sharjahas.com
 0.0.0.0 shembefoundation.com
 0.0.0.0 shopjumpn.ch
@@ -761,7 +749,9 @@
 0.0.0.0 sslv3.at
 0.0.0.0 staging.popclusive.asia
 0.0.0.0 starcountry.net
+0.0.0.0 static.3001.net
 0.0.0.0 static.ilclock.com
+0.0.0.0 static.topxgun.com
 0.0.0.0 stationaryhome.com
 0.0.0.0 stecit.nl
 0.0.0.0 stevewalker.com.au
@@ -781,15 +771,16 @@
 0.0.0.0 symanreni.mysecondarydns.com
 0.0.0.0 szxypt.com
 0.0.0.0 t.honker.info
+0.0.0.0 tandenblekenhoofddorp.nl
 0.0.0.0 taraward.com
 0.0.0.0 taxpos.com
 0.0.0.0 tcy.198424.com
 0.0.0.0 teardrop-productions.ro
 0.0.0.0 technoites.com
-0.0.0.0 tecnobella.cl
 0.0.0.0 tehrenberg.com
 0.0.0.0 telescopelms.com
 0.0.0.0 telsiai.info
+0.0.0.0 tepatitlan.gob.mx
 0.0.0.0 test.iyibakkendine.com
 0.0.0.0 testdatabaseforcepoint.com
 0.0.0.0 thaibbqculver.com
@@ -805,7 +796,6 @@
 0.0.0.0 thosewebbs.com
 0.0.0.0 thuong.bidiworks.com
 0.0.0.0 tianangdep.com
-0.0.0.0 tianzi8.cn
 0.0.0.0 tibinst.mefound.com
 0.0.0.0 tibok.lflink.com
 0.0.0.0 ticte.in
@@ -836,10 +826,10 @@
 0.0.0.0 unilevercopabr.mbiz20.net
 0.0.0.0 uniquehall.net
 0.0.0.0 unokaoeojoejfghr.ru
+0.0.0.0 up4net.com
 0.0.0.0 upd.m.dodo52.com
 0.0.0.0 update.iwang8.com
 0.0.0.0 update.my.99.com
-0.0.0.0 upendiveterinariovalencia.es
 0.0.0.0 urgentmessage.org
 0.0.0.0 usd-gold.com
 0.0.0.0 users.skynet.be
@@ -851,7 +841,6 @@
 0.0.0.0 valencaagora.com.br
 0.0.0.0 vasoccernews.com
 0.0.0.0 vaziri.echobit.ir
-0.0.0.0 vdotrip.blog
 0.0.0.0 vfocus.net
 0.0.0.0 vibicloud.com
 0.0.0.0 videoswebcammsn.free.fr
@@ -866,7 +855,6 @@
 0.0.0.0 vrrumover0.vrrum0.farted.net
 0.0.0.0 vvff.in
 0.0.0.0 w.zhzy999.net
-0.0.0.0 wakecar.cn
 0.0.0.0 wangtong7.siweidaoxiang.com
 0.0.0.0 wangzonghang.cn
 0.0.0.0 wap.dosame.com
@@ -881,7 +869,6 @@
 0.0.0.0 whgaty.com
 0.0.0.0 wiebe-sanitaer.de
 0.0.0.0 wmd9e.a3i1vvv.feteboc.com
-0.0.0.0 wmi.1217bye.host
 0.0.0.0 wnksupply.co.th
 0.0.0.0 wood-expert.net
 0.0.0.0 woodsytech.com
@@ -891,11 +878,11 @@
 0.0.0.0 wsg.com.sg
 0.0.0.0 wt8.siweidaoxiang.com
 0.0.0.0 wt9.siweidaoxiang.com
-0.0.0.0 wwealthllc.com
 0.0.0.0 www2.recepty5.com
 0.0.0.0 x2vn.com
 0.0.0.0 xia.vzboot.com
 0.0.0.0 xiaidown.com
+0.0.0.0 xiaoma-10021647.file.myqcloud.com
 0.0.0.0 xiegushi.cn
 0.0.0.0 xirfad.com
 0.0.0.0 xn--transfgran-mgbbb600b.ro
@@ -905,11 +892,11 @@
 0.0.0.0 xxxze.co.nu
 0.0.0.0 yeez.net
 0.0.0.0 yesky.51down.org.cn
-0.0.0.0 yesky.xzstatic.com
 0.0.0.0 yiyangjz.cn
 0.0.0.0 yolks.bestsellertwo.net
 0.0.0.0 yuluobo.com
 0.0.0.0 yun-1.lenku.cn
+0.0.0.0 yuyu02004-10043918.file.myqcloud.com
 0.0.0.0 yx.m.dodo52.com
 0.0.0.0 zagruz.dnset.com
 0.0.0.0 zagruz.toh.info
@@ -928,5 +915,4 @@
 0.0.0.0 zoeydeutchweb.com
 0.0.0.0 zonefound.com.cn
 0.0.0.0 zskyjov.cz
-0.0.0.0 ztqsc.com.cn
 0.0.0.0 zumodelima.com
diff --git a/urlhaus-filter-hosts.txt b/urlhaus-filter-hosts.txt
index 8ea6532f..eec14811 100644
--- a/urlhaus-filter-hosts.txt
+++ b/urlhaus-filter-hosts.txt
@@ -1,5 +1,5 @@
 # Title: abuse.ch URLhaus Malicious Hosts Blocklist
-# Updated: Sat, 02 May 2020 00:09:31 UTC
+# Updated: Sat, 02 May 2020 12:09:27 UTC
 # Repo: https://gitlab.com/curben/urlhaus-filter
 # License: https://creativecommons.org/publicdomain/zero/1.0/
 # Source: https://urlhaus.abuse.ch/api/
@@ -607,6 +607,7 @@
 0.0.0.0 2ndpub.com
 0.0.0.0 2ndscreensociety.com
 0.0.0.0 2nell.com
+0.0.0.0 2no.co
 0.0.0.0 2pjcza.db.files.1drv.com
 0.0.0.0 2q1wea3rdsf.000webhostapp.com
 0.0.0.0 2q3w.com
@@ -724,6 +725,7 @@
 0.0.0.0 3cfilati.it
 0.0.0.0 3cxtraining.com
 0.0.0.0 3d-designcenter.com
+0.0.0.0 3d-universal.com
 0.0.0.0 3d.co.th
 0.0.0.0 3d.tdselectronics.com
 0.0.0.0 3dcentral.hu
@@ -945,6 +947,7 @@
 0.0.0.0 4you.by
 0.0.0.0 5-shampurov.ru
 0.0.0.0 5.fjwt1.crsky.com
+0.0.0.0 5.top4top.io
 0.0.0.0 5.u0148466.z8.ru
 0.0.0.0 5.unplugrevolution.com
 0.0.0.0 5003.arentuspecial.com
@@ -1562,7 +1565,6 @@
 0.0.0.0 aapi.co.in
 0.0.0.0 aapic.emarathon.or.kr
 0.0.0.0 aapkitayari.com
-0.0.0.0 aaplindia.com
 0.0.0.0 aapnewslive.com
 0.0.0.0 aapnnihotel.in
 0.0.0.0 aapr.org.au
@@ -1978,7 +1980,6 @@
 0.0.0.0 acewatch.vn
 0.0.0.0 acewm.org
 0.0.0.0 aceyz.com
-0.0.0.0 acfacilities.co.uk
 0.0.0.0 acffiorentina.ru
 0.0.0.0 acg-capital.com
 0.0.0.0 acg.com.my
@@ -2399,6 +2400,7 @@
 0.0.0.0 adroitlyadvertising.com
 0.0.0.0 adrolling.co.uk
 0.0.0.0 ads.actmol.by
+0.0.0.0 ads.hanggiadinh.com
 0.0.0.0 ads.kalabisim.com
 0.0.0.0 adsapomg.space
 0.0.0.0 adsdeedee.com
@@ -2650,7 +2652,6 @@
 0.0.0.0 africabluewebs.co.ke
 0.0.0.0 africabootcampacademy.influencetec.net
 0.0.0.0 africahousingawards.com
-0.0.0.0 africainnovates.org
 0.0.0.0 africamarket.shop
 0.0.0.0 africamissions.ca
 0.0.0.0 african-trips.com
@@ -3053,6 +3054,7 @@
 0.0.0.0 aigforms.myap.co.za
 0.0.0.0 aiglemovies.com
 0.0.0.0 aihealth.vn
+0.0.0.0 aiiaiafrzrueuedur.ru
 0.0.0.0 aiineh.com
 0.0.0.0 aiit.ahbys.com
 0.0.0.0 aijdjy.com
@@ -3121,6 +3123,7 @@
 0.0.0.0 airinovasi-indonesia.com
 0.0.0.0 airisu-syumikonparty.com
 0.0.0.0 airlife.bget.ru
+0.0.0.0 airliness.info
 0.0.0.0 airlinkcpl.net
 0.0.0.0 airmaildata.com
 0.0.0.0 airmanship.nl
@@ -3409,6 +3412,7 @@
 0.0.0.0 alanhkatz.on-rev.com
 0.0.0.0 alankeef-co.tk
 0.0.0.0 alankippax.info
+0.0.0.0 alannonce.fr
 0.0.0.0 alanvarin2.hopto.org
 0.0.0.0 alanvarin3.ddns.net
 0.0.0.0 alanyacilingirbilal.com
@@ -4396,7 +4400,6 @@
 0.0.0.0 americanhomecenter.com
 0.0.0.0 americanmicrosoftclouddepartment.duckdns.org
 0.0.0.0 americanpatriotlife.com
-0.0.0.0 americanrange.com
 0.0.0.0 americanreliefhub.com
 0.0.0.0 americanstaffordshireterrier.it
 0.0.0.0 americanxdrive.gq
@@ -5652,6 +5655,7 @@
 0.0.0.0 arcid.org
 0.0.0.0 arcnyc.com
 0.0.0.0 arcoarquitetura.arq.br
+0.0.0.0 arcoelectric-idaho.com
 0.0.0.0 arcoelectrico.cl
 0.0.0.0 arcoiris.org.pt
 0.0.0.0 arconarchitects.com
@@ -5773,6 +5777,7 @@
 0.0.0.0 aridostlari.com
 0.0.0.0 arie-industrie.com
 0.0.0.0 arielaspa.com
+0.0.0.0 arielcarter.com
 0.0.0.0 arielluxhair.com
 0.0.0.0 arieloutdoors.com
 0.0.0.0 arieloutdoors.in
@@ -5790,7 +5795,6 @@
 0.0.0.0 arija.lt
 0.0.0.0 ariko.vn
 0.0.0.0 arimmo.ch
-0.0.0.0 arimonza.it
 0.0.0.0 arina.jsin.ru
 0.0.0.0 arinidentalcare.com
 0.0.0.0 arinlays.com
@@ -6140,6 +6144,7 @@
 0.0.0.0 artydesign.co
 0.0.0.0 artzkaypharmacy.com.au
 0.0.0.0 artzvuk.by
+0.0.0.0 arufels.com
 0.0.0.0 aruljothi.xyz
 0.0.0.0 arundel.net
 0.0.0.0 arvd.begrip.sk
@@ -6244,7 +6249,6 @@
 0.0.0.0 aseman-co.com
 0.0.0.0 asemancard.com
 0.0.0.0 asemanehco.ir
-0.0.0.0 aseprom.com
 0.0.0.0 asepspa.cl
 0.0.0.0 aserraderoelaleman.com.ar
 0.0.0.0 asertiva.cl
@@ -6317,6 +6321,7 @@
 0.0.0.0 asia-taxsolutions.com
 0.0.0.0 asiaherbalpharmacy.com
 0.0.0.0 asiains.com.ph
+0.0.0.0 asialinklogistics.com
 0.0.0.0 asiamedia.tw
 0.0.0.0 asiana.cf
 0.0.0.0 asianacrylates.com
@@ -6347,6 +6352,7 @@
 0.0.0.0 asiffidatanoli.com
 0.0.0.0 asight.com.au
 0.0.0.0 asiltorna.com
+0.0.0.0 asiluxury.com
 0.0.0.0 asinaptali.com
 0.0.0.0 asined.es
 0.0.0.0 asinfotech.net
@@ -6537,7 +6543,6 @@
 0.0.0.0 astrocricketpredictions.com
 0.0.0.0 astrodeepakdubey.in
 0.0.0.0 astrodolly.com
-0.0.0.0 astrojyoti.com
 0.0.0.0 astrolabioeditorial.com
 0.0.0.0 astroland.space
 0.0.0.0 astrologerpanchmukhijyotish.com
@@ -6780,7 +6785,6 @@
 0.0.0.0 atskiysatana.tk
 0.0.0.0 atso.kz
 0.0.0.0 atso.pt
-0.0.0.0 att-0748.fileshare-storage.com
 0.0.0.0 att-hellolab.com
 0.0.0.0 att1.bigmir.net
 0.0.0.0 atta2tata.monster
@@ -7212,6 +7216,7 @@
 0.0.0.0 avila-ventures.com
 0.0.0.0 avilacare.com
 0.0.0.0 avinash1.free.fr
+0.0.0.0 avioaircurtain.com
 0.0.0.0 avion-x.com
 0.0.0.0 avioncargoets.com
 0.0.0.0 aviontravelgroup.com
@@ -7646,6 +7651,7 @@
 0.0.0.0 babysteps.ge
 0.0.0.0 babyvogel.nl
 0.0.0.0 babzon.club
+0.0.0.0 bac.edu.my
 0.0.0.0 bacamanect.com
 0.0.0.0 baccaosutritue.vn
 0.0.0.0 baceldeniz.com
@@ -7712,6 +7718,7 @@
 0.0.0.0 badisse.com
 0.0.0.0 badkamer-sanitair.nl
 0.0.0.0 badmildiou.com
+0.0.0.0 badzena.com
 0.0.0.0 baerbl-volz.de
 0.0.0.0 baeren-schlatt.ch
 0.0.0.0 baermedia.ch
@@ -7761,7 +7768,6 @@
 0.0.0.0 bahku.ru
 0.0.0.0 bahl.com.au
 0.0.0.0 bahlcom.au
-0.0.0.0 bahoma.com
 0.0.0.0 bahomacom
 0.0.0.0 bahrain-escorts.com
 0.0.0.0 bahrainbordir.com
@@ -8494,7 +8500,6 @@
 0.0.0.0 beachview.co.za
 0.0.0.0 beachvillas.gr
 0.0.0.0 beachwoodproperty.com.au
-0.0.0.0 beaconacademy.net
 0.0.0.0 beaconhousediscovery.com
 0.0.0.0 beaconr.rungta.ac.in
 0.0.0.0 beactivedigital.com
@@ -9203,7 +9208,6 @@
 0.0.0.0 beytepefoodcenter.com
 0.0.0.0 beytriali.com
 0.0.0.0 bezambici.com
-0.0.0.0 bezier.com
 0.0.0.0 bezlive.com
 0.0.0.0 bezoekbosnie.nl
 0.0.0.0 bezoporu.wtie.tu.koszalin.pl
@@ -10404,7 +10408,6 @@
 0.0.0.0 bloombrainz.com
 0.0.0.0 bloomcommunityproject.org
 0.0.0.0 bloomestatelitigation.ca
-0.0.0.0 bloomfire.com
 0.0.0.0 bloomflores.com
 0.0.0.0 bloomhomes.in
 0.0.0.0 bloomingbridal.com.au
@@ -10732,7 +10735,6 @@
 0.0.0.0 bonakma.com
 0.0.0.0 bonallegro.5v.pl
 0.0.0.0 bonattiholding.com
-0.0.0.0 bonavigator.pl
 0.0.0.0 bond.com.vn
 0.0.0.0 bondagetrip.com
 0.0.0.0 bondbengals.info
@@ -11244,7 +11246,6 @@
 0.0.0.0 bridgeventuresllc.com
 0.0.0.0 briefmarkenpower.de
 0.0.0.0 brifing.info
-0.0.0.0 brightachieversltd.com
 0.0.0.0 brightasia.com.sg
 0.0.0.0 brightbat.com
 0.0.0.0 brightbook.ir
@@ -11935,7 +11936,6 @@
 0.0.0.0 byttd.com.cn
 0.0.0.0 byukattie.top
 0.0.0.0 byvejen.dk
-0.0.0.0 byworks.com
 0.0.0.0 byxaru.com
 0.0.0.0 byxxyz.com
 0.0.0.0 byz2.com
@@ -12503,7 +12503,6 @@
 0.0.0.0 carc-astrology.in
 0.0.0.0 carcorxox.com
 0.0.0.0 carcounsel.com
-0.0.0.0 cardbankph.com
 0.0.0.0 cardboardspaceshiptoys.com
 0.0.0.0 cardea-immobilien.de
 0.0.0.0 cardealersforbadcredit.net
@@ -13032,6 +13031,7 @@
 0.0.0.0 cc78.bg
 0.0.0.0 cc8848.xyz
 0.0.0.0 cc9.ne.jp
+0.0.0.0 ccamatil1-my.sharepoint.com
 0.0.0.0 ccandcbrand.com
 0.0.0.0 ccash.xyz
 0.0.0.0 ccat.biz
@@ -13129,6 +13129,8 @@
 0.0.0.0 cdn.slty.de
 0.0.0.0 cdn.timebuyer.org
 0.0.0.0 cdn.top4top.net
+0.0.0.0 cdn.truelife.vn
+0.0.0.0 cdn.xiaoduoai.com
 0.0.0.0 cdn.zecast.com
 0.0.0.0 cdn4.css361.com
 0.0.0.0 cdn5.rvshare.com
@@ -13273,7 +13275,6 @@
 0.0.0.0 center-miami.com
 0.0.0.0 center.1team.pro
 0.0.0.0 center1.co.il
-0.0.0.0 center4cby.com
 0.0.0.0 centerfortheyouth.org
 0.0.0.0 centerline.co.kr
 0.0.0.0 centernadegda.ru
@@ -13627,6 +13628,7 @@
 0.0.0.0 charitycandy.co.uk
 0.0.0.0 charitylov.com
 0.0.0.0 charityshofner.com
+0.0.0.0 charlemagne.fr
 0.0.0.0 charlesbaker.co.uk
 0.0.0.0 charlescuthbertson.com
 0.0.0.0 charlesmessa.info
@@ -14053,6 +14055,7 @@
 0.0.0.0 christinelebeck.com
 0.0.0.0 christinmunsch.com
 0.0.0.0 christmasatredeemer.org
+0.0.0.0 christoforoskotentos.com
 0.0.0.0 christolandcompany.com
 0.0.0.0 christolar.cz
 0.0.0.0 christom.com.au
@@ -14476,6 +14479,7 @@
 0.0.0.0 cld-net.com
 0.0.0.0 cld.persiangig.com
 0.0.0.0 cld.pt
+0.0.0.0 cle.ae
 0.0.0.0 clean.crypt24.in
 0.0.0.0 clean.olexandry.ru
 0.0.0.0 clean.vanzherke.ru
@@ -14536,14 +14540,12 @@
 0.0.0.0 cleverlearncebu.com
 0.0.0.0 cleverspain.com
 0.0.0.0 clgafareaitu.com
-0.0.0.0 clgsecurities.com
 0.0.0.0 clhairdesign.com
 0.0.0.0 clhgoody.xyz
 0.0.0.0 clic-douaisis.fr
 0.0.0.0 click-up.co.il
 0.0.0.0 click.danielshomecenter.com
 0.0.0.0 click.expertsmeetings.org
-0.0.0.0 click.senate.go.th
 0.0.0.0 click4amassage.com
 0.0.0.0 click4ship.com
 0.0.0.0 clickara.com
@@ -14598,7 +14600,6 @@
 0.0.0.0 clinicacirurgiaplasticasp.com.br
 0.0.0.0 clinicacorporea.com
 0.0.0.0 clinicacorpusmacae.com.br
-0.0.0.0 clinicacrecer.com
 0.0.0.0 clinicadavid.mx
 0.0.0.0 clinicadeldolorgt.com
 0.0.0.0 clinicadentalimagen.pe
@@ -14673,7 +14674,6 @@
 0.0.0.0 cloud.diminishedvaluecalifornia.com
 0.0.0.0 cloud.hollweck.it
 0.0.0.0 cloud.kryptonia.fr
-0.0.0.0 cloud.patrika.com
 0.0.0.0 cloud.s2lol.com
 0.0.0.0 cloud.wmsinfo.com.br
 0.0.0.0 cloud.xenoris.fr
@@ -14682,6 +14682,7 @@
 0.0.0.0 cloudbox-online.net
 0.0.0.0 cloudbytegames.com
 0.0.0.0 cloudcapgames.com
+0.0.0.0 cloudcast.best
 0.0.0.0 cloudcottage.cloud
 0.0.0.0 cloudessy.com
 0.0.0.0 cloudfilesharingdomainurllinksys.duckdns.org
@@ -14771,6 +14772,7 @@
 0.0.0.0 cmdez.ir
 0.0.0.0 cmdou.com
 0.0.0.0 cmeaststar.de
+0.0.0.0 cmg.asia
 0.0.0.0 cmgroup.com.ua
 0.0.0.0 cmhighschool.edu.bd
 0.0.0.0 cmhmfgoutbound.protection.sketchwefair-watduoliprudential.com.watchdogdns.duckdns.org
@@ -15004,7 +15006,6 @@
 0.0.0.0 coffeeorcanoeing.com
 0.0.0.0 cofqz.com
 0.0.0.0 cofrex-eg.com
-0.0.0.0 cofusa.com
 0.0.0.0 cogeainternational.com
 0.0.0.0 coges-tn.com
 0.0.0.0 coghlanhealthcare.ie
@@ -15809,7 +15810,6 @@
 0.0.0.0 corkspeechtherapy.ie
 0.0.0.0 corm-informatique.fr
 0.0.0.0 cormetal.eu
-0.0.0.0 cornejotex.com
 0.0.0.0 cornelbusiness.co.uk
 0.0.0.0 cornelia-ernst.de
 0.0.0.0 cornellekacy.net
@@ -16513,7 +16513,6 @@
 0.0.0.0 csplumbingservices.co.uk
 0.0.0.0 cspn-omsk.ru
 0.0.0.0 csprequiao.pt
-0.0.0.0 csq.es
 0.0.0.0 csrcampaign.com
 0.0.0.0 csrkanjiza.rs
 0.0.0.0 csrngo.in
@@ -17354,7 +17353,6 @@
 0.0.0.0 dashkevichseo.ru
 0.0.0.0 dashonweb.com
 0.0.0.0 dashvaanjil.mn
-0.0.0.0 dasjoe.de
 0.0.0.0 daskruelhaus.com
 0.0.0.0 dasleds.com
 0.0.0.0 dastep.com
@@ -17401,7 +17399,6 @@
 0.0.0.0 datascienceexcellence.org
 0.0.0.0 dataseru.com
 0.0.0.0 dataserver.c0.pl
-0.0.0.0 datasheep.co.uk
 0.0.0.0 datasoft-sa.com
 0.0.0.0 datatalentadvisors.com
 0.0.0.0 datatechis.com
@@ -17441,6 +17438,7 @@
 0.0.0.0 datthocuphuquoc.xyz
 0.0.0.0 dattiec.net
 0.0.0.0 dattopantthengadi.in
+0.0.0.0 datudeli.com
 0.0.0.0 datumu.ga
 0.0.0.0 datumu.ml
 0.0.0.0 datvangthainguyen.com
@@ -17598,6 +17596,7 @@
 0.0.0.0 dbecome.top
 0.0.0.0 dbfuppsala.se
 0.0.0.0 dbinario.com
+0.0.0.0 dbo.ca.gov
 0.0.0.0 dboyusa.online
 0.0.0.0 dbravo.pro
 0.0.0.0 dbs-ebank.com
@@ -17658,7 +17657,6 @@
 0.0.0.0 dd.smaxdn.com
 0.0.0.0 dda.co.ir
 0.0.0.0 ddaynew.5demo.xyz
-0.0.0.0 ddbuilding.com
 0.0.0.0 ddccs.net
 0.0.0.0 ddd2.pc6.com
 0.0.0.0 dddos.persiangig.com
@@ -17805,6 +17803,7 @@
 0.0.0.0 decons.ai
 0.0.0.0 decons.vn
 0.0.0.0 decoplast-edp.ro
+0.0.0.0 decoprojectme.com
 0.0.0.0 decoracaodeparedes.com.br
 0.0.0.0 decoratingideas.bozkurtfurkan.com
 0.0.0.0 decoration-marine.net
@@ -19150,7 +19149,6 @@
 0.0.0.0 digihashtag.com
 0.0.0.0 digiiital.co.uk
 0.0.0.0 digikow.000webhostapp.com
-0.0.0.0 digilander.libero.it
 0.0.0.0 digileads.ae
 0.0.0.0 digilib.dianhusada.ac.id
 0.0.0.0 digim.asia
@@ -19176,6 +19174,7 @@
 0.0.0.0 digital.gemacipta.asia
 0.0.0.0 digital.syd.fr
 0.0.0.0 digital2home.ecobz.xyz
+0.0.0.0 digital7.com
 0.0.0.0 digitalankur.com
 0.0.0.0 digitalbrit.com
 0.0.0.0 digitalbugs.co.in
@@ -19609,7 +19608,6 @@
 0.0.0.0 djz313iks60bk4.com
 0.0.0.0 djzmo.com
 0.0.0.0 dk-elbrus.ru
-0.0.0.0 dk-rc.com
 0.0.0.0 dk.sa
 0.0.0.0 dk5gckyelnxjl.cloudfront.net
 0.0.0.0 dkadvisry.com
@@ -19673,6 +19671,7 @@
 0.0.0.0 dl2.onedrive-us-en.com
 0.0.0.0 dl2.soft-lenta.ru
 0.0.0.0 dl2.storeandshare.singtel.com
+0.0.0.0 dl4.joxi.net
 0.0.0.0 dl63964725.dyn-downloads.com
 0.0.0.0 dlainzyniera.pl
 0.0.0.0 dlawgist.com
@@ -20120,6 +20119,7 @@
 0.0.0.0 donnerreuschel.com
 0.0.0.0 donphenom.al
 0.0.0.0 donpomodoro.com.co
+0.0.0.0 donsinout.info
 0.0.0.0 donsly.usa.cc
 0.0.0.0 donsworld.org
 0.0.0.0 dontlitigate.com
@@ -20128,7 +20128,6 @@
 0.0.0.0 donvosphotography.com
 0.0.0.0 donwonda.org
 0.0.0.0 dooball.biz
-0.0.0.0 doobegroup.com
 0.0.0.0 dooch.vn
 0.0.0.0 doodlebug.club
 0.0.0.0 doodleninja.in
@@ -20529,7 +20528,6 @@
 0.0.0.0 drdki.com
 0.0.0.0 drdoorbin.com
 0.0.0.0 dream-energy.ru
-0.0.0.0 dream-food.com
 0.0.0.0 dream-girls.club
 0.0.0.0 dream-girls.online
 0.0.0.0 dream-girls.xyz
@@ -20570,6 +20568,7 @@
 0.0.0.0 dreamtownpsl.co.ke
 0.0.0.0 dreamtravel.site
 0.0.0.0 dreamtravelonthego.com
+0.0.0.0 dreamtrips.cheap
 0.0.0.0 dreamtrips.icu
 0.0.0.0 dreamvision.bg
 0.0.0.0 dreamwolf.tv
@@ -21554,6 +21553,7 @@
 0.0.0.0 ecitytanduclongan.com
 0.0.0.0 eckdor.de
 0.0.0.0 ecker.aidnet.at
+0.0.0.0 ecklund.no
 0.0.0.0 eclairesuits.com
 0.0.0.0 eclatpro.com
 0.0.0.0 eclecticelectronics.net
@@ -21722,7 +21722,6 @@
 0.0.0.0 edhec.business-angels.info
 0.0.0.0 edialplast.ru
 0.0.0.0 edicolanazionale.it
-0.0.0.0 edicustoms.com.au
 0.0.0.0 ediet.ir
 0.0.0.0 edificaiconstrucoes.com
 0.0.0.0 edifice-guyane.fr
@@ -22103,7 +22102,6 @@
 0.0.0.0 elcampestre.cl
 0.0.0.0 elcaneloautopartes.com.mx
 0.0.0.0 elcapitanno.com
-0.0.0.0 elcarmelohotelhacienda.com
 0.0.0.0 elcarrocafeny.com
 0.0.0.0 elchurrascorestaurante.com
 0.0.0.0 elclasicocml.com
@@ -22154,7 +22152,6 @@
 0.0.0.0 electro-bike.club
 0.0.0.0 electroautomat.com
 0.0.0.0 electrocad.in
-0.0.0.0 electroenchufe.com
 0.0.0.0 electrofluxequipmentspvtltd.com
 0.0.0.0 electrofyhub.com
 0.0.0.0 electrogc.com.ar
@@ -22740,7 +22737,6 @@
 0.0.0.0 enemobodoukpaka.com
 0.0.0.0 enequipo.es
 0.0.0.0 enercol.cl
-0.0.0.0 energicaweb.com
 0.0.0.0 energie-service.fr
 0.0.0.0 energie-strom.net
 0.0.0.0 energiemag.fr
@@ -23422,7 +23418,6 @@
 0.0.0.0 estore.qurvex.com
 0.0.0.0 estrategias-corporativas.com
 0.0.0.0 estrategiasdeaprovacao.com.br
-0.0.0.0 estreamnetworks.net
 0.0.0.0 estrindesign.com
 0.0.0.0 estrom.es
 0.0.0.0 estrutura.eng.br
@@ -24500,6 +24495,7 @@
 0.0.0.0 fashionattitude.de
 0.0.0.0 fashionbettysam.com
 0.0.0.0 fashionblogandpromo.club
+0.0.0.0 fashiondenver.com
 0.0.0.0 fashionfootprint.leseditextiles.co.za
 0.0.0.0 fashionfootprint.nmco.co.za
 0.0.0.0 fashiongul.com
@@ -24742,6 +24738,7 @@
 0.0.0.0 febsms.com
 0.0.0.0 fechos.org.br
 0.0.0.0 fecoonde.org
+0.0.0.0 fectrucks.com
 0.0.0.0 fed58f43246844b18d00fb0177352546.download
 0.0.0.0 fedbroker.ru
 0.0.0.0 fedeminersdigital.com
@@ -25604,6 +25601,7 @@
 0.0.0.0 floradosventos.com.br
 0.0.0.0 floralcompany.jp
 0.0.0.0 floramatic.com
+0.0.0.0 florandina.com
 0.0.0.0 florandum.com
 0.0.0.0 florean.be
 0.0.0.0 florenceloewy.com
@@ -26030,7 +26028,6 @@
 0.0.0.0 fotograafie.nl
 0.0.0.0 fotografiarnia.pl
 0.0.0.0 fotoground.com
-0.0.0.0 fotojurczak.pl
 0.0.0.0 fotolegko.ru
 0.0.0.0 fotomb.com
 0.0.0.0 fotoms.pl
@@ -26588,7 +26585,6 @@
 0.0.0.0 fundacionafanic.com
 0.0.0.0 fundacioncaminosdepazporcolombiacali.org
 0.0.0.0 fundacioncreatalento.org
-0.0.0.0 fundacionesperanza.org.es
 0.0.0.0 fundacionmontehoreb.org.ve
 0.0.0.0 fundacionpacma.com
 0.0.0.0 fundacionravera.com
@@ -26736,7 +26732,6 @@
 0.0.0.0 fuzzyconcepts.com
 0.0.0.0 fuzzylogic.in
 0.0.0.0 fuzzymiles.com
-0.0.0.0 fv1-2.failiem.lv
 0.0.0.0 fv13.failiem.lv
 0.0.0.0 fv15.failiem.lv
 0.0.0.0 fv2-1.failiem.lv
@@ -27436,7 +27431,6 @@
 0.0.0.0 genelmusavirlik.com.tr
 0.0.0.0 geneomm.com
 0.0.0.0 generactz.com
-0.0.0.0 general.it
 0.0.0.0 generalbikes.com
 0.0.0.0 generalgauffin.se
 0.0.0.0 generalhomemedicalsupply.com
@@ -27527,7 +27521,6 @@
 0.0.0.0 geolinvestproekt.ru
 0.0.0.0 geolocstar.com
 0.0.0.0 geologia.geoss.pt
-0.0.0.0 geologimarche.it
 0.0.0.0 geolysis.org
 0.0.0.0 geometrai.com
 0.0.0.0 geometrirc.com
@@ -27891,7 +27884,6 @@
 0.0.0.0 gilbertohair.com
 0.0.0.0 gildlearning.org
 0.0.0.0 gilgaluganda.org
-0.0.0.0 gilhb.com
 0.0.0.0 gilio.com.mx
 0.0.0.0 gill-holiday-2013.gillfoundation.org
 0.0.0.0 gill-holiday-2014.gillfoundation.org
@@ -28053,6 +28045,7 @@
 0.0.0.0 gligoricekofood.com
 0.0.0.0 glik.acemlnc.com
 0.0.0.0 glimpse.com.cn
+0.0.0.0 glip-vault-1.s3-accelerate.amazonaws.com
 0.0.0.0 glissandobigband.com
 0.0.0.0 glitchexotika.com
 0.0.0.0 glitzygal.net
@@ -28584,7 +28577,6 @@
 0.0.0.0 gorenotoservisi.net
 0.0.0.0 goretimmo.lu
 0.0.0.0 gorgan-clinic.ir
-0.0.0.0 gorglione.com
 0.0.0.0 gorguluyapi.com
 0.0.0.0 gorgunmakina.com
 0.0.0.0 gorillaconcretecoatings.com
@@ -28652,6 +28644,7 @@
 0.0.0.0 gourmandd.com
 0.0.0.0 gourmetlab.pe
 0.0.0.0 gourmetreats.in
+0.0.0.0 gov.kr
 0.0.0.0 gov.rsmart-testsolutions.watchdogdns.duckdns.org
 0.0.0.0 govche.in
 0.0.0.0 goveboatclub.com.au
@@ -29175,7 +29168,6 @@
 0.0.0.0 grupoglobaliza.com
 0.0.0.0 grupohasar.com
 0.0.0.0 grupoiesp.tk
-0.0.0.0 grupoinalen.com
 0.0.0.0 grupoinfonet.com
 0.0.0.0 grupojg.com.br
 0.0.0.0 grupolaplace.com.br
@@ -29392,6 +29384,7 @@
 0.0.0.0 gullukomurelektronik.com
 0.0.0.0 gulseda.site
 0.0.0.0 gulungdinamo.com
+0.0.0.0 gulzarhomestay.com
 0.0.0.0 gumiviet.com
 0.0.0.0 gumuscorap.com
 0.0.0.0 gumustelkari.com
@@ -29539,6 +29532,7 @@
 0.0.0.0 h-w-c.net
 0.0.0.0 h.eurotrading.com.pl
 0.0.0.0 h.j990981.ru
+0.0.0.0 h.top4top.io
 0.0.0.0 h.valerana44.ru
 0.0.0.0 h1.iwakalong.ru
 0.0.0.0 h112321.s08.test-hf.su
@@ -30123,6 +30117,7 @@
 0.0.0.0 hayalbu.com
 0.0.0.0 hayashitoysmart.com
 0.0.0.0 hayatevesigar-10gbnetkazan.com
+0.0.0.0 hayatevesigar-20gb.com
 0.0.0.0 hayatihusada.com
 0.0.0.0 hayatiskele.com
 0.0.0.0 hayatlokma.com
@@ -30379,8 +30374,10 @@
 0.0.0.0 hediy20gb-internet-online.net
 0.0.0.0 hediye-internet-saglik.org
 0.0.0.0 hediye-internet.site
+0.0.0.0 hediye20gb.online
 0.0.0.0 hediyegapsinternet.com
 0.0.0.0 hediyeinternetpaketim.com
+0.0.0.0 hediyeler10gb-ramazan.net
 0.0.0.0 hediyem20gb-internet.org
 0.0.0.0 hediyenkolay.com
 0.0.0.0 hedrasl.com
@@ -30956,6 +30953,7 @@
 0.0.0.0 hjylw66.com
 0.0.0.0 hk.darwd.com
 0.0.0.0 hk.insure
+0.0.0.0 hk.npu.gov.ua
 0.0.0.0 hk026.com
 0.0.0.0 hk3.my
 0.0.0.0 hk3fitness.com
@@ -31181,6 +31179,7 @@
 0.0.0.0 home-spy-shop.com
 0.0.0.0 home.99eurowebsite.ie
 0.0.0.0 home.barley-plus.com
+0.0.0.0 home.earthlink.net
 0.0.0.0 home.evrstudio.com
 0.0.0.0 home.healthiestu.com
 0.0.0.0 home.isdes.com
@@ -31651,7 +31650,6 @@
 0.0.0.0 how-to-nampa.com
 0.0.0.0 how-to-tech.com
 0.0.0.0 how.ph
-0.0.0.0 howalshafikings.com
 0.0.0.0 howardbenz.com
 0.0.0.0 howardbragman.com
 0.0.0.0 howardgfranklin.com
@@ -33673,6 +33671,7 @@
 0.0.0.0 integracooperativa.com
 0.0.0.0 integrafika.co.uk
 0.0.0.0 integraga.com
+0.0.0.0 integralc.com
 0.0.0.0 integralcs.com.br
 0.0.0.0 integralestates.in
 0.0.0.0 integralmakeup.com
@@ -33709,6 +33708,7 @@
 0.0.0.0 interativus.com.br
 0.0.0.0 interbanx.co.id
 0.0.0.0 interbizservices.eu
+0.0.0.0 interbus.cz
 0.0.0.0 interciencia.es
 0.0.0.0 intercitiesfiji.com
 0.0.0.0 intercity-tlt.ru
@@ -33769,7 +33769,6 @@
 0.0.0.0 internaut.in
 0.0.0.0 internetcasinoweblog.com
 0.0.0.0 internetjogasz.hu
-0.0.0.0 internetlink.com.mx
 0.0.0.0 internetmarketing4pros.com
 0.0.0.0 internetofsmell.com
 0.0.0.0 internetordbogen.dk
@@ -33874,6 +33873,7 @@
 0.0.0.0 inversionesdambrosio.com
 0.0.0.0 inversioneslopezminaya.com
 0.0.0.0 invertilo.com
+0.0.0.0 invest-logistic.net
 0.0.0.0 invest.hawzentr.com
 0.0.0.0 investasiafoundation.com
 0.0.0.0 investaweb.com
@@ -34421,7 +34421,6 @@
 0.0.0.0 itafoam.com
 0.0.0.0 itai-ziv.com
 0.0.0.0 italamp.tk
-0.0.0.0 italia-ricci.com
 0.0.0.0 italianfishrestaurantgh.com
 0.0.0.0 italianindoart.com
 0.0.0.0 italiansupercars.net
@@ -35010,7 +35009,6 @@
 0.0.0.0 jayb.xyz
 0.0.0.0 jayc-productions.com
 0.0.0.0 jaychallenge.com
-0.0.0.0 jaycochemicals.com
 0.0.0.0 jaydeemory.com
 0.0.0.0 jaydipchowdharyblog.com
 0.0.0.0 jayemservicesdev2.site
@@ -35349,6 +35347,7 @@
 0.0.0.0 jimbira-sakho.net
 0.0.0.0 jimbowe.com
 0.0.0.0 jimenezdesigngroup.com
+0.0.0.0 jimlaneevangelist.com
 0.0.0.0 jimlowry.com
 0.0.0.0 jimmibroadband.in
 0.0.0.0 jimmit.xyz
@@ -36316,6 +36315,7 @@
 0.0.0.0 k.adr.com.ua
 0.0.0.0 k.iepedacitodecielo.edu.co
 0.0.0.0 k.ludong.tv
+0.0.0.0 k.top4top.io
 0.0.0.0 k110.ir
 0.0.0.0 k12818.com
 0.0.0.0 k1ristri.ru
@@ -38845,7 +38845,6 @@
 0.0.0.0 lalolink.com
 0.0.0.0 lalunafashion.eu
 0.0.0.0 lalunenoire.net
-0.0.0.0 lam.cz
 0.0.0.0 lamacosmetics.com
 0.0.0.0 lamaggiora.it
 0.0.0.0 lamaisongourmande.live
@@ -38932,6 +38931,7 @@
 0.0.0.0 landroveroflouisville.com
 0.0.0.0 landscapeton.com
 0.0.0.0 landscapingstoneandmulchwi.com
+0.0.0.0 landschaftsservice-seibold.de
 0.0.0.0 landskronaloppis.se
 0.0.0.0 landskronamatguide.se
 0.0.0.0 landskronaportalen.se
@@ -40023,6 +40023,7 @@
 0.0.0.0 lightvalleyprune.com
 0.0.0.0 lightwerq.com
 0.0.0.0 lightyard.com
+0.0.0.0 lignar.com
 0.0.0.0 lignarium.se
 0.0.0.0 lignumpolska.com
 0.0.0.0 liguebretagnebillard.fr
@@ -40181,6 +40182,7 @@
 0.0.0.0 linkhome.ga
 0.0.0.0 linki.pro
 0.0.0.0 linkingphase.com
+0.0.0.0 linkmaxbd.com
 0.0.0.0 linkomember.info
 0.0.0.0 linkovani.cz
 0.0.0.0 linkplay.duckdns.org
@@ -40379,7 +40381,6 @@
 0.0.0.0 livetesting.xyz
 0.0.0.0 livetotry.com
 0.0.0.0 livetours.cl
-0.0.0.0 livetrack.in
 0.0.0.0 livetvsports.ml
 0.0.0.0 liveu.lk
 0.0.0.0 liviavicentini.com
@@ -43401,7 +43402,6 @@
 0.0.0.0 mbslmail.mbslbank.com
 0.0.0.0 mbsolutionssrl.it
 0.0.0.0 mbsou37.ru
-0.0.0.0 mbtechnosolutions.com
 0.0.0.0 mbupress.umbjm.ac.id
 0.0.0.0 mbve.org
 0.0.0.0 mbvvs.dk
@@ -46148,6 +46148,7 @@
 0.0.0.0 multihouse.fmcode.pl
 0.0.0.0 multila.com
 0.0.0.0 multilingualconnections.com
+0.0.0.0 multilinkspk.com
 0.0.0.0 multimedia.biscast.edu.ph
 0.0.0.0 multimix.hu
 0.0.0.0 multimovebd.com
@@ -47240,6 +47241,7 @@
 0.0.0.0 ncmt2w.bn.files.1drv.com
 0.0.0.0 ncoimbra.pt
 0.0.0.0 ncp.su
+0.0.0.0 ncpcgov.com
 0.0.0.0 ncpll1392.ir
 0.0.0.0 ncronline.in
 0.0.0.0 ncsquared.com
@@ -47394,7 +47396,6 @@
 0.0.0.0 neptanckellek.hu
 0.0.0.0 neracompany.sk
 0.0.0.0 nerasro.sk
-0.0.0.0 nerdassasins.com
 0.0.0.0 nerdsalley.com
 0.0.0.0 nerdtshirtsuk.com
 0.0.0.0 neremarketing.com
@@ -47463,7 +47464,6 @@
 0.0.0.0 netizennepal.com
 0.0.0.0 netkafem.org
 0.0.0.0 netking.duckdns.org
-0.0.0.0 netlink.com
 0.0.0.0 netm.club
 0.0.0.0 netmaffia.net
 0.0.0.0 netmansoft.com
@@ -48418,6 +48418,7 @@
 0.0.0.0 nongnghiepgiaphat.com
 0.0.0.0 nongsan24h.com
 0.0.0.0 nongsananhnguyen.com
+0.0.0.0 nongsandungha.com
 0.0.0.0 nonlocality.com
 0.0.0.0 nonnemacher.com.br
 0.0.0.0 nonnewspaper.com
@@ -48575,6 +48576,7 @@
 0.0.0.0 notiz.dk
 0.0.0.0 notlang.org
 0.0.0.0 notlrealty.com
+0.0.0.0 notomonopoly.com
 0.0.0.0 notonfirstdate.net
 0.0.0.0 notredamedesmines.fr
 0.0.0.0 notriicka.ir
@@ -48922,6 +48924,7 @@
 0.0.0.0 nygren.nu
 0.0.0.0 nygryn.net
 0.0.0.0 nygts.com
+0.0.0.0 nyifdmacyzechariah.top
 0.0.0.0 nyky.ir
 0.0.0.0 nylag.org
 0.0.0.0 nylandscaping.com
@@ -49292,7 +49295,6 @@
 0.0.0.0 ohters.de
 0.0.0.0 ohyellow.nl
 0.0.0.0 oi65.tinypic.com
-0.0.0.0 oi68.tinypic.com
 0.0.0.0 oiainbtaea38.silverabout.ml
 0.0.0.0 oiasdnqweqasd.com
 0.0.0.0 oiflddw.gq
@@ -49506,6 +49508,7 @@
 0.0.0.0 omaharefugees.com
 0.0.0.0 omaint.ml
 0.0.0.0 omalleyco-my.sharepoint.com
+0.0.0.0 omalll.com
 0.0.0.0 omanfleethtml.neomeric.us
 0.0.0.0 omarelbalshy.com
 0.0.0.0 omartinez.com
@@ -49724,6 +49727,7 @@
 0.0.0.0 onlineeregistration.com
 0.0.0.0 onlineiascoaching.com
 0.0.0.0 onlineitshop.com
+0.0.0.0 onlinejohnline99.org
 0.0.0.0 onlinekushshop.com
 0.0.0.0 onlinelab.dk
 0.0.0.0 onlinelegalsoftware.com
@@ -49973,7 +49977,6 @@
 0.0.0.0 orangeltda.cl
 0.0.0.0 orangemediterranea.es
 0.0.0.0 orangeminingsupply.com.au
-0.0.0.0 orangeph.com
 0.0.0.0 orangereel.co.uk
 0.0.0.0 orangeslonik.com
 0.0.0.0 oransky.org
@@ -50937,7 +50940,6 @@
 0.0.0.0 parsrad.ir
 0.0.0.0 parsroman.ir
 0.0.0.0 part-timebusiness.org
-0.0.0.0 partage-fichiers.com
 0.0.0.0 partage.nelmedia.ca
 0.0.0.0 partaususd.ru
 0.0.0.0 partgohar.com
@@ -52470,7 +52472,6 @@
 0.0.0.0 pmil.org
 0.0.0.0 pminfocom.com
 0.0.0.0 pmionline.us
-0.0.0.0 pmjnews.com
 0.0.0.0 pmk-55.ru
 0.0.0.0 pmlsdbs.ac.in
 0.0.0.0 pmmc.ae
@@ -53772,7 +53773,6 @@
 0.0.0.0 provisa-centr.ru
 0.0.0.0 provisol.se
 0.0.0.0 provit.fr
-0.0.0.0 provo2.com
 0.0.0.0 provoke.bg
 0.0.0.0 provolt.ro
 0.0.0.0 provost.sterlingstrustbank.tk
@@ -53902,6 +53902,7 @@
 0.0.0.0 psymonkee.com
 0.0.0.0 psynchro.org
 0.0.0.0 ptb.com.mx
+0.0.0.0 ptbsda.com
 0.0.0.0 ptci-md.org
 0.0.0.0 ptdtech.tk
 0.0.0.0 pte.vn
@@ -55228,6 +55229,7 @@
 0.0.0.0 ramashrayevents.com
 0.0.0.0 ramatfactory.com.sa
 0.0.0.0 ramayanawaterpark.cn
+0.0.0.0 ramazan20gbinternet.com
 0.0.0.0 ramazanda20.site
 0.0.0.0 ramazanda20gb.xyz
 0.0.0.0 rambu.ciamiskab.go.id
@@ -55606,6 +55608,7 @@
 0.0.0.0 rebobine.com.br
 0.0.0.0 rebomcap.eu
 0.0.0.0 reboot-hack.ru
+0.0.0.0 reboot.pro
 0.0.0.0 reborn.arteviral.com
 0.0.0.0 reborn24.com
 0.0.0.0 reborntechnology.co.uk
@@ -55691,7 +55694,6 @@
 0.0.0.0 redklee.com.ar
 0.0.0.0 redlinegt.com
 0.0.0.0 redlk.com
-0.0.0.0 redlogisticsmaroc.com
 0.0.0.0 redloop.io
 0.0.0.0 redmag.by
 0.0.0.0 redmediasigns.com
@@ -55711,6 +55713,7 @@
 0.0.0.0 redsseammgt.com
 0.0.0.0 redtek0.com
 0.0.0.0 redtv.top
+0.0.0.0 redvalidator.com
 0.0.0.0 redvelvetpatisserie.co.uk
 0.0.0.0 redwing.com.eg
 0.0.0.0 redwingdemo.dukaafrica.com
@@ -56677,6 +56680,7 @@
 0.0.0.0 robshop.lt
 0.0.0.0 robsitbon.net
 0.0.0.0 robustclarity.com
+0.0.0.0 robvanderwoude.com
 0.0.0.0 robwalls.com
 0.0.0.0 robwassotdint.ru
 0.0.0.0 robzandfitness.co.uk
@@ -56707,7 +56711,6 @@
 0.0.0.0 rocknebyvvs.se
 0.0.0.0 rocknrolletco.top
 0.0.0.0 rocknrolltrain.cn
-0.0.0.0 rockpointgroup.com
 0.0.0.0 rockradioni.co.uk
 0.0.0.0 rocksolidproducts.com
 0.0.0.0 rocksolidstickers.com
@@ -57696,6 +57699,7 @@
 0.0.0.0 sagestls.com
 0.0.0.0 sageth.net
 0.0.0.0 sagiri.org
+0.0.0.0 saglikbakanligi-destek.org
 0.0.0.0 saglikbakanligi20gbinternet.com
 0.0.0.0 saglikbakanligindanhediye20gb.com
 0.0.0.0 saglikgoalapp.site
@@ -58456,7 +58460,6 @@
 0.0.0.0 scandinavianman.designmybike.com
 0.0.0.0 scandryer.se
 0.0.0.0 scanelectric.ro
-0.0.0.0 scanliftmaskin.no
 0.0.0.0 scanlisten.sunless.network
 0.0.0.0 scannableid.com
 0.0.0.0 scanthembigbots.mikeysyach.xyz
@@ -59103,6 +59106,7 @@
 0.0.0.0 senehenryinc.ru
 0.0.0.0 senergysafrica.com
 0.0.0.0 seneta.cloud
+0.0.0.0 senevdekaldiyehediye.com
 0.0.0.0 senevdekaldiyehediyenet.com
 0.0.0.0 seniorbudgetsaver.com
 0.0.0.0 seniorenwoningbouwen.nl
@@ -59802,6 +59806,7 @@
 0.0.0.0 shedevildaughterofthedaredevil.com
 0.0.0.0 shedy.5gbfree.com
 0.0.0.0 sheedle.live
+0.0.0.0 sheeni-egypt.com
 0.0.0.0 sheenlandia.com
 0.0.0.0 sheeriuruba.com
 0.0.0.0 shefdomi.com
@@ -60625,7 +60630,6 @@
 0.0.0.0 sisustussuunnittelu.fi
 0.0.0.0 sisweb.info
 0.0.0.0 sitagroup.it
-0.0.0.0 sitcomsonline.com
 0.0.0.0 site-2.work
 0.0.0.0 site-4.work
 0.0.0.0 site-internet-belfort.fr
@@ -60652,7 +60656,6 @@
 0.0.0.0 siteradar.com
 0.0.0.0 sites.blueskydigital.com.au
 0.0.0.0 sites.btb.kg
-0.0.0.0 sites.ieee.org
 0.0.0.0 sites.linkysoft.com
 0.0.0.0 sites.webdefy.com
 0.0.0.0 sitesbrgiga.com.br
@@ -61140,7 +61143,6 @@
 0.0.0.0 smeare.com
 0.0.0.0 smed13.inducido.com
 0.0.0.0 smedegaarden.dk
-0.0.0.0 smedia.com.au
 0.0.0.0 smeets.ca
 0.0.0.0 smeetspost.nl
 0.0.0.0 smefood.com
@@ -61759,6 +61761,7 @@
 0.0.0.0 sophiebarthelemy.fr
 0.0.0.0 sophieguaremas.com
 0.0.0.0 sophiethomasartist.com
+0.0.0.0 sophis.biz
 0.0.0.0 sophistproduction.com
 0.0.0.0 sophro-zara.com
 0.0.0.0 sophrologie-untempspourmoi.fr
@@ -62771,6 +62774,7 @@
 0.0.0.0 statewidehomesavings.com
 0.0.0.0 statexadver3552mn12.club
 0.0.0.0 static-4matic.club
+0.0.0.0 static.3001.net
 0.0.0.0 static.caregivers.blueweb.md
 0.0.0.0 static.error-soft.net
 0.0.0.0 static.ilclock.com
@@ -64536,6 +64540,7 @@
 0.0.0.0 takeitfromtheman.com
 0.0.0.0 takemetohimalayas.com
 0.0.0.0 takenpaybd.com
+0.0.0.0 takernvandrarhem.se
 0.0.0.0 takeshimiyamoto.com
 0.0.0.0 takeshykurosavabest.com
 0.0.0.0 takharandshankertour.com
@@ -64625,6 +64630,7 @@
 0.0.0.0 tampacigarroller.com
 0.0.0.0 tamparoofing.com
 0.0.0.0 tampaseo.com
+0.0.0.0 tamsu.website
 0.0.0.0 tamsuamy.com
 0.0.0.0 tamsys.net
 0.0.0.0 tamta.gr
@@ -65528,6 +65534,7 @@
 0.0.0.0 terranovaoutdoorliving.com
 0.0.0.0 terranowwa.org
 0.0.0.0 terraoferta.club
+0.0.0.0 terrapersonas.com
 0.0.0.0 terrasol.cl
 0.0.0.0 terratacuara.com
 0.0.0.0 terrats.biz
@@ -65881,7 +65888,6 @@
 0.0.0.0 tfu.ae
 0.0.0.0 tfulf.host
 0.0.0.0 tfullerton.com
-0.0.0.0 tfvn.com.vn
 0.0.0.0 tgbabcrfv.1apps.com
 0.0.0.0 tgbot.cf
 0.0.0.0 tgcool.gq
@@ -66282,6 +66288,7 @@
 0.0.0.0 theinspireddrive.com
 0.0.0.0 theintelligencer.com.ng
 0.0.0.0 theinvestmentinvestigator.com
+0.0.0.0 theipgenerators.com
 0.0.0.0 theirishhouse.dk
 0.0.0.0 theiro.com
 0.0.0.0 theisel.de
@@ -68550,6 +68557,7 @@
 0.0.0.0 tuvandoanhnghiep.org
 0.0.0.0 tuvanduhocdaiviet.com.vn
 0.0.0.0 tuvanduhocduc.org
+0.0.0.0 tuvanduhocmap.com
 0.0.0.0 tuvangamenet.com
 0.0.0.0 tuvangioitinh.com
 0.0.0.0 tuvanluat.vn
@@ -68691,7 +68699,6 @@
 0.0.0.0 u.coka.la
 0.0.0.0 u.jimdo.com
 0.0.0.0 u.lewd.se
-0.0.0.0 u.teknik.io
 0.0.0.0 u0005132m0005jp.u023jp9938.info
 0.0.0.0 u0039435.cp.regruhosting.ru
 0.0.0.0 u0287442.isp.regruhosting.ru
@@ -69330,6 +69337,7 @@
 0.0.0.0 up.qatarw.com
 0.0.0.0 up.vltk1ctc.com
 0.0.0.0 up2m.politanisamarinda.ac.id
+0.0.0.0 up4net.com
 0.0.0.0 up9.co.99.com
 0.0.0.0 upa1.hognoob.se
 0.0.0.0 upa2.hognoob.se
@@ -69541,7 +69549,6 @@
 0.0.0.0 url.57569.fr.snd52.ch
 0.0.0.0 url.edu
 0.0.0.0 url.sg
-0.0.0.0 url2.mailanyone.net
 0.0.0.0 url3.mailanyone.net
 0.0.0.0 url5459.41southbar.com
 0.0.0.0 url9823.ville.labrecque.qc.ca
@@ -70753,6 +70760,7 @@
 0.0.0.0 vip-watch.store
 0.0.0.0 vip.lijinxi.com
 0.0.0.0 vip.maohuagong.com
+0.0.0.0 vip.muabannhanh.com
 0.0.0.0 vip.recommendedtoyoo.com
 0.0.0.0 vip.zbfcxx.cn
 0.0.0.0 vip163.cf
@@ -71785,6 +71793,7 @@
 0.0.0.0 web.hfsistemas.com
 0.0.0.0 web.ismt.pt
 0.0.0.0 web.muasam360.com
+0.0.0.0 web.opendrive.com
 0.0.0.0 web.pa-cirebon.go.id
 0.0.0.0 web.plf.vn
 0.0.0.0 web.riderit.com
@@ -72507,7 +72516,6 @@
 0.0.0.0 win1more.com
 0.0.0.0 win32.x10host.com
 0.0.0.0 winactive.host
-0.0.0.0 winandgo-dz.com
 0.0.0.0 winapp24.pl
 0.0.0.0 winast.com
 0.0.0.0 winbacklostlove.com
@@ -72713,7 +72721,6 @@
 0.0.0.0 wmebbiz.co.za
 0.0.0.0 wmf.desevens.com.ng
 0.0.0.0 wmg128.com
-0.0.0.0 wmi.1217bye.host
 0.0.0.0 wmkatz.com
 0.0.0.0 wmo-raad.inov.me
 0.0.0.0 wmpatagonia.cl
@@ -72814,7 +72821,6 @@
 0.0.0.0 woodmillcreek.com
 0.0.0.0 woodnbitz.com
 0.0.0.0 woodofkosta.com
-0.0.0.0 woodsiam.com
 0.0.0.0 woodstocktimbers.com
 0.0.0.0 woodstoneltd.com
 0.0.0.0 woodsytech.com
@@ -73311,6 +73317,7 @@
 0.0.0.0 wz6.com.cn
 0.0.0.0 wzgysg.com
 0.0.0.0 wzjp.boyuberq.ru
+0.0.0.0 wzlegal.com
 0.0.0.0 wzry173.com
 0.0.0.0 wzrysp.com
 0.0.0.0 wzsfkq.dm.files.1drv.com
@@ -73487,6 +73494,7 @@
 0.0.0.0 xinchao.asia
 0.0.0.0 xindetrading.000webhostapp.com
 0.0.0.0 xing.monerov9.com
+0.0.0.0 xingyang-glove.com
 0.0.0.0 xingyiqinhang.com
 0.0.0.0 xinhkorea.com
 0.0.0.0 xinlou.info
@@ -75372,6 +75380,7 @@
 0.0.0.0 zsxzfgg.com
 0.0.0.0 zsz-spb.ru
 0.0.0.0 ztbearing68.com
+0.0.0.0 ztds.online
 0.0.0.0 ztds2.online
 0.0.0.0 zteandroid.com
 0.0.0.0 ztecom.cn
diff --git a/urlhaus-filter-online.txt b/urlhaus-filter-online.txt
index ed03d3a3..9162c9da 100644
--- a/urlhaus-filter-online.txt
+++ b/urlhaus-filter-online.txt
@@ -1,5 +1,5 @@
 ! Title: abuse.ch URLhaus Online Malicious URL Blocklist
-! Updated: Sat, 02 May 2020 00:09:31 UTC
+! Updated: Sat, 02 May 2020 12:09:27 UTC
 ! Expires: 1 day (update frequency)
 ! Repo: https://gitlab.com/curben/urlhaus-filter
 ! License: https://creativecommons.org/publicdomain/zero/1.0/
@@ -21,7 +21,6 @@
 1.246.222.20
 1.246.222.228
 1.246.222.232
-1.246.222.234
 1.246.222.237
 1.246.222.245
 1.246.222.249
@@ -40,7 +39,6 @@
 1.246.222.98
 1.246.223.103
 1.246.223.109
-1.246.223.125
 1.246.223.126
 1.246.223.127
 1.246.223.130
@@ -55,7 +53,6 @@
 1.246.223.35
 1.246.223.39
 1.246.223.44
-1.246.223.49
 1.246.223.52
 1.246.223.54
 1.246.223.55
@@ -77,19 +74,20 @@
 101.255.36.154
 101.255.54.38
 102.182.126.91
+102.68.153.66
 103.139.219.9
 103.16.145.25
 103.204.168.34
 103.214.6.199
 103.221.254.130
 103.230.62.146
+103.234.226.133
 103.237.173.218
 103.240.249.121
 103.245.199.222
 103.247.217.147
 103.254.205.135
 103.255.235.219
-103.31.47.214
 103.49.56.38
 103.50.4.235
 103.51.249.64
@@ -126,7 +124,6 @@
 108.220.3.201
 108.237.60.93
 108.77.246.129
-108.95.162.21
 109.104.197.153
 109.124.90.229
 109.167.200.82
@@ -135,9 +132,9 @@
 109.185.229.159
 109.185.26.178
 109.233.196.232
+109.248.58.238
 109.86.85.253
 109.88.185.119
-109.95.15.210
 109.96.57.246
 110.154.15.122
 110.154.250.225
@@ -160,6 +157,7 @@
 111.185.227.170
 111.185.231.198
 111.185.235.13
+111.185.48.248
 111.38.25.230
 111.38.25.34
 111.38.25.89
@@ -174,23 +172,11 @@
 111.38.30.47
 111.38.9.115
 111.40.79.79
-111.42.102.70
 111.42.102.71
-111.42.102.78
 111.42.103.107
 111.42.103.28
 111.42.103.48
-111.42.66.30
-111.42.66.53
-111.43.223.112
-111.43.223.136
-111.43.223.156
-111.43.223.159
-111.43.223.167
-111.43.223.24
-111.43.223.38
-111.43.223.54
-111.43.223.67
+111.42.66.55
 111.61.52.53
 111.90.150.64
 111.90.187.162
@@ -198,7 +184,8 @@
 112.122.61.250
 112.123.109.196
 112.123.61.18
-112.123.61.9
+112.156.36.178
+112.160.193.57
 112.160.56.81
 112.163.80.114
 112.166.251.121
@@ -212,8 +199,6 @@
 112.170.205.85
 112.170.23.21
 112.184.231.90
-112.184.88.60
-112.185.140.99
 112.187.143.180
 112.187.217.80
 112.187.5.125
@@ -224,6 +209,7 @@
 112.27.91.247
 112.78.45.158
 113.11.95.254
+113.219.81.166
 113.221.50.64
 113.240.186.132
 113.254.169.251
@@ -236,11 +222,13 @@
 114.226.84.3
 114.226.9.206
 114.227.1.22
+114.228.63.106
 114.229.18.229
 114.229.42.210
 114.232.176.199
 114.234.104.158
 114.234.150.187
+114.234.46.95
 114.234.69.205
 114.235.202.95
 114.235.208.243
@@ -257,30 +245,24 @@
 115.216.210.105
 115.229.200.2
 115.49.154.25
-115.49.246.62
+115.49.37.132
 115.50.166.178
 115.53.130.208
-115.56.51.119
 115.58.127.178
 115.59.17.176
-115.59.3.153
 115.77.186.182
 115.85.65.211
 116.100.249.121
-116.114.95.108
-116.114.95.186
-116.114.95.230
-116.114.95.234
-116.114.95.50
-116.114.95.89
+116.114.95.86
 116.177.178.206
 116.177.179.202
+116.206.164.46
+117.123.171.105
 117.206.159.20
 117.55.133.56
 117.63.51.128
 117.86.24.209
 117.87.44.106
-117.87.72.41
 117.90.128.14
 117.90.89.95
 117.93.176.207
@@ -296,13 +278,13 @@
 118.32.199.219
 118.35.65.115
 118.37.91.137
+118.38.242.167
 118.40.183.176
 118.42.208.62
 118.46.36.186
 118.46.7.246
 118.99.179.164
 118.99.239.217
-119.102.153.184
 119.194.91.157
 119.2.48.159
 119.203.9.192
@@ -340,12 +322,9 @@
 121.159.208.28
 121.163.48.30
 121.165.140.117
-121.168.227.85
-121.176.31.174
 121.177.37.127
 121.178.96.50
 121.179.232.246
-121.180.181.177
 121.180.75.151
 121.184.131.249
 121.186.105.200
@@ -359,19 +338,19 @@
 121.233.24.190
 121.233.68.89
 121.86.113.254
-122.243.173.3
 123.0.198.186
 123.0.209.88
-123.10.101.22
 123.10.159.88
 123.11.194.45
 123.11.25.79
-123.12.196.225
+123.11.78.157
+123.12.222.242
 123.194.235.37
 123.194.60.238
 123.241.112.94
+123.4.156.19
+123.4.54.173
 123.51.152.54
-123.9.37.45
 124.67.89.238
 125.125.44.18
 125.130.59.163
@@ -381,8 +360,7 @@
 125.18.28.170
 125.209.71.6
 125.26.165.244
-125.40.75.189
-125.47.248.28
+125.47.80.74
 128.65.183.8
 128.65.187.123
 129.121.176.89
@@ -392,9 +370,9 @@
 139.5.177.10
 139.5.177.19
 13pope.com
-14.113.231.72
 14.141.175.107
 14.161.4.53
+14.33.86.236
 14.34.165.243
 14.37.6.148
 14.41.57.152
@@ -408,14 +386,16 @@
 141.0.178.134
 141.226.28.195
 141.226.94.115
+142.11.194.209
 142.11.195.135
 142.11.206.45
-142.11.232.26
 142.169.129.243
 144.132.166.70
 144.136.155.166
-145.255.26.115
+144.217.117.146
 146.71.79.230
+147.91.212.250
+149.56.84.15
 150.co.il
 151.232.56.134
 151.236.38.234
@@ -426,28 +406,25 @@
 159.224.23.120
 159.224.74.112
 162.212.113.149
+162.212.113.168
 162.212.113.70
-162.212.114.107
 162.212.114.196
 162.212.114.65
-162.212.115.118
 162.250.126.186
 163.13.182.105
 163.22.51.1
-163.47.145.202
 164.132.92.180
 165.227.220.53
 165.73.60.72
-165.90.16.5
 167.114.85.125
 167.250.49.155
 168.121.239.172
 171.232.106.147
+171.235.177.250
 171.248.114.46
 171.42.97.178
 172.84.255.201
 172.90.37.142
-173.15.162.151
 173.15.162.156
 173.160.86.173
 173.161.208.193
@@ -463,10 +440,11 @@
 174.2.176.60
 174.48.14.129
 175.10.145.138
+175.199.142.182
+175.200.153.48
 175.202.162.120
 175.208.203.123
 175.210.50.4
-175.211.16.150
 175.212.31.241
 175.212.52.9
 175.213.134.89
@@ -481,8 +459,8 @@
 176.113.161.126
 176.113.161.128
 176.113.161.133
-176.113.161.136
 176.113.161.138
+176.113.161.37
 176.113.161.41
 176.113.161.47
 176.113.161.51
@@ -501,7 +479,6 @@
 176.113.161.91
 176.113.161.92
 176.113.161.93
-176.113.161.94
 176.12.117.70
 176.14.234.5
 176.178.184.124
@@ -533,7 +510,6 @@
 178.214.73.181
 178.22.117.102
 178.233.234.188
-178.242.54.236
 178.34.183.30
 178.48.235.59
 179.108.246.34
@@ -545,9 +521,9 @@
 180.104.9.150
 180.115.66.239
 180.116.17.37
+180.116.210.174
 180.116.224.151
 180.116.224.91
-180.116.47.28
 180.116.96.229
 180.117.89.28
 180.117.91.251
@@ -591,13 +567,9 @@
 181.224.242.131
 181.40.117.138
 181.48.187.146
-181.49.241.50
-182.113.220.114
-182.113.240.159
 182.115.245.137
 182.126.101.85
 182.127.242.93
-182.127.88.130
 182.142.119.93
 182.160.101.51
 182.160.125.229
@@ -609,7 +581,8 @@
 183.100.109.156
 183.105.206.26
 183.106.201.118
-183.215.188.45
+183.107.57.170
+183.151.83.28
 183.221.125.206
 183.4.28.24
 183.4.30.251
@@ -620,7 +593,6 @@
 185.138.123.179
 185.14.250.199
 185.153.196.209
-185.172.110.214
 185.172.110.216
 185.172.110.224
 185.172.110.232
@@ -635,7 +607,6 @@
 185.244.39.123
 185.34.16.231
 185.43.19.151
-185.5.229.8
 185.83.88.108
 185.94.172.29
 185.94.33.22
@@ -644,14 +615,13 @@
 186.179.243.112
 186.188.241.98
 186.225.120.173
-186.225.177.46
 186.227.145.138
 186.232.44.86
 186.249.13.62
 186.251.253.134
 186.34.4.40
 186.42.255.230
-186.73.188.132
+187.107.191.197
 187.12.10.98
 187.120.123.187
 187.183.213.88
@@ -685,7 +655,6 @@
 190.109.189.204
 190.110.161.252
 190.119.207.58
-190.12.4.98
 190.12.99.194
 190.128.135.130
 190.130.15.212
@@ -719,6 +688,7 @@
 192.236.147.189
 192.236.147.67
 193.106.57.83
+193.142.146.30
 193.228.135.144
 193.248.246.94
 193.38.51.25
@@ -743,14 +713,15 @@
 196.32.106.85
 197.155.66.202
 197.159.2.106
-197.254.106.78
 197.51.235.38
 198.24.75.52
 199.36.76.2
 199.83.203.104
 199.83.203.137
+199.83.203.70
 199.83.203.85
 199.83.204.89
+199.83.206.243
 2.180.33.118
 2.180.37.166
 2.185.150.180
@@ -776,18 +747,16 @@
 200.69.74.28
 200.85.168.202
 2000kumdo.com
+201.103.20.67
+201.184.163.170
 201.184.241.123
 201.187.102.73
 201.202.55.118
-201.203.212.194
 201.203.27.37
 201.234.138.92
 201.239.99.172
 201.46.27.101
-201.75.4.149
-202.107.233.41
 202.133.193.81
-202.148.20.130
 202.149.90.98
 202.166.206.80
 202.166.21.123
@@ -797,12 +766,13 @@
 202.4.124.58
 202.51.191.174
 202.74.236.9
+202.79.46.30
 203.114.116.37
 203.129.254.50
 203.163.211.46
+203.188.242.148
 203.193.173.179
 203.202.243.233
-203.202.245.77
 203.202.246.246
 203.202.248.237
 203.204.217.4
@@ -810,8 +780,10 @@
 203.70.166.107
 203.77.80.159
 203.80.171.138
+203.80.171.149
 203.82.36.34
 203.83.174.227
+208.113.133.35
 208.163.58.18
 209.141.53.115
 209.45.49.177
@@ -825,9 +797,6 @@
 210.76.64.46
 211.106.11.193
 211.107.230.86
-211.137.225.126
-211.137.225.60
-211.137.225.61
 211.179.143.199
 211.187.75.220
 211.192.121.74
@@ -837,6 +806,7 @@
 211.195.27.69
 211.196.28.116
 211.197.212.57
+211.216.116.40
 211.223.166.51
 211.224.8.211
 211.225.152.102
@@ -851,6 +821,7 @@
 212.126.125.226
 212.133.243.104
 212.143.128.83
+212.154.51.216
 212.159.128.72
 212.179.253.246
 212.186.128.58
@@ -865,6 +836,7 @@
 213.27.8.6
 213.57.78.231
 213.7.222.78
+213.92.198.8
 213.97.24.164
 216.15.112.251
 216.183.54.169
@@ -877,14 +849,12 @@
 217.8.117.23
 217.8.117.76
 218.144.252.19
-218.156.132.7
+218.154.126.150
 218.156.26.85
 218.157.214.219
-218.159.238.10
-218.161.3.200
 218.203.206.137
 218.21.170.244
-218.21.170.84
+218.21.171.51
 218.234.125.7
 218.255.247.58
 218.31.2.125
@@ -894,18 +864,17 @@
 218.35.55.121
 218.52.230.160
 218.72.196.220
-219.154.105.40
 219.154.185.229
 219.155.209.111
 219.68.1.148
 219.68.245.63
 219.68.251.32
+219.70.238.66
 219.70.63.196
 219.80.217.209
 21robo.com
 220.120.114.39
 220.122.180.53
-220.171.194.244
 220.71.176.94
 220.82.140.17
 221.14.13.121
@@ -921,11 +890,9 @@
 221.167.18.122
 221.210.211.132
 221.210.211.16
-221.210.211.60
-221.226.86.151
+221.210.211.25
 222.113.138.43
 222.116.70.13
-222.139.66.54
 222.185.161.165
 222.185.199.202
 222.185.73.210
@@ -935,14 +902,12 @@
 222.188.131.220
 222.242.158.161
 222.242.182.26
-222.243.14.67
 222.81.213.61
+222.81.223.165
 23.122.183.241
 23.228.143.58
-23.238.204.36
 23.247.102.120
 23.254.226.60
-23.95.89.80
 23.95.89.93
 24.0.252.145
 24.10.116.43
@@ -962,10 +927,10 @@
 27.116.84.57
 27.147.29.52
 27.147.40.128
+27.155.87.120
 27.238.33.39
+27.41.176.93
 27.41.178.53
-27.41.181.223
-27.41.213.143
 27.48.138.13
 27.65.63.54
 3.zhzy999.net
@@ -1007,7 +972,6 @@
 36.33.133.226
 36.33.138.140
 36.34.150.235
-36.34.234.8
 36.35.160.240
 36.39.47.194
 36.66.105.159
@@ -1035,8 +999,8 @@
 37.34.228.1
 37.34.250.243
 37.49.226.162
-37.49.226.168
 37.49.226.209
+37.49.226.230
 37.49.230.234
 37.54.14.36
 3mandatesmedia.com
@@ -1046,7 +1010,6 @@
 41.190.63.174
 41.190.70.238
 41.211.112.82
-41.219.185.171
 41.228.175.30
 41.32.132.218
 41.32.170.13
@@ -1056,17 +1019,17 @@
 41.79.234.90
 42.115.12.180
 42.115.25.55
+42.115.86.142
 42.226.73.191
 42.226.74.158
-42.232.224.254
+42.230.250.178
 42.234.117.70
 42.234.202.31
-42.235.63.163
-42.239.99.162
 42.61.99.155
 42.82.191.105
 43.252.8.94
 45.115.253.82
+45.115.254.154
 45.118.165.115
 45.133.9.21
 45.138.97.46
@@ -1074,17 +1037,16 @@
 45.14.150.29
 45.14.151.249
 45.147.228.245
-45.148.122.113
-45.19.201.181
+45.154.1.122
+45.154.1.58
+45.163.149.85
 45.221.78.166
 45.221.78.38
 45.229.22.195
 45.49.113.70
 45.50.228.207
 45.95.168.202
-45.95.168.254
 45.95.168.97
-45.95.169.234
 45.95.169.254
 46.100.251.72
 46.100.56.152
@@ -1092,7 +1054,6 @@
 46.107.48.22
 46.121.82.70
 46.151.9.29
-46.161.185.15
 46.172.75.231
 46.175.138.75
 46.176.44.211
@@ -1116,7 +1077,6 @@
 49.116.212.4
 49.116.214.38
 49.117.189.177
-49.119.56.127
 49.143.43.93
 49.156.35.166
 49.156.44.134
@@ -1135,13 +1095,13 @@
 49.68.235.19
 49.68.250.118
 49.68.54.141
-49.70.137.78
 49.70.234.20
 49.81.134.147
-49.82.14.191
+49.81.238.9
 49.82.192.122
 49.82.196.117
 49.82.249.71
+49.82.252.4
 49.82.252.63
 49.84.125.254
 49.84.93.106
@@ -1154,7 +1114,6 @@
 49parallel.ca
 5.101.196.90
 5.101.213.234
-5.128.62.127
 5.185.85.122
 5.19.248.85
 5.198.241.29
@@ -1180,23 +1139,26 @@
 58.243.123.161
 58.243.124.204
 58.243.124.51
+58.243.126.93
 58.243.127.176
 58.243.190.127
+58.243.20.78
 58.255.191.220
 58.40.122.158
 59.0.224.88
 59.0.78.18
 59.1.81.1
 59.12.134.224
-59.174.151.114
 59.2.40.1
 59.22.144.136
 59.23.208.62
+59.4.104.15
 59.7.40.82
 60.184.150.81
 60.184.172.193
 60.188.104.239
 61.168.136.199
+61.241.170.153
 61.247.224.66
 61.56.182.218
 61.58.174.253
@@ -1205,6 +1167,7 @@
 61.70.110.59
 61.70.45.130
 61.75.111.224
+61.77.146.65
 61.82.215.186
 61.83.40.183
 62.1.98.131
@@ -1214,6 +1177,7 @@
 62.201.230.43
 62.215.101.230
 62.219.131.205
+62.219.227.20
 62.232.203.90
 62.34.210.232
 62.38.149.66
@@ -1222,6 +1186,7 @@
 62.80.231.196
 62.82.172.42
 62.90.219.154
+63.250.42.34
 63.78.214.55
 64.53.172.125
 65.125.128.196
@@ -1234,7 +1199,6 @@
 66.96.241.234
 66.96.252.2
 67.8.138.101
-68.129.32.96
 68.134.186.196
 68.174.119.7
 68.204.73.133
@@ -1262,12 +1226,12 @@
 72.69.204.59
 72.89.84.172
 73.0.143.64
-73.139.46.234
 73.231.235.88
 73.233.67.25
 73.55.122.210
 73.96.196.198
 74.113.230.55
+74.66.217.253
 74.75.165.81
 75.3.198.176
 75.55.248.20
@@ -1353,6 +1317,7 @@
 82.81.196.247
 82.81.197.254
 82.81.207.162
+82.81.215.149
 82.81.230.112
 82.81.232.68
 82.81.25.188
@@ -1368,6 +1333,7 @@
 84.10.31.238
 84.197.14.92
 84.20.68.26
+84.228.102.152
 84.228.95.204
 84.241.16.78
 84.31.23.33
@@ -1379,6 +1345,7 @@
 85.105.155.39
 85.105.165.236
 85.187.253.219
+85.217.170.105
 85.222.91.82
 85.238.105.94
 85.64.181.50
@@ -1387,23 +1354,20 @@
 86.105.60.204
 86.107.163.176
 86.107.163.98
-86.107.167.93
 86.18.117.139
 87.120.235.164
 87.241.175.89
 87.66.219.63
 87.97.154.37
 88.102.33.14
-88.156.169.98
+88.201.34.243
 88.218.16.118
 88.218.16.37
 88.218.16.38
-88.218.17.222
 88.220.80.210
 88.225.222.128
 88.247.194.52
 88.248.121.238
-88.250.196.101
 88.250.85.219
 887sconline.com
 88mscco.com
@@ -1422,16 +1386,15 @@
 90.63.176.144
 91.134.252.221
 91.149.191.182
-91.177.139.132
 91.187.103.32
 91.187.119.26
 91.191.32.34
+91.196.36.84
 91.215.126.208
 91.216.149.130
 91.217.2.120
 91.217.221.68
 91.221.177.94
-91.234.60.94
 91.237.238.242
 91.244.114.198
 91.244.169.139
@@ -1446,6 +1409,7 @@
 92.45.198.60
 92.51.127.94
 92.55.124.64
+93.102.193.254
 93.116.166.51
 93.119.236.72
 93.122.213.217
@@ -1453,10 +1417,10 @@
 93.176.185.223
 93.185.10.131
 93.56.36.84
-93.70.125.94
 93.73.99.102
 93.77.52.138
 93.93.199.254
+93.93.62.183
 94.154.17.170
 94.154.82.190
 94.156.57.84
@@ -1469,6 +1433,7 @@
 94.244.25.21
 94.41.0.174
 94.53.120.109
+94.64.246.247
 95.156.65.14
 95.167.138.250
 95.167.71.245
@@ -1492,6 +1457,7 @@
 a-reality.co.uk
 a.xiazai163.com
 aaasolution.co.th
+accentlandscapes.com
 accessyouraudience.com
 acdesignhub.com
 acteon.com.ar
@@ -1525,9 +1491,8 @@ alohasoftware.net
 alphaconsumer.net
 am-concepts.ca
 amd.alibuf.com
-amedeoscognamiglio.329263.com
 amemarine.co.th
-americanrange.com
+americanrange.com/HomeFedEx.jar
 anadolutatili.com
 anamikaindanegas.in
 andreelapeyre.com
@@ -1544,7 +1509,6 @@ arcticprospectus.com
 areac-agr.com
 aresorganics.com
 arowanafishforsale.com
-asadairtravel.com
 ascentive.com
 ashoakacharya.com
 askarindo.or.id
@@ -1567,6 +1531,7 @@ bamakobleach.free.fr
 bangkok-orchids.com
 banzaimonkey.com
 bapo.granudan.cn
+baritaco.com
 baybars.xyz
 bbs.sunwy.org
 bbs1.marisfrolg.com
@@ -1582,7 +1547,6 @@ beta.pterosol.com
 bflow.security-portal.cz
 bildeboks.no
 bilim-pavlodar.gov.kz
-billieellish.org
 bingxiong.vip
 bitbucket.org/destek21/3reklam/downloads/20gbhediyesi.apk
 bitbucket.org/destek21/3reklam/downloads/androidsecurity.apk
@@ -1601,7 +1565,6 @@ brbs.customer.netspace.net.au
 brenleyquartzgh.com
 brewmethods.com
 btlocum.pl
-bucketstrong.s3-us-west-1.amazonaws.com
 bugansavings.com
 buhleni.co.za
 buydishtv.in
@@ -1620,8 +1583,8 @@ ccnn.xiaomier.cn
 cdn-10049480.file.myqcloud.com
 cdn.discordapp.com/attachments/422956597141307392/520711166608015380/PFPX-Keygen.zip
 cdn.speedof.me/sample4096k.bin?r=0.1570982201
-cdn.truelife.vn/webtube/201310/2139273/pianito.exe
-cdn.xiaoduoai.com/cvd/dist/fileUpload/1558331409488/4.284737936785339.jpg
+cdn.truelife.vn
+cdn.xiaoduoai.com
 cdnus.laboratoryconecpttoday.com
 ceirecrear.com.br
 cellas.sk
@@ -1632,7 +1595,6 @@ ch.rmu.ac.th
 changematterscounselling.com
 chanvribloc.com
 charm.bizfxr.com
-chattosport.com
 chauffeursontravel.com
 chedea.eu
 chinhdropfile.myvnc.com
@@ -1640,7 +1602,9 @@ chinhdropfile80.myvnc.com
 chipmarkets.com
 chj.m.dodo52.com
 chuckweiss.com
+cinnamoncreations.com.au
 cirugiagenital.com.mx
+cista-dobra-voda.com
 clareiamente.clareiamente.com
 clearwaterriveroutfitting.com
 client.yaap.co.uk
@@ -1650,21 +1614,17 @@ codeload.github.com/MeteorAdminz/hidden-tear/zip/master
 codeload.github.com/Visgean/Zeus/zip/translation
 codeload.github.com/beefproject/beef/zip/beef-0.4.6.1
 codeload.github.com/beefproject/beef/zip/master
-colombet-taxi.fr
 colourcreative.co.za
 compesat.com
 complan.hu
 complanbt.hu
 comtechadsl.com
 config.kuaisousou.top
-consultingcy.com
 counciloflight.bravepages.com
-cp-30.theborough.com.au
 cqjcc.org
 crimebranch.in
 crittersbythebay.com
 cryline.net
-cryptoomarket.com
 csnserver.com
 csw.hu
 cuacuonsieure.com
@@ -1683,11 +1643,9 @@ davinadouthard.com
 dawaphoto.co.kr
 daynightgym.com
 dbssistem.com.tr
+ddl7.data.hu/get/276047/12415685/Order_002_PDF.gz
 ddl7.data.hu/get/276953/12415682/Order_002_PDF.gz
 ddl7.data.hu/get/289943/12415683/quotation_for_Sayyar_PDF.gz
-ddl7.data.hu/get/294102/12415670/Inv__PList_PDF.gz
-ddl7.data.hu/get/294970/12415680/Order_002_PDF.gz
-ddl7.data.hu/get/320756/12414239/company_profile_as_requested_and_Purchase_Order_.zip
 ddl7.data.hu/get/367667/12415684/quotation_for_Sayyar_PDF.gz
 de.gsearch.com.de
 deixameuskls.tripod.com
@@ -1705,10 +1663,10 @@ dfd.zhzy999.net
 dfzm.91756.cn
 dgecolesdepolice.bf
 dgnj.cn
-dhlservices.duckdns.org
 diazavendano.cl
 dichvuvesinhcongnghiep.top
 dienmaycu.vn
+dieselmoreno.cl
 digilib.dianhusada.ac.id
 digital-marketing-institute-delhi.empeeevents.com
 digitaldog.de
@@ -1720,7 +1678,6 @@ dl-gameplayer.dmm.com
 dl.1003b.56a.com
 dl.198424.com
 dl.dzqzd.com
-dl.iqilie.com
 dl.kuaile-u.com
 dl2.soft-lenta.ru
 dlist.iqilie.com
@@ -1732,7 +1689,6 @@ docs.google.com/uc?export=download&id=1ia3WELHtRhs0Fe4ag2_O0aVkyzi_zUpx
 docs.google.com/uc?id=1R0ybQzfybvmes2v71jwlMHBvFe8-MVMy
 dodsonimaging.com
 don.viameventos.com.br
-dongiln.co
 donmago.com
 doostansocks.ir
 doransky.info
@@ -1766,14 +1722,7 @@ download301.wanmei.com
 dpeasesummithilltoppers.pbworks.com
 dr080.com
 dralpaslan.com
-dreamtrips.cheap/dreamtrips.exe
-dreamtrips.cheap/dreamtrips_mix.exe
-dreamtrips.cheap/dreamtrips_mix1.exe
-dreamtrips.cheap/dreamtrips_us1.exe
-dreamtrips.cheap/dreamtrips_us2.exe
-dreamtrips.cheap/dreamtrips_us3.exe
-dreamtrips.cheap/dreamtrips_us4.exe
-dreamtrips.cheap/dreamtrips_us5.exe
+dreamtrips.cheap
 drive.google.com.it-barcelona.com/frm0reseen/PrntScrnOfAMZOrderID.jpg.exe
 drive.google.com/u/0/uc?id=12iFCPIkFttDepyF-50TP5ToEO5PUJTkl&export=download
 drive.google.com/u/0/uc?id=14478IMd3BD6V_Igv0a4E6gV_rPgeIMI4&export=download
@@ -1867,6 +1816,7 @@ drive.google.com/uc?id=1cn5ISDc2CQeyenvhyQxd2IHPIMBqleRG&export=download
 drive.google.com/uc?id=1dIfbX6Le_594WZUuWY3eYsNL12_-jRVP&export=download
 drive.google.com/uc?id=1e18RJ3xLqJPL5A_FTe1PtFDORun5h_Jl&export=download
 drive.google.com/uc?id=1eOzacxbxvlB9F9nInX3fdP8sjjlthi3W&export=download
+drive.google.com/uc?id=1eRTPmoUTpVVU19aONDr-yo0-RNkG5l07&export=download
 drive.google.com/uc?id=1eh3cqzgCx2RPJmKMJ9qJwZVYDf5oKI6R&export=download
 drive.google.com/uc?id=1emlap-VVjPLvplwk1BlUfZPCZmwDnIcR&export=download
 drive.google.com/uc?id=1er-HsVxQERfsHnK-TYAQWzE6_TO55yj-&export=download
@@ -1917,12 +1867,12 @@ druzim.freewww.biz
 drwendyellis.com
 dsiun.com
 dtsay.xyz
-dudulm.com
+duongfpt.ga
 dusdn.mireene.com
+dw.58wangdun.com
 dx.qqyewu.com
 dx1.qqtn.com
 dx2.qqtn.com
-dx30.siweidaoxiang.com
 dx60.siweidaoxiang.com
 dzinestudio87.co.uk
 e.dangeana.com
@@ -1969,6 +1919,7 @@ flex.ru/files/flex_internet_x64.exe
 flood-protection.org
 fordlamdong.com.vn
 foreverprecious.org
+foxfennecs.com
 frin.ng
 fs12n1.sendspace.com/dlpro/7d6620756eb6d96cdd79d5222a950d65/5e40884d/rdul3d/g.exe
 fs12n2.sendspace.com/dlpro/b9c5235bb3049bbfc7d25856210dd47e/5e418c45/rdul3d/g.exe
@@ -1982,19 +1933,17 @@ fte.m.dodo52.com
 ftpcnc-p2sp.pconline.com.cn
 ftpftpftp.com
 funletters.net
+funpartyrent.com
 futuregraphics.com.ar
 g.7230.com
 g0ogle.free.fr
-gainsdirectory.com
 galuhtea.com
 gamee.top
-garage.themebuffets.com
 garenanow.myvnc.com
 garenanow4.myvnc.com
 gargiulo.com.ar
 gateway-heide.de
 gateway.ethlqd.com
-gd2.greenxf.com
 geenicreations.com
 genesisconstruction.co.za
 germistonmiraclecentre.co.za
@@ -2009,7 +1958,7 @@ gnimelf.net
 go.xsuad.com
 gocanada.vn
 google.ghststr.com
-gov.kr/main?d=AA100DataDownApp&SAVE_FILE_NM=38500.exe
+gov.kr
 govhotel.us
 grafchekloder.rebatesrule.net
 granportale.com.br
@@ -2018,7 +1967,6 @@ greenfood.sa.com
 greenleaveperu.com
 gssgroups.com
 gx-10012947.file.myqcloud.com
-gxx.monerov10.com
 habbotips.free.fr
 hagebakken.no
 haisannhatrang.com.vn
@@ -2030,12 +1978,12 @@ hazel-azure.co.th
 hdxa.net
 healtina.com
 heavenif.co.za
+hediyeler10gb-ramazan.net
 hellomessager.com
 hfsoftware.cl
 hingcheong.hk
 hldschool.com
 hmbwgroup.com
-hmpmall.co.kr
 hoayeuthuong-my.sharepoint.com
 homedecors.com.au
 hostzaa.com
@@ -2055,6 +2003,7 @@ i.imgur.com/6q5qHHD.png
 i333.wang
 ibda.adv.br
 ideadom.pl
+ileolaherbalcare.com.ng
 iletisimbakanligi20gb.com
 imellda.com
 img1.wsimg.com/blobby/go/716ce6c5-e07c-43a7-a685-6d934b9f51c3/downloads/1cqdpmlgu_930218.doc
@@ -2064,11 +2013,15 @@ inapadvance.com
 incrediblepixels.com
 incredicole.com
 indonesias.me:9998/64.exe
+indonesias.me:9998/c64.exe
 ineyes360.com
+ini.egkj.com
 innovation4crisis.org
 instanttechnology.com.au
 intelicasa.ro
-interbus.cz/templates/jsn_dome_free/js/payments/2c.jpg
+interbus.cz
+intersel-idf.org
+intertradeassociates.com.au
 intoxicated-twilight.com
 iremart.es
 isso.ps
@@ -2078,7 +2031,6 @@ itrigger.cn
 itsnixielou.com
 ixlonbcc.com
 izu.co.jp
-jahesa.com
 jaincakes.xyz
 jamiekaylive.com
 jansen-heesch.nl
@@ -2111,10 +2063,9 @@ kanok.co.th
 kar.big-pro.com
 karavantekstil.com
 kassohome.com.tr
-kazanin20gbturkiye.com
 kdsp.co.kr
-keckarangdadap.pekalongankab.go.id
 kejpa.com
+kenareh-gostare-aras.ir
 kgfs3.329263.com
 khan-associates.net
 khunnapap.com
@@ -2133,7 +2084,6 @@ koralli.if.ua
 kqq.kz
 kristofferdaniels.com
 kuaizip.com/down/affiliate/KuaiZip_setup_10029.exe
-kupaliskohs.sk
 kuznetsov.ca
 kwanfromhongkong.com
 kwikomfi-lab.com
@@ -2142,6 +2092,7 @@ lameguard.ru
 lammaixep.com
 landmarktreks.com
 langyabbs.05yun.cn
+lapurisima.cl
 lastmorgoth.com
 lcfurtado.com.br
 lcmsystem.com
@@ -2153,11 +2104,12 @@ lecafedesartistes.com
 lengendryme.com
 lesawilson.com
 lhbfirst.com
+libya-info.com
 lifeapt.biz
 linx.li
 lists.ibiblio.org
 lists.mplayerhq.hu
-livetrack.in
+livetrack.in/EmployeeMasterImages/qace.jpg
 livetvsports.ml
 lodergord.com
 log.yundabao.cn
@@ -2166,7 +2118,6 @@ lt02.datacomspecialists.net
 luatminhthuan.com
 luckytriumph.com
 luisnacht.com.ar
-luyalu.net
 lvr.samacomplus.com
 m.0757kd.cn
 m93701t2.beget.tech
@@ -2228,16 +2179,12 @@ msecurity.ro
 mteng.mmj7.com
 mtfelektroteknik.com
 mueblesjcp.cl
-mutec.jp
-mv360.net
 mvb.kz
 mxpiqw.am.files.1drv.com
-mybook22.s3-us-west-1.amazonaws.com
 myexpertca.in
 myhood.cl
 myo.net.au
 myofficeplus.com
-myonlinepokiesblog.com
 mytex.pe
 mytrains.net
 mywp.asia
@@ -2248,6 +2195,7 @@ naturalma.es
 naturepack.cc
 nch.com.au/components/aacenc.exe
 ncmt2w.bn.files.1drv.com
+ncpcgov.com
 ndrs.cloud
 nebraskacharters.com.au
 nemo.herc.ws
@@ -2266,13 +2214,11 @@ note.youdao.com/yws/api/personal/file/WEB3a243b322cf83ca7cae587a92916bac7?method
 nprg.ru
 nst-corporation.com
 nwcsvcs.com
-oa.fnysw.com
 oa.hys.cn
 obinspirations.com
 obnova.zzux.com
 obseques-conseils.com
 ohe.ie
-oknoplastik.sk
 omega.az
 omsk-osma.ru
 omuzgor.tj
@@ -2311,6 +2257,7 @@ onedrive.live.com/download?cid=0F48D15360733D06&resid=F48D15360733D06!106&authke
 onedrive.live.com/download?cid=0F48D15360733D06&resid=F48D15360733D06%21106&authkey=AChi3rQkGbcN-KA
 onedrive.live.com/download?cid=0F51D04C9D556964&resid=F51D04C9D556964!114&authkey=ADFDjmcsu3yb9zI
 onedrive.live.com/download?cid=0F51D04C9D556964&resid=F51D04C9D556964%21114&authkey=ADFDjmcsu3yb9zI
+onedrive.live.com/download?cid=1164EA2B0783A793&resid=1164EA2B0783A793!128&authkey=AOoJuE9Aw_IzFkA
 onedrive.live.com/download?cid=1164EA2B0783A793&resid=1164EA2B0783A793%21128&authkey=AOoJuE9Aw_IzFkA
 onedrive.live.com/download?cid=165468846F076EE7&resid=165468846F076EE7%21118&authkey=ANTAsh3IG98aQTE
 onedrive.live.com/download?cid=174A158B69387A7E&resid=174A158B69387A7E!348&authkey=AHnjOxA4uFoxa54
@@ -2345,6 +2292,7 @@ onedrive.live.com/download?cid=41F2978DA9CE0256&resid=41F2978DA9CE0256!111&authk
 onedrive.live.com/download?cid=41F2978DA9CE0256&resid=41F2978DA9CE0256!113&authkey=AEOaNIW0sQpOAcU
 onedrive.live.com/download?cid=41F2978DA9CE0256&resid=41F2978DA9CE0256%21111&authkey=AJZp62LMPZKHUMQ
 onedrive.live.com/download?cid=41F2978DA9CE0256&resid=41F2978DA9CE0256%21113&authkey=AEOaNIW0sQpOAcU
+onedrive.live.com/download?cid=41F2978DA9CE0256&resid=41F2978DA9CE0256%21120&authkey=AJFZZ_HBF2UlaSk
 onedrive.live.com/download?cid=470FEBB155BE50FA&resid=470FEBB155BE50FA!450&authkey=AHW0J-CME0jg6pw
 onedrive.live.com/download?cid=470FEBB155BE50FA&resid=470FEBB155BE50FA%21450&authkey=AHW0J-CME0jg6pw
 onedrive.live.com/download?cid=48ED7695F8804D66&resid=48ED7695F8804D66!13805&authkey=AE-zbfo2uwln_Gg
@@ -2378,6 +2326,7 @@ onedrive.live.com/download?cid=627BE925DFC4B997&resid=627BE925DFC4B997%21145&aut
 onedrive.live.com/download?cid=627BE925DFC4B997&resid=627BE925DFC4B997%21147&authkey=AM8TY9CXilVSfw4
 onedrive.live.com/download?cid=627BE925DFC4B997&resid=627BE925DFC4B997%21148&authkey=AEmIMqYSwRmEOgQ
 onedrive.live.com/download?cid=67F7A3925ACBB2AD&resid=67F7A3925ACBB2AD%211421&authkey=ADixG2-aSEkeMJw
+onedrive.live.com/download?cid=6A1602E410531072&resid=6A1602E410531072!112&authkey=AAsndGbCwol3MYs
 onedrive.live.com/download?cid=6A1602E410531072&resid=6A1602E410531072!113&authkey=AK3TZU1Lg4uuh5M
 onedrive.live.com/download?cid=6A1602E410531072&resid=6A1602E410531072%21112&authkey=AAsndGbCwol3MYs
 onedrive.live.com/download?cid=6A1602E410531072&resid=6A1602E410531072%21113&authkey=AK3TZU1Lg4uuh5M
@@ -2393,21 +2342,26 @@ onedrive.live.com/download?cid=6CD2E7E257C16E46&resid=6CD2E7E257C16E46%21123&aut
 onedrive.live.com/download?cid=6CD2E7E257C16E46&resid=6CD2E7E257C16E46%21126&authkey=AFsQz25GZRFlidA
 onedrive.live.com/download?cid=6CD2E7E257C16E46&resid=6CD2E7E257C16E46%21144&authkey=ACWoeUasuRL8m3M
 onedrive.live.com/download?cid=6CD2E7E257C16E46&resid=6CD2E7E257C16E46%21149&authkey=AGadAevvS4bE6-E
-onedrive.live.com/download?cid=6CD2E7E257C16E46&resid=6CD2E7E257C16E46%21158&authkey=ACpreL1y7oJkJqY
 onedrive.live.com/download?cid=6CD2E7E257C16E46&resid=6CD2E7E257C16E46%21173&authkey=AK5nXNLF4pJAieU
 onedrive.live.com/download?cid=6F5470AD540C86C8&resid=6F5470AD540C86C8!111&authkey=AOUy4UoQ0R3reTs
 onedrive.live.com/download?cid=6F5470AD540C86C8&resid=6F5470AD540C86C8%21111&authkey=AOUy4UoQ0R3reTs
 onedrive.live.com/download?cid=72EF66C14DF86B76&resid=72EF66C14DF86B76!184&authkey=ACrLgQEORQqW7bE
 onedrive.live.com/download?cid=72EF66C14DF86B76&resid=72EF66C14DF86B76!185&authkey=AMm2Fsxi2l-Wa9A
 onedrive.live.com/download?cid=72EF66C14DF86B76&resid=72EF66C14DF86B76!188&authkey=AJY07OLs2lCFJ_o
+onedrive.live.com/download?cid=72EF66C14DF86B76&resid=72EF66C14DF86B76!190&authkey=AJ-3yQm7eZZ9zmE
 onedrive.live.com/download?cid=72EF66C14DF86B76&resid=72EF66C14DF86B76!191&authkey=AOumzH6K1KEmsCU
 onedrive.live.com/download?cid=72EF66C14DF86B76&resid=72EF66C14DF86B76!196&authkey=AEIZSuDu2mLHlHU
 onedrive.live.com/download?cid=72EF66C14DF86B76&resid=72EF66C14DF86B76%21184&authkey=ACrLgQEORQqW7bE
+onedrive.live.com/download?cid=72EF66C14DF86B76&resid=72EF66C14DF86B76%21185&authkey=AMm2Fsxi2l-Wa9A
+onedrive.live.com/download?cid=72EF66C14DF86B76&resid=72EF66C14DF86B76%21187&authkey=ANdGpqQ_ZP8LYr4
 onedrive.live.com/download?cid=72EF66C14DF86B76&resid=72EF66C14DF86B76%21188&authkey=AJY07OLs2lCFJ_o
+onedrive.live.com/download?cid=72EF66C14DF86B76&resid=72EF66C14DF86B76%21190&authkey=AJ-3yQm7eZZ9zmE
+onedrive.live.com/download?cid=72EF66C14DF86B76&resid=72EF66C14DF86B76%21191&authkey=AOumzH6K1KEmsCU
 onedrive.live.com/download?cid=72EF66C14DF86B76&resid=72EF66C14DF86B76%21193&authkey=ADq3v72povhBjzQ
 onedrive.live.com/download?cid=72EF66C14DF86B76&resid=72EF66C14DF86B76%21196&authkey=AEIZSuDu2mLHlHU
 onedrive.live.com/download?cid=7366FEFC2190D2E3&resid=7366FEFC2190D2E3!195&authkey=AG9WIgSqvGrNwdI
 onedrive.live.com/download?cid=7366FEFC2190D2E3&resid=7366FEFC2190D2E3!207&authkey=AKdm-uaXR7N96rk
+onedrive.live.com/download?cid=7366FEFC2190D2E3&resid=7366FEFC2190D2E3%21195&authkey=AG9WIgSqvGrNwdI
 onedrive.live.com/download?cid=7366FEFC2190D2E3&resid=7366FEFC2190D2E3%21205&authkey=AMEjuC4BPMI-KM4
 onedrive.live.com/download?cid=7366FEFC2190D2E3&resid=7366FEFC2190D2E3%21207&authkey=AKdm-uaXR7N96rk
 onedrive.live.com/download?cid=7A5E689DD1DC641F&resid=7A5E689DD1DC641F!119&authkey=AOzJAi26IzpRqto
@@ -2419,7 +2373,6 @@ onedrive.live.com/download?cid=7C41DDCFA01AEFF7&resid=7C41DDCFA01AEFF7!5296&auth
 onedrive.live.com/download?cid=7C41DDCFA01AEFF7&resid=7C41DDCFA01AEFF7!5298&authkey=ALbZYIzuqCZFv9s
 onedrive.live.com/download?cid=7C41DDCFA01AEFF7&resid=7C41DDCFA01AEFF7%215295&authkey=AASCEQJ1MDoDEuo
 onedrive.live.com/download?cid=7C41DDCFA01AEFF7&resid=7C41DDCFA01AEFF7%215296&authkey=ANk3vz5syaF6BNY
-onedrive.live.com/download?cid=7C41DDCFA01AEFF7&resid=7C41DDCFA01AEFF7%215298&authkey=ALbZYIzuqCZFv9s
 onedrive.live.com/download?cid=7D109F249B512466&resid=7D109F249B512466!543&authkey=ACQc4XjGhclmwbs
 onedrive.live.com/download?cid=806BAC90DC071EDF&resid=806BAC90DC071EDF!105&authkey=!AO7jyZ6-LicB8hQ
 onedrive.live.com/download?cid=85EC872136D189D9&resid=85EC872136D189D9!107&authkey=AG6BUsqtSbLZJiw
@@ -2448,6 +2401,7 @@ onedrive.live.com/download?cid=B50C4248502103D0&resid=B50C4248502103D0%21107&aut
 onedrive.live.com/download?cid=B5EA8D4249D866E6&resid=B5EA8D4249D866E6!164&authkey=ADFsfCDAw3bIboY
 onedrive.live.com/download?cid=B5EA8D4249D866E6&resid=B5EA8D4249D866E6%21164&authkey=ADFsfCDAw3bIboY
 onedrive.live.com/download?cid=B8BA73DB68DA7C0B&resid=B8BA73DB68DA7C0B!7521&authkey=ABLT9zDyq2D4rb0
+onedrive.live.com/download?cid=B8BA73DB68DA7C0B&resid=B8BA73DB68DA7C0B%217521&authkey=ABLT9zDyq2D4rb0
 onedrive.live.com/download?cid=BEAF30DA1F621C9B&resid=BEAF30DA1F621C9B!246&authkey=AFyrcHdutALpu90
 onedrive.live.com/download?cid=BEAF30DA1F621C9B&resid=BEAF30DA1F621C9B%21246&authkey=AFyrcHdutALpu90
 onedrive.live.com/download?cid=C359B1A8BABC6019&resid=C359B1A8BABC6019!1251&authkey=ACt34EIZpzJUGfA
@@ -2459,6 +2413,7 @@ onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E!1343&auth
 onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E!1344&authkey=AOzErPpD6MnoKwY
 onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E!1345&authkey=AEVvyhOnxHtcDh0
 onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E!1346&authkey=AChrNF5VLoV1GF4
+onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E!1347&authkey=AL-ZGe-TTVr921s
 onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E%211337&authkey=AFNVu1FsUCZHT5E
 onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E%211338&authkey=AJNgAmbOsWs75_c
 onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E%211340&authkey=AL1Ay3FbTUde6D8
@@ -2467,14 +2422,18 @@ onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E%211343&au
 onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E%211344&authkey=AOzErPpD6MnoKwY
 onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E%211345&authkey=AEVvyhOnxHtcDh0
 onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E%211346&authkey=AChrNF5VLoV1GF4
+onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E%211347&authkey=AL-ZGe-TTVr921s
 onedrive.live.com/download?cid=C51087813D29B0B1&resid=C51087813D29B0B1!132&authkey=ADFEybhHaMQXib0
 onedrive.live.com/download?cid=CB64E6E1A6CE15A2&resid=CB64E6E1A6CE15A2!109&authkey=AC4gxWJOoPaFR9A
 onedrive.live.com/download?cid=CB64E6E1A6CE15A2&resid=CB64E6E1A6CE15A2%21109&authkey=AC4gxWJOoPaFR9A
+onedrive.live.com/download?cid=CBFA5209EB41ABF2&resid=CBFA5209EB41ABF2%21148&authkey=ADaQmdNndev6D7E
 onedrive.live.com/download?cid=CF0C6D1A4C15233D&resid=CF0C6D1A4C15233D!742&authkey=AKbXJu17f8g0R2s
 onedrive.live.com/download?cid=CF0C6D1A4C15233D&resid=CF0C6D1A4C15233D!744&authkey=ADaK4Zftd0YHHHs
 onedrive.live.com/download?cid=CF0C6D1A4C15233D&resid=CF0C6D1A4C15233D%21742&authkey=AKbXJu17f8g0R2s
 onedrive.live.com/download?cid=CF0C6D1A4C15233D&resid=CF0C6D1A4C15233D%21744&authkey=ADaK4Zftd0YHHHs
+onedrive.live.com/download?cid=D06D60404544FB85&resid=D06D60404544FB85!872&authkey=AP9HcHZTYWO8ZUo
 onedrive.live.com/download?cid=D06D60404544FB85&resid=D06D60404544FB85!874&authkey=ALKzCbXZ-dSCGuM
+onedrive.live.com/download?cid=D06D60404544FB85&resid=D06D60404544FB85!875&authkey=AKa55YbDhQNOC6c
 onedrive.live.com/download?cid=D06D60404544FB85&resid=D06D60404544FB85%21872&authkey=AP9HcHZTYWO8ZUo
 onedrive.live.com/download?cid=D06D60404544FB85&resid=D06D60404544FB85%21874&authkey=ALKzCbXZ-dSCGuM
 onedrive.live.com/download?cid=D06D60404544FB85&resid=D06D60404544FB85%21875&authkey=AKa55YbDhQNOC6c
@@ -2492,6 +2451,7 @@ onedrive.live.com/download?cid=DD0A0EC58F4AC5F5&resid=DD0A0EC58F4AC5F5%217532&au
 onedrive.live.com/download?cid=DDE26285195864B8&resid=DDE26285195864B8!361&authkey=AEqVkIEs2uV-tMI
 onedrive.live.com/download?cid=DDE26285195864B8&resid=DDE26285195864B8!379&authkey=AI9JeFVwfv5qi4M
 onedrive.live.com/download?cid=DDE26285195864B8&resid=DDE26285195864B8%21361&authkey=AEqVkIEs2uV-tMI
+onedrive.live.com/download?cid=DDE26285195864B8&resid=DDE26285195864B8%21366&authkey=ALy44awv_tX2O5M
 onedrive.live.com/download?cid=DDE26285195864B8&resid=DDE26285195864B8%21379&authkey=AI9JeFVwfv5qi4M
 onedrive.live.com/download?cid=E4B1E1072DC91F5C&resid=E4B1E1072DC91F5C!509&authkey=AKmDyQKzcsUf_Gg
 onedrive.live.com/download?cid=E4B1E1072DC91F5C&resid=E4B1E1072DC91F5C%21511&authkey=AGfS0Q7DZ7oS1LU
@@ -2499,11 +2459,11 @@ onedrive.live.com/download?cid=E61E5F3F655316FA&resid=E61E5F3F655316FA!124&authk
 onedrive.live.com/download?cid=E61E5F3F655316FA&resid=E61E5F3F655316FA!125&authkey=AB5cY3xSz3aDDbE
 onedrive.live.com/download?cid=E61E5F3F655316FA&resid=E61E5F3F655316FA%21124&authkey=ADKlC5yRN_vbmt8
 onedrive.live.com/download?cid=E61E5F3F655316FA&resid=E61E5F3F655316FA%21125&authkey=AB5cY3xSz3aDDbE
+onedrive.live.com/download?cid=E61E5F3F655316FA&resid=E61E5F3F655316FA%21127&authkey=ADuW61iLvQd_15w
 onedrive.live.com/download?cid=E859DA0F2C81D5F2&resid=E859DA0F2C81D5F2!142&authkey=AIS88UaD5AOm6qU
 onedrive.live.com/download?cid=E859DA0F2C81D5F2&resid=E859DA0F2C81D5F2%21142&authkey=AIS88UaD5AOm6qU
 onedrive.live.com/download?cid=EAE9B5435CFAEBAA&resid=EAE9B5435CFAEBAA!232&authkey=AAuY9sGJCcGPZX8
 onedrive.live.com/download?cid=EAE9B5435CFAEBAA&resid=EAE9B5435CFAEBAA%21232&authkey=AAuY9sGJCcGPZX8
-onedrive.live.com/download?cid=EFDF2C8D834A1928&resid=EFDF2C8D834A1928!202&authkey=AH1gjQ8j29DArW4
 onedrive.live.com/download?cid=EFDF2C8D834A1928&resid=EFDF2C8D834A1928!203&authkey=AF8Xr99mRQP8Um8
 onedrive.live.com/download?cid=EFDF2C8D834A1928&resid=EFDF2C8D834A1928!204&authkey=AD0NbZlscbg-0sA
 onedrive.live.com/download?cid=EFDF2C8D834A1928&resid=EFDF2C8D834A1928%21202&authkey=AH1gjQ8j29DArW4
@@ -2521,7 +2481,9 @@ onedrive.live.com/download?cid=FEDBE7305E742A3E&resid=FEDBE7305E742A3E!149&authk
 onedrive.live.com/download?cid=FEDBE7305E742A3E&resid=FEDBE7305E742A3E%21149&authkey=AHdtniVa1oS_iBw
 onedrive.live.com/download?cid=FF1D187273DFBF73&resid=FF1D187273DFBF73!693&authkey=AGcpKHnEWFTE_Yc
 onedrive.live.com/download?cid=FF1D187273DFBF73&resid=FF1D187273DFBF73%21693&authkey=AGcpKHnEWFTE_Yc
+onedrive.live.com/download?cid=FF1D187273DFBF73&resid=FF1D187273DFBF73%21694&authkey=AA5jQZJSp0eSr1s
 onestin.ro
+openarts.com.br
 openclient.sroinfo.com
 operasanpiox.bravepages.com
 ophtalmiccenter.com
@@ -2596,7 +2558,6 @@ phamchilong.com
 phudieusongma.com
 phuphamca.com
 piapendet.com
-piedmontrescue.org
 pink99.com
 pitmansticks.com
 platisher.xyz
@@ -2605,7 +2566,6 @@ podrska.com.hr
 ponto50.com.br
 poolbook.ir
 ppl.ac.id
-prepaenunsoloexamen.academiagalileoac.com
 probost.cz
 profitcoach.net
 prosoc.nl
@@ -2614,7 +2574,6 @@ pujashoppe.in
 purelondonhyg.com
 pyxalis.com
 qchms.qcpro.vn
-qelie.com
 qfjys.com.img.800cdn.com
 qmsled.com
 qppl.angiang.gov.vn
@@ -2624,6 +2583,7 @@ quehagoencartagena.com
 quickuploader.xyz
 raacts.in
 raifix.com.br
+ramazan20gbinternet.com
 ramazanda20gb.xyz
 rangebroadcasting.com
 rapidex.co.rs
@@ -2656,7 +2616,6 @@ riyanenterprise.com
 rkverify.securestudies.com
 robertmcardle.com
 robotrade.com.vn
-rockersdolphin.co.za
 rollingmill.in
 rollscar.pk
 rossogato.com
@@ -2666,10 +2625,10 @@ ruisgood.ru
 s.51shijuan.com
 s.kk30.com
 s14b.91danji.com
-s14b.groundyun.cn
 sabiupd.compress.to
 saboorjaam.ir
 sabupda.vizvaz.com
+saglikbakanligi-destek.org
 sahathaikasetpan.com
 salvationbd.com
 sandovalgraphics.com
@@ -2677,12 +2636,12 @@ sarvghamatan.ir
 saskklo.com
 scglobal.co.th
 schollaert.eu
-securefileinterneationaltransferthroughm.duckdns.org
 sefp-boispro.fr
 selekture.com
 selfuseproperty.com
 selvikoyunciftligi.com
 sendspace.com/pro/dl/dcvd2q
+senevdekaldiyehediye.com
 senevdekaldiyehediyenet.com
 serpentrising.com
 servicemhkd.myvnc.com
@@ -2694,7 +2653,6 @@ sgm.pc6.com
 shacked.webdepot.co.il
 shahtoba.faqserv.com
 shaoxiaofei.cn
-share.dmca.gripe
 sharjahas.com
 shembefoundation.com
 shopjumpn.ch
@@ -2734,8 +2692,9 @@ ss.cybersoft-vn.com
 sslv3.at
 staging.popclusive.asia
 starcountry.net
-static.3001.net/upload/20140812/14078161556897.rar
+static.3001.net
 static.ilclock.com
+static.topxgun.com
 stationaryhome.com
 stats.gov.cn/tjsj/tjzd/gjtjzd/201909/P020190909619147287331.doc
 stecit.nl
@@ -2766,15 +2725,16 @@ sylvaclouds.eu
 symanreni.mysecondarydns.com
 szxypt.com
 t.honker.info
+tandenblekenhoofddorp.nl
 taraward.com
 taxpos.com
 tcy.198424.com
 teardrop-productions.ro
 technoites.com
-tecnobella.cl
 tehrenberg.com
 telescopelms.com
 telsiai.info
+tepatitlan.gob.mx
 test.iyibakkendine.com
 testdatabaseforcepoint.com
 thaibbqculver.com
@@ -2790,7 +2750,6 @@ thornadops.com
 thosewebbs.com
 thuong.bidiworks.com
 tianangdep.com
-tianzi8.cn
 tibinst.mefound.com
 tibok.lflink.com
 ticte.in
@@ -2825,10 +2784,10 @@ unicorpbrunei.com
 unilevercopabr.mbiz20.net
 uniquehall.net
 unokaoeojoejfghr.ru
+up4net.com
 upd.m.dodo52.com
 update.iwang8.com
 update.my.99.com
-upendiveterinariovalencia.es
 urgentmessage.org
 usd-gold.com
 users.skynet.be
@@ -2840,7 +2799,6 @@ valedchap.ir
 valencaagora.com.br
 vasoccernews.com
 vaziri.echobit.ir
-vdotrip.blog
 vfocus.net
 vibicloud.com
 videoswebcammsn.free.fr
@@ -2855,7 +2813,6 @@ vitromed.ro
 vrrumover0.vrrum0.farted.net
 vvff.in
 w.zhzy999.net
-wakecar.cn
 wangtong7.siweidaoxiang.com
 wangzonghang.cn
 wap.dosame.com
@@ -2873,7 +2830,7 @@ whgaty.com
 wiebe-sanitaer.de
 wikileaks.org/syria-files/attach/222/222051_instruction.zip
 wmd9e.a3i1vvv.feteboc.com
-wmi.1217bye.host
+wmi.1217bye.host/1.txt
 wnksupply.co.th
 wood-expert.net
 woodsytech.com
@@ -2883,11 +2840,11 @@ writesofpassage.co.za
 wsg.com.sg
 wt8.siweidaoxiang.com
 wt9.siweidaoxiang.com
-wwealthllc.com
 www2.recepty5.com
 x2vn.com
 xia.vzboot.com
 xiaidown.com
+xiaoma-10021647.file.myqcloud.com
 xiegushi.cn
 xirfad.com
 xn--transfgran-mgbbb600b.ro
@@ -2897,11 +2854,11 @@ xxwl.kuaiyunds.com
 xxxze.co.nu
 yeez.net
 yesky.51down.org.cn
-yesky.xzstatic.com
 yiyangjz.cn
 yolks.bestsellertwo.net
 yuluobo.com
 yun-1.lenku.cn
+yuyu02004-10043918.file.myqcloud.com
 yx.m.dodo52.com
 zagruz.dnset.com
 zagruz.toh.info
@@ -2920,5 +2877,4 @@ zoetermeerov.nl
 zoeydeutchweb.com
 zonefound.com.cn
 zskyjov.cz
-ztqsc.com.cn
 zumodelima.com
diff --git a/urlhaus-filter-unbound-online.conf b/urlhaus-filter-unbound-online.conf
index c12af368..a603a018 100644
--- a/urlhaus-filter-unbound-online.conf
+++ b/urlhaus-filter-unbound-online.conf
@@ -1,5 +1,5 @@
 # Title: abuse.ch URLhaus Malicious Domains Unbound Blocklist
-# Updated: Sat, 02 May 2020 00:09:31 UTC
+# Updated: Sat, 02 May 2020 12:09:27 UTC
 # Repo: https://gitlab.com/curben/urlhaus-filter
 # License: https://creativecommons.org/publicdomain/zero/1.0/
 # Source: https://urlhaus.abuse.ch/api/
@@ -24,6 +24,7 @@ local-zone: "88mscco.com" always_nxdomain
 local-zone: "a-reality.co.uk" always_nxdomain
 local-zone: "a.xiazai163.com" always_nxdomain
 local-zone: "aaasolution.co.th" always_nxdomain
+local-zone: "accentlandscapes.com" always_nxdomain
 local-zone: "accessyouraudience.com" always_nxdomain
 local-zone: "acdesignhub.com" always_nxdomain
 local-zone: "acteon.com.ar" always_nxdomain
@@ -49,9 +50,7 @@ local-zone: "alohasoftware.net" always_nxdomain
 local-zone: "alphaconsumer.net" always_nxdomain
 local-zone: "am-concepts.ca" always_nxdomain
 local-zone: "amd.alibuf.com" always_nxdomain
-local-zone: "amedeoscognamiglio.329263.com" always_nxdomain
 local-zone: "amemarine.co.th" always_nxdomain
-local-zone: "americanrange.com" always_nxdomain
 local-zone: "anadolutatili.com" always_nxdomain
 local-zone: "anamikaindanegas.in" always_nxdomain
 local-zone: "andreelapeyre.com" always_nxdomain
@@ -68,7 +67,6 @@ local-zone: "arcticprospectus.com" always_nxdomain
 local-zone: "areac-agr.com" always_nxdomain
 local-zone: "aresorganics.com" always_nxdomain
 local-zone: "arowanafishforsale.com" always_nxdomain
-local-zone: "asadairtravel.com" always_nxdomain
 local-zone: "ascentive.com" always_nxdomain
 local-zone: "ashoakacharya.com" always_nxdomain
 local-zone: "askarindo.or.id" always_nxdomain
@@ -91,6 +89,7 @@ local-zone: "bamakobleach.free.fr" always_nxdomain
 local-zone: "bangkok-orchids.com" always_nxdomain
 local-zone: "banzaimonkey.com" always_nxdomain
 local-zone: "bapo.granudan.cn" always_nxdomain
+local-zone: "baritaco.com" always_nxdomain
 local-zone: "baybars.xyz" always_nxdomain
 local-zone: "bbs.sunwy.org" always_nxdomain
 local-zone: "bbs1.marisfrolg.com" always_nxdomain
@@ -106,7 +105,6 @@ local-zone: "beta.pterosol.com" always_nxdomain
 local-zone: "bflow.security-portal.cz" always_nxdomain
 local-zone: "bildeboks.no" always_nxdomain
 local-zone: "bilim-pavlodar.gov.kz" always_nxdomain
-local-zone: "billieellish.org" always_nxdomain
 local-zone: "bingxiong.vip" always_nxdomain
 local-zone: "bjkumdo.com" always_nxdomain
 local-zone: "blog.241optical.com" always_nxdomain
@@ -122,7 +120,6 @@ local-zone: "brbs.customer.netspace.net.au" always_nxdomain
 local-zone: "brenleyquartzgh.com" always_nxdomain
 local-zone: "brewmethods.com" always_nxdomain
 local-zone: "btlocum.pl" always_nxdomain
-local-zone: "bucketstrong.s3-us-west-1.amazonaws.com" always_nxdomain
 local-zone: "bugansavings.com" always_nxdomain
 local-zone: "buhleni.co.za" always_nxdomain
 local-zone: "buydishtv.in" always_nxdomain
@@ -139,6 +136,8 @@ local-zone: "castmart.ga" always_nxdomain
 local-zone: "cbk.m.dodo52.com" always_nxdomain
 local-zone: "ccnn.xiaomier.cn" always_nxdomain
 local-zone: "cdn-10049480.file.myqcloud.com" always_nxdomain
+local-zone: "cdn.truelife.vn" always_nxdomain
+local-zone: "cdn.xiaoduoai.com" always_nxdomain
 local-zone: "cdnus.laboratoryconecpttoday.com" always_nxdomain
 local-zone: "ceirecrear.com.br" always_nxdomain
 local-zone: "cellas.sk" always_nxdomain
@@ -149,7 +148,6 @@ local-zone: "ch.rmu.ac.th" always_nxdomain
 local-zone: "changematterscounselling.com" always_nxdomain
 local-zone: "chanvribloc.com" always_nxdomain
 local-zone: "charm.bizfxr.com" always_nxdomain
-local-zone: "chattosport.com" always_nxdomain
 local-zone: "chauffeursontravel.com" always_nxdomain
 local-zone: "chedea.eu" always_nxdomain
 local-zone: "chinhdropfile.myvnc.com" always_nxdomain
@@ -157,27 +155,25 @@ local-zone: "chinhdropfile80.myvnc.com" always_nxdomain
 local-zone: "chipmarkets.com" always_nxdomain
 local-zone: "chj.m.dodo52.com" always_nxdomain
 local-zone: "chuckweiss.com" always_nxdomain
+local-zone: "cinnamoncreations.com.au" always_nxdomain
 local-zone: "cirugiagenital.com.mx" always_nxdomain
+local-zone: "cista-dobra-voda.com" always_nxdomain
 local-zone: "clareiamente.clareiamente.com" always_nxdomain
 local-zone: "clearwaterriveroutfitting.com" always_nxdomain
 local-zone: "client.yaap.co.uk" always_nxdomain
 local-zone: "clinicamariademolina.com" always_nxdomain
 local-zone: "cloud-server-updater2.co.za" always_nxdomain
-local-zone: "colombet-taxi.fr" always_nxdomain
 local-zone: "colourcreative.co.za" always_nxdomain
 local-zone: "compesat.com" always_nxdomain
 local-zone: "complan.hu" always_nxdomain
 local-zone: "complanbt.hu" always_nxdomain
 local-zone: "comtechadsl.com" always_nxdomain
 local-zone: "config.kuaisousou.top" always_nxdomain
-local-zone: "consultingcy.com" always_nxdomain
 local-zone: "counciloflight.bravepages.com" always_nxdomain
-local-zone: "cp-30.theborough.com.au" always_nxdomain
 local-zone: "cqjcc.org" always_nxdomain
 local-zone: "crimebranch.in" always_nxdomain
 local-zone: "crittersbythebay.com" always_nxdomain
 local-zone: "cryline.net" always_nxdomain
-local-zone: "cryptoomarket.com" always_nxdomain
 local-zone: "csnserver.com" always_nxdomain
 local-zone: "csw.hu" always_nxdomain
 local-zone: "cuacuonsieure.com" always_nxdomain
@@ -212,10 +208,10 @@ local-zone: "dfd.zhzy999.net" always_nxdomain
 local-zone: "dfzm.91756.cn" always_nxdomain
 local-zone: "dgecolesdepolice.bf" always_nxdomain
 local-zone: "dgnj.cn" always_nxdomain
-local-zone: "dhlservices.duckdns.org" always_nxdomain
 local-zone: "diazavendano.cl" always_nxdomain
 local-zone: "dichvuvesinhcongnghiep.top" always_nxdomain
 local-zone: "dienmaycu.vn" always_nxdomain
+local-zone: "dieselmoreno.cl" always_nxdomain
 local-zone: "digilib.dianhusada.ac.id" always_nxdomain
 local-zone: "digital-marketing-institute-delhi.empeeevents.com" always_nxdomain
 local-zone: "digitaldog.de" always_nxdomain
@@ -227,7 +223,6 @@ local-zone: "dl-gameplayer.dmm.com" always_nxdomain
 local-zone: "dl.1003b.56a.com" always_nxdomain
 local-zone: "dl.198424.com" always_nxdomain
 local-zone: "dl.dzqzd.com" always_nxdomain
-local-zone: "dl.iqilie.com" always_nxdomain
 local-zone: "dl.kuaile-u.com" always_nxdomain
 local-zone: "dl2.soft-lenta.ru" always_nxdomain
 local-zone: "dlist.iqilie.com" always_nxdomain
@@ -236,7 +231,6 @@ local-zone: "dnn.alibuf.com" always_nxdomain
 local-zone: "dns.alibuf.com" always_nxdomain
 local-zone: "dodsonimaging.com" always_nxdomain
 local-zone: "don.viameventos.com.br" always_nxdomain
-local-zone: "dongiln.co" always_nxdomain
 local-zone: "donmago.com" always_nxdomain
 local-zone: "doostansocks.ir" always_nxdomain
 local-zone: "doransky.info" always_nxdomain
@@ -264,18 +258,19 @@ local-zone: "download301.wanmei.com" always_nxdomain
 local-zone: "dpeasesummithilltoppers.pbworks.com" always_nxdomain
 local-zone: "dr080.com" always_nxdomain
 local-zone: "dralpaslan.com" always_nxdomain
+local-zone: "dreamtrips.cheap" always_nxdomain
 local-zone: "drivolani.us" always_nxdomain
 local-zone: "drools-moved.46999.n3.nabble.com" always_nxdomain
 local-zone: "druzim.freewww.biz" always_nxdomain
 local-zone: "drwendyellis.com" always_nxdomain
 local-zone: "dsiun.com" always_nxdomain
 local-zone: "dtsay.xyz" always_nxdomain
-local-zone: "dudulm.com" always_nxdomain
+local-zone: "duongfpt.ga" always_nxdomain
 local-zone: "dusdn.mireene.com" always_nxdomain
+local-zone: "dw.58wangdun.com" always_nxdomain
 local-zone: "dx.qqyewu.com" always_nxdomain
 local-zone: "dx1.qqtn.com" always_nxdomain
 local-zone: "dx2.qqtn.com" always_nxdomain
-local-zone: "dx30.siweidaoxiang.com" always_nxdomain
 local-zone: "dx60.siweidaoxiang.com" always_nxdomain
 local-zone: "dzinestudio87.co.uk" always_nxdomain
 local-zone: "e.dangeana.com" always_nxdomain
@@ -316,24 +311,23 @@ local-zone: "fitmanacademy.com" always_nxdomain
 local-zone: "flood-protection.org" always_nxdomain
 local-zone: "fordlamdong.com.vn" always_nxdomain
 local-zone: "foreverprecious.org" always_nxdomain
+local-zone: "foxfennecs.com" always_nxdomain
 local-zone: "frin.ng" always_nxdomain
 local-zone: "fte.m.dodo52.com" always_nxdomain
 local-zone: "ftpcnc-p2sp.pconline.com.cn" always_nxdomain
 local-zone: "ftpftpftp.com" always_nxdomain
 local-zone: "funletters.net" always_nxdomain
+local-zone: "funpartyrent.com" always_nxdomain
 local-zone: "futuregraphics.com.ar" always_nxdomain
 local-zone: "g.7230.com" always_nxdomain
 local-zone: "g0ogle.free.fr" always_nxdomain
-local-zone: "gainsdirectory.com" always_nxdomain
 local-zone: "galuhtea.com" always_nxdomain
 local-zone: "gamee.top" always_nxdomain
-local-zone: "garage.themebuffets.com" always_nxdomain
 local-zone: "garenanow.myvnc.com" always_nxdomain
 local-zone: "garenanow4.myvnc.com" always_nxdomain
 local-zone: "gargiulo.com.ar" always_nxdomain
 local-zone: "gateway-heide.de" always_nxdomain
 local-zone: "gateway.ethlqd.com" always_nxdomain
-local-zone: "gd2.greenxf.com" always_nxdomain
 local-zone: "geenicreations.com" always_nxdomain
 local-zone: "genesisconstruction.co.za" always_nxdomain
 local-zone: "germistonmiraclecentre.co.za" always_nxdomain
@@ -347,6 +341,7 @@ local-zone: "gnimelf.net" always_nxdomain
 local-zone: "go.xsuad.com" always_nxdomain
 local-zone: "gocanada.vn" always_nxdomain
 local-zone: "google.ghststr.com" always_nxdomain
+local-zone: "gov.kr" always_nxdomain
 local-zone: "govhotel.us" always_nxdomain
 local-zone: "grafchekloder.rebatesrule.net" always_nxdomain
 local-zone: "granportale.com.br" always_nxdomain
@@ -355,7 +350,6 @@ local-zone: "greenfood.sa.com" always_nxdomain
 local-zone: "greenleaveperu.com" always_nxdomain
 local-zone: "gssgroups.com" always_nxdomain
 local-zone: "gx-10012947.file.myqcloud.com" always_nxdomain
-local-zone: "gxx.monerov10.com" always_nxdomain
 local-zone: "habbotips.free.fr" always_nxdomain
 local-zone: "hagebakken.no" always_nxdomain
 local-zone: "haisannhatrang.com.vn" always_nxdomain
@@ -367,12 +361,12 @@ local-zone: "hazel-azure.co.th" always_nxdomain
 local-zone: "hdxa.net" always_nxdomain
 local-zone: "healtina.com" always_nxdomain
 local-zone: "heavenif.co.za" always_nxdomain
+local-zone: "hediyeler10gb-ramazan.net" always_nxdomain
 local-zone: "hellomessager.com" always_nxdomain
 local-zone: "hfsoftware.cl" always_nxdomain
 local-zone: "hingcheong.hk" always_nxdomain
 local-zone: "hldschool.com" always_nxdomain
 local-zone: "hmbwgroup.com" always_nxdomain
-local-zone: "hmpmall.co.kr" always_nxdomain
 local-zone: "hoayeuthuong-my.sharepoint.com" always_nxdomain
 local-zone: "homedecors.com.au" always_nxdomain
 local-zone: "hostzaa.com" always_nxdomain
@@ -390,6 +384,7 @@ local-zone: "hyvat-olutravintolat.fi" always_nxdomain
 local-zone: "i333.wang" always_nxdomain
 local-zone: "ibda.adv.br" always_nxdomain
 local-zone: "ideadom.pl" always_nxdomain
+local-zone: "ileolaherbalcare.com.ng" always_nxdomain
 local-zone: "iletisimbakanligi20gb.com" always_nxdomain
 local-zone: "imellda.com" always_nxdomain
 local-zone: "impression-gobelet.com" always_nxdomain
@@ -398,9 +393,13 @@ local-zone: "inapadvance.com" always_nxdomain
 local-zone: "incrediblepixels.com" always_nxdomain
 local-zone: "incredicole.com" always_nxdomain
 local-zone: "ineyes360.com" always_nxdomain
+local-zone: "ini.egkj.com" always_nxdomain
 local-zone: "innovation4crisis.org" always_nxdomain
 local-zone: "instanttechnology.com.au" always_nxdomain
 local-zone: "intelicasa.ro" always_nxdomain
+local-zone: "interbus.cz" always_nxdomain
+local-zone: "intersel-idf.org" always_nxdomain
+local-zone: "intertradeassociates.com.au" always_nxdomain
 local-zone: "intoxicated-twilight.com" always_nxdomain
 local-zone: "iremart.es" always_nxdomain
 local-zone: "isso.ps" always_nxdomain
@@ -410,7 +409,6 @@ local-zone: "itrigger.cn" always_nxdomain
 local-zone: "itsnixielou.com" always_nxdomain
 local-zone: "ixlonbcc.com" always_nxdomain
 local-zone: "izu.co.jp" always_nxdomain
-local-zone: "jahesa.com" always_nxdomain
 local-zone: "jaincakes.xyz" always_nxdomain
 local-zone: "jamiekaylive.com" always_nxdomain
 local-zone: "jansen-heesch.nl" always_nxdomain
@@ -443,10 +441,9 @@ local-zone: "kanok.co.th" always_nxdomain
 local-zone: "kar.big-pro.com" always_nxdomain
 local-zone: "karavantekstil.com" always_nxdomain
 local-zone: "kassohome.com.tr" always_nxdomain
-local-zone: "kazanin20gbturkiye.com" always_nxdomain
 local-zone: "kdsp.co.kr" always_nxdomain
-local-zone: "keckarangdadap.pekalongankab.go.id" always_nxdomain
 local-zone: "kejpa.com" always_nxdomain
+local-zone: "kenareh-gostare-aras.ir" always_nxdomain
 local-zone: "kgfs3.329263.com" always_nxdomain
 local-zone: "khan-associates.net" always_nxdomain
 local-zone: "khunnapap.com" always_nxdomain
@@ -459,7 +456,6 @@ local-zone: "koppemotta.com.br" always_nxdomain
 local-zone: "koralli.if.ua" always_nxdomain
 local-zone: "kqq.kz" always_nxdomain
 local-zone: "kristofferdaniels.com" always_nxdomain
-local-zone: "kupaliskohs.sk" always_nxdomain
 local-zone: "kuznetsov.ca" always_nxdomain
 local-zone: "kwanfromhongkong.com" always_nxdomain
 local-zone: "kwikomfi-lab.com" always_nxdomain
@@ -468,6 +464,7 @@ local-zone: "lameguard.ru" always_nxdomain
 local-zone: "lammaixep.com" always_nxdomain
 local-zone: "landmarktreks.com" always_nxdomain
 local-zone: "langyabbs.05yun.cn" always_nxdomain
+local-zone: "lapurisima.cl" always_nxdomain
 local-zone: "lastmorgoth.com" always_nxdomain
 local-zone: "lcfurtado.com.br" always_nxdomain
 local-zone: "lcmsystem.com" always_nxdomain
@@ -479,11 +476,11 @@ local-zone: "lecafedesartistes.com" always_nxdomain
 local-zone: "lengendryme.com" always_nxdomain
 local-zone: "lesawilson.com" always_nxdomain
 local-zone: "lhbfirst.com" always_nxdomain
+local-zone: "libya-info.com" always_nxdomain
 local-zone: "lifeapt.biz" always_nxdomain
 local-zone: "linx.li" always_nxdomain
 local-zone: "lists.ibiblio.org" always_nxdomain
 local-zone: "lists.mplayerhq.hu" always_nxdomain
-local-zone: "livetrack.in" always_nxdomain
 local-zone: "livetvsports.ml" always_nxdomain
 local-zone: "lodergord.com" always_nxdomain
 local-zone: "log.yundabao.cn" always_nxdomain
@@ -492,7 +489,6 @@ local-zone: "lt02.datacomspecialists.net" always_nxdomain
 local-zone: "luatminhthuan.com" always_nxdomain
 local-zone: "luckytriumph.com" always_nxdomain
 local-zone: "luisnacht.com.ar" always_nxdomain
-local-zone: "luyalu.net" always_nxdomain
 local-zone: "lvr.samacomplus.com" always_nxdomain
 local-zone: "m.0757kd.cn" always_nxdomain
 local-zone: "m93701t2.beget.tech" always_nxdomain
@@ -554,16 +550,12 @@ local-zone: "msecurity.ro" always_nxdomain
 local-zone: "mteng.mmj7.com" always_nxdomain
 local-zone: "mtfelektroteknik.com" always_nxdomain
 local-zone: "mueblesjcp.cl" always_nxdomain
-local-zone: "mutec.jp" always_nxdomain
-local-zone: "mv360.net" always_nxdomain
 local-zone: "mvb.kz" always_nxdomain
 local-zone: "mxpiqw.am.files.1drv.com" always_nxdomain
-local-zone: "mybook22.s3-us-west-1.amazonaws.com" always_nxdomain
 local-zone: "myexpertca.in" always_nxdomain
 local-zone: "myhood.cl" always_nxdomain
 local-zone: "myo.net.au" always_nxdomain
 local-zone: "myofficeplus.com" always_nxdomain
-local-zone: "myonlinepokiesblog.com" always_nxdomain
 local-zone: "mytex.pe" always_nxdomain
 local-zone: "mytrains.net" always_nxdomain
 local-zone: "mywp.asia" always_nxdomain
@@ -573,6 +565,7 @@ local-zone: "narty.laserteam.pl" always_nxdomain
 local-zone: "naturalma.es" always_nxdomain
 local-zone: "naturepack.cc" always_nxdomain
 local-zone: "ncmt2w.bn.files.1drv.com" always_nxdomain
+local-zone: "ncpcgov.com" always_nxdomain
 local-zone: "ndrs.cloud" always_nxdomain
 local-zone: "nebraskacharters.com.au" always_nxdomain
 local-zone: "nemo.herc.ws" always_nxdomain
@@ -590,17 +583,16 @@ local-zone: "norperuinge.com.pe" always_nxdomain
 local-zone: "nprg.ru" always_nxdomain
 local-zone: "nst-corporation.com" always_nxdomain
 local-zone: "nwcsvcs.com" always_nxdomain
-local-zone: "oa.fnysw.com" always_nxdomain
 local-zone: "oa.hys.cn" always_nxdomain
 local-zone: "obinspirations.com" always_nxdomain
 local-zone: "obnova.zzux.com" always_nxdomain
 local-zone: "obseques-conseils.com" always_nxdomain
 local-zone: "ohe.ie" always_nxdomain
-local-zone: "oknoplastik.sk" always_nxdomain
 local-zone: "omega.az" always_nxdomain
 local-zone: "omsk-osma.ru" always_nxdomain
 local-zone: "omuzgor.tj" always_nxdomain
 local-zone: "onestin.ro" always_nxdomain
+local-zone: "openarts.com.br" always_nxdomain
 local-zone: "openclient.sroinfo.com" always_nxdomain
 local-zone: "operasanpiox.bravepages.com" always_nxdomain
 local-zone: "ophtalmiccenter.com" always_nxdomain
@@ -639,7 +631,6 @@ local-zone: "phamchilong.com" always_nxdomain
 local-zone: "phudieusongma.com" always_nxdomain
 local-zone: "phuphamca.com" always_nxdomain
 local-zone: "piapendet.com" always_nxdomain
-local-zone: "piedmontrescue.org" always_nxdomain
 local-zone: "pink99.com" always_nxdomain
 local-zone: "pitmansticks.com" always_nxdomain
 local-zone: "platisher.xyz" always_nxdomain
@@ -648,7 +639,6 @@ local-zone: "podrska.com.hr" always_nxdomain
 local-zone: "ponto50.com.br" always_nxdomain
 local-zone: "poolbook.ir" always_nxdomain
 local-zone: "ppl.ac.id" always_nxdomain
-local-zone: "prepaenunsoloexamen.academiagalileoac.com" always_nxdomain
 local-zone: "probost.cz" always_nxdomain
 local-zone: "profitcoach.net" always_nxdomain
 local-zone: "prosoc.nl" always_nxdomain
@@ -657,7 +647,6 @@ local-zone: "pujashoppe.in" always_nxdomain
 local-zone: "purelondonhyg.com" always_nxdomain
 local-zone: "pyxalis.com" always_nxdomain
 local-zone: "qchms.qcpro.vn" always_nxdomain
-local-zone: "qelie.com" always_nxdomain
 local-zone: "qfjys.com.img.800cdn.com" always_nxdomain
 local-zone: "qmsled.com" always_nxdomain
 local-zone: "qppl.angiang.gov.vn" always_nxdomain
@@ -667,6 +656,7 @@ local-zone: "quehagoencartagena.com" always_nxdomain
 local-zone: "quickuploader.xyz" always_nxdomain
 local-zone: "raacts.in" always_nxdomain
 local-zone: "raifix.com.br" always_nxdomain
+local-zone: "ramazan20gbinternet.com" always_nxdomain
 local-zone: "ramazanda20gb.xyz" always_nxdomain
 local-zone: "rangebroadcasting.com" always_nxdomain
 local-zone: "rapidex.co.rs" always_nxdomain
@@ -687,7 +677,6 @@ local-zone: "riyanenterprise.com" always_nxdomain
 local-zone: "rkverify.securestudies.com" always_nxdomain
 local-zone: "robertmcardle.com" always_nxdomain
 local-zone: "robotrade.com.vn" always_nxdomain
-local-zone: "rockersdolphin.co.za" always_nxdomain
 local-zone: "rollingmill.in" always_nxdomain
 local-zone: "rollscar.pk" always_nxdomain
 local-zone: "rossogato.com" always_nxdomain
@@ -697,10 +686,10 @@ local-zone: "ruisgood.ru" always_nxdomain
 local-zone: "s.51shijuan.com" always_nxdomain
 local-zone: "s.kk30.com" always_nxdomain
 local-zone: "s14b.91danji.com" always_nxdomain
-local-zone: "s14b.groundyun.cn" always_nxdomain
 local-zone: "sabiupd.compress.to" always_nxdomain
 local-zone: "saboorjaam.ir" always_nxdomain
 local-zone: "sabupda.vizvaz.com" always_nxdomain
+local-zone: "saglikbakanligi-destek.org" always_nxdomain
 local-zone: "sahathaikasetpan.com" always_nxdomain
 local-zone: "salvationbd.com" always_nxdomain
 local-zone: "sandovalgraphics.com" always_nxdomain
@@ -708,11 +697,11 @@ local-zone: "sarvghamatan.ir" always_nxdomain
 local-zone: "saskklo.com" always_nxdomain
 local-zone: "scglobal.co.th" always_nxdomain
 local-zone: "schollaert.eu" always_nxdomain
-local-zone: "securefileinterneationaltransferthroughm.duckdns.org" always_nxdomain
 local-zone: "sefp-boispro.fr" always_nxdomain
 local-zone: "selekture.com" always_nxdomain
 local-zone: "selfuseproperty.com" always_nxdomain
 local-zone: "selvikoyunciftligi.com" always_nxdomain
+local-zone: "senevdekaldiyehediye.com" always_nxdomain
 local-zone: "senevdekaldiyehediyenet.com" always_nxdomain
 local-zone: "serpentrising.com" always_nxdomain
 local-zone: "servicemhkd.myvnc.com" always_nxdomain
@@ -724,7 +713,6 @@ local-zone: "sgm.pc6.com" always_nxdomain
 local-zone: "shacked.webdepot.co.il" always_nxdomain
 local-zone: "shahtoba.faqserv.com" always_nxdomain
 local-zone: "shaoxiaofei.cn" always_nxdomain
-local-zone: "share.dmca.gripe" always_nxdomain
 local-zone: "sharjahas.com" always_nxdomain
 local-zone: "shembefoundation.com" always_nxdomain
 local-zone: "shopjumpn.ch" always_nxdomain
@@ -761,7 +749,9 @@ local-zone: "ss.cybersoft-vn.com" always_nxdomain
 local-zone: "sslv3.at" always_nxdomain
 local-zone: "staging.popclusive.asia" always_nxdomain
 local-zone: "starcountry.net" always_nxdomain
+local-zone: "static.3001.net" always_nxdomain
 local-zone: "static.ilclock.com" always_nxdomain
+local-zone: "static.topxgun.com" always_nxdomain
 local-zone: "stationaryhome.com" always_nxdomain
 local-zone: "stecit.nl" always_nxdomain
 local-zone: "stevewalker.com.au" always_nxdomain
@@ -781,15 +771,16 @@ local-zone: "sylvaclouds.eu" always_nxdomain
 local-zone: "symanreni.mysecondarydns.com" always_nxdomain
 local-zone: "szxypt.com" always_nxdomain
 local-zone: "t.honker.info" always_nxdomain
+local-zone: "tandenblekenhoofddorp.nl" always_nxdomain
 local-zone: "taraward.com" always_nxdomain
 local-zone: "taxpos.com" always_nxdomain
 local-zone: "tcy.198424.com" always_nxdomain
 local-zone: "teardrop-productions.ro" always_nxdomain
 local-zone: "technoites.com" always_nxdomain
-local-zone: "tecnobella.cl" always_nxdomain
 local-zone: "tehrenberg.com" always_nxdomain
 local-zone: "telescopelms.com" always_nxdomain
 local-zone: "telsiai.info" always_nxdomain
+local-zone: "tepatitlan.gob.mx" always_nxdomain
 local-zone: "test.iyibakkendine.com" always_nxdomain
 local-zone: "testdatabaseforcepoint.com" always_nxdomain
 local-zone: "thaibbqculver.com" always_nxdomain
@@ -805,7 +796,6 @@ local-zone: "thornadops.com" always_nxdomain
 local-zone: "thosewebbs.com" always_nxdomain
 local-zone: "thuong.bidiworks.com" always_nxdomain
 local-zone: "tianangdep.com" always_nxdomain
-local-zone: "tianzi8.cn" always_nxdomain
 local-zone: "tibinst.mefound.com" always_nxdomain
 local-zone: "tibok.lflink.com" always_nxdomain
 local-zone: "ticte.in" always_nxdomain
@@ -836,10 +826,10 @@ local-zone: "unicorpbrunei.com" always_nxdomain
 local-zone: "unilevercopabr.mbiz20.net" always_nxdomain
 local-zone: "uniquehall.net" always_nxdomain
 local-zone: "unokaoeojoejfghr.ru" always_nxdomain
+local-zone: "up4net.com" always_nxdomain
 local-zone: "upd.m.dodo52.com" always_nxdomain
 local-zone: "update.iwang8.com" always_nxdomain
 local-zone: "update.my.99.com" always_nxdomain
-local-zone: "upendiveterinariovalencia.es" always_nxdomain
 local-zone: "urgentmessage.org" always_nxdomain
 local-zone: "usd-gold.com" always_nxdomain
 local-zone: "users.skynet.be" always_nxdomain
@@ -851,7 +841,6 @@ local-zone: "valedchap.ir" always_nxdomain
 local-zone: "valencaagora.com.br" always_nxdomain
 local-zone: "vasoccernews.com" always_nxdomain
 local-zone: "vaziri.echobit.ir" always_nxdomain
-local-zone: "vdotrip.blog" always_nxdomain
 local-zone: "vfocus.net" always_nxdomain
 local-zone: "vibicloud.com" always_nxdomain
 local-zone: "videoswebcammsn.free.fr" always_nxdomain
@@ -866,7 +855,6 @@ local-zone: "vitromed.ro" always_nxdomain
 local-zone: "vrrumover0.vrrum0.farted.net" always_nxdomain
 local-zone: "vvff.in" always_nxdomain
 local-zone: "w.zhzy999.net" always_nxdomain
-local-zone: "wakecar.cn" always_nxdomain
 local-zone: "wangtong7.siweidaoxiang.com" always_nxdomain
 local-zone: "wangzonghang.cn" always_nxdomain
 local-zone: "wap.dosame.com" always_nxdomain
@@ -881,7 +869,6 @@ local-zone: "welcometothefuture.com" always_nxdomain
 local-zone: "whgaty.com" always_nxdomain
 local-zone: "wiebe-sanitaer.de" always_nxdomain
 local-zone: "wmd9e.a3i1vvv.feteboc.com" always_nxdomain
-local-zone: "wmi.1217bye.host" always_nxdomain
 local-zone: "wnksupply.co.th" always_nxdomain
 local-zone: "wood-expert.net" always_nxdomain
 local-zone: "woodsytech.com" always_nxdomain
@@ -891,11 +878,11 @@ local-zone: "writesofpassage.co.za" always_nxdomain
 local-zone: "wsg.com.sg" always_nxdomain
 local-zone: "wt8.siweidaoxiang.com" always_nxdomain
 local-zone: "wt9.siweidaoxiang.com" always_nxdomain
-local-zone: "wwealthllc.com" always_nxdomain
 local-zone: "www2.recepty5.com" always_nxdomain
 local-zone: "x2vn.com" always_nxdomain
 local-zone: "xia.vzboot.com" always_nxdomain
 local-zone: "xiaidown.com" always_nxdomain
+local-zone: "xiaoma-10021647.file.myqcloud.com" always_nxdomain
 local-zone: "xiegushi.cn" always_nxdomain
 local-zone: "xirfad.com" always_nxdomain
 local-zone: "xn--transfgran-mgbbb600b.ro" always_nxdomain
@@ -905,11 +892,11 @@ local-zone: "xxwl.kuaiyunds.com" always_nxdomain
 local-zone: "xxxze.co.nu" always_nxdomain
 local-zone: "yeez.net" always_nxdomain
 local-zone: "yesky.51down.org.cn" always_nxdomain
-local-zone: "yesky.xzstatic.com" always_nxdomain
 local-zone: "yiyangjz.cn" always_nxdomain
 local-zone: "yolks.bestsellertwo.net" always_nxdomain
 local-zone: "yuluobo.com" always_nxdomain
 local-zone: "yun-1.lenku.cn" always_nxdomain
+local-zone: "yuyu02004-10043918.file.myqcloud.com" always_nxdomain
 local-zone: "yx.m.dodo52.com" always_nxdomain
 local-zone: "zagruz.dnset.com" always_nxdomain
 local-zone: "zagruz.toh.info" always_nxdomain
@@ -928,5 +915,4 @@ local-zone: "zoetermeerov.nl" always_nxdomain
 local-zone: "zoeydeutchweb.com" always_nxdomain
 local-zone: "zonefound.com.cn" always_nxdomain
 local-zone: "zskyjov.cz" always_nxdomain
-local-zone: "ztqsc.com.cn" always_nxdomain
 local-zone: "zumodelima.com" always_nxdomain
diff --git a/urlhaus-filter-unbound.conf b/urlhaus-filter-unbound.conf
index f3d37f6d..fb346e81 100644
--- a/urlhaus-filter-unbound.conf
+++ b/urlhaus-filter-unbound.conf
@@ -1,5 +1,5 @@
 # Title: abuse.ch URLhaus Malicious Domains Unbound Blocklist
-# Updated: Sat, 02 May 2020 00:09:31 UTC
+# Updated: Sat, 02 May 2020 12:09:27 UTC
 # Repo: https://gitlab.com/curben/urlhaus-filter
 # License: https://creativecommons.org/publicdomain/zero/1.0/
 # Source: https://urlhaus.abuse.ch/api/
@@ -607,6 +607,7 @@ local-zone: "2ndoffice.ph" always_nxdomain
 local-zone: "2ndpub.com" always_nxdomain
 local-zone: "2ndscreensociety.com" always_nxdomain
 local-zone: "2nell.com" always_nxdomain
+local-zone: "2no.co" always_nxdomain
 local-zone: "2pjcza.db.files.1drv.com" always_nxdomain
 local-zone: "2q1wea3rdsf.000webhostapp.com" always_nxdomain
 local-zone: "2q3w.com" always_nxdomain
@@ -724,6 +725,7 @@ local-zone: "3c-one.ru" always_nxdomain
 local-zone: "3cfilati.it" always_nxdomain
 local-zone: "3cxtraining.com" always_nxdomain
 local-zone: "3d-designcenter.com" always_nxdomain
+local-zone: "3d-universal.com" always_nxdomain
 local-zone: "3d.co.th" always_nxdomain
 local-zone: "3d.tdselectronics.com" always_nxdomain
 local-zone: "3dcentral.hu" always_nxdomain
@@ -945,6 +947,7 @@ local-zone: "4wereareyou.icu" always_nxdomain
 local-zone: "4you.by" always_nxdomain
 local-zone: "5-shampurov.ru" always_nxdomain
 local-zone: "5.fjwt1.crsky.com" always_nxdomain
+local-zone: "5.top4top.io" always_nxdomain
 local-zone: "5.u0148466.z8.ru" always_nxdomain
 local-zone: "5.unplugrevolution.com" always_nxdomain
 local-zone: "5003.arentuspecial.com" always_nxdomain
@@ -1562,7 +1565,6 @@ local-zone: "aapdasia.com" always_nxdomain
 local-zone: "aapi.co.in" always_nxdomain
 local-zone: "aapic.emarathon.or.kr" always_nxdomain
 local-zone: "aapkitayari.com" always_nxdomain
-local-zone: "aaplindia.com" always_nxdomain
 local-zone: "aapnewslive.com" always_nxdomain
 local-zone: "aapnnihotel.in" always_nxdomain
 local-zone: "aapr.org.au" always_nxdomain
@@ -1978,7 +1980,6 @@ local-zone: "acetraining24.com" always_nxdomain
 local-zone: "acewatch.vn" always_nxdomain
 local-zone: "acewm.org" always_nxdomain
 local-zone: "aceyz.com" always_nxdomain
-local-zone: "acfacilities.co.uk" always_nxdomain
 local-zone: "acffiorentina.ru" always_nxdomain
 local-zone: "acg-capital.com" always_nxdomain
 local-zone: "acg.com.my" always_nxdomain
@@ -2399,6 +2400,7 @@ local-zone: "adrite.com" always_nxdomain
 local-zone: "adroitlyadvertising.com" always_nxdomain
 local-zone: "adrolling.co.uk" always_nxdomain
 local-zone: "ads.actmol.by" always_nxdomain
+local-zone: "ads.hanggiadinh.com" always_nxdomain
 local-zone: "ads.kalabisim.com" always_nxdomain
 local-zone: "adsapomg.space" always_nxdomain
 local-zone: "adsdeedee.com" always_nxdomain
@@ -2650,7 +2652,6 @@ local-zone: "africaanalytics.tristargl.com" always_nxdomain
 local-zone: "africabluewebs.co.ke" always_nxdomain
 local-zone: "africabootcampacademy.influencetec.net" always_nxdomain
 local-zone: "africahousingawards.com" always_nxdomain
-local-zone: "africainnovates.org" always_nxdomain
 local-zone: "africamarket.shop" always_nxdomain
 local-zone: "africamissions.ca" always_nxdomain
 local-zone: "african-trips.com" always_nxdomain
@@ -3053,6 +3054,7 @@ local-zone: "aigavicenza.it" always_nxdomain
 local-zone: "aigforms.myap.co.za" always_nxdomain
 local-zone: "aiglemovies.com" always_nxdomain
 local-zone: "aihealth.vn" always_nxdomain
+local-zone: "aiiaiafrzrueuedur.ru" always_nxdomain
 local-zone: "aiineh.com" always_nxdomain
 local-zone: "aiit.ahbys.com" always_nxdomain
 local-zone: "aijdjy.com" always_nxdomain
@@ -3121,6 +3123,7 @@ local-zone: "airgc.in" always_nxdomain
 local-zone: "airinovasi-indonesia.com" always_nxdomain
 local-zone: "airisu-syumikonparty.com" always_nxdomain
 local-zone: "airlife.bget.ru" always_nxdomain
+local-zone: "airliness.info" always_nxdomain
 local-zone: "airlinkcpl.net" always_nxdomain
 local-zone: "airmaildata.com" always_nxdomain
 local-zone: "airmanship.nl" always_nxdomain
@@ -3409,6 +3412,7 @@ local-zone: "alandenz.dk" always_nxdomain
 local-zone: "alanhkatz.on-rev.com" always_nxdomain
 local-zone: "alankeef-co.tk" always_nxdomain
 local-zone: "alankippax.info" always_nxdomain
+local-zone: "alannonce.fr" always_nxdomain
 local-zone: "alanvarin2.hopto.org" always_nxdomain
 local-zone: "alanvarin3.ddns.net" always_nxdomain
 local-zone: "alanyacilingirbilal.com" always_nxdomain
@@ -4396,7 +4400,6 @@ local-zone: "americanhaircuts.com" always_nxdomain
 local-zone: "americanhomecenter.com" always_nxdomain
 local-zone: "americanmicrosoftclouddepartment.duckdns.org" always_nxdomain
 local-zone: "americanpatriotlife.com" always_nxdomain
-local-zone: "americanrange.com" always_nxdomain
 local-zone: "americanreliefhub.com" always_nxdomain
 local-zone: "americanstaffordshireterrier.it" always_nxdomain
 local-zone: "americanxdrive.gq" always_nxdomain
@@ -5652,6 +5655,7 @@ local-zone: "archst.it" always_nxdomain
 local-zone: "arcid.org" always_nxdomain
 local-zone: "arcnyc.com" always_nxdomain
 local-zone: "arcoarquitetura.arq.br" always_nxdomain
+local-zone: "arcoelectric-idaho.com" always_nxdomain
 local-zone: "arcoelectrico.cl" always_nxdomain
 local-zone: "arcoiris.org.pt" always_nxdomain
 local-zone: "arconarchitects.com" always_nxdomain
@@ -5773,6 +5777,7 @@ local-zone: "ariba.develop.kdm1.ru" always_nxdomain
 local-zone: "aridostlari.com" always_nxdomain
 local-zone: "arie-industrie.com" always_nxdomain
 local-zone: "arielaspa.com" always_nxdomain
+local-zone: "arielcarter.com" always_nxdomain
 local-zone: "arielluxhair.com" always_nxdomain
 local-zone: "arieloutdoors.com" always_nxdomain
 local-zone: "arieloutdoors.in" always_nxdomain
@@ -5790,7 +5795,6 @@ local-zone: "arihantchemcorp.com" always_nxdomain
 local-zone: "arija.lt" always_nxdomain
 local-zone: "ariko.vn" always_nxdomain
 local-zone: "arimmo.ch" always_nxdomain
-local-zone: "arimonza.it" always_nxdomain
 local-zone: "arina.jsin.ru" always_nxdomain
 local-zone: "arinidentalcare.com" always_nxdomain
 local-zone: "arinlays.com" always_nxdomain
@@ -6140,6 +6144,7 @@ local-zone: "artworkshopsinternational.com" always_nxdomain
 local-zone: "artydesign.co" always_nxdomain
 local-zone: "artzkaypharmacy.com.au" always_nxdomain
 local-zone: "artzvuk.by" always_nxdomain
+local-zone: "arufels.com" always_nxdomain
 local-zone: "aruljothi.xyz" always_nxdomain
 local-zone: "arundel.net" always_nxdomain
 local-zone: "arvd.begrip.sk" always_nxdomain
@@ -6244,7 +6249,6 @@ local-zone: "aseloud.com" always_nxdomain
 local-zone: "aseman-co.com" always_nxdomain
 local-zone: "asemancard.com" always_nxdomain
 local-zone: "asemanehco.ir" always_nxdomain
-local-zone: "aseprom.com" always_nxdomain
 local-zone: "asepspa.cl" always_nxdomain
 local-zone: "aserraderoelaleman.com.ar" always_nxdomain
 local-zone: "asertiva.cl" always_nxdomain
@@ -6317,6 +6321,7 @@ local-zone: "asia-star.info" always_nxdomain
 local-zone: "asia-taxsolutions.com" always_nxdomain
 local-zone: "asiaherbalpharmacy.com" always_nxdomain
 local-zone: "asiains.com.ph" always_nxdomain
+local-zone: "asialinklogistics.com" always_nxdomain
 local-zone: "asiamedia.tw" always_nxdomain
 local-zone: "asiana.cf" always_nxdomain
 local-zone: "asianacrylates.com" always_nxdomain
@@ -6347,6 +6352,7 @@ local-zone: "asifapparels.com" always_nxdomain
 local-zone: "asiffidatanoli.com" always_nxdomain
 local-zone: "asight.com.au" always_nxdomain
 local-zone: "asiltorna.com" always_nxdomain
+local-zone: "asiluxury.com" always_nxdomain
 local-zone: "asinaptali.com" always_nxdomain
 local-zone: "asined.es" always_nxdomain
 local-zone: "asinfotech.net" always_nxdomain
@@ -6537,7 +6543,6 @@ local-zone: "astroblu.win" always_nxdomain
 local-zone: "astrocricketpredictions.com" always_nxdomain
 local-zone: "astrodeepakdubey.in" always_nxdomain
 local-zone: "astrodolly.com" always_nxdomain
-local-zone: "astrojyoti.com" always_nxdomain
 local-zone: "astrolabioeditorial.com" always_nxdomain
 local-zone: "astroland.space" always_nxdomain
 local-zone: "astrologerpanchmukhijyotish.com" always_nxdomain
@@ -6780,7 +6785,6 @@ local-zone: "atskiysatana.ml" always_nxdomain
 local-zone: "atskiysatana.tk" always_nxdomain
 local-zone: "atso.kz" always_nxdomain
 local-zone: "atso.pt" always_nxdomain
-local-zone: "att-0748.fileshare-storage.com" always_nxdomain
 local-zone: "att-hellolab.com" always_nxdomain
 local-zone: "att1.bigmir.net" always_nxdomain
 local-zone: "atta2tata.monster" always_nxdomain
@@ -7212,6 +7216,7 @@ local-zone: "aviharmony.com.au" always_nxdomain
 local-zone: "avila-ventures.com" always_nxdomain
 local-zone: "avilacare.com" always_nxdomain
 local-zone: "avinash1.free.fr" always_nxdomain
+local-zone: "avioaircurtain.com" always_nxdomain
 local-zone: "avion-x.com" always_nxdomain
 local-zone: "avioncargoets.com" always_nxdomain
 local-zone: "aviontravelgroup.com" always_nxdomain
@@ -7646,6 +7651,7 @@ local-zone: "babystep.biz" always_nxdomain
 local-zone: "babysteps.ge" always_nxdomain
 local-zone: "babyvogel.nl" always_nxdomain
 local-zone: "babzon.club" always_nxdomain
+local-zone: "bac.edu.my" always_nxdomain
 local-zone: "bacamanect.com" always_nxdomain
 local-zone: "baccaosutritue.vn" always_nxdomain
 local-zone: "baceldeniz.com" always_nxdomain
@@ -7712,6 +7718,7 @@ local-zone: "badintentionsprod.com" always_nxdomain
 local-zone: "badisse.com" always_nxdomain
 local-zone: "badkamer-sanitair.nl" always_nxdomain
 local-zone: "badmildiou.com" always_nxdomain
+local-zone: "badzena.com" always_nxdomain
 local-zone: "baerbl-volz.de" always_nxdomain
 local-zone: "baeren-schlatt.ch" always_nxdomain
 local-zone: "baermedia.ch" always_nxdomain
@@ -7761,7 +7768,6 @@ local-zone: "bahisreklami.com" always_nxdomain
 local-zone: "bahku.ru" always_nxdomain
 local-zone: "bahl.com.au" always_nxdomain
 local-zone: "bahlcom.au" always_nxdomain
-local-zone: "bahoma.com" always_nxdomain
 local-zone: "bahomacom" always_nxdomain
 local-zone: "bahrain-escorts.com" always_nxdomain
 local-zone: "bahrainbordir.com" always_nxdomain
@@ -8494,7 +8500,6 @@ local-zone: "beachcondolife.tk" always_nxdomain
 local-zone: "beachview.co.za" always_nxdomain
 local-zone: "beachvillas.gr" always_nxdomain
 local-zone: "beachwoodproperty.com.au" always_nxdomain
-local-zone: "beaconacademy.net" always_nxdomain
 local-zone: "beaconhousediscovery.com" always_nxdomain
 local-zone: "beaconr.rungta.ac.in" always_nxdomain
 local-zone: "beactivedigital.com" always_nxdomain
@@ -9203,7 +9208,6 @@ local-zone: "beysel.com" always_nxdomain
 local-zone: "beytepefoodcenter.com" always_nxdomain
 local-zone: "beytriali.com" always_nxdomain
 local-zone: "bezambici.com" always_nxdomain
-local-zone: "bezier.com" always_nxdomain
 local-zone: "bezlive.com" always_nxdomain
 local-zone: "bezoekbosnie.nl" always_nxdomain
 local-zone: "bezoporu.wtie.tu.koszalin.pl" always_nxdomain
@@ -10404,7 +10408,6 @@ local-zone: "bloodybits.com" always_nxdomain
 local-zone: "bloombrainz.com" always_nxdomain
 local-zone: "bloomcommunityproject.org" always_nxdomain
 local-zone: "bloomestatelitigation.ca" always_nxdomain
-local-zone: "bloomfire.com" always_nxdomain
 local-zone: "bloomflores.com" always_nxdomain
 local-zone: "bloomhomes.in" always_nxdomain
 local-zone: "bloomingbridal.com.au" always_nxdomain
@@ -10732,7 +10735,6 @@ local-zone: "bonaccount.com" always_nxdomain
 local-zone: "bonakma.com" always_nxdomain
 local-zone: "bonallegro.5v.pl" always_nxdomain
 local-zone: "bonattiholding.com" always_nxdomain
-local-zone: "bonavigator.pl" always_nxdomain
 local-zone: "bond.com.vn" always_nxdomain
 local-zone: "bondagetrip.com" always_nxdomain
 local-zone: "bondbengals.info" always_nxdomain
@@ -11244,7 +11246,6 @@ local-zone: "bridgesearch.com" always_nxdomain
 local-zone: "bridgeventuresllc.com" always_nxdomain
 local-zone: "briefmarkenpower.de" always_nxdomain
 local-zone: "brifing.info" always_nxdomain
-local-zone: "brightachieversltd.com" always_nxdomain
 local-zone: "brightasia.com.sg" always_nxdomain
 local-zone: "brightbat.com" always_nxdomain
 local-zone: "brightbook.ir" always_nxdomain
@@ -11935,7 +11936,6 @@ local-zone: "bytosti.cz" always_nxdomain
 local-zone: "byttd.com.cn" always_nxdomain
 local-zone: "byukattie.top" always_nxdomain
 local-zone: "byvejen.dk" always_nxdomain
-local-zone: "byworks.com" always_nxdomain
 local-zone: "byxaru.com" always_nxdomain
 local-zone: "byxxyz.com" always_nxdomain
 local-zone: "byz2.com" always_nxdomain
@@ -12503,7 +12503,6 @@ local-zone: "carbtecgh.com" always_nxdomain
 local-zone: "carc-astrology.in" always_nxdomain
 local-zone: "carcorxox.com" always_nxdomain
 local-zone: "carcounsel.com" always_nxdomain
-local-zone: "cardbankph.com" always_nxdomain
 local-zone: "cardboardspaceshiptoys.com" always_nxdomain
 local-zone: "cardea-immobilien.de" always_nxdomain
 local-zone: "cardealersforbadcredit.net" always_nxdomain
@@ -13032,6 +13031,7 @@ local-zone: "cc14927-wordpress.tw1.ru" always_nxdomain
 local-zone: "cc78.bg" always_nxdomain
 local-zone: "cc8848.xyz" always_nxdomain
 local-zone: "cc9.ne.jp" always_nxdomain
+local-zone: "ccamatil1-my.sharepoint.com" always_nxdomain
 local-zone: "ccandcbrand.com" always_nxdomain
 local-zone: "ccash.xyz" always_nxdomain
 local-zone: "ccat.biz" always_nxdomain
@@ -13129,6 +13129,8 @@ local-zone: "cdn.siv.cc" always_nxdomain
 local-zone: "cdn.slty.de" always_nxdomain
 local-zone: "cdn.timebuyer.org" always_nxdomain
 local-zone: "cdn.top4top.net" always_nxdomain
+local-zone: "cdn.truelife.vn" always_nxdomain
+local-zone: "cdn.xiaoduoai.com" always_nxdomain
 local-zone: "cdn.zecast.com" always_nxdomain
 local-zone: "cdn4.css361.com" always_nxdomain
 local-zone: "cdn5.rvshare.com" always_nxdomain
@@ -13273,7 +13275,6 @@ local-zone: "center-house.ru" always_nxdomain
 local-zone: "center-miami.com" always_nxdomain
 local-zone: "center.1team.pro" always_nxdomain
 local-zone: "center1.co.il" always_nxdomain
-local-zone: "center4cby.com" always_nxdomain
 local-zone: "centerfortheyouth.org" always_nxdomain
 local-zone: "centerline.co.kr" always_nxdomain
 local-zone: "centernadegda.ru" always_nxdomain
@@ -13627,6 +13628,7 @@ local-zone: "charity.vexacom.com" always_nxdomain
 local-zone: "charitycandy.co.uk" always_nxdomain
 local-zone: "charitylov.com" always_nxdomain
 local-zone: "charityshofner.com" always_nxdomain
+local-zone: "charlemagne.fr" always_nxdomain
 local-zone: "charlesbaker.co.uk" always_nxdomain
 local-zone: "charlescuthbertson.com" always_nxdomain
 local-zone: "charlesmessa.info" always_nxdomain
@@ -14053,6 +14055,7 @@ local-zone: "christinalenway.com" always_nxdomain
 local-zone: "christinelebeck.com" always_nxdomain
 local-zone: "christinmunsch.com" always_nxdomain
 local-zone: "christmasatredeemer.org" always_nxdomain
+local-zone: "christoforoskotentos.com" always_nxdomain
 local-zone: "christolandcompany.com" always_nxdomain
 local-zone: "christolar.cz" always_nxdomain
 local-zone: "christom.com.au" always_nxdomain
@@ -14476,6 +14479,7 @@ local-zone: "clcindy.com" always_nxdomain
 local-zone: "cld-net.com" always_nxdomain
 local-zone: "cld.persiangig.com" always_nxdomain
 local-zone: "cld.pt" always_nxdomain
+local-zone: "cle.ae" always_nxdomain
 local-zone: "clean.crypt24.in" always_nxdomain
 local-zone: "clean.olexandry.ru" always_nxdomain
 local-zone: "clean.vanzherke.ru" always_nxdomain
@@ -14536,14 +14540,12 @@ local-zone: "cleverflame.com" always_nxdomain
 local-zone: "cleverlearncebu.com" always_nxdomain
 local-zone: "cleverspain.com" always_nxdomain
 local-zone: "clgafareaitu.com" always_nxdomain
-local-zone: "clgsecurities.com" always_nxdomain
 local-zone: "clhairdesign.com" always_nxdomain
 local-zone: "clhgoody.xyz" always_nxdomain
 local-zone: "clic-douaisis.fr" always_nxdomain
 local-zone: "click-up.co.il" always_nxdomain
 local-zone: "click.danielshomecenter.com" always_nxdomain
 local-zone: "click.expertsmeetings.org" always_nxdomain
-local-zone: "click.senate.go.th" always_nxdomain
 local-zone: "click4amassage.com" always_nxdomain
 local-zone: "click4ship.com" always_nxdomain
 local-zone: "clickara.com" always_nxdomain
@@ -14598,7 +14600,6 @@ local-zone: "clinicacasuo.com.br" always_nxdomain
 local-zone: "clinicacirurgiaplasticasp.com.br" always_nxdomain
 local-zone: "clinicacorporea.com" always_nxdomain
 local-zone: "clinicacorpusmacae.com.br" always_nxdomain
-local-zone: "clinicacrecer.com" always_nxdomain
 local-zone: "clinicadavid.mx" always_nxdomain
 local-zone: "clinicadeldolorgt.com" always_nxdomain
 local-zone: "clinicadentalimagen.pe" always_nxdomain
@@ -14673,7 +14674,6 @@ local-zone: "cloud.chachobills.com" always_nxdomain
 local-zone: "cloud.diminishedvaluecalifornia.com" always_nxdomain
 local-zone: "cloud.hollweck.it" always_nxdomain
 local-zone: "cloud.kryptonia.fr" always_nxdomain
-local-zone: "cloud.patrika.com" always_nxdomain
 local-zone: "cloud.s2lol.com" always_nxdomain
 local-zone: "cloud.wmsinfo.com.br" always_nxdomain
 local-zone: "cloud.xenoris.fr" always_nxdomain
@@ -14682,6 +14682,7 @@ local-zone: "cloudatlas.io" always_nxdomain
 local-zone: "cloudbox-online.net" always_nxdomain
 local-zone: "cloudbytegames.com" always_nxdomain
 local-zone: "cloudcapgames.com" always_nxdomain
+local-zone: "cloudcast.best" always_nxdomain
 local-zone: "cloudcottage.cloud" always_nxdomain
 local-zone: "cloudessy.com" always_nxdomain
 local-zone: "cloudfilesharingdomainurllinksys.duckdns.org" always_nxdomain
@@ -14771,6 +14772,7 @@ local-zone: "cmdaitexpo.com" always_nxdomain
 local-zone: "cmdez.ir" always_nxdomain
 local-zone: "cmdou.com" always_nxdomain
 local-zone: "cmeaststar.de" always_nxdomain
+local-zone: "cmg.asia" always_nxdomain
 local-zone: "cmgroup.com.ua" always_nxdomain
 local-zone: "cmhighschool.edu.bd" always_nxdomain
 local-zone: "cmhmfgoutbound.protection.sketchwefair-watduoliprudential.com.watchdogdns.duckdns.org" always_nxdomain
@@ -15004,7 +15006,6 @@ local-zone: "coffeeking.in" always_nxdomain
 local-zone: "coffeeorcanoeing.com" always_nxdomain
 local-zone: "cofqz.com" always_nxdomain
 local-zone: "cofrex-eg.com" always_nxdomain
-local-zone: "cofusa.com" always_nxdomain
 local-zone: "cogeainternational.com" always_nxdomain
 local-zone: "coges-tn.com" always_nxdomain
 local-zone: "coghlanhealthcare.ie" always_nxdomain
@@ -15809,7 +15810,6 @@ local-zone: "corkmademore.com" always_nxdomain
 local-zone: "corkspeechtherapy.ie" always_nxdomain
 local-zone: "corm-informatique.fr" always_nxdomain
 local-zone: "cormetal.eu" always_nxdomain
-local-zone: "cornejotex.com" always_nxdomain
 local-zone: "cornelbusiness.co.uk" always_nxdomain
 local-zone: "cornelia-ernst.de" always_nxdomain
 local-zone: "cornellekacy.net" always_nxdomain
@@ -16513,7 +16513,6 @@ local-zone: "csp-tfpm.com" always_nxdomain
 local-zone: "csplumbingservices.co.uk" always_nxdomain
 local-zone: "cspn-omsk.ru" always_nxdomain
 local-zone: "csprequiao.pt" always_nxdomain
-local-zone: "csq.es" always_nxdomain
 local-zone: "csrcampaign.com" always_nxdomain
 local-zone: "csrkanjiza.rs" always_nxdomain
 local-zone: "csrngo.in" always_nxdomain
@@ -17354,7 +17353,6 @@ local-zone: "dashfiles.tk" always_nxdomain
 local-zone: "dashkevichseo.ru" always_nxdomain
 local-zone: "dashonweb.com" always_nxdomain
 local-zone: "dashvaanjil.mn" always_nxdomain
-local-zone: "dasjoe.de" always_nxdomain
 local-zone: "daskruelhaus.com" always_nxdomain
 local-zone: "dasleds.com" always_nxdomain
 local-zone: "dastep.com" always_nxdomain
@@ -17401,7 +17399,6 @@ local-zone: "datascienceexcellence.net" always_nxdomain
 local-zone: "datascienceexcellence.org" always_nxdomain
 local-zone: "dataseru.com" always_nxdomain
 local-zone: "dataserver.c0.pl" always_nxdomain
-local-zone: "datasheep.co.uk" always_nxdomain
 local-zone: "datasoft-sa.com" always_nxdomain
 local-zone: "datatalentadvisors.com" always_nxdomain
 local-zone: "datatechis.com" always_nxdomain
@@ -17441,6 +17438,7 @@ local-zone: "datswingt.nl" always_nxdomain
 local-zone: "datthocuphuquoc.xyz" always_nxdomain
 local-zone: "dattiec.net" always_nxdomain
 local-zone: "dattopantthengadi.in" always_nxdomain
+local-zone: "datudeli.com" always_nxdomain
 local-zone: "datumu.ga" always_nxdomain
 local-zone: "datumu.ml" always_nxdomain
 local-zone: "datvangthainguyen.com" always_nxdomain
@@ -17598,6 +17596,7 @@ local-zone: "dbcomestic.com" always_nxdomain
 local-zone: "dbecome.top" always_nxdomain
 local-zone: "dbfuppsala.se" always_nxdomain
 local-zone: "dbinario.com" always_nxdomain
+local-zone: "dbo.ca.gov" always_nxdomain
 local-zone: "dboyusa.online" always_nxdomain
 local-zone: "dbravo.pro" always_nxdomain
 local-zone: "dbs-ebank.com" always_nxdomain
@@ -17658,7 +17657,6 @@ local-zone: "dd.loop.coop" always_nxdomain
 local-zone: "dd.smaxdn.com" always_nxdomain
 local-zone: "dda.co.ir" always_nxdomain
 local-zone: "ddaynew.5demo.xyz" always_nxdomain
-local-zone: "ddbuilding.com" always_nxdomain
 local-zone: "ddccs.net" always_nxdomain
 local-zone: "ddd2.pc6.com" always_nxdomain
 local-zone: "dddos.persiangig.com" always_nxdomain
@@ -17805,6 +17803,7 @@ local-zone: "deconmit.com" always_nxdomain
 local-zone: "decons.ai" always_nxdomain
 local-zone: "decons.vn" always_nxdomain
 local-zone: "decoplast-edp.ro" always_nxdomain
+local-zone: "decoprojectme.com" always_nxdomain
 local-zone: "decoracaodeparedes.com.br" always_nxdomain
 local-zone: "decoratingideas.bozkurtfurkan.com" always_nxdomain
 local-zone: "decoration-marine.net" always_nxdomain
@@ -19150,7 +19149,6 @@ local-zone: "digigm.ir" always_nxdomain
 local-zone: "digihashtag.com" always_nxdomain
 local-zone: "digiiital.co.uk" always_nxdomain
 local-zone: "digikow.000webhostapp.com" always_nxdomain
-local-zone: "digilander.libero.it" always_nxdomain
 local-zone: "digileads.ae" always_nxdomain
 local-zone: "digilib.dianhusada.ac.id" always_nxdomain
 local-zone: "digim.asia" always_nxdomain
@@ -19176,6 +19174,7 @@ local-zone: "digital.eudoratrading.com" always_nxdomain
 local-zone: "digital.gemacipta.asia" always_nxdomain
 local-zone: "digital.syd.fr" always_nxdomain
 local-zone: "digital2home.ecobz.xyz" always_nxdomain
+local-zone: "digital7.com" always_nxdomain
 local-zone: "digitalankur.com" always_nxdomain
 local-zone: "digitalbrit.com" always_nxdomain
 local-zone: "digitalbugs.co.in" always_nxdomain
@@ -19609,7 +19608,6 @@ local-zone: "djyokoo.com" always_nxdomain
 local-zone: "djz313iks60bk4.com" always_nxdomain
 local-zone: "djzmo.com" always_nxdomain
 local-zone: "dk-elbrus.ru" always_nxdomain
-local-zone: "dk-rc.com" always_nxdomain
 local-zone: "dk.sa" always_nxdomain
 local-zone: "dk5gckyelnxjl.cloudfront.net" always_nxdomain
 local-zone: "dkadvisry.com" always_nxdomain
@@ -19673,6 +19671,7 @@ local-zone: "dl2.onedrive-eu.com" always_nxdomain
 local-zone: "dl2.onedrive-us-en.com" always_nxdomain
 local-zone: "dl2.soft-lenta.ru" always_nxdomain
 local-zone: "dl2.storeandshare.singtel.com" always_nxdomain
+local-zone: "dl4.joxi.net" always_nxdomain
 local-zone: "dl63964725.dyn-downloads.com" always_nxdomain
 local-zone: "dlainzyniera.pl" always_nxdomain
 local-zone: "dlawgist.com" always_nxdomain
@@ -20120,6 +20119,7 @@ local-zone: "donnebella.com" always_nxdomain
 local-zone: "donnerreuschel.com" always_nxdomain
 local-zone: "donphenom.al" always_nxdomain
 local-zone: "donpomodoro.com.co" always_nxdomain
+local-zone: "donsinout.info" always_nxdomain
 local-zone: "donsly.usa.cc" always_nxdomain
 local-zone: "donsworld.org" always_nxdomain
 local-zone: "dontlitigate.com" always_nxdomain
@@ -20128,7 +20128,6 @@ local-zone: "donusumhirdavatmetal.com" always_nxdomain
 local-zone: "donvosphotography.com" always_nxdomain
 local-zone: "donwonda.org" always_nxdomain
 local-zone: "dooball.biz" always_nxdomain
-local-zone: "doobegroup.com" always_nxdomain
 local-zone: "dooch.vn" always_nxdomain
 local-zone: "doodlebug.club" always_nxdomain
 local-zone: "doodleninja.in" always_nxdomain
@@ -20529,7 +20528,6 @@ local-zone: "drdelaluz.com" always_nxdomain
 local-zone: "drdki.com" always_nxdomain
 local-zone: "drdoorbin.com" always_nxdomain
 local-zone: "dream-energy.ru" always_nxdomain
-local-zone: "dream-food.com" always_nxdomain
 local-zone: "dream-girls.club" always_nxdomain
 local-zone: "dream-girls.online" always_nxdomain
 local-zone: "dream-girls.xyz" always_nxdomain
@@ -20570,6 +20568,7 @@ local-zone: "dreamswork.tk" always_nxdomain
 local-zone: "dreamtownpsl.co.ke" always_nxdomain
 local-zone: "dreamtravel.site" always_nxdomain
 local-zone: "dreamtravelonthego.com" always_nxdomain
+local-zone: "dreamtrips.cheap" always_nxdomain
 local-zone: "dreamtrips.icu" always_nxdomain
 local-zone: "dreamvision.bg" always_nxdomain
 local-zone: "dreamwolf.tv" always_nxdomain
@@ -21554,6 +21553,7 @@ local-zone: "ecity.network" always_nxdomain
 local-zone: "ecitytanduclongan.com" always_nxdomain
 local-zone: "eckdor.de" always_nxdomain
 local-zone: "ecker.aidnet.at" always_nxdomain
+local-zone: "ecklund.no" always_nxdomain
 local-zone: "eclairesuits.com" always_nxdomain
 local-zone: "eclatpro.com" always_nxdomain
 local-zone: "eclecticelectronics.net" always_nxdomain
@@ -21722,7 +21722,6 @@ local-zone: "edgingprofile.com" always_nxdomain
 local-zone: "edhec.business-angels.info" always_nxdomain
 local-zone: "edialplast.ru" always_nxdomain
 local-zone: "edicolanazionale.it" always_nxdomain
-local-zone: "edicustoms.com.au" always_nxdomain
 local-zone: "ediet.ir" always_nxdomain
 local-zone: "edificaiconstrucoes.com" always_nxdomain
 local-zone: "edifice-guyane.fr" always_nxdomain
@@ -22103,7 +22102,6 @@ local-zone: "elc.daffodilvarsity.edu.bd" always_nxdomain
 local-zone: "elcampestre.cl" always_nxdomain
 local-zone: "elcaneloautopartes.com.mx" always_nxdomain
 local-zone: "elcapitanno.com" always_nxdomain
-local-zone: "elcarmelohotelhacienda.com" always_nxdomain
 local-zone: "elcarrocafeny.com" always_nxdomain
 local-zone: "elchurrascorestaurante.com" always_nxdomain
 local-zone: "elclasicocml.com" always_nxdomain
@@ -22154,7 +22152,6 @@ local-zone: "electriquestew.com" always_nxdomain
 local-zone: "electro-bike.club" always_nxdomain
 local-zone: "electroautomat.com" always_nxdomain
 local-zone: "electrocad.in" always_nxdomain
-local-zone: "electroenchufe.com" always_nxdomain
 local-zone: "electrofluxequipmentspvtltd.com" always_nxdomain
 local-zone: "electrofyhub.com" always_nxdomain
 local-zone: "electrogc.com.ar" always_nxdomain
@@ -22740,7 +22737,6 @@ local-zone: "enekashoush.com" always_nxdomain
 local-zone: "enemobodoukpaka.com" always_nxdomain
 local-zone: "enequipo.es" always_nxdomain
 local-zone: "enercol.cl" always_nxdomain
-local-zone: "energicaweb.com" always_nxdomain
 local-zone: "energie-service.fr" always_nxdomain
 local-zone: "energie-strom.net" always_nxdomain
 local-zone: "energiemag.fr" always_nxdomain
@@ -23422,7 +23418,6 @@ local-zone: "estomedic.com" always_nxdomain
 local-zone: "estore.qurvex.com" always_nxdomain
 local-zone: "estrategias-corporativas.com" always_nxdomain
 local-zone: "estrategiasdeaprovacao.com.br" always_nxdomain
-local-zone: "estreamnetworks.net" always_nxdomain
 local-zone: "estrindesign.com" always_nxdomain
 local-zone: "estrom.es" always_nxdomain
 local-zone: "estrutura.eng.br" always_nxdomain
@@ -24500,6 +24495,7 @@ local-zone: "fashionandme.ru" always_nxdomain
 local-zone: "fashionattitude.de" always_nxdomain
 local-zone: "fashionbettysam.com" always_nxdomain
 local-zone: "fashionblogandpromo.club" always_nxdomain
+local-zone: "fashiondenver.com" always_nxdomain
 local-zone: "fashionfootprint.leseditextiles.co.za" always_nxdomain
 local-zone: "fashionfootprint.nmco.co.za" always_nxdomain
 local-zone: "fashiongul.com" always_nxdomain
@@ -24742,6 +24738,7 @@ local-zone: "febsmarketingnetwork.com" always_nxdomain
 local-zone: "febsms.com" always_nxdomain
 local-zone: "fechos.org.br" always_nxdomain
 local-zone: "fecoonde.org" always_nxdomain
+local-zone: "fectrucks.com" always_nxdomain
 local-zone: "fed58f43246844b18d00fb0177352546.download" always_nxdomain
 local-zone: "fedbroker.ru" always_nxdomain
 local-zone: "fedeminersdigital.com" always_nxdomain
@@ -25604,6 +25601,7 @@ local-zone: "floradna.com" always_nxdomain
 local-zone: "floradosventos.com.br" always_nxdomain
 local-zone: "floralcompany.jp" always_nxdomain
 local-zone: "floramatic.com" always_nxdomain
+local-zone: "florandina.com" always_nxdomain
 local-zone: "florandum.com" always_nxdomain
 local-zone: "florean.be" always_nxdomain
 local-zone: "florenceloewy.com" always_nxdomain
@@ -26030,7 +26028,6 @@ local-zone: "fotogar.com" always_nxdomain
 local-zone: "fotograafie.nl" always_nxdomain
 local-zone: "fotografiarnia.pl" always_nxdomain
 local-zone: "fotoground.com" always_nxdomain
-local-zone: "fotojurczak.pl" always_nxdomain
 local-zone: "fotolegko.ru" always_nxdomain
 local-zone: "fotomb.com" always_nxdomain
 local-zone: "fotoms.pl" always_nxdomain
@@ -26588,7 +26585,6 @@ local-zone: "fundacao-algarvia.pt" always_nxdomain
 local-zone: "fundacionafanic.com" always_nxdomain
 local-zone: "fundacioncaminosdepazporcolombiacali.org" always_nxdomain
 local-zone: "fundacioncreatalento.org" always_nxdomain
-local-zone: "fundacionesperanza.org.es" always_nxdomain
 local-zone: "fundacionmontehoreb.org.ve" always_nxdomain
 local-zone: "fundacionpacma.com" always_nxdomain
 local-zone: "fundacionravera.com" always_nxdomain
@@ -26736,7 +26732,6 @@ local-zone: "fuzoneeducations.com" always_nxdomain
 local-zone: "fuzzyconcepts.com" always_nxdomain
 local-zone: "fuzzylogic.in" always_nxdomain
 local-zone: "fuzzymiles.com" always_nxdomain
-local-zone: "fv1-2.failiem.lv" always_nxdomain
 local-zone: "fv13.failiem.lv" always_nxdomain
 local-zone: "fv15.failiem.lv" always_nxdomain
 local-zone: "fv2-1.failiem.lv" always_nxdomain
@@ -27436,7 +27431,6 @@ local-zone: "genedelibero.com" always_nxdomain
 local-zone: "genelmusavirlik.com.tr" always_nxdomain
 local-zone: "geneomm.com" always_nxdomain
 local-zone: "generactz.com" always_nxdomain
-local-zone: "general.it" always_nxdomain
 local-zone: "generalbikes.com" always_nxdomain
 local-zone: "generalgauffin.se" always_nxdomain
 local-zone: "generalhomemedicalsupply.com" always_nxdomain
@@ -27527,7 +27521,6 @@ local-zone: "geolegno.eu" always_nxdomain
 local-zone: "geolinvestproekt.ru" always_nxdomain
 local-zone: "geolocstar.com" always_nxdomain
 local-zone: "geologia.geoss.pt" always_nxdomain
-local-zone: "geologimarche.it" always_nxdomain
 local-zone: "geolysis.org" always_nxdomain
 local-zone: "geometrai.com" always_nxdomain
 local-zone: "geometrirc.com" always_nxdomain
@@ -27891,7 +27884,6 @@ local-zone: "gilbertceramic.fr" always_nxdomain
 local-zone: "gilbertohair.com" always_nxdomain
 local-zone: "gildlearning.org" always_nxdomain
 local-zone: "gilgaluganda.org" always_nxdomain
-local-zone: "gilhb.com" always_nxdomain
 local-zone: "gilio.com.mx" always_nxdomain
 local-zone: "gill-holiday-2013.gillfoundation.org" always_nxdomain
 local-zone: "gill-holiday-2014.gillfoundation.org" always_nxdomain
@@ -28053,6 +28045,7 @@ local-zone: "glid.jp" always_nxdomain
 local-zone: "gligoricekofood.com" always_nxdomain
 local-zone: "glik.acemlnc.com" always_nxdomain
 local-zone: "glimpse.com.cn" always_nxdomain
+local-zone: "glip-vault-1.s3-accelerate.amazonaws.com" always_nxdomain
 local-zone: "glissandobigband.com" always_nxdomain
 local-zone: "glitchexotika.com" always_nxdomain
 local-zone: "glitzygal.net" always_nxdomain
@@ -28584,7 +28577,6 @@ local-zone: "gordyssensors.com" always_nxdomain
 local-zone: "gorenotoservisi.net" always_nxdomain
 local-zone: "goretimmo.lu" always_nxdomain
 local-zone: "gorgan-clinic.ir" always_nxdomain
-local-zone: "gorglione.com" always_nxdomain
 local-zone: "gorguluyapi.com" always_nxdomain
 local-zone: "gorgunmakina.com" always_nxdomain
 local-zone: "gorillaconcretecoatings.com" always_nxdomain
@@ -28652,6 +28644,7 @@ local-zone: "goudu.club" always_nxdomain
 local-zone: "gourmandd.com" always_nxdomain
 local-zone: "gourmetlab.pe" always_nxdomain
 local-zone: "gourmetreats.in" always_nxdomain
+local-zone: "gov.kr" always_nxdomain
 local-zone: "gov.rsmart-testsolutions.watchdogdns.duckdns.org" always_nxdomain
 local-zone: "govche.in" always_nxdomain
 local-zone: "goveboatclub.com.au" always_nxdomain
@@ -29175,7 +29168,6 @@ local-zone: "grupogeacr.com" always_nxdomain
 local-zone: "grupoglobaliza.com" always_nxdomain
 local-zone: "grupohasar.com" always_nxdomain
 local-zone: "grupoiesp.tk" always_nxdomain
-local-zone: "grupoinalen.com" always_nxdomain
 local-zone: "grupoinfonet.com" always_nxdomain
 local-zone: "grupojg.com.br" always_nxdomain
 local-zone: "grupolaplace.com.br" always_nxdomain
@@ -29392,6 +29384,7 @@ local-zone: "gulluconsulants.com" always_nxdomain
 local-zone: "gullukomurelektronik.com" always_nxdomain
 local-zone: "gulseda.site" always_nxdomain
 local-zone: "gulungdinamo.com" always_nxdomain
+local-zone: "gulzarhomestay.com" always_nxdomain
 local-zone: "gumiviet.com" always_nxdomain
 local-zone: "gumuscorap.com" always_nxdomain
 local-zone: "gumustelkari.com" always_nxdomain
@@ -29539,6 +29532,7 @@ local-zone: "h-surgeon.info" always_nxdomain
 local-zone: "h-w-c.net" always_nxdomain
 local-zone: "h.eurotrading.com.pl" always_nxdomain
 local-zone: "h.j990981.ru" always_nxdomain
+local-zone: "h.top4top.io" always_nxdomain
 local-zone: "h.valerana44.ru" always_nxdomain
 local-zone: "h1.iwakalong.ru" always_nxdomain
 local-zone: "h112321.s08.test-hf.su" always_nxdomain
@@ -30123,6 +30117,7 @@ local-zone: "hayahost.com" always_nxdomain
 local-zone: "hayalbu.com" always_nxdomain
 local-zone: "hayashitoysmart.com" always_nxdomain
 local-zone: "hayatevesigar-10gbnetkazan.com" always_nxdomain
+local-zone: "hayatevesigar-20gb.com" always_nxdomain
 local-zone: "hayatihusada.com" always_nxdomain
 local-zone: "hayatiskele.com" always_nxdomain
 local-zone: "hayatlokma.com" always_nxdomain
@@ -30379,8 +30374,10 @@ local-zone: "hedisetro.5gbfree.com" always_nxdomain
 local-zone: "hediy20gb-internet-online.net" always_nxdomain
 local-zone: "hediye-internet-saglik.org" always_nxdomain
 local-zone: "hediye-internet.site" always_nxdomain
+local-zone: "hediye20gb.online" always_nxdomain
 local-zone: "hediyegapsinternet.com" always_nxdomain
 local-zone: "hediyeinternetpaketim.com" always_nxdomain
+local-zone: "hediyeler10gb-ramazan.net" always_nxdomain
 local-zone: "hediyem20gb-internet.org" always_nxdomain
 local-zone: "hediyenkolay.com" always_nxdomain
 local-zone: "hedrasl.com" always_nxdomain
@@ -30956,6 +30953,7 @@ local-zone: "hjsanders.nl" always_nxdomain
 local-zone: "hjylw66.com" always_nxdomain
 local-zone: "hk.darwd.com" always_nxdomain
 local-zone: "hk.insure" always_nxdomain
+local-zone: "hk.npu.gov.ua" always_nxdomain
 local-zone: "hk026.com" always_nxdomain
 local-zone: "hk3.my" always_nxdomain
 local-zone: "hk3fitness.com" always_nxdomain
@@ -31181,6 +31179,7 @@ local-zone: "home-racing.com" always_nxdomain
 local-zone: "home-spy-shop.com" always_nxdomain
 local-zone: "home.99eurowebsite.ie" always_nxdomain
 local-zone: "home.barley-plus.com" always_nxdomain
+local-zone: "home.earthlink.net" always_nxdomain
 local-zone: "home.evrstudio.com" always_nxdomain
 local-zone: "home.healthiestu.com" always_nxdomain
 local-zone: "home.isdes.com" always_nxdomain
@@ -31651,7 +31650,6 @@ local-zone: "houzess.com" always_nxdomain
 local-zone: "how-to-nampa.com" always_nxdomain
 local-zone: "how-to-tech.com" always_nxdomain
 local-zone: "how.ph" always_nxdomain
-local-zone: "howalshafikings.com" always_nxdomain
 local-zone: "howardbenz.com" always_nxdomain
 local-zone: "howardbragman.com" always_nxdomain
 local-zone: "howardgfranklin.com" always_nxdomain
@@ -33673,6 +33671,7 @@ local-zone: "integraciontotal.com.mx" always_nxdomain
 local-zone: "integracooperativa.com" always_nxdomain
 local-zone: "integrafika.co.uk" always_nxdomain
 local-zone: "integraga.com" always_nxdomain
+local-zone: "integralc.com" always_nxdomain
 local-zone: "integralcs.com.br" always_nxdomain
 local-zone: "integralestates.in" always_nxdomain
 local-zone: "integralmakeup.com" always_nxdomain
@@ -33709,6 +33708,7 @@ local-zone: "interaktifhaberler.net" always_nxdomain
 local-zone: "interativus.com.br" always_nxdomain
 local-zone: "interbanx.co.id" always_nxdomain
 local-zone: "interbizservices.eu" always_nxdomain
+local-zone: "interbus.cz" always_nxdomain
 local-zone: "interciencia.es" always_nxdomain
 local-zone: "intercitiesfiji.com" always_nxdomain
 local-zone: "intercity-tlt.ru" always_nxdomain
@@ -33769,7 +33769,6 @@ local-zone: "internationalmscareerseminar.com" always_nxdomain
 local-zone: "internaut.in" always_nxdomain
 local-zone: "internetcasinoweblog.com" always_nxdomain
 local-zone: "internetjogasz.hu" always_nxdomain
-local-zone: "internetlink.com.mx" always_nxdomain
 local-zone: "internetmarketing4pros.com" always_nxdomain
 local-zone: "internetofsmell.com" always_nxdomain
 local-zone: "internetordbogen.dk" always_nxdomain
@@ -33874,6 +33873,7 @@ local-zone: "invernessdesignbuild.ca" always_nxdomain
 local-zone: "inversionesdambrosio.com" always_nxdomain
 local-zone: "inversioneslopezminaya.com" always_nxdomain
 local-zone: "invertilo.com" always_nxdomain
+local-zone: "invest-logistic.net" always_nxdomain
 local-zone: "invest.hawzentr.com" always_nxdomain
 local-zone: "investasiafoundation.com" always_nxdomain
 local-zone: "investaweb.com" always_nxdomain
@@ -34421,7 +34421,6 @@ local-zone: "itaalabama.org" always_nxdomain
 local-zone: "itafoam.com" always_nxdomain
 local-zone: "itai-ziv.com" always_nxdomain
 local-zone: "italamp.tk" always_nxdomain
-local-zone: "italia-ricci.com" always_nxdomain
 local-zone: "italianfishrestaurantgh.com" always_nxdomain
 local-zone: "italianindoart.com" always_nxdomain
 local-zone: "italiansupercars.net" always_nxdomain
@@ -35010,7 +35009,6 @@ local-zone: "jayambewallpapers.com" always_nxdomain
 local-zone: "jayb.xyz" always_nxdomain
 local-zone: "jayc-productions.com" always_nxdomain
 local-zone: "jaychallenge.com" always_nxdomain
-local-zone: "jaycochemicals.com" always_nxdomain
 local-zone: "jaydeemory.com" always_nxdomain
 local-zone: "jaydipchowdharyblog.com" always_nxdomain
 local-zone: "jayemservicesdev2.site" always_nxdomain
@@ -35349,6 +35347,7 @@ local-zone: "jimbarrell.com" always_nxdomain
 local-zone: "jimbira-sakho.net" always_nxdomain
 local-zone: "jimbowe.com" always_nxdomain
 local-zone: "jimenezdesigngroup.com" always_nxdomain
+local-zone: "jimlaneevangelist.com" always_nxdomain
 local-zone: "jimlowry.com" always_nxdomain
 local-zone: "jimmibroadband.in" always_nxdomain
 local-zone: "jimmit.xyz" always_nxdomain
@@ -36316,6 +36315,7 @@ local-zone: "k.5qa.so" always_nxdomain
 local-zone: "k.adr.com.ua" always_nxdomain
 local-zone: "k.iepedacitodecielo.edu.co" always_nxdomain
 local-zone: "k.ludong.tv" always_nxdomain
+local-zone: "k.top4top.io" always_nxdomain
 local-zone: "k110.ir" always_nxdomain
 local-zone: "k12818.com" always_nxdomain
 local-zone: "k1ristri.ru" always_nxdomain
@@ -38845,7 +38845,6 @@ local-zone: "lalogarcia.es" always_nxdomain
 local-zone: "lalolink.com" always_nxdomain
 local-zone: "lalunafashion.eu" always_nxdomain
 local-zone: "lalunenoire.net" always_nxdomain
-local-zone: "lam.cz" always_nxdomain
 local-zone: "lamacosmetics.com" always_nxdomain
 local-zone: "lamaggiora.it" always_nxdomain
 local-zone: "lamaisongourmande.live" always_nxdomain
@@ -38932,6 +38931,7 @@ local-zone: "landrovermarketplace.com" always_nxdomain
 local-zone: "landroveroflouisville.com" always_nxdomain
 local-zone: "landscapeton.com" always_nxdomain
 local-zone: "landscapingstoneandmulchwi.com" always_nxdomain
+local-zone: "landschaftsservice-seibold.de" always_nxdomain
 local-zone: "landskronaloppis.se" always_nxdomain
 local-zone: "landskronamatguide.se" always_nxdomain
 local-zone: "landskronaportalen.se" always_nxdomain
@@ -40023,6 +40023,7 @@ local-zone: "lightswitchmarketing.biz" always_nxdomain
 local-zone: "lightvalleyprune.com" always_nxdomain
 local-zone: "lightwerq.com" always_nxdomain
 local-zone: "lightyard.com" always_nxdomain
+local-zone: "lignar.com" always_nxdomain
 local-zone: "lignarium.se" always_nxdomain
 local-zone: "lignumpolska.com" always_nxdomain
 local-zone: "liguebretagnebillard.fr" always_nxdomain
@@ -40181,6 +40182,7 @@ local-zone: "linkglobalwebsiteaddress.duckdns.org" always_nxdomain
 local-zone: "linkhome.ga" always_nxdomain
 local-zone: "linki.pro" always_nxdomain
 local-zone: "linkingphase.com" always_nxdomain
+local-zone: "linkmaxbd.com" always_nxdomain
 local-zone: "linkomember.info" always_nxdomain
 local-zone: "linkovani.cz" always_nxdomain
 local-zone: "linkplay.duckdns.org" always_nxdomain
@@ -40379,7 +40381,6 @@ local-zone: "livetechsupport.ca" always_nxdomain
 local-zone: "livetesting.xyz" always_nxdomain
 local-zone: "livetotry.com" always_nxdomain
 local-zone: "livetours.cl" always_nxdomain
-local-zone: "livetrack.in" always_nxdomain
 local-zone: "livetvsports.ml" always_nxdomain
 local-zone: "liveu.lk" always_nxdomain
 local-zone: "liviavicentini.com" always_nxdomain
@@ -43401,7 +43402,6 @@ local-zone: "mbsinfosolution.com" always_nxdomain
 local-zone: "mbslmail.mbslbank.com" always_nxdomain
 local-zone: "mbsolutionssrl.it" always_nxdomain
 local-zone: "mbsou37.ru" always_nxdomain
-local-zone: "mbtechnosolutions.com" always_nxdomain
 local-zone: "mbupress.umbjm.ac.id" always_nxdomain
 local-zone: "mbve.org" always_nxdomain
 local-zone: "mbvvs.dk" always_nxdomain
@@ -46148,6 +46148,7 @@ local-zone: "multifin.com.au" always_nxdomain
 local-zone: "multihouse.fmcode.pl" always_nxdomain
 local-zone: "multila.com" always_nxdomain
 local-zone: "multilingualconnections.com" always_nxdomain
+local-zone: "multilinkspk.com" always_nxdomain
 local-zone: "multimedia.biscast.edu.ph" always_nxdomain
 local-zone: "multimix.hu" always_nxdomain
 local-zone: "multimovebd.com" always_nxdomain
@@ -47240,6 +47241,7 @@ local-zone: "ncledu.org" always_nxdomain
 local-zone: "ncmt2w.bn.files.1drv.com" always_nxdomain
 local-zone: "ncoimbra.pt" always_nxdomain
 local-zone: "ncp.su" always_nxdomain
+local-zone: "ncpcgov.com" always_nxdomain
 local-zone: "ncpll1392.ir" always_nxdomain
 local-zone: "ncronline.in" always_nxdomain
 local-zone: "ncsquared.com" always_nxdomain
@@ -47394,7 +47396,6 @@ local-zone: "neproperty.in" always_nxdomain
 local-zone: "neptanckellek.hu" always_nxdomain
 local-zone: "neracompany.sk" always_nxdomain
 local-zone: "nerasro.sk" always_nxdomain
-local-zone: "nerdassasins.com" always_nxdomain
 local-zone: "nerdsalley.com" always_nxdomain
 local-zone: "nerdtshirtsuk.com" always_nxdomain
 local-zone: "neremarketing.com" always_nxdomain
@@ -47463,7 +47464,6 @@ local-zone: "netin.vn" always_nxdomain
 local-zone: "netizennepal.com" always_nxdomain
 local-zone: "netkafem.org" always_nxdomain
 local-zone: "netking.duckdns.org" always_nxdomain
-local-zone: "netlink.com" always_nxdomain
 local-zone: "netm.club" always_nxdomain
 local-zone: "netmaffia.net" always_nxdomain
 local-zone: "netmansoft.com" always_nxdomain
@@ -48418,6 +48418,7 @@ local-zone: "nonglek.net" always_nxdomain
 local-zone: "nongnghiepgiaphat.com" always_nxdomain
 local-zone: "nongsan24h.com" always_nxdomain
 local-zone: "nongsananhnguyen.com" always_nxdomain
+local-zone: "nongsandungha.com" always_nxdomain
 local-zone: "nonlocality.com" always_nxdomain
 local-zone: "nonnemacher.com.br" always_nxdomain
 local-zone: "nonnewspaper.com" always_nxdomain
@@ -48575,6 +48576,7 @@ local-zone: "notix-test.ru" always_nxdomain
 local-zone: "notiz.dk" always_nxdomain
 local-zone: "notlang.org" always_nxdomain
 local-zone: "notlrealty.com" always_nxdomain
+local-zone: "notomonopoly.com" always_nxdomain
 local-zone: "notonfirstdate.net" always_nxdomain
 local-zone: "notredamedesmines.fr" always_nxdomain
 local-zone: "notriicka.ir" always_nxdomain
@@ -48922,6 +48924,7 @@ local-zone: "nygard.no" always_nxdomain
 local-zone: "nygren.nu" always_nxdomain
 local-zone: "nygryn.net" always_nxdomain
 local-zone: "nygts.com" always_nxdomain
+local-zone: "nyifdmacyzechariah.top" always_nxdomain
 local-zone: "nyky.ir" always_nxdomain
 local-zone: "nylag.org" always_nxdomain
 local-zone: "nylandscaping.com" always_nxdomain
@@ -49292,7 +49295,6 @@ local-zone: "ohscrane.com" always_nxdomain
 local-zone: "ohters.de" always_nxdomain
 local-zone: "ohyellow.nl" always_nxdomain
 local-zone: "oi65.tinypic.com" always_nxdomain
-local-zone: "oi68.tinypic.com" always_nxdomain
 local-zone: "oiainbtaea38.silverabout.ml" always_nxdomain
 local-zone: "oiasdnqweqasd.com" always_nxdomain
 local-zone: "oiflddw.gq" always_nxdomain
@@ -49506,6 +49508,7 @@ local-zone: "omagroup.ru" always_nxdomain
 local-zone: "omaharefugees.com" always_nxdomain
 local-zone: "omaint.ml" always_nxdomain
 local-zone: "omalleyco-my.sharepoint.com" always_nxdomain
+local-zone: "omalll.com" always_nxdomain
 local-zone: "omanfleethtml.neomeric.us" always_nxdomain
 local-zone: "omarelbalshy.com" always_nxdomain
 local-zone: "omartinez.com" always_nxdomain
@@ -49724,6 +49727,7 @@ local-zone: "onlinedukkanim.net" always_nxdomain
 local-zone: "onlineeregistration.com" always_nxdomain
 local-zone: "onlineiascoaching.com" always_nxdomain
 local-zone: "onlineitshop.com" always_nxdomain
+local-zone: "onlinejohnline99.org" always_nxdomain
 local-zone: "onlinekushshop.com" always_nxdomain
 local-zone: "onlinelab.dk" always_nxdomain
 local-zone: "onlinelegalsoftware.com" always_nxdomain
@@ -49973,7 +49977,6 @@ local-zone: "orangeink-tattoo.de" always_nxdomain
 local-zone: "orangeltda.cl" always_nxdomain
 local-zone: "orangemediterranea.es" always_nxdomain
 local-zone: "orangeminingsupply.com.au" always_nxdomain
-local-zone: "orangeph.com" always_nxdomain
 local-zone: "orangereel.co.uk" always_nxdomain
 local-zone: "orangeslonik.com" always_nxdomain
 local-zone: "oransky.org" always_nxdomain
@@ -50937,7 +50940,6 @@ local-zone: "parsintelligent.com" always_nxdomain
 local-zone: "parsrad.ir" always_nxdomain
 local-zone: "parsroman.ir" always_nxdomain
 local-zone: "part-timebusiness.org" always_nxdomain
-local-zone: "partage-fichiers.com" always_nxdomain
 local-zone: "partage.nelmedia.ca" always_nxdomain
 local-zone: "partaususd.ru" always_nxdomain
 local-zone: "partgohar.com" always_nxdomain
@@ -52470,7 +52472,6 @@ local-zone: "pmiec.com" always_nxdomain
 local-zone: "pmil.org" always_nxdomain
 local-zone: "pminfocom.com" always_nxdomain
 local-zone: "pmionline.us" always_nxdomain
-local-zone: "pmjnews.com" always_nxdomain
 local-zone: "pmk-55.ru" always_nxdomain
 local-zone: "pmlsdbs.ac.in" always_nxdomain
 local-zone: "pmmc.ae" always_nxdomain
@@ -53772,7 +53773,6 @@ local-zone: "provio.nl" always_nxdomain
 local-zone: "provisa-centr.ru" always_nxdomain
 local-zone: "provisol.se" always_nxdomain
 local-zone: "provit.fr" always_nxdomain
-local-zone: "provo2.com" always_nxdomain
 local-zone: "provoke.bg" always_nxdomain
 local-zone: "provolt.ro" always_nxdomain
 local-zone: "provost.sterlingstrustbank.tk" always_nxdomain
@@ -53902,6 +53902,7 @@ local-zone: "psychprofiler.com" always_nxdomain
 local-zone: "psymonkee.com" always_nxdomain
 local-zone: "psynchro.org" always_nxdomain
 local-zone: "ptb.com.mx" always_nxdomain
+local-zone: "ptbsda.com" always_nxdomain
 local-zone: "ptci-md.org" always_nxdomain
 local-zone: "ptdtech.tk" always_nxdomain
 local-zone: "pte.vn" always_nxdomain
@@ -55228,6 +55229,7 @@ local-zone: "ramallah.atyafco.com" always_nxdomain
 local-zone: "ramashrayevents.com" always_nxdomain
 local-zone: "ramatfactory.com.sa" always_nxdomain
 local-zone: "ramayanawaterpark.cn" always_nxdomain
+local-zone: "ramazan20gbinternet.com" always_nxdomain
 local-zone: "ramazanda20.site" always_nxdomain
 local-zone: "ramazanda20gb.xyz" always_nxdomain
 local-zone: "rambu.ciamiskab.go.id" always_nxdomain
@@ -55606,6 +55608,7 @@ local-zone: "rebelmavenmastermind.com" always_nxdomain
 local-zone: "rebobine.com.br" always_nxdomain
 local-zone: "rebomcap.eu" always_nxdomain
 local-zone: "reboot-hack.ru" always_nxdomain
+local-zone: "reboot.pro" always_nxdomain
 local-zone: "reborn.arteviral.com" always_nxdomain
 local-zone: "reborn24.com" always_nxdomain
 local-zone: "reborntechnology.co.uk" always_nxdomain
@@ -55691,7 +55694,6 @@ local-zone: "redironmarketing.com" always_nxdomain
 local-zone: "redklee.com.ar" always_nxdomain
 local-zone: "redlinegt.com" always_nxdomain
 local-zone: "redlk.com" always_nxdomain
-local-zone: "redlogisticsmaroc.com" always_nxdomain
 local-zone: "redloop.io" always_nxdomain
 local-zone: "redmag.by" always_nxdomain
 local-zone: "redmediasigns.com" always_nxdomain
@@ -55711,6 +55713,7 @@ local-zone: "redsnowball.com" always_nxdomain
 local-zone: "redsseammgt.com" always_nxdomain
 local-zone: "redtek0.com" always_nxdomain
 local-zone: "redtv.top" always_nxdomain
+local-zone: "redvalidator.com" always_nxdomain
 local-zone: "redvelvetpatisserie.co.uk" always_nxdomain
 local-zone: "redwing.com.eg" always_nxdomain
 local-zone: "redwingdemo.dukaafrica.com" always_nxdomain
@@ -56677,6 +56680,7 @@ local-zone: "robpepper.co.uk" always_nxdomain
 local-zone: "robshop.lt" always_nxdomain
 local-zone: "robsitbon.net" always_nxdomain
 local-zone: "robustclarity.com" always_nxdomain
+local-zone: "robvanderwoude.com" always_nxdomain
 local-zone: "robwalls.com" always_nxdomain
 local-zone: "robwassotdint.ru" always_nxdomain
 local-zone: "robzandfitness.co.uk" always_nxdomain
@@ -56707,7 +56711,6 @@ local-zone: "rockmusiclives.com" always_nxdomain
 local-zone: "rocknebyvvs.se" always_nxdomain
 local-zone: "rocknrolletco.top" always_nxdomain
 local-zone: "rocknrolltrain.cn" always_nxdomain
-local-zone: "rockpointgroup.com" always_nxdomain
 local-zone: "rockradioni.co.uk" always_nxdomain
 local-zone: "rocksolidproducts.com" always_nxdomain
 local-zone: "rocksolidstickers.com" always_nxdomain
@@ -57696,6 +57699,7 @@ local-zone: "sageo2018.fr" always_nxdomain
 local-zone: "sagestls.com" always_nxdomain
 local-zone: "sageth.net" always_nxdomain
 local-zone: "sagiri.org" always_nxdomain
+local-zone: "saglikbakanligi-destek.org" always_nxdomain
 local-zone: "saglikbakanligi20gbinternet.com" always_nxdomain
 local-zone: "saglikbakanligindanhediye20gb.com" always_nxdomain
 local-zone: "saglikgoalapp.site" always_nxdomain
@@ -58456,7 +58460,6 @@ local-zone: "scandinavian-fashion.dk" always_nxdomain
 local-zone: "scandinavianman.designmybike.com" always_nxdomain
 local-zone: "scandryer.se" always_nxdomain
 local-zone: "scanelectric.ro" always_nxdomain
-local-zone: "scanliftmaskin.no" always_nxdomain
 local-zone: "scanlisten.sunless.network" always_nxdomain
 local-zone: "scannableid.com" always_nxdomain
 local-zone: "scanthembigbots.mikeysyach.xyz" always_nxdomain
@@ -59103,6 +59106,7 @@ local-zone: "sendsharkreview.com" always_nxdomain
 local-zone: "senehenryinc.ru" always_nxdomain
 local-zone: "senergysafrica.com" always_nxdomain
 local-zone: "seneta.cloud" always_nxdomain
+local-zone: "senevdekaldiyehediye.com" always_nxdomain
 local-zone: "senevdekaldiyehediyenet.com" always_nxdomain
 local-zone: "seniorbudgetsaver.com" always_nxdomain
 local-zone: "seniorenwoningbouwen.nl" always_nxdomain
@@ -59802,6 +59806,7 @@ local-zone: "sheddy.5gbfree.com" always_nxdomain
 local-zone: "shedevildaughterofthedaredevil.com" always_nxdomain
 local-zone: "shedy.5gbfree.com" always_nxdomain
 local-zone: "sheedle.live" always_nxdomain
+local-zone: "sheeni-egypt.com" always_nxdomain
 local-zone: "sheenlandia.com" always_nxdomain
 local-zone: "sheeriuruba.com" always_nxdomain
 local-zone: "shefdomi.com" always_nxdomain
@@ -60625,7 +60630,6 @@ local-zone: "sisubur.xyz" always_nxdomain
 local-zone: "sisustussuunnittelu.fi" always_nxdomain
 local-zone: "sisweb.info" always_nxdomain
 local-zone: "sitagroup.it" always_nxdomain
-local-zone: "sitcomsonline.com" always_nxdomain
 local-zone: "site-2.work" always_nxdomain
 local-zone: "site-4.work" always_nxdomain
 local-zone: "site-internet-belfort.fr" always_nxdomain
@@ -60652,7 +60656,6 @@ local-zone: "siteplaceholder.com" always_nxdomain
 local-zone: "siteradar.com" always_nxdomain
 local-zone: "sites.blueskydigital.com.au" always_nxdomain
 local-zone: "sites.btb.kg" always_nxdomain
-local-zone: "sites.ieee.org" always_nxdomain
 local-zone: "sites.linkysoft.com" always_nxdomain
 local-zone: "sites.webdefy.com" always_nxdomain
 local-zone: "sitesbrgiga.com.br" always_nxdomain
@@ -61140,7 +61143,6 @@ local-zone: "sme.elearning.au.edu" always_nxdomain
 local-zone: "smeare.com" always_nxdomain
 local-zone: "smed13.inducido.com" always_nxdomain
 local-zone: "smedegaarden.dk" always_nxdomain
-local-zone: "smedia.com.au" always_nxdomain
 local-zone: "smeets.ca" always_nxdomain
 local-zone: "smeetspost.nl" always_nxdomain
 local-zone: "smefood.com" always_nxdomain
@@ -61759,6 +61761,7 @@ local-zone: "sophiasuites-santorini.com" always_nxdomain
 local-zone: "sophiebarthelemy.fr" always_nxdomain
 local-zone: "sophieguaremas.com" always_nxdomain
 local-zone: "sophiethomasartist.com" always_nxdomain
+local-zone: "sophis.biz" always_nxdomain
 local-zone: "sophistproduction.com" always_nxdomain
 local-zone: "sophro-zara.com" always_nxdomain
 local-zone: "sophrologie-untempspourmoi.fr" always_nxdomain
@@ -62771,6 +62774,7 @@ local-zone: "stateunico.com" always_nxdomain
 local-zone: "statewidehomesavings.com" always_nxdomain
 local-zone: "statexadver3552mn12.club" always_nxdomain
 local-zone: "static-4matic.club" always_nxdomain
+local-zone: "static.3001.net" always_nxdomain
 local-zone: "static.caregivers.blueweb.md" always_nxdomain
 local-zone: "static.error-soft.net" always_nxdomain
 local-zone: "static.ilclock.com" always_nxdomain
@@ -64536,6 +64540,7 @@ local-zone: "takeiteasy.live" always_nxdomain
 local-zone: "takeitfromtheman.com" always_nxdomain
 local-zone: "takemetohimalayas.com" always_nxdomain
 local-zone: "takenpaybd.com" always_nxdomain
+local-zone: "takernvandrarhem.se" always_nxdomain
 local-zone: "takeshimiyamoto.com" always_nxdomain
 local-zone: "takeshykurosavabest.com" always_nxdomain
 local-zone: "takharandshankertour.com" always_nxdomain
@@ -64625,6 +64630,7 @@ local-zone: "tamoyun.web.tr" always_nxdomain
 local-zone: "tampacigarroller.com" always_nxdomain
 local-zone: "tamparoofing.com" always_nxdomain
 local-zone: "tampaseo.com" always_nxdomain
+local-zone: "tamsu.website" always_nxdomain
 local-zone: "tamsuamy.com" always_nxdomain
 local-zone: "tamsys.net" always_nxdomain
 local-zone: "tamta.gr" always_nxdomain
@@ -65528,6 +65534,7 @@ local-zone: "terramosa.com" always_nxdomain
 local-zone: "terranovaoutdoorliving.com" always_nxdomain
 local-zone: "terranowwa.org" always_nxdomain
 local-zone: "terraoferta.club" always_nxdomain
+local-zone: "terrapersonas.com" always_nxdomain
 local-zone: "terrasol.cl" always_nxdomain
 local-zone: "terratacuara.com" always_nxdomain
 local-zone: "terrats.biz" always_nxdomain
@@ -65881,7 +65888,6 @@ local-zone: "tftt.dairyaustralia.com.au" always_nxdomain
 local-zone: "tfu.ae" always_nxdomain
 local-zone: "tfulf.host" always_nxdomain
 local-zone: "tfullerton.com" always_nxdomain
-local-zone: "tfvn.com.vn" always_nxdomain
 local-zone: "tgbabcrfv.1apps.com" always_nxdomain
 local-zone: "tgbot.cf" always_nxdomain
 local-zone: "tgcool.gq" always_nxdomain
@@ -66282,6 +66288,7 @@ local-zone: "theinspiredblogger.com" always_nxdomain
 local-zone: "theinspireddrive.com" always_nxdomain
 local-zone: "theintelligencer.com.ng" always_nxdomain
 local-zone: "theinvestmentinvestigator.com" always_nxdomain
+local-zone: "theipgenerators.com" always_nxdomain
 local-zone: "theirishhouse.dk" always_nxdomain
 local-zone: "theiro.com" always_nxdomain
 local-zone: "theisel.de" always_nxdomain
@@ -68550,6 +68557,7 @@ local-zone: "tuvandauthau.net" always_nxdomain
 local-zone: "tuvandoanhnghiep.org" always_nxdomain
 local-zone: "tuvanduhocdaiviet.com.vn" always_nxdomain
 local-zone: "tuvanduhocduc.org" always_nxdomain
+local-zone: "tuvanduhocmap.com" always_nxdomain
 local-zone: "tuvangamenet.com" always_nxdomain
 local-zone: "tuvangioitinh.com" always_nxdomain
 local-zone: "tuvanluat.vn" always_nxdomain
@@ -68691,7 +68699,6 @@ local-zone: "u-uploads.com" always_nxdomain
 local-zone: "u.coka.la" always_nxdomain
 local-zone: "u.jimdo.com" always_nxdomain
 local-zone: "u.lewd.se" always_nxdomain
-local-zone: "u.teknik.io" always_nxdomain
 local-zone: "u0005132m0005jp.u023jp9938.info" always_nxdomain
 local-zone: "u0039435.cp.regruhosting.ru" always_nxdomain
 local-zone: "u0287442.isp.regruhosting.ru" always_nxdomain
@@ -69330,6 +69337,7 @@ local-zone: "up.oxvkeq.co" always_nxdomain
 local-zone: "up.qatarw.com" always_nxdomain
 local-zone: "up.vltk1ctc.com" always_nxdomain
 local-zone: "up2m.politanisamarinda.ac.id" always_nxdomain
+local-zone: "up4net.com" always_nxdomain
 local-zone: "up9.co.99.com" always_nxdomain
 local-zone: "upa1.hognoob.se" always_nxdomain
 local-zone: "upa2.hognoob.se" always_nxdomain
@@ -69541,7 +69549,6 @@ local-zone: "url.246546.com" always_nxdomain
 local-zone: "url.57569.fr.snd52.ch" always_nxdomain
 local-zone: "url.edu" always_nxdomain
 local-zone: "url.sg" always_nxdomain
-local-zone: "url2.mailanyone.net" always_nxdomain
 local-zone: "url3.mailanyone.net" always_nxdomain
 local-zone: "url5459.41southbar.com" always_nxdomain
 local-zone: "url9823.ville.labrecque.qc.ca" always_nxdomain
@@ -70753,6 +70760,7 @@ local-zone: "vip-rocket.net" always_nxdomain
 local-zone: "vip-watch.store" always_nxdomain
 local-zone: "vip.lijinxi.com" always_nxdomain
 local-zone: "vip.maohuagong.com" always_nxdomain
+local-zone: "vip.muabannhanh.com" always_nxdomain
 local-zone: "vip.recommendedtoyoo.com" always_nxdomain
 local-zone: "vip.zbfcxx.cn" always_nxdomain
 local-zone: "vip163.cf" always_nxdomain
@@ -71785,6 +71793,7 @@ local-zone: "web.gotham.com.au" always_nxdomain
 local-zone: "web.hfsistemas.com" always_nxdomain
 local-zone: "web.ismt.pt" always_nxdomain
 local-zone: "web.muasam360.com" always_nxdomain
+local-zone: "web.opendrive.com" always_nxdomain
 local-zone: "web.pa-cirebon.go.id" always_nxdomain
 local-zone: "web.plf.vn" always_nxdomain
 local-zone: "web.riderit.com" always_nxdomain
@@ -72507,7 +72516,6 @@ local-zone: "win.tue.nl" always_nxdomain
 local-zone: "win1more.com" always_nxdomain
 local-zone: "win32.x10host.com" always_nxdomain
 local-zone: "winactive.host" always_nxdomain
-local-zone: "winandgo-dz.com" always_nxdomain
 local-zone: "winapp24.pl" always_nxdomain
 local-zone: "winast.com" always_nxdomain
 local-zone: "winbacklostlove.com" always_nxdomain
@@ -72713,7 +72721,6 @@ local-zone: "wmdcustoms.com" always_nxdomain
 local-zone: "wmebbiz.co.za" always_nxdomain
 local-zone: "wmf.desevens.com.ng" always_nxdomain
 local-zone: "wmg128.com" always_nxdomain
-local-zone: "wmi.1217bye.host" always_nxdomain
 local-zone: "wmkatz.com" always_nxdomain
 local-zone: "wmo-raad.inov.me" always_nxdomain
 local-zone: "wmpatagonia.cl" always_nxdomain
@@ -72814,7 +72821,6 @@ local-zone: "woodmeister.nl" always_nxdomain
 local-zone: "woodmillcreek.com" always_nxdomain
 local-zone: "woodnbitz.com" always_nxdomain
 local-zone: "woodofkosta.com" always_nxdomain
-local-zone: "woodsiam.com" always_nxdomain
 local-zone: "woodstocktimbers.com" always_nxdomain
 local-zone: "woodstoneltd.com" always_nxdomain
 local-zone: "woodsytech.com" always_nxdomain
@@ -73311,6 +73317,7 @@ local-zone: "wz-architekten.de" always_nxdomain
 local-zone: "wz6.com.cn" always_nxdomain
 local-zone: "wzgysg.com" always_nxdomain
 local-zone: "wzjp.boyuberq.ru" always_nxdomain
+local-zone: "wzlegal.com" always_nxdomain
 local-zone: "wzry173.com" always_nxdomain
 local-zone: "wzrysp.com" always_nxdomain
 local-zone: "wzsfkq.dm.files.1drv.com" always_nxdomain
@@ -73487,6 +73494,7 @@ local-zone: "xinblasta.us" always_nxdomain
 local-zone: "xinchao.asia" always_nxdomain
 local-zone: "xindetrading.000webhostapp.com" always_nxdomain
 local-zone: "xing.monerov9.com" always_nxdomain
+local-zone: "xingyang-glove.com" always_nxdomain
 local-zone: "xingyiqinhang.com" always_nxdomain
 local-zone: "xinhkorea.com" always_nxdomain
 local-zone: "xinlou.info" always_nxdomain
@@ -75372,6 +75380,7 @@ local-zone: "zstar.top" always_nxdomain
 local-zone: "zsxzfgg.com" always_nxdomain
 local-zone: "zsz-spb.ru" always_nxdomain
 local-zone: "ztbearing68.com" always_nxdomain
+local-zone: "ztds.online" always_nxdomain
 local-zone: "ztds2.online" always_nxdomain
 local-zone: "zteandroid.com" always_nxdomain
 local-zone: "ztecom.cn" always_nxdomain
diff --git a/urlhaus-filter.txt b/urlhaus-filter.txt
index 4262a7a6..8559f78a 100644
--- a/urlhaus-filter.txt
+++ b/urlhaus-filter.txt
@@ -1,5 +1,5 @@
 ! Title: abuse.ch URLhaus Malicious URL Blocklist
-! Updated: Sat, 02 May 2020 00:09:31 UTC
+! Updated: Sat, 02 May 2020 12:09:27 UTC
 ! Expires: 1 day (update frequency)
 ! Repo: https://gitlab.com/curben/urlhaus-filter
 ! License: https://creativecommons.org/publicdomain/zero/1.0/
@@ -244,6 +244,7 @@
 1.34.12.240
 1.34.12.97
 1.34.120.14
+1.34.120.36
 1.34.128.245
 1.34.131.46
 1.34.138.228
@@ -289,6 +290,7 @@
 1.34.4.192
 1.34.48.13
 1.34.49.63
+1.34.5.89
 1.34.52.145
 1.34.55.127
 1.34.6.193
@@ -2991,6 +2993,7 @@
 112.123.61.18
 112.123.61.204
 112.123.61.42
+112.123.61.78
 112.123.61.9
 112.123.61.90
 112.123.61.96
@@ -3279,6 +3282,7 @@
 113.219.114.242
 113.219.44.157
 113.219.46.9
+113.219.81.166
 113.219.81.204
 113.219.81.96
 113.219.83.189
@@ -3866,6 +3870,7 @@
 114.234.46.113
 114.234.46.206
 114.234.46.28
+114.234.46.95
 114.234.56.109
 114.234.57.214
 114.234.58.44
@@ -4790,6 +4795,7 @@
 115.49.36.24
 115.49.36.79
 115.49.37.122
+115.49.37.132
 115.49.37.175
 115.49.37.179
 115.49.37.198
@@ -5571,6 +5577,7 @@
 115.59.22.220
 115.59.24.169
 115.59.24.190
+115.59.24.255
 115.59.24.85
 115.59.25.169
 115.59.252.66
@@ -7272,6 +7279,7 @@
 118.37.214.103
 118.37.64.100
 118.37.91.137
+118.38.242.167
 118.39.123.115
 118.39.142.34
 118.40.183.176
@@ -8815,6 +8823,7 @@
 123.11.63.72
 123.11.64.31
 123.11.65.225
+123.11.7.1
 123.11.7.109
 123.11.7.153
 123.11.7.167
@@ -8870,6 +8879,7 @@
 123.11.77.209
 123.11.77.33
 123.11.78.153
+123.11.78.157
 123.11.78.22
 123.11.78.244
 123.11.78.49
@@ -8975,6 +8985,7 @@
 123.12.221.54
 123.12.221.62
 123.12.222.177
+123.12.222.242
 123.12.223.39
 123.12.223.97
 123.12.224.105
@@ -9227,6 +9238,7 @@
 123.4.133.125
 123.4.135.233
 123.4.143.229
+123.4.156.19
 123.4.158.122
 123.4.161.210
 123.4.168.136
@@ -9313,6 +9325,7 @@
 123.4.53.91
 123.4.54.13
 123.4.54.168
+123.4.54.173
 123.4.54.219
 123.4.54.99
 123.4.55.108
@@ -10322,6 +10335,7 @@
 125.47.60.138
 125.47.80.107
 125.47.80.15
+125.47.80.74
 125.47.81.222
 125.47.81.46
 125.47.82.14
@@ -11703,6 +11717,7 @@
 144.202.69.45
 144.202.8.114
 144.217.0.194
+144.217.117.146
 144.217.12.66
 144.217.131.227
 144.217.149.61
@@ -11862,6 +11877,7 @@
 149.56.228.32
 149.56.228.38
 149.56.26.173
+149.56.84.15
 149.7.219.71
 149.91.88.55
 14ca1s5asc45.com
@@ -12777,6 +12793,7 @@
 161.35.19.19
 161.35.24.242
 161.35.3.55
+161.35.45.242
 161.35.5.116
 161.35.5.47
 161.35.52.130
@@ -14828,6 +14845,7 @@
 172.36.6.48
 172.36.6.75
 172.36.6.89
+172.36.6.93
 172.36.60.0
 172.36.60.121
 172.36.60.124
@@ -15146,6 +15164,7 @@
 172.39.45.124
 172.39.45.189
 172.39.45.210
+172.39.45.241
 172.39.45.72
 172.39.46.10
 172.39.46.171
@@ -15462,6 +15481,7 @@
 172.39.92.239
 172.39.92.246
 172.39.92.248
+172.39.93.127
 172.39.93.170
 172.39.93.171
 172.39.93.198
@@ -15498,11 +15518,13 @@
 172.45.25.197
 172.45.25.91
 172.45.26.71
+172.45.29.119
 172.45.29.84
 172.45.35.240
 172.45.53.11
 172.45.58.142
 172.45.59.143
+172.45.8.99
 172.45.9.41
 172.81.132.143
 172.81.132.168
@@ -15818,6 +15840,7 @@
 175.193.168.95
 175.195.204.24
 175.198.41.108
+175.199.142.182
 175.199.72.77
 175.200.153.48
 175.200.159.110
@@ -15845,6 +15868,7 @@
 175.212.31.241
 175.212.52.103
 175.212.52.9
+175.212.95.112
 175.213.134.89
 175.214.139.27
 175.214.73.132
@@ -16941,6 +16965,7 @@
 178.62.247.209
 178.62.249.114
 178.62.25.70
+178.62.250.195
 178.62.250.233
 178.62.251.149
 178.62.252.20
@@ -17347,6 +17372,7 @@
 180.116.21.143
 180.116.21.191
 180.116.21.251
+180.116.210.174
 180.116.210.227
 180.116.22.191
 180.116.22.207
@@ -17875,6 +17901,7 @@
 182.113.196.96
 182.113.197.150
 182.113.197.91
+182.113.199.176
 182.113.199.199
 182.113.199.95
 182.113.200.190
@@ -19484,6 +19511,7 @@
 183.151.72.98
 183.151.74.27
 183.151.82.99
+183.151.83.28
 183.151.84.140
 183.151.84.65
 183.151.85.121
@@ -20425,6 +20453,7 @@
 185.244.39.10
 185.244.39.107
 185.244.39.108
+185.244.39.112
 185.244.39.123
 185.244.39.19
 185.244.39.198
@@ -20716,6 +20745,7 @@
 186.78.121.11
 186.88.96.234
 186.90.133.98
+186.93.107.30
 1860poga.co.za
 18655.aqq.ru
 18656c64.ngrok.io
@@ -20756,6 +20786,7 @@
 187.102.61.174
 187.102.61.252
 187.107.132.33
+187.107.191.197
 187.108.17.187
 187.109.113.136
 187.109.113.94
@@ -21957,6 +21988,7 @@
 193.112.160.173
 193.124.188.118
 193.142.146.179
+193.142.146.30
 193.148.68.74
 193.148.69.21
 193.148.69.33
@@ -22460,6 +22492,7 @@
 198.211.117.226
 198.211.118.231
 198.211.96.59
+198.211.98.37
 198.211.99.52
 198.23.130.69
 198.23.146.212
@@ -22707,6 +22740,7 @@
 199.83.206.207
 199.83.206.219
 199.83.206.22
+199.83.206.243
 199.83.206.36
 199.83.206.38
 199.83.206.39
@@ -23125,6 +23159,7 @@
 201.1.188.47
 201.1.68.113
 201.102.202.28
+201.103.20.67
 201.103.67.26
 201.103.89.230
 201.110.4.205
@@ -23842,6 +23877,7 @@
 208.113.130.13
 208.113.130.87
 208.113.133.130
+208.113.133.35
 208.115.113.32
 208.163.58.18
 208.167.239.134
@@ -24246,6 +24282,7 @@
 212.150.65.64
 212.154.23.29
 212.154.5.152
+212.154.51.216
 212.154.81.247
 212.156.209.78
 212.156.212.198
@@ -25256,6 +25293,7 @@
 219.68.242.33
 219.68.245.63
 219.68.251.32
+219.70.238.66
 219.70.63.196
 219.73.13.152
 219.77.113.124
@@ -26567,6 +26605,7 @@
 222.81.191.223
 222.81.213.238
 222.81.213.61
+222.81.223.165
 222.81.223.38
 222.81.28.127
 222.81.28.77
@@ -26819,6 +26858,7 @@
 223.199.248.20
 223.221.194.139
 223.221.194.246
+223.221.97.158
 223.233.100.210
 223.241.10.236
 223.241.11.37
@@ -27311,6 +27351,7 @@
 27.41.175.101
 27.41.175.117
 27.41.175.86
+27.41.176.93
 27.41.177.86
 27.41.178.151
 27.41.178.227
@@ -27458,7 +27499,7 @@
 2ndpub.com
 2ndscreensociety.com
 2nell.com
-2no.co/2amqu5
+2no.co
 2pjcza.db.files.1drv.com
 2q1wea3rdsf.000webhostapp.com
 2q3w.com
@@ -28920,6 +28961,7 @@
 37.49.226.204
 37.49.226.209
 37.49.226.21
+37.49.226.230
 37.49.226.43
 37.49.226.5
 37.49.226.8
@@ -29050,7 +29092,7 @@
 3cfilati.it
 3cxtraining.com
 3d-designcenter.com
-3d-universal.com/re/wp-content/wptouch-data/Payments/01_19/
+3d-universal.com
 3d.co.th
 3d.tdselectronics.com
 3dcentral.hu
@@ -29906,6 +29948,7 @@
 42.230.25.115
 42.230.25.243
 42.230.25.251
+42.230.250.178
 42.230.251.164
 42.230.251.252
 42.230.252.116
@@ -31178,6 +31221,8 @@
 45.15.253.88
 45.153.184.67
 45.153.240.115
+45.154.1.122
+45.154.1.58
 45.156.180.112
 45.156.195.205
 45.161.253.198
@@ -32757,6 +32802,7 @@
 49.70.126.141
 49.70.126.241
 49.70.126.95
+49.70.127.10
 49.70.127.31
 49.70.13.224
 49.70.131.189
@@ -32897,6 +32943,7 @@
 49.81.237.217
 49.81.238.22
 49.81.238.53
+49.81.238.9
 49.81.238.95
 49.81.239.16
 49.81.242.239
@@ -32971,6 +33018,7 @@
 49.82.251.81
 49.82.252.10
 49.82.252.230
+49.82.252.4
 49.82.252.63
 49.82.254.166
 49.82.254.221
@@ -33612,11 +33660,7 @@
 5.95.226.79
 5.95.59.66
 5.fjwt1.crsky.com
-5.top4top.io/p_1407uniqi1.jpg
-5.top4top.io/p_14113kfwh1.jpg
-5.top4top.io/p_1419z76nh1.jpg
-5.top4top.io/p_1422aptvc1.jpg
-5.top4top.io/p_1446kvcut1.jpg
+5.top4top.io
 5.u0148466.z8.ru
 5.unplugrevolution.com
 50.115.165.107
@@ -34163,6 +34207,7 @@
 58.243.125.227
 58.243.126.111
 58.243.126.134
+58.243.126.93
 58.243.127.150
 58.243.127.176
 58.243.127.18
@@ -34183,6 +34228,7 @@
 58.243.20.194
 58.243.20.197
 58.243.20.57
+58.243.20.78
 58.243.20.96
 58.243.22.150
 58.243.23.200
@@ -35501,6 +35547,7 @@
 61.241.170.143
 61.241.170.145
 61.241.170.151
+61.241.170.153
 61.241.170.184
 61.241.170.194
 61.241.170.35
@@ -35768,6 +35815,7 @@
 61.75.36.37
 61.75.73.190
 61.76.178.170
+61.77.146.65
 61.78.72.221
 61.79.165.71
 61.81.183.116
@@ -35864,6 +35912,7 @@
 62.219.127.170
 62.219.129.229
 62.219.131.205
+62.219.227.20
 62.231.70.33
 62.232.203.90
 62.234.102.53
@@ -35902,6 +35951,7 @@
 63.224.132.223
 63.245.122.93
 63.250.42.171
+63.250.42.34
 63.34.12.228
 63.78.214.55
 6306481-0.alojamiento-web.es
@@ -36742,6 +36792,7 @@
 74.222.1.38
 74.222.14.61
 74.222.14.94
+74.66.217.253
 74.75.165.81
 74.90.172.182
 74.91.112.97
@@ -37813,6 +37864,7 @@
 82.81.2.50
 82.81.207.162
 82.81.214.74
+82.81.215.149
 82.81.230.112
 82.81.232.68
 82.81.25.188
@@ -37903,6 +37955,7 @@
 84.22.38.175
 84.221.143.108
 84.224.213.50
+84.228.102.152
 84.228.95.204
 84.232.231.209
 84.232.53.179
@@ -39705,7 +39758,7 @@ aapdasia.com
 aapi.co.in
 aapic.emarathon.or.kr
 aapkitayari.com
-aaplindia.com
+aaplindia.com/harder.inc/odw8xth96/
 aapnewslive.com
 aapnnihotel.in
 aapr.org.au
@@ -40122,7 +40175,8 @@ acetraining24.com
 acewatch.vn
 acewm.org
 aceyz.com
-acfacilities.co.uk
+acfacilities.co.uk/wp-content/themes/zenon/admin/css/2c.jpg
+acfacilities.co.uk/wp-content/themes/zenon/css/2c.jpg
 acffiorentina.ru
 acg-capital.com
 acg.com.my
@@ -40550,8 +40604,7 @@ adrite.com
 adroitlyadvertising.com
 adrolling.co.uk
 ads.actmol.by
-ads.hanggiadinh.com/Webservices/RedirectV2/RedirectAds.exe
-ads.hanggiadinh.com/Webservices/RedirectV2/RedirectService.exe
+ads.hanggiadinh.com
 ads.kalabisim.com
 adsapomg.space
 adsdeedee.com
@@ -40805,7 +40858,8 @@ africaanalytics.tristargl.com
 africabluewebs.co.ke
 africabootcampacademy.influencetec.net
 africahousingawards.com
-africainnovates.org
+africainnovates.org/87/WUCLLV0ZHHGN/47irmaau9ffl/
+africainnovates.org/wp-admin/rpoaw-oa-607/
 africamarket.shop
 africamissions.ca
 african-trips.com
@@ -41212,8 +41266,7 @@ aigavicenza.it
 aigforms.myap.co.za
 aiglemovies.com
 aihealth.vn
-aiiaiafrzrueuedur.ru/o.exe
-aiiaiafrzrueuedur.ru/t.exe
+aiiaiafrzrueuedur.ru
 aiineh.com
 aiit.ahbys.com
 aijdjy.com
@@ -41282,7 +41335,7 @@ airgc.in
 airinovasi-indonesia.com
 airisu-syumikonparty.com
 airlife.bget.ru
-airliness.info/app.exe
+airliness.info
 airlinkcpl.net
 airmaildata.com
 airmanship.nl
@@ -41579,9 +41632,7 @@ alandenz.dk
 alanhkatz.on-rev.com
 alankeef-co.tk
 alankippax.info
-alannonce.fr/cgi-bin/8b1m6-v5bbir-iycrvob/
-alannonce.fr/cgi-bin/h09h-mf54ru-bfqde.view/
-alannonce.fr/cgi-bin/sec.accounts.send.net/
+alannonce.fr
 alanvarin2.hopto.org
 alanvarin3.ddns.net
 alanyacilingirbilal.com
@@ -42571,7 +42622,7 @@ americanhaircuts.com
 americanhomecenter.com
 americanmicrosoftclouddepartment.duckdns.org
 americanpatriotlife.com
-americanrange.com
+americanrange.com/HomeFedEx.jar
 americanreliefhub.com
 americanstaffordshireterrier.it
 americanxdrive.gq
@@ -43841,7 +43892,7 @@ archst.it
 arcid.org
 arcnyc.com
 arcoarquitetura.arq.br
-arcoelectric-idaho.com/wp-content/sites/hwhsaMJvOjoVHUbjBSTh/
+arcoelectric-idaho.com
 arcoelectrico.cl
 arcoiris.org.pt
 arconarchitects.com
@@ -43963,7 +44014,7 @@ ariba.develop.kdm1.ru
 aridostlari.com
 arie-industrie.com
 arielaspa.com
-arielcarter.com/j7foqo2/DOC/iqrh6hczo0cw/
+arielcarter.com
 arielluxhair.com
 arieloutdoors.com
 arieloutdoors.in
@@ -43981,7 +44032,7 @@ arihantchemcorp.com
 arija.lt
 ariko.vn
 arimmo.ch
-arimonza.it
+arimonza.it/wp-admin/js/V8805692810U6201579.zip
 arina.jsin.ru
 arinidentalcare.com
 arinlays.com
@@ -44333,6 +44384,7 @@ artworkshopsinternational.com
 artydesign.co
 artzkaypharmacy.com.au
 artzvuk.by
+arufels.com
 aruljothi.xyz
 arundel.net
 arvd.begrip.sk
@@ -44437,7 +44489,7 @@ aseloud.com
 aseman-co.com
 asemancard.com
 asemanehco.ir
-aseprom.com
+aseprom.com/sun.sets
 asepspa.cl
 aserraderoelaleman.com.ar
 asertiva.cl
@@ -44511,7 +44563,7 @@ asia-star.info
 asia-taxsolutions.com
 asiaherbalpharmacy.com
 asiains.com.ph
-asialinklogistics.com/mkmike.jpg
+asialinklogistics.com
 asiamedia.tw
 asiana.cf
 asianacrylates.com
@@ -44542,22 +44594,7 @@ asifapparels.com
 asiffidatanoli.com
 asight.com.au
 asiltorna.com
-asiluxury.com/phpfiles/aplk.exe
-asiluxury.com/phpfiles/blizzy.exe
-asiluxury.com/phpfiles/danny.exe
-asiluxury.com/phpfiles/divine.exe
-asiluxury.com/phpfiles/durumi.exe
-asiluxury.com/phpfiles/henry.exe
-asiluxury.com/phpfiles/mightylk.exe
-asiluxury.com/phpfiles/offline.exe
-asiluxury.com/phpfiles/vic.exe
-asiluxury.com/phpfiles/zzplk.exe
-asiluxury.com/wp-admin/css/chika.exe
-asiluxury.com/wp-admin/css/chikwado.exe
-asiluxury.com/wp-admin/css/jude.exe
-asiluxury.com/wp-admin/css/zzp.exe
-asiluxury.com/wp-admin/js/widgets/own/henry.exe
-asiluxury.com/wp-admin/js/widgets/own/zzplk.exe
+asiluxury.com
 asinaptali.com
 asined.es
 asinfotech.net
@@ -44748,7 +44785,7 @@ astroblu.win
 astrocricketpredictions.com
 astrodeepakdubey.in
 astrodolly.com
-astrojyoti.com
+astrojyoti.com/ACH-FORM/LTW-5333560209/
 astrolabioeditorial.com
 astroland.space
 astrologerpanchmukhijyotish.com
@@ -44991,7 +45028,7 @@ atskiysatana.ml
 atskiysatana.tk
 atso.kz
 atso.pt
-att-0748.fileshare-storage.com
+att-0748.fileshare-storage.com/download.php
 att-hellolab.com
 att1.bigmir.net
 atta2tata.monster
@@ -45424,7 +45461,7 @@ aviharmony.com.au
 avila-ventures.com
 avilacare.com
 avinash1.free.fr
-avioaircurtain.com/DHL-Express/US/
+avioaircurtain.com
 avion-x.com
 avioncargoets.com
 aviontravelgroup.com
@@ -45860,7 +45897,7 @@ babystep.biz
 babysteps.ge
 babyvogel.nl
 babzon.club
-bac.edu.my/wp-admin/tijNv-w6GM2qA7hkcpFDO_udnPnVoN-tI/
+bac.edu.my
 bacamanect.com
 baccaosutritue.vn
 baceldeniz.com
@@ -45928,9 +45965,7 @@ badintentionsprod.com
 badisse.com
 badkamer-sanitair.nl
 badmildiou.com
-badzena.com/AAClRLJCGJ
-badzena.com/XOHBVHXB3011385/Rechnung/RECHNUNG
-badzena.com/XOHBVHXB3011385/Rechnung/RECHNUNG/
+badzena.com
 baerbl-volz.de
 baeren-schlatt.ch
 baermedia.ch
@@ -45980,7 +46015,12 @@ bahisreklami.com
 bahku.ru
 bahl.com.au
 bahlcom.au
-bahoma.com
+bahoma.com/bahoma.net/rZrhg-B9s7_iQPZX-SE/
+bahoma.com/bahoma.net/secure.myaccount.docs.net/
+bahoma.com/lpNppO
+bahoma.com/p6JJQ
+bahoma.com/p6JJQ/
+bahoma.com/urldefense_proofpoint/billpay_bankofamerica_com/PaymentCenter_Index/09_18
 bahomacom
 bahrain-escorts.com
 bahrainbordir.com
@@ -46791,7 +46831,8 @@ beachcondolife.tk
 beachview.co.za
 beachvillas.gr
 beachwoodproperty.com.au
-beaconacademy.net
+beaconacademy.net/default/En/Client/Invoice-460979
+beaconacademy.net/default/En/Client/Invoice-460979/
 beaconhousediscovery.com
 beaconr.rungta.ac.in
 beactivedigital.com
@@ -47502,7 +47543,8 @@ beysel.com
 beytepefoodcenter.com
 beytriali.com
 bezambici.com
-bezier.com
+bezier.com/wp-admin/1
+bezier.com/wp-admin/3
 bezlive.com
 bezoekbosnie.nl
 bezoporu.wtie.tu.koszalin.pl
@@ -49018,7 +49060,7 @@ bloodybits.com
 bloombrainz.com
 bloomcommunityproject.org
 bloomestatelitigation.ca
-bloomfire.com
+bloomfire.com/wp-content/plugins/DOC/FoQojoiYS/
 bloomflores.com
 bloomhomes.in
 bloomingbridal.com.au
@@ -49346,7 +49388,7 @@ bonaccount.com
 bonakma.com
 bonallegro.5v.pl
 bonattiholding.com
-bonavigator.pl
+bonavigator.pl/Overdue-payment/
 bond.com.vn
 bondagetrip.com
 bondbengals.info
@@ -49862,7 +49904,10 @@ bridgesearch.com
 bridgeventuresllc.com
 briefmarkenpower.de
 brifing.info
-brightachieversltd.com
+brightachieversltd.com/tmp/inv.exe
+brightachieversltd.com/uc009.exe
+brightachieversltd.com/wed.exe
+brightachieversltd.com/zyx.exe
 brightasia.com.sg
 brightbat.com
 brightbook.ir
@@ -50553,7 +50598,10 @@ bytosti.cz
 byttd.com.cn
 byukattie.top
 byvejen.dk
-byworks.com
+byworks.com/wp-includes/files/service/verif/EN/04-2019/
+byworks.com/wp-includes/p0b8-crvw7a-brlh/
+byworks.com/wp-includes/secure.myacc.send.net/
+byworks.com/wp-includes/support/Frage/042019/
 byxaru.com
 byxxyz.com
 byz2.com
@@ -51127,7 +51175,7 @@ carbtecgh.com
 carc-astrology.in
 carcorxox.com
 carcounsel.com
-cardbankph.com
+cardbankph.com/wp-content/uploads/sites/
 cardboardspaceshiptoys.com
 cardea-immobilien.de
 cardealersforbadcredit.net
@@ -51656,8 +51704,7 @@ cc14927-wordpress.tw1.ru
 cc78.bg
 cc8848.xyz
 cc9.ne.jp
-ccamatil1-my.sharepoint.com/:u:/g/personal/john_mason_ccamatil_com1/Ea-twgQWpdFFhIpSX2gMAMQBGNG-_9AWDjrF6y8iqgHsfQ?e=63a6Bp&download=1
-ccamatil1-my.sharepoint.com/:u:/g/personal/raewynne_zaloum_ccamatil_com/ETmCLjlK57hNt6jZnc008W4B8aS2B3RTOxcKflvuQLtdcQ?e=kbpegu&download=1
+ccamatil1-my.sharepoint.com
 ccandcbrand.com
 ccash.xyz
 ccat.biz
@@ -52149,11 +52196,8 @@ cdn.slty.de
 cdn.speedof.me/sample4096k.bin?r=0.1570982201
 cdn.timebuyer.org
 cdn.top4top.net
-cdn.truelife.vn/webtube/201310/2139273/pianito.exe
-cdn.xiaoduoai.com/cvd/dist/fileUpload/1558331409488/4.284737936785339.jpg
-cdn.xiaoduoai.com/cvd/dist/fileUpload/1559819246800/1.8800013111270863.jpg
-cdn.xiaoduoai.com/cvd/dist/fileUpload/1571723350789/0.25579108623802416.jpg
-cdn.xiaoduoai.com/cvd/dist/fileUpload/1571723382710/9.915787746614242.jpg
+cdn.truelife.vn
+cdn.xiaoduoai.com
 cdn.zecast.com
 cdn4.css361.com
 cdn5.rvshare.com
@@ -52308,7 +52352,7 @@ center-house.ru
 center-miami.com
 center.1team.pro
 center1.co.il
-center4cby.com
+center4cby.com/AAtsri/
 centerfortheyouth.org
 centerline.co.kr
 centernadegda.ru
@@ -52665,8 +52709,7 @@ charity.vexacom.com
 charitycandy.co.uk
 charitylov.com
 charityshofner.com
-charlemagne.fr/string/8731575/8731575.zip
-charlemagne.fr/string/9014781.zip
+charlemagne.fr
 charlesbaker.co.uk
 charlescuthbertson.com
 charlesmessa.info
@@ -53097,7 +53140,7 @@ christinalenway.com
 christinelebeck.com
 christinmunsch.com
 christmasatredeemer.org
-christoforoskotentos.com/LdPlB-12Eo91Ka8NLVPA_jpUrKJsyw-RDj/
+christoforoskotentos.com
 christolandcompany.com
 christolar.cz
 christom.com.au
@@ -53523,7 +53566,7 @@ cld-net.com
 cld.persiangig.com
 cld.pt
 cldup.com/AxUrK0vRFk.doc?REDACTED
-cle.ae/auth/x_encrypted_1DDF3C0.bin
+cle.ae
 clean.crypt24.in
 clean.olexandry.ru
 clean.vanzherke.ru
@@ -53584,7 +53627,7 @@ cleverflame.com
 cleverlearncebu.com
 cleverspain.com
 clgafareaitu.com
-clgsecurities.com
+clgsecurities.com/FORM/Zahlung-bequem-per-Rechnung/
 clhairdesign.com
 clhgoody.xyz
 clic-douaisis.fr
@@ -53593,7 +53636,8 @@ click.danielshomecenter.com
 click.expertsmeetings.org
 click.pstmrk.it/2/gtminas.com.br/En_us/Clients/10_18/5XZWNgI/k3kx/TGCN8HY9A3
 click.pstmrk.it/2/helgaclementino.com.br/novo/US/Payments/10_18/ArqENgI/k3kx/eto0MG6Kul
-click.senate.go.th
+click.senate.go.th/wp-content/uploads/2019/47cr-hrnruo-enxyprsnt/
+click.senate.go.th/wp-content/uploads/2019/5kf9xg-1ew5g4j-ajij/
 click4amassage.com
 click4ship.com
 clickara.com
@@ -53648,7 +53692,9 @@ clinicacasuo.com.br
 clinicacirurgiaplasticasp.com.br
 clinicacorporea.com
 clinicacorpusmacae.com.br
-clinicacrecer.com
+clinicacrecer.com/home/multifunctional_section/ajBSYVc45_cSSXVIe4t_906436_c6FkwqpEwa9A8l/2944516_vTjxzWtUlt3UI9/
+clinicacrecer.com/home/oKT/
+clinicacrecer.com/language/Document/3ekcjwz/
 clinicadavid.mx
 clinicadeldolorgt.com
 clinicadentalimagen.pe
@@ -53723,7 +53769,8 @@ cloud.chachobills.com
 cloud.diminishedvaluecalifornia.com
 cloud.hollweck.it
 cloud.kryptonia.fr
-cloud.patrika.com
+cloud.patrika.com/wp-content/pageflip/En_us/Transaction_details/092018
+cloud.patrika.com/wp-content/pageflip/En_us/Transaction_details/092018/
 cloud.s2lol.com
 cloud.wmsinfo.com.br
 cloud.xenoris.fr
@@ -53732,8 +53779,7 @@ cloudatlas.io
 cloudbox-online.net
 cloudbytegames.com
 cloudcapgames.com
-cloudcast.best/d5c65ad6c021ab6adcf98a48b62e294c/updateprofile.exe
-cloudcast.best/d5c65ad6c021ab6adcf98a48b62e294c/winboxscan.exe
+cloudcast.best
 cloudcottage.cloud
 cloudessy.com
 cloudfilesharingdomainurllinksys.duckdns.org
@@ -53823,9 +53869,7 @@ cmdaitexpo.com
 cmdez.ir
 cmdou.com
 cmeaststar.de
-cmg.asia/wp-content/uploads/DOK/bkmrGzXzIEZODqVCVwBTcQiNn/
-cmg.asia/wp-content/uploads/INC/RVVM3rAgsF/
-cmg.asia/wp-content/uploads/asIFB-0wxsmXdAVKvdu2_okCqpxAWS-NK/
+cmg.asia
 cmgroup.com.ua
 cmhighschool.edu.bd
 cmhmfgoutbound.protection.sketchwefair-watduoliprudential.com.watchdogdns.duckdns.org
@@ -54075,7 +54119,7 @@ coffeeking.in
 coffeeorcanoeing.com
 cofqz.com
 cofrex-eg.com
-cofusa.com
+cofusa.com/Client/Pay-Invoice
 cogeainternational.com
 coges-tn.com
 coghlanhealthcare.ie
@@ -54885,7 +54929,7 @@ corkmademore.com
 corkspeechtherapy.ie
 corm-informatique.fr
 cormetal.eu
-cornejotex.com
+cornejotex.com/cgi-bin/ze0730/
 cornelbusiness.co.uk
 cornelia-ernst.de
 cornellekacy.net
@@ -55590,7 +55634,7 @@ csp-tfpm.com
 csplumbingservices.co.uk
 cspn-omsk.ru
 csprequiao.pt
-csq.es
+csq.es/wp-content/sv_viewer_8.exe
 csrcampaign.com
 csrkanjiza.rs
 csrngo.in
@@ -56433,7 +56477,7 @@ dashfiles.tk
 dashkevichseo.ru
 dashonweb.com
 dashvaanjil.mn
-dasjoe.de
+dasjoe.de/INVOICE/scan/US/Service-Report-0730/
 daskruelhaus.com
 dasleds.com
 dastep.com
@@ -56480,7 +56524,7 @@ datascienceexcellence.net
 datascienceexcellence.org
 dataseru.com
 dataserver.c0.pl
-datasheep.co.uk
+datasheep.co.uk/www.skye-tours.com/MhzEd-U9M0SONwohw1Ubz_oDNLLFGN-3J4/
 datasoft-sa.com
 datatalentadvisors.com
 datatechis.com
@@ -56520,7 +56564,7 @@ datswingt.nl
 datthocuphuquoc.xyz
 dattiec.net
 dattopantthengadi.in
-datudeli.com/public/less/MALI.exe
+datudeli.com
 datumu.ga
 datumu.ml
 datvangthainguyen.com
@@ -56678,7 +56722,7 @@ dbcomestic.com
 dbecome.top
 dbfuppsala.se
 dbinario.com
-dbo.ca.gov/forms/tma/callreport_forms/Call_Report_NonNMLS_2018-04-17.xls
+dbo.ca.gov
 dboyusa.online
 dbravo.pro
 dbs-ebank.com
@@ -56771,7 +56815,8 @@ dd.loop.coop
 dd.smaxdn.com
 dda.co.ir
 ddaynew.5demo.xyz
-ddbuilding.com
+ddbuilding.com/En/CyberMonday
+ddbuilding.com/En/CyberMonday/
 ddccs.net
 ddd2.pc6.com
 dddos.persiangig.com
@@ -56941,8 +56986,7 @@ deconmit.com
 decons.ai
 decons.vn
 decoplast-edp.ro
-decoprojectme.com/JOIP/Jimopy.exe
-decoprojectme.com/JOIP/putty.exe
+decoprojectme.com
 decoracaodeparedes.com.br
 decoratingideas.bozkurtfurkan.com
 decoration-marine.net
@@ -58363,7 +58407,7 @@ digigm.ir
 digihashtag.com
 digiiital.co.uk
 digikow.000webhostapp.com
-digilander.libero.it
+digilander.libero.it/ricettesiciliane1/ecuoco.exe
 digileads.ae
 digilib.dianhusada.ac.id
 digim.asia
@@ -58389,10 +58433,7 @@ digital.eudoratrading.com
 digital.gemacipta.asia
 digital.syd.fr
 digital2home.ecobz.xyz
-digital7.com/img/Payment-and-address/tracking-number-and-invoice-of-your-order
-digital7.com/img/Payment-and-address/tracking-number-and-invoice-of-your-order/
-digital7.com/storeimages/manufacturers/EL-RECH/
-digital7.com/tuning/images/Empresas-Facturas/
+digital7.com
 digitalankur.com
 digitalbrit.com
 digitalbugs.co.in
@@ -58829,7 +58870,30 @@ djyokoo.com
 djz313iks60bk4.com
 djzmo.com
 dk-elbrus.ru
-dk-rc.com
+dk-rc.com/js/2ndOwegoThurs.exe
+dk-rc.com/js/Boh-Dll.exe
+dk-rc.com/js/Cool-Tue.exe
+dk-rc.com/js/Dkl-30k.exe
+dk-rc.com/js/Dll-NewMove.exe
+dk-rc.com/js/Freewaaaa.exe
+dk-rc.com/js/Hondu-25k.exe
+dk-rc.com/js/JservePP.exe
+dk-rc.com/js/Mem-DLL.exe
+dk-rc.com/js/Mon-DLL.exe
+dk-rc.com/js/MonnG-OHL.exe
+dk-rc.com/js/MyDlh-Thur.exe
+dk-rc.com/js/Mywed-DLHG.exe
+dk-rc.com/js/NightOPP.exe
+dk-rc.com/js/Ogexwegoma.exe
+dk-rc.com/js/Osewrpart2.exe
+dk-rc.com/js/Owp-Wen.exe
+dk-rc.com/js/Oxwegbgo.exe
+dk-rc.com/js/StudiDaddy.exe
+dk-rc.com/js/WZ-DHL.exe
+dk-rc.com/js/ccournwell.exe
+dk-rc.com/js/colomata.exe
+dk-rc.com/js/merem.exe
+dk-rc.com/js/ownboy.exe
 dk.sa
 dk5gckyelnxjl.cloudfront.net
 dkadvisry.com
@@ -59186,11 +59250,7 @@ dl2.storeandshare.singtel.com
 dl3.joxi.net/drive/2017/02/10/0020/2806/1313526/26/8d773b6528.txt
 dl3.joxi.net/drive/2020/02/21/0039/1928/2619272/72/5635d46d46.bin
 dl3.joxi.net/drive/2020/02/21/0039/1928/2619272/72/b1c595a0bb.bin
-dl4.joxi.net/drive/2018/11/12/0027/3642/1777210/10/7f00c6173d.txt
-dl4.joxi.net/drive/2019/06/19/0031/2434/2075010/10/bb608fde85.bin
-dl4.joxi.net/drive/2020/02/21/0039/1928/2619272/72/72b7642f03.bin
-dl4.joxi.net/drive/2020/04/06/0039/1928/2619272/72/84ac10d2a7.txt
-dl4.joxi.net/drive/2020/04/06/0040/2206/2631838/38/ff0c5b2d33.txt
+dl4.joxi.net
 dl63964725.dyn-downloads.com
 dlainzyniera.pl
 dlawgist.com
@@ -60358,7 +60418,7 @@ donnebella.com
 donnerreuschel.com
 donphenom.al
 donpomodoro.com.co
-donsinout.info/doc/putty.exe
+donsinout.info
 donsly.usa.cc
 donsworld.org
 dontlitigate.com
@@ -60367,7 +60427,7 @@ donusumhirdavatmetal.com
 donvosphotography.com
 donwonda.org
 dooball.biz
-doobegroup.com
+doobegroup.com/digital
 dooch.vn
 doodlebug.club
 doodleninja.in
@@ -60814,7 +60874,7 @@ drdelaluz.com
 drdki.com
 drdoorbin.com
 dream-energy.ru
-dream-food.com
+dream-food.com/mottoweb/KvunR-DLlF7sSi5gFcr9G_rMcuHokr-Jv/
 dream-girls.club
 dream-girls.online
 dream-girls.xyz
@@ -60855,14 +60915,7 @@ dreamswork.tk
 dreamtownpsl.co.ke
 dreamtravel.site
 dreamtravelonthego.com
-dreamtrips.cheap/dreamtrips.exe
-dreamtrips.cheap/dreamtrips_mix.exe
-dreamtrips.cheap/dreamtrips_mix1.exe
-dreamtrips.cheap/dreamtrips_us1.exe
-dreamtrips.cheap/dreamtrips_us2.exe
-dreamtrips.cheap/dreamtrips_us3.exe
-dreamtrips.cheap/dreamtrips_us4.exe
-dreamtrips.cheap/dreamtrips_us5.exe
+dreamtrips.cheap
 dreamtrips.icu
 dreamvision.bg
 dreamwolf.tv
@@ -73354,7 +73407,7 @@ ecity.network
 ecitytanduclongan.com
 eckdor.de
 ecker.aidnet.at
-ecklund.no/pdf/NS89IQMMUCSS/jFcOZtnMxKGeacejiwMwAlDzKeQNGa/
+ecklund.no
 eclairesuits.com
 eclatpro.com
 eclecticelectronics.net
@@ -73524,7 +73577,7 @@ edgingprofile.com
 edhec.business-angels.info
 edialplast.ru
 edicolanazionale.it
-edicustoms.com.au
+edicustoms.com.au/aa/doc2.exe
 ediet.ir
 edificaiconstrucoes.com
 edifice-guyane.fr
@@ -73905,7 +73958,8 @@ elc.daffodilvarsity.edu.bd
 elcampestre.cl
 elcaneloautopartes.com.mx
 elcapitanno.com
-elcarmelohotelhacienda.com
+elcarmelohotelhacienda.com/upload/ccc.exe
+elcarmelohotelhacienda.com/upload/cho.exe
 elcarrocafeny.com
 elchurrascorestaurante.com
 elclasicocml.com
@@ -73956,7 +74010,7 @@ electriquestew.com
 electro-bike.club
 electroautomat.com
 electrocad.in
-electroenchufe.com
+electroenchufe.com/wp-content/13c3yqv_eo4zsu9-416/
 electrofluxequipmentspvtltd.com
 electrofyhub.com
 electrogc.com.ar
@@ -74545,7 +74599,7 @@ enemyunknown.club/app/app.exe
 enemyunknown.club/app/watchdog.exe
 enequipo.es
 enercol.cl
-energicaweb.com
+energicaweb.com/PM-591756391651093/
 energie-service.fr
 energie-strom.net
 energiemag.fr
@@ -75230,7 +75284,7 @@ estomedic.com
 estore.qurvex.com
 estrategias-corporativas.com
 estrategiasdeaprovacao.com.br
-estreamnetworks.net
+estreamnetworks.net/7GWTSLC/WIRE/Commercial
 estrindesign.com
 estrom.es
 estrutura.eng.br
@@ -76324,7 +76378,7 @@ fashionandme.ru
 fashionattitude.de
 fashionbettysam.com
 fashionblogandpromo.club
-fashiondenver.com/INFO/US/Invoice
+fashiondenver.com
 fashionfootprint.leseditextiles.co.za
 fashionfootprint.nmco.co.za
 fashiongul.com
@@ -76572,8 +76626,7 @@ febsmarketingnetwork.com
 febsms.com
 fechos.org.br
 fecoonde.org
-fectrucks.com/QaaXRUq/
-fectrucks.com/RECH/Zahlungserinnerung-vom-Mai-0387-6321/
+fectrucks.com
 fed58f43246844b18d00fb0177352546.download
 fedbroker.ru
 fedeminersdigital.com
@@ -77507,7 +77560,7 @@ floradna.com
 floradosventos.com.br
 floralcompany.jp
 floramatic.com
-florandina.com/wordpress.bk/lFu77Ma6/
+florandina.com
 florandum.com
 florean.be
 florenceloewy.com
@@ -77947,7 +78000,7 @@ fotogar.com
 fotograafie.nl
 fotografiarnia.pl
 fotoground.com
-fotojurczak.pl
+fotojurczak.pl/newsletter/En_us/Order/Invoice-7519103/
 fotolegko.ru
 fotomb.com
 fotoms.pl
@@ -78571,7 +78624,7 @@ fundacao-algarvia.pt
 fundacionafanic.com
 fundacioncaminosdepazporcolombiacali.org
 fundacioncreatalento.org
-fundacionesperanza.org.es
+fundacionesperanza.org.es/En_us/file/Wcwqs-Ht_qnY-Ii/
 fundacionmontehoreb.org.ve
 fundacionpacma.com
 fundacionravera.com
@@ -78742,7 +78795,14 @@ fuzoneeducations.com
 fuzzyconcepts.com
 fuzzylogic.in
 fuzzymiles.com
-fv1-2.failiem.lv
+fv1-2.failiem.lv/down.php?i=866a5tnm&n=eFax_message_8501.zip&download_checksum=2436c70ebdc46e4deae67a684d501e980a399948&download_timestamp=1544877407
+fv1-2.failiem.lv/down.php?i=866a5tnm&n=eFax_message_8501.zip&download_checksum=2f58f3958bdd74b7b7c7d359b27ece0d001b14d3&download_timestamp=1544877326
+fv1-2.failiem.lv/down.php?i=866a5tnm&n=eFax_message_8501.zip&download_checksum=b6d9947be0cd57e96513e56a8ffb585948b18de8&download_timestamp=1544877755
+fv1-2.failiem.lv/down.php?i=866a5tnm&n=eFax_message_8501.zip&download_checksum=dd38f08dd73f729bb354c9fd8c7559dfed05ada1&download_timestamp=1544877600
+fv1-2.failiem.lv/down.php?i=x998qvjp&n=eFax_message_8503.zip&download_checksum=57aa50fbe7e0e98a8c06fbc666fda1b1de55acad&download_timestamp=1544877284
+fv1-2.failiem.lv/down.php?i=x998qvjp&n=eFax_message_8503.zip&download_checksum=c45a527822169df1dbcec71ad7a82c851b4453b2&download_timestamp=1544878007
+fv1-2.failiem.lv/down.php?truemimetype=1&i=6cdww6dj&download_checksum=c18a85b1523f4b20ed115ca2f8348aebfcc4359c&download_timestamp=1536791270
+fv1-2.failiem.lv/down.php?truemimetype=1&i=8sw4havs&download_checksum=4e49f09636c4528292511db886067d14d4016eee&download_timestamp=1537834998
 fv13.failiem.lv
 fv15.failiem.lv
 fv2-1.failiem.lv
@@ -79461,7 +79521,7 @@ genedelibero.com
 genelmusavirlik.com.tr
 geneomm.com
 generactz.com
-general.it
+general.it/downloads/verificacitrix.exe
 generalbikes.com
 generalgauffin.se
 generalhomemedicalsupply.com
@@ -79552,7 +79612,7 @@ geolegno.eu
 geolinvestproekt.ru
 geolocstar.com
 geologia.geoss.pt
-geologimarche.it
+geologimarche.it/anagrafica/v20khqvc0rdvrvz_nr9zo5_box/individual_tksp1tgi5m_gnxparlk3p7hn1/gzjaxdp970vybh_40x1v/
 geolysis.org
 geometrai.com
 geometrirc.com
@@ -79927,7 +79987,11 @@ gilbertceramic.fr
 gilbertohair.com
 gildlearning.org
 gilgaluganda.org
-gilhb.com
+gilhb.com/3135AIBVLTI/com/Business
+gilhb.com/US/Transaction_details/122018
+gilhb.com/US/Transaction_details/122018/
+gilhb.com/US/Transaction_details/122018/index.php.suspected
+gilhb.com/jhb/US_CA/scan/Redebit_Transactions/terms/4369744647/bYcd-Jo_TcQlm-pMv1/
 gilio.com.mx
 gill-holiday-2013.gillfoundation.org
 gill-holiday-2014.gillfoundation.org
@@ -80161,8 +80225,7 @@ glid.jp
 gligoricekofood.com
 glik.acemlnc.com
 glimpse.com.cn
-glip-vault-1.s3-accelerate.amazonaws.com/web/customer_files/1018812956684/IMAGE_020110333001001.zip?Expires=2075494478&AWSAccessKeyId=AKIAJROPQDFTIHBTLJJQ&Signature=YzxiWz8qYEyE%2FcRW%2FMpzw%2FoMHDg%3D&response-content-disposition=attachment
-glip-vault-1.s3-accelerate.amazonaws.com/web/customer_files/1019027505164/Outstanding%20Payment%20Copy.zip?Expires=2075494478&AWSAccessKeyId=AKIAJROPQDFTIHBTLJJQ&Signature=7tH4mckzx%2FeV0H5QoM7Yn5hJtuE%3D&response-content-disposition=attachment
+glip-vault-1.s3-accelerate.amazonaws.com
 glip-vault-1.s3.amazonaws.com/web/customer_files/720950280204/ACH%20PAYMENT%20REMITTANCE.DOC.zip?Expires=2075494478&AWSAccessKeyId=AKIAJROPQDFTIHBTLJJQ&Signature=APQeJXVXqVwwtpv%2FU8BoHV3zWNs%3D&response-content-disposition=attachment
 glip-vault-1.s3.amazonaws.com/web/customer_files/720950280204/ACH%20PAYMENT%20REMITTANCE.DOC.zip?Expires=2075494478&AWSAccessKeyId=AKIAJROPQDFTIHBTLJJQ&Signature=APQeJXVXqVwwtpv/U8BoHV3zWNs=&response-content-disposition=attachment
 glissandobigband.com
@@ -80701,7 +80764,7 @@ gordyssensors.com
 gorenotoservisi.net
 goretimmo.lu
 gorgan-clinic.ir
-gorglione.com
+gorglione.com/P8BdnrcjyMs2g
 gorguluyapi.com
 gorgunmakina.com
 gorillaconcretecoatings.com
@@ -80769,7 +80832,7 @@ goudu.club
 gourmandd.com
 gourmetlab.pe
 gourmetreats.in
-gov.kr/main?d=AA100DataDownApp&SAVE_FILE_NM=38500.exe
+gov.kr
 gov.rsmart-testsolutions.watchdogdns.duckdns.org
 govche.in
 goveboatclub.com.au
@@ -81296,7 +81359,9 @@ grupogeacr.com
 grupoglobaliza.com
 grupohasar.com
 grupoiesp.tk
-grupoinalen.com
+grupoinalen.com/51NLVLLC/KSNP604935238QEE/Aug-10-2018-20221457/QIU-WACY-Aug-10-2018
+grupoinalen.com/51NLVLLC/KSNP604935238QEE/Aug-10-2018-20221457/QIU-WACY-Aug-10-2018/
+grupoinalen.com/SJvwh7f
 grupoinfonet.com
 grupojg.com.br
 grupolainmaculada.com/Oct2018/En/ACH-form
@@ -81519,8 +81584,7 @@ gulluconsulants.com
 gullukomurelektronik.com
 gulseda.site
 gulungdinamo.com
-gulzarhomestay.com/images/windows.exe
-gulzarhomestay.com/include/windows.exe
+gulzarhomestay.com
 gumiviet.com
 gumuscorap.com
 gumustelkari.com
@@ -81669,7 +81733,7 @@ h-surgeon.info
 h-w-c.net
 h.eurotrading.com.pl
 h.j990981.ru
-h.top4top.io/p_14754cwzr1.jpg
+h.top4top.io
 h.valerana44.ru
 h1.iwakalong.ru
 h112321.s08.test-hf.su
@@ -82255,6 +82319,7 @@ hayahost.com
 hayalbu.com
 hayashitoysmart.com
 hayatevesigar-10gbnetkazan.com
+hayatevesigar-20gb.com
 hayatihusada.com
 hayatiskele.com
 hayatlokma.com
@@ -82511,8 +82576,10 @@ hedisetro.5gbfree.com
 hediy20gb-internet-online.net
 hediye-internet-saglik.org
 hediye-internet.site
+hediye20gb.online
 hediyegapsinternet.com
 hediyeinternetpaketim.com
+hediyeler10gb-ramazan.net
 hediyem20gb-internet.org
 hediyenkolay.com
 hedrasl.com
@@ -83088,8 +83155,7 @@ hjsanders.nl
 hjylw66.com
 hk.darwd.com
 hk.insure
-hk.npu.gov.ua/assets/sites/hk/dilnuchni/%D0%94%D1%96%D0%BB%D1%8C%D0%BD%D0%B8%D1%87%D0%BD%D1%96%20%D0%86%D0%BD%D0%B4%D1%83%D1%81%D1%82%D1%80%D1%96%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B3%D0%BE%20%D0%92%D0%9F.doc
-hk.npu.gov.ua/assets/sites/hk/dilnuchni/%D0%94%D1%96%D0%BB%D1%8C%D0%BD%D0%B8%D1%87%D0%BD%D1%96%20%D0%A8%D0%B5%D0%B2%D1%87%D0%B5%D0%BD%D0%BA%D1%96%D0%B2%D1%81%D1%8C%D0%BA%D0%BE%D0%B3%D0%BE%20%D0%92%D0%9F.doc
+hk.npu.gov.ua
 hk026.com
 hk3.my
 hk3fitness.com
@@ -83316,160 +83382,7 @@ home-racing.com
 home-spy-shop.com
 home.99eurowebsite.ie
 home.barley-plus.com
-home.earthlink.net/~4winds1/Dec3th.exe
-home.earthlink.net/~4winds1/ImortantDocument.exe
-home.earthlink.net/~Davidtrojan/UPS/ecopy.jar
-home.earthlink.net/~KMC2READ/paypal/ecopy.jar
-home.earthlink.net/~KMC2READ/ups/ups.jar
-home.earthlink.net/~Lorrainebubar/USPS-shipping-label.jar
-home.earthlink.net/~Ngardels/112220188.exe
-home.earthlink.net/~Ngardels/26112018.exe
-home.earthlink.net/~Rsellsema/FedEx/FedEx.jar
-home.earthlink.net/~Rsellsema/UPS/ups.jar
-home.earthlink.net/~adminawg/usps/Shipping-Label/Shipping-Label(e-copy).jar
-home.earthlink.net/~archbarrett/Amazon-order-copy.jar
-home.earthlink.net/~archbarrett/adobe/0.37646700%201523567821.jar
-home.earthlink.net/~archbarrett/donation/donation.jar
-home.earthlink.net/~archbarrett/dropbox/reference~ecopy.jar
-home.earthlink.net/~archbarrett/file2018.jar
-home.earthlink.net/~banderso1066/e~label.jar
-home.earthlink.net/~baysidejetdrive/Shipment-label.jar
-home.earthlink.net/~bigrose26/12-21-2017.jar
-home.earthlink.net/~bigrose26/shipment/shipment-label.jar
-home.earthlink.net/~captaindiego/amazon/amazon.jar
-home.earthlink.net/~captaindiego/ecopy/ecopy.jar
-home.earthlink.net/~captaindiego/fedex/Fedex-Shipping-Label.jar
-home.earthlink.net/~captaindiego/fedex/ecopy.jar
-home.earthlink.net/~captaindiego/software/ecopy.jar
-home.earthlink.net/~carwashregional/ship/ups~label.jar
-home.earthlink.net/~cathygrellet/data/saved/order.jar
-home.earthlink.net/~cathygrellet/dropbox/saved/artwork.jar
-home.earthlink.net/~cathygrellet/filemanager/order.jar
-home.earthlink.net/~cathygrellet/javto/print.jar
-home.earthlink.net/~cathygrellet/ship/info/USPS%20Order.jar
-home.earthlink.net/~craigbayhi/1-9-2018.jar
-home.earthlink.net/~craigslane/FedEx-Shipment~label.jar
-home.earthlink.net/~cvaleallen/UPS-shipping-details.jar
-home.earthlink.net/~cvaleallen/delivery-report.jar
-home.earthlink.net/~cvaleallen/your-shipping-details.jar
-home.earthlink.net/~dalegibson/Shipping-Label.jar
-home.earthlink.net/~dalegibson/shipping_details.jar
-home.earthlink.net/~damturney/invoice/Invoice_05122017_outputCCA6AAF.scr
-home.earthlink.net/~damturney/invoice27112017/Invoice_output68CF6B0.scr
-home.earthlink.net/~damturney/invoice27112017/newinvoice/invoice_04122017_output7BCA030.scr
-home.earthlink.net/~damturney/specification/invoice04122017_output13026B0.scr
-home.earthlink.net/~dcamjr/Invoice20180205.exe
-home.earthlink.net/~dcmusicbox/usp/tracking~details.jar
-home.earthlink.net/~decalgene/UPS_Tracking.jar
-home.earthlink.net/~dvidmar1/shipment-label.jar
-home.earthlink.net/~ebony319/ShippingLabel(e-copy).jar
-home.earthlink.net/~edclarkortho/label/e~label.jar
-home.earthlink.net/~edclarkortho/shipmentlabel.jar
-home.earthlink.net/~ellenweiss/New_message.jar
-home.earthlink.net/~ersinc/0.06213400%201521213842.jar
-home.earthlink.net/~ersinc/directory/ecopy.jar
-home.earthlink.net/~ersinc/ebay/ecopy00017717.jar
-home.earthlink.net/~ersinc/ecopy/ups.jar
-home.earthlink.net/~ersinc/order/order.jar
-home.earthlink.net/~ersinc/usps/order.jar
-home.earthlink.net/~fahertydoc/Return-label.jar
-home.earthlink.net/~fahertydoc/Usps~Label.jar
-home.earthlink.net/~fahertydoc/data/qrypted.Janvy.jar
-home.earthlink.net/~flajobs/Fedex~e~label.jar
-home.earthlink.net/~flajobs/e~label.jar
-home.earthlink.net/~flajobs/fedex/ecopy.jar
-home.earthlink.net/~flajobs/shipment~label.jar
-home.earthlink.net/~freshourglen/5-2-2018.jar
-home.earthlink.net/~g.rhoads/DHL(View_shipping_label).jar
-home.earthlink.net/~g.rhoads/FedEx/FedEx.jar
-home.earthlink.net/~g.rhoads/UPS(View-Delivery-Copy).jar
-home.earthlink.net/~georgejagels/usps-shipment-label.jar
-home.earthlink.net/~gouette/%20Corel%20Digital/%20license.jar
-home.earthlink.net/~gouette/DocuSign/DOCUMENTFILE.jar
-home.earthlink.net/~gouette/Invoice/Document.jar
-home.earthlink.net/~gouette/data/license.jar
-home.earthlink.net/~gouette/fedex/fedexcopy.jar
-home.earthlink.net/~gouette/trade/tradecopy.jar
-home.earthlink.net/~gouette/trade/tradecopy.zip
-home.earthlink.net/~grabanski/CVE2017jar.zip
-home.earthlink.net/~itshq/USPS_Tracking.jar
-home.earthlink.net/~james.pender/shipping-label.jar
-home.earthlink.net/~jmzegan/your-order.jar
-home.earthlink.net/~joserealty/ecopy/ecopy.jar
-home.earthlink.net/~joserealty/webdocs/01/11-28-2017.jar
-home.earthlink.net/~joserealty/webdocs/02/11-30-2017.jar
-home.earthlink.net/~joserealty/webdocs/03/12-8-2017.jar
-home.earthlink.net/~kentscott4643/Trk_FedEx_46866461644881255.jar
-home.earthlink.net/~ksak/FedEx/Shipping-Label(e-copy).jar
-home.earthlink.net/~ksak/FedEx/tobeused300.jar_JavaCrypt2.jar
-home.earthlink.net/~loubill/ups.jar
-home.earthlink.net/~macjanutol/01-29-2019.jar
-home.earthlink.net/~macjanutol/01-29-20199.jar
-home.earthlink.net/~macjanutol/02-2-2019.jar
-home.earthlink.net/~macjanutol/CDV%20BOOK%20K-2%20PAG47.ZIP
-home.earthlink.net/~margolisme/12.16.17.jar
-home.earthlink.net/~margolisme/eopy/e-copy.jar
-home.earthlink.net/~michlee/Trk_FedEx_46866461644881255.jar
-home.earthlink.net/~mkramer65/dropbox_upgrade.jar
-home.earthlink.net/~mkramer65/fedex_shippinglabel.jar
-home.earthlink.net/~mkramer65/scan-copy.exe
-home.earthlink.net/~mnludvik/01-21-2019.jar
-home.earthlink.net/~mnludvik/1-21-2019.jar
-home.earthlink.net/~morrisonb/date/FedEx.jar
-home.earthlink.net/~morrisonb/ecopy/FedEx.jar
-home.earthlink.net/~morrisonb/softcopy/e-copy.jar
-home.earthlink.net/~narcisocortez/Shipping_Verification.1.0.1.1.1.1.0.jar
-home.earthlink.net/~ncfire/usps-shipping-label.jar
-home.earthlink.net/~ncgreen2/E-log.jar
-home.earthlink.net/~p3nd3r/Shipment~label.jar
-home.earthlink.net/~p3nd3r/Shipping-label.jar
-home.earthlink.net/~palmermusic/1-04-2018.jar
-home.earthlink.net/~peggylegault/june-25-2018.jar
-home.earthlink.net/~pepper12/UPS_invoice.jar
-home.earthlink.net/~pepper12/shipping-label.jar
-home.earthlink.net/~pgregory2/ups/upstracker.jar
-home.earthlink.net/~phwilson/Paypal_Credit_Info.Jar
-home.earthlink.net/~phwilson/case_details.jar
-home.earthlink.net/~phwilson/e~label.jar
-home.earthlink.net/~prislen/UPS_Z10023838484.exe
-home.earthlink.net/~rclaws35/245646572983677974505708.jar
-home.earthlink.net/~rclaws35/61234567.jar
-home.earthlink.net/~rclaws35/package~label.jar
-home.earthlink.net/~rclaws35/re/shipment~label.jar
-home.earthlink.net/~rclaws35/shipment~label.jar
-home.earthlink.net/~roib/usps/usps~order~copy.jar
-home.earthlink.net/~roib/usps/usps~tracking~receipt.jar
-home.earthlink.net/~ruthtraa/shipment-label.jar
-home.earthlink.net/~rwhall38/01/3-28-2018.jar
-home.earthlink.net/~sallyhansen1/Usps-Shipment~Label.jar
-home.earthlink.net/~sallyhansen1/Usps_Delivery.jar
-home.earthlink.net/~sherylhagen/Usps~Label.jar
-home.earthlink.net/~sherylhagen/usps-shipment-label.jar
-home.earthlink.net/~sidewinder4/Comfirm(Delivery-details).jar
-home.earthlink.net/~sidewinder4/ecopy/ups.jar
-home.earthlink.net/~sltdmd/Ebay01.jar
-home.earthlink.net/~sltdmd/ups-shipping-label.jar
-home.earthlink.net/~suzystar/Ups~costomer~service.jar
-home.earthlink.net/~suzystar/brief/invoice/order/ratata.qrypted.jar
-home.earthlink.net/~suzystar/cgggihfdyjojok/ecopy.jar
-home.earthlink.net/~suzystar/ecopy/e-copy.jar
-home.earthlink.net/~suzystar/pp/luv.qrypted.jar
-home.earthlink.net/~suzystar/usps-shipment-label.jar
-home.earthlink.net/~thfenner/Shipping-label-ecopy.jar
-home.earthlink.net/~timstaacke/FedEx(eFile).jar
-home.earthlink.net/~timstaacke/ecopy/ecopy.jar
-home.earthlink.net/~tom12345678/return-label.jar
-home.earthlink.net/~tom12345678/shipment~label.jar
-home.earthlink.net/~tom12345678/shipping-label.jar
-home.earthlink.net/~twwjr/Usps_Delivery.jar
-home.earthlink.net/~vehanes/12-20-17.jar
-home.earthlink.net/~veteransmemorial/usps/Trackingorder.jar
-home.earthlink.net/~wisebob/Shipment~e~label.jar
-home.earthlink.net/~wisebob/shipping-label.jar
-home.earthlink.net/~youngcl/shipping-label101.jar
-home.earthlink.net/~zrippeto/invoice.jar
-home.earthlink.net/~zrippeto/order-comfirmation.jar
-home.earthlink.net/~zrippeto/pal/payment~details.jar
+home.earthlink.net
 home.evrstudio.com
 home.healthiestu.com
 home.isdes.com
@@ -83956,7 +83869,7 @@ houzess.com
 how-to-nampa.com
 how-to-tech.com
 how.ph
-howalshafikings.com
+howalshafikings.com/images/g7p08692/
 howardbenz.com
 howardbragman.com
 howardgfranklin.com
@@ -86049,7 +85962,7 @@ integraciontotal.com.mx
 integracooperativa.com
 integrafika.co.uk
 integraga.com
-integralc.com/tpmsydq/EI0/
+integralc.com
 integralcs.com.br
 integralestates.in
 integralmakeup.com
@@ -86086,8 +85999,7 @@ interaktifhaberler.net
 interativus.com.br
 interbanx.co.id
 interbizservices.eu
-interbus.cz/templates/jsn_dome_free/js/payments/2c.jpg
-interbus.cz/templates/jsn_dome_free/js/payments/docs/
+interbus.cz
 interciencia.es
 intercitiesfiji.com
 intercity-tlt.ru
@@ -86148,7 +86060,7 @@ internationalmscareerseminar.com
 internaut.in
 internetcasinoweblog.com
 internetjogasz.hu
-internetlink.com.mx
+internetlink.com.mx/wp/FILE/rpvni8o8ixy9gf19yk1j0sy6tixd_y4teg7cp-03364579593295/
 internetmarketing4pros.com
 internetofsmell.com
 internetordbogen.dk
@@ -86255,7 +86167,7 @@ invernessdesignbuild.ca
 inversionesdambrosio.com
 inversioneslopezminaya.com
 invertilo.com
-invest-logistic.net/new/modules/mod_virtuemart_category/UAJLTI4098/EPDHAXK/
+invest-logistic.net
 invest.hawzentr.com
 investasiafoundation.com
 investaweb.com
@@ -86821,7 +86733,8 @@ itaalabama.org
 itafoam.com
 itai-ziv.com
 italamp.tk
-italia-ricci.com
+italia-ricci.com/gallery/sec.accounts.send.com/
+italia-ricci.com/gallery/sec.myaccount.resourses.biz/
 italianfishrestaurantgh.com
 italianindoart.com
 italiansupercars.net
@@ -87412,7 +87325,7 @@ jayambewallpapers.com
 jayb.xyz
 jayc-productions.com
 jaychallenge.com
-jaycochemicals.com
+jaycochemicals.com/D.62-89252067914-06789209875.zip
 jaydeemory.com
 jaydipchowdharyblog.com
 jayemservicesdev2.site
@@ -87752,7 +87665,7 @@ jimbarrell.com
 jimbira-sakho.net
 jimbowe.com
 jimenezdesigngroup.com
-jimlaneevangelist.com/secure/msviewer.exe
+jimlaneevangelist.com
 jimlowry.com
 jimmibroadband.in
 jimmit.xyz
@@ -88730,8 +88643,7 @@ k.5qa.so
 k.adr.com.ua
 k.iepedacitodecielo.edu.co
 k.ludong.tv
-k.top4top.io/m_1530k3iz21.mp3
-k.top4top.io/p_14872lizs1.jpg
+k.top4top.io
 k110.ir
 k12818.com
 k1ristri.ru
@@ -91280,7 +91192,7 @@ lalogarcia.es
 lalolink.com
 lalunafashion.eu
 lalunenoire.net
-lam.cz
+lam.cz/templates/lam/css/messg.jpg
 lamacosmetics.com
 lamaggiora.it
 lamaisongourmande.live
@@ -91367,8 +91279,7 @@ landrovermarketplace.com
 landroveroflouisville.com
 landscapeton.com
 landscapingstoneandmulchwi.com
-landschaftsservice-seibold.de/Transactions/01_19
-landschaftsservice-seibold.de/Transactions/01_19/
+landschaftsservice-seibold.de
 landskronaloppis.se
 landskronamatguide.se
 landskronaportalen.se
@@ -92463,7 +92374,7 @@ lightswitchmarketing.biz
 lightvalleyprune.com
 lightwerq.com
 lightyard.com
-lignar.com/wp-admin/nmzwqzx_3oszpk-84359/
+lignar.com
 lignarium.se
 lignumpolska.com
 liguebretagnebillard.fr
@@ -92623,15 +92534,7 @@ linkglobalwebsiteaddress.duckdns.org
 linkhome.ga
 linki.pro
 linkingphase.com
-linkmaxbd.com/web/24zkwq2-853ifm-zjxobf/
-linkmaxbd.com/web/8v1qol-i1y6c-qjofsy/
-linkmaxbd.com/web/9msjw-hekol-apawr/
-linkmaxbd.com/web/INC/mpcBksf9hW/
-linkmaxbd.com/web/imkz-R2dTad4mrjc3NzX_LreIdLvWj-N8F/
-linkmaxbd.com/web/legale/sich/04-2019/
-linkmaxbd.com/web/secure.myaccount.send.net/
-linkmaxbd.com/web/uOPX-M3tkPx4AxGllnym_wMertWxMM-CCN/
-linkmaxbd.com/ww4w/4s87-ame04-jholkr/
+linkmaxbd.com
 linkomember.info
 linkovani.cz
 linkplay.duckdns.org
@@ -92840,7 +92743,7 @@ livetechsupport.ca
 livetesting.xyz
 livetotry.com
 livetours.cl
-livetrack.in
+livetrack.in/EmployeeMasterImages/qace.jpg
 livetvsports.ml
 liveu.lk
 liviavicentini.com
@@ -95951,7 +95854,9 @@ mbsinfosolution.com
 mbslmail.mbslbank.com
 mbsolutionssrl.it
 mbsou37.ru
-mbtechnosolutions.com
+mbtechnosolutions.com/DOC/Invoice-29900/
+mbtechnosolutions.com/Facturation/
+mbtechnosolutions.com/UPS-Service-Report-7003/
 mbupress.umbjm.ac.id
 mbve.org
 mbvvs.dk
@@ -98762,10 +98667,7 @@ multifin.com.au
 multihouse.fmcode.pl
 multila.com
 multilingualconnections.com
-multilinkspk.com/59FUOQY/biz/Business
-multilinkspk.com/59FUOQY/biz/Business/
-multilinkspk.com/En_us/Details/11_18
-multilinkspk.com/En_us/Details/11_18/
+multilinkspk.com
 multimedia.biscast.edu.ph
 multimedia.getresponse.com/getresponse-SxuiN/documents/743b122c-8162-4d7a-904a-15c08ebd1c61.zip
 multimedia.getresponse.com/getresponse-hjyjg/documents/cf4555cc-9378-485c-b840-cd7ac9a22be6.zip
@@ -99875,6 +99777,7 @@ ncledu.org
 ncmt2w.bn.files.1drv.com
 ncoimbra.pt
 ncp.su
+ncpcgov.com
 ncpll1392.ir
 ncronline.in
 ncsquared.com
@@ -100029,7 +99932,7 @@ neproperty.in
 neptanckellek.hu
 neracompany.sk
 nerasro.sk
-nerdassasins.com
+nerdassasins.com/share
 nerdsalley.com
 nerdtshirtsuk.com
 neremarketing.com
@@ -100098,7 +100001,7 @@ netin.vn
 netizennepal.com
 netkafem.org
 netking.duckdns.org
-netlink.com
+netlink.com/wp-content/plugins/all-in-one-wp-migration/storage/doc/Copy_Invoice/469302181479406/FHoLy-13a_ZIEFBA-gXE/
 netlux.in/av/bi.hta
 netm.club
 netmaffia.net
@@ -101073,8 +100976,7 @@ nonglek.net
 nongnghiepgiaphat.com
 nongsan24h.com
 nongsananhnguyen.com
-nongsandungha.com/wp-content/uploads/FILE/ho9fvb3zs1t/
-nongsandungha.com/wp-content/uploads/report/uy5upbmh/
+nongsandungha.com
 nonlocality.com
 nonnemacher.com.br
 nonnewspaper.com
@@ -101236,7 +101138,7 @@ notix-test.ru
 notiz.dk
 notlang.org
 notlrealty.com
-notomonopoly.com/Privacy/Akt1401.zip
+notomonopoly.com
 notonfirstdate.net
 notredamedesmines.fr
 notriicka.ir
@@ -101587,8 +101489,7 @@ nygard.no
 nygren.nu
 nygryn.net
 nygts.com
-nyifdmacyzechariah.top/skoex/po2.php?l=defol4.fgs
-nyifdmacyzechariah.top/skoex/po2.php?l=defol6.fgs
+nyifdmacyzechariah.top
 nyky.ir
 nylag.org
 nylandscaping.com
@@ -101966,7 +101867,7 @@ ohscrane.com
 ohters.de
 ohyellow.nl
 oi65.tinypic.com
-oi68.tinypic.com
+oi68.tinypic.com/2saxhrc.jpg
 oiainbtaea38.silverabout.ml
 oiasdnqweqasd.com
 oiflddw.gq
@@ -102181,7 +102082,7 @@ omagroup.ru
 omaharefugees.com
 omaint.ml
 omalleyco-my.sharepoint.com
-omalll.com/kb0vlwsyry2kfgagolj/yrmgdli.exe
+omalll.com
 omanfleethtml.neomeric.us
 omarelbalshy.com
 omartinez.com
@@ -103045,6 +102946,7 @@ onedrive.live.com/download?cid=E61E5F3F655316FA&resid=E61E5F3F655316FA%21116&aut
 onedrive.live.com/download?cid=E61E5F3F655316FA&resid=E61E5F3F655316FA%21118&authkey=AHdE-cFu6kuM8JY
 onedrive.live.com/download?cid=E61E5F3F655316FA&resid=E61E5F3F655316FA%21124&authkey=ADKlC5yRN_vbmt8
 onedrive.live.com/download?cid=E61E5F3F655316FA&resid=E61E5F3F655316FA%21125&authkey=AB5cY3xSz3aDDbE
+onedrive.live.com/download?cid=E61E5F3F655316FA&resid=E61E5F3F655316FA%21127&authkey=ADuW61iLvQd_15w
 onedrive.live.com/download?cid=E697B58FF4877717&resid=E697B58FF4877717%21252&authkey=ADBE2dwHOPXUyXY
 onedrive.live.com/download?cid=E6F971916A4516EF&resid=E6F971916A4516EF%211099&authkey=AHuDsiQ6-v2WPPY
 onedrive.live.com/download?cid=E859DA0F2C81D5F2&resid=E859DA0F2C81D5F2!142&authkey=AIS88UaD5AOm6qU
@@ -103236,7 +103138,7 @@ onlinedukkanim.net
 onlineeregistration.com
 onlineiascoaching.com
 onlineitshop.com
-onlinejohnline99.org/kvs06v.php
+onlinejohnline99.org
 onlinekushshop.com
 onlinelab.dk
 onlinelegalsoftware.com
@@ -103488,7 +103390,7 @@ orangeink-tattoo.de
 orangeltda.cl
 orangemediterranea.es
 orangeminingsupply.com.au
-orangeph.com
+orangeph.com/igvlr/g9ply_d05vm2o1-5015874/
 orangereel.co.uk
 orangeslonik.com
 oransky.org
@@ -104478,7 +104380,9 @@ parsintelligent.com
 parsrad.ir
 parsroman.ir
 part-timebusiness.org
-partage-fichiers.com
+partage-fichiers.com/upload/s85e85u4/faktura_03_08_2018.zip
+partage-fichiers.com/upload/t5lbqu65/facture_06092018.zip
+partage-fichiers.com/upload/xhfat13q/facture_14122018.zip
 partage.nelmedia.ca
 partaususd.ru
 partgohar.com
@@ -105460,6 +105364,7 @@ pastebin.com/raw/CnN5MXPE
 pastebin.com/raw/CpRUm5WW
 pastebin.com/raw/Cq2CFC4c
 pastebin.com/raw/Cq7BGE9K
+pastebin.com/raw/CqD4xFzn
 pastebin.com/raw/CqPFqgjs
 pastebin.com/raw/CrABz4NJ
 pastebin.com/raw/CsVXBrVR
@@ -109828,7 +109733,7 @@ pmiec.com
 pmil.org
 pminfocom.com
 pmionline.us
-pmjnews.com
+pmjnews.com/wp-content/pdc88/
 pmk-55.ru
 pmlsdbs.ac.in
 pmmc.ae
@@ -111141,7 +111046,7 @@ provio.nl
 provisa-centr.ru
 provisol.se
 provit.fr
-provo2.com
+provo2.com/health-fitness/wp-admin/css/colors/blue/2c.jpg
 provoke.bg
 provolt.ro
 provost.sterlingstrustbank.tk
@@ -111274,7 +111179,7 @@ psymonkee.com
 psynchro.org
 pt-gbij8sdfj8wsd0-19.s3.amazonaws.com/P19.dll
 ptb.com.mx
-ptbsda.com/wp-includes/cs4uz68285/
+ptbsda.com
 ptci-md.org
 ptdtech.tk
 pte.vn
@@ -112613,6 +112518,7 @@ ramallah.atyafco.com
 ramashrayevents.com
 ramatfactory.com.sa
 ramayanawaterpark.cn
+ramazan20gbinternet.com
 ramazanda20.site
 ramazanda20gb.xyz
 rambu.ciamiskab.go.id
@@ -113060,7 +112966,7 @@ rebelmavenmastermind.com
 rebobine.com.br
 rebomcap.eu
 reboot-hack.ru
-reboot.pro/files/download/327-vhd-xp-compact-make-mini-xp/
+reboot.pro
 reborn.arteviral.com
 reborn24.com
 reborntechnology.co.uk
@@ -113152,7 +113058,8 @@ redironmarketing.com
 redklee.com.ar
 redlinegt.com
 redlk.com
-redlogisticsmaroc.com
+redlogisticsmaroc.com/blizzy/doc/purchase.doc
+redlogisticsmaroc.com/ti/PurchaseOrder.exe
 redloop.io
 redmag.by
 redmediasigns.com
@@ -113172,7 +113079,7 @@ redsnowball.com
 redsseammgt.com
 redtek0.com
 redtv.top
-redvalidator.com/files/gift/brr.exe
+redvalidator.com
 redvelvetpatisserie.co.uk
 redwing.com.eg
 redwingdemo.dukaafrica.com
@@ -114156,7 +114063,7 @@ robpepper.co.uk
 robshop.lt
 robsitbon.net
 robustclarity.com
-robvanderwoude.com/updates/caldemo.txt
+robvanderwoude.com
 robwalls.com
 robwassotdint.ru
 robzandfitness.co.uk
@@ -114187,7 +114094,7 @@ rockmusiclives.com
 rocknebyvvs.se
 rocknrolletco.top
 rocknrolltrain.cn
-rockpointgroup.com
+rockpointgroup.com/BvyOYSzH1uz/
 rockradioni.co.uk
 rocksolidproducts.com
 rocksolidstickers.com
@@ -115379,6 +115286,7 @@ sageo2018.fr
 sagestls.com
 sageth.net
 sagiri.org
+saglikbakanligi-destek.org
 saglikbakanligi20gbinternet.com
 saglikbakanligindanhediye20gb.com
 saglikgoalapp.site
@@ -116148,7 +116056,8 @@ scandinavian-fashion.dk
 scandinavianman.designmybike.com
 scandryer.se
 scanelectric.ro
-scanliftmaskin.no
+scanliftmaskin.no/De/ODSFOXQPVE1928168/Rechnungskorrektur/DOC/
+scanliftmaskin.no/paYB-juX36_aNODsId-PqI/Inv/82509032526/US_us/Open-invoices/
 scanlisten.sunless.network
 scannableid.com
 scanthembigbots.mikeysyach.xyz
@@ -116834,6 +116743,7 @@ sendspace.com/pro/dl/vz36v3
 senehenryinc.ru
 senergysafrica.com
 seneta.cloud
+senevdekaldiyehediye.com
 senevdekaldiyehediyenet.com
 seniorbudgetsaver.com
 seniorenwoningbouwen.nl
@@ -117537,7 +117447,7 @@ sheddy.5gbfree.com
 shedevildaughterofthedaredevil.com
 shedy.5gbfree.com
 sheedle.live
-sheeni-egypt.com/grace.jpg
+sheeni-egypt.com
 sheenlandia.com
 sheeriuruba.com
 shefdomi.com
@@ -118368,7 +118278,8 @@ sisubur.xyz
 sisustussuunnittelu.fi
 sisweb.info
 sitagroup.it
-sitcomsonline.com
+sitcomsonline.com/Facture/
+sitcomsonline.com/forums/Commercial-Invoices-047X/88/
 site-2.work
 site-4.work
 site-internet-belfort.fr
@@ -118409,7 +118320,7 @@ sites.google.com/site/tammysuly/d/Comprovante.zip?attredirects=0&d=1
 sites.google.com/site/thammygkes/q/Comprovante.zip?attredirects=0&d=1
 sites.google.com/site/trojanhorse8776/crypter/Spider%20Hack%20Tools%20Plus%20v1.0%20By%20Spider%20Virus.rar?attredirects=0&d=1
 sites.google.com/site/veraooutubro343g/outonoveras/drive2.zip
-sites.ieee.org
+sites.ieee.org/sagroups-1914/files/2018/08/P1914.1-D1.1-cl_rtse_sync_2.doc
 sites.linkysoft.com
 sites.webdefy.com
 sitesbrgiga.com.br
@@ -118898,7 +118809,7 @@ sme.elearning.au.edu
 smeare.com
 smed13.inducido.com
 smedegaarden.dk
-smedia.com.au
+smedia.com.au/Open-Past-Due-Orders/
 smeets.ca
 smeetspost.nl
 smefood.com
@@ -119519,14 +119430,7 @@ sophiasuites-santorini.com
 sophiebarthelemy.fr
 sophieguaremas.com
 sophiethomasartist.com
-sophis.biz/823TGEDQNLZ/SWIFT/Personal
-sophis.biz/823TGEDQNLZ/SWIFT/Personal/
-sophis.biz/8YCOXH/PAYMENT/Commercial
-sophis.biz/8YCOXH/PAYMENT/Commercial/
-sophis.biz/LLC/EN_en/Invoice-for-s/b-08/23/2018
-sophis.biz/default/En/Available-invoices/Invoice-681672146-072418/
-sophis.biz/scan/EN_en/Outstanding-Invoices
-sophis.biz/scan/EN_en/Sales-Invoice
+sophis.biz
 sophistproduction.com
 sophro-zara.com
 sophrologie-untempspourmoi.fr
@@ -120546,7 +120450,7 @@ statewidehomesavings.com
 statexadver3552mn12.club
 static-4matic.club
 static.21.101.69.159.clients.your-server.de
-static.3001.net/upload/20140812/14078161556897.rar
+static.3001.net
 static.43.47.69.159.clients.your-server.de
 static.76.102.69.159.clients.your-server.de
 static.caregivers.blueweb.md
@@ -123941,7 +123845,7 @@ takeiteasy.live
 takeitfromtheman.com
 takemetohimalayas.com
 takenpaybd.com
-takernvandrarhem.se/Nummer.87-43634493182-05441756315.php
+takernvandrarhem.se
 takeshimiyamoto.com
 takeshykurosavabest.com
 takharandshankertour.com
@@ -124031,8 +123935,7 @@ tamoyun.web.tr
 tampacigarroller.com
 tamparoofing.com
 tampaseo.com
-tamsu.website/document4753.zip
-tamsu.website/document7806.zip
+tamsu.website
 tamsuamy.com
 tamsys.net
 tamta.gr
@@ -124937,7 +124840,7 @@ terramosa.com
 terranovaoutdoorliving.com
 terranowwa.org
 terraoferta.club
-terrapersonas.com/readme.php
+terrapersonas.com
 terrasol.cl
 terratacuara.com
 terrats.biz
@@ -125291,7 +125194,106 @@ tftt.dairyaustralia.com.au
 tfu.ae
 tfulf.host
 tfullerton.com
-tfvn.com.vn
+tfvn.com.vn/abs/tb/vt.exe
+tfvn.com.vn/acd/bo/bbb.exe
+tfvn.com.vn/ah/ca/lla.exe
+tfvn.com.vn/ah/jo/jojo.exe
+tfvn.com.vn/ah/oki/ook.exe
+tfvn.com.vn/ant/aa/sam.exe
+tfvn.com.vn/asl/wi/wz.exe
+tfvn.com.vn/byt/ne/dok.exe
+tfvn.com.vn/cad/ch/cha.exe
+tfvn.com.vn/cad/jam/ddj.exe
+tfvn.com.vn/cig/okk/ok.exe
+tfvn.com.vn/cod/arn/old.exe
+tfvn.com.vn/cod/elb/phy.exe
+tfvn.com.vn/cod/ohk/oki.exe
+tfvn.com.vn/cod/pa/papa.exe
+tfvn.com.vn/cod/pal/cha.exe
+tfvn.com.vn/dem/aj/maro.exe
+tfvn.com.vn/dem/car/doh.exe
+tfvn.com.vn/dem/cha/cha.exe
+tfvn.com.vn/dem/ini/fini.exe
+tfvn.com.vn/dem/jo/joe.exe
+tfvn.com.vn/dem/mak/nmk.exe
+tfvn.com.vn/dem/oki/mili.exe
+tfvn.com.vn/dem/pik/wata.exe
+tfvn.com.vn/dem/shr/shkc.exe
+tfvn.com.vn/dem/sta/ate.exe
+tfvn.com.vn/dem/yg/gyg.exe
+tfvn.com.vn/dkd/ar/nol.exe
+tfvn.com.vn/dkd/de/eff.exe
+tfvn.com.vn/dkd/nz/alha.exe
+tfvn.com.vn/dmi/ikk/trr.exe
+tfvn.com.vn/dom/ca/hall.jpg
+tfvn.com.vn/dom/ne/asd.exe
+tfvn.com.vn/dsg/eff/dec.exe
+tfvn.com.vn/gag/al/melz.exe
+tfvn.com.vn/gag/dec/efff.exe
+tfvn.com.vn/gag/nit/infi.exe
+tfvn.com.vn/gag/wi/twi.exe
+tfvn.com.vn/gic/ne/alhj.exe
+tfvn.com.vn/icg/ok/oki.exe
+tfvn.com.vn/images/gri/ab/abvy.exe
+tfvn.com.vn/images/gri/abt/abt.exe
+tfvn.com.vn/images/gri/dg/dgg.exe
+tfvn.com.vn/images/gri/dg/dgy.exe
+tfvn.com.vn/images/gri/mb/mbhi.exe
+tfvn.com.vn/images/gri/mb/mby.exe
+tfvn.com.vn/images/gri/mn/mnn.exe
+tfvn.com.vn/images/gri/sm/abu.exe
+tfvn.com.vn/images/gri/sm/abui.exe
+tfvn.com.vn/images/gri/sm/bu.exe
+tfvn.com.vn/images/gri/sm/bxt.exe
+tfvn.com.vn/images/gri/sm/smj.exe
+tfvn.com.vn/images/gri/sm/smy.exe
+tfvn.com.vn/images/mbt/mbtu.jpg
+tfvn.com.vn/images/note/caIZnxbbfdufUTM.exe
+tfvn.com.vn/images/note/jSJpoivY9Lxswi1.exe
+tfvn.com.vn/images/note/oUanI8KNnXWjBRJ.exe
+tfvn.com.vn/images/note/vvmBmfNEg0u2wND.exe
+tfvn.com.vn/images/ny/bhpty.exe
+tfvn.com.vn/images/ny/nas.jpg
+tfvn.com.vn/ios/po/itv.exe
+tfvn.com.vn/kogs/k/bghg.exe
+tfvn.com.vn/leg/ok/okki.exe
+tfvn.com.vn/leg/va/vass.exe
+tfvn.com.vn/lgd/fo/efo.exe
+tfvn.com.vn/med/bb/bo.exe
+tfvn.com.vn/med/la/wen.exe
+tfvn.com.vn/mid/ik/USzU1TyncZkwINP.exe
+tfvn.com.vn/mini/de/dekspro.exe
+tfvn.com.vn/ngr/ik/tbnbv.exe
+tfvn.com.vn/note/dsgb.exe
+tfvn.com.vn/note/utc.exe
+tfvn.com.vn/odi/ok/kio.exe
+tfvn.com.vn/offc/gy/ygg.exe
+tfvn.com.vn/oil/ef/dec.exe
+tfvn.com.vn/oil/ik/tbb.exe
+tfvn.com.vn/oil/sa/faf.exe
+tfvn.com.vn/oil/yg/ygg.exe
+tfvn.com.vn/onkald/arn/oldd.exe
+tfvn.com.vn/onkald/ok/oil.exe
+tfvn.com.vn/ook/fa/saam.exe
+tfvn.com.vn/ook/tv/ikv.exe
+tfvn.com.vn/otp/ti/keee.exe
+tfvn.com.vn/otp/tt/bvt.exe
+tfvn.com.vn/pbt/nnt.exe
+tfvn.com.vn/rav/oki/okk.exe
+tfvn.com.vn/rav/tb/tk.exe
+tfvn.com.vn/sss/alh/drr.exe
+tfvn.com.vn/sss/elb/pioh.exe
+tfvn.com.vn/sss/fad/zic.exe
+tfvn.com.vn/sss/nezl/nano.exe
+tfvn.com.vn/sss/wzi/star.exe
+tfvn.com.vn/tia/wir/twi.exe
+tfvn.com.vn/tmy/jam/dj.exe
+tfvn.com.vn/tyk/bt/kik.exe
+tfvn.com.vn/tyk/ja/chi.exe
+tfvn.com.vn/vin/ik/ikko.exe
+tfvn.com.vn/vin/sa/sam.exe
+tfvn.com.vn/vio/effo/jus.jpg
+tfvn.com.vn/wed/mak/mac.exe
 tgbabcrfv.1apps.com
 tgbot.cf
 tgcool.gq
@@ -125694,19 +125696,7 @@ theinspiredblogger.com
 theinspireddrive.com
 theintelligencer.com.ng
 theinvestmentinvestigator.com
-theipgenerators.com/0.msi
-theipgenerators.com/Adobe.exe
-theipgenerators.com/App.exe
-theipgenerators.com/INVOICE.exe
-theipgenerators.com/Orders.exe
-theipgenerators.com/PC.exe
-theipgenerators.com/POS.exe
-theipgenerators.com/apps.exe
-theipgenerators.com/dwm.exe
-theipgenerators.com/smss.exe
-theipgenerators.com/svchost.exe
-theipgenerators.com/winlogon.exe
-theipgenerators.com/winlogonn.exe
+theipgenerators.com
 theirishhouse.dk
 theiro.com
 theisel.de
@@ -128029,7 +128019,7 @@ tuvandauthau.net
 tuvandoanhnghiep.org
 tuvanduhocdaiviet.com.vn
 tuvanduhocduc.org
-tuvanduhocmap.com/wp-includes/invoice/
+tuvanduhocmap.com
 tuvangamenet.com
 tuvangioitinh.com
 tuvanluat.vn
@@ -128173,7 +128163,82 @@ u.cubeupload.com/eZ3vpT.jpg
 u.cubeupload.com/gmEtap.jpg
 u.jimdo.com
 u.lewd.se
-u.teknik.io
+u.teknik.io/0AJTD.txt
+u.teknik.io/0ZCZx.jpg
+u.teknik.io/0td13.jpg
+u.teknik.io/2e6lT.jpg
+u.teknik.io/4z0cu.jpg
+u.teknik.io/7Ignk.png
+u.teknik.io/7J2EV.img
+u.teknik.io/7LqNF.jpg
+u.teknik.io/7l8J2.jpg
+u.teknik.io/7spex.hta
+u.teknik.io/8BT3w.hta
+u.teknik.io/8X3Y7.hta
+u.teknik.io/97Osu.jpg
+u.teknik.io/9pVSs.jpg
+u.teknik.io/Bn0WR.jpeg
+u.teknik.io/C3bY8.jpg
+u.teknik.io/C3eXk.txt
+u.teknik.io/Ciyqm.jpg
+u.teknik.io/Ec5rt.hta
+u.teknik.io/EuIZ8.txt
+u.teknik.io/FM1U5.hta
+u.teknik.io/FY2LB.jpg
+u.teknik.io/Fg15A.jpg
+u.teknik.io/FhGNg.jpg
+u.teknik.io/HEtkv.jpg
+u.teknik.io/Hssip.jpg
+u.teknik.io/JF4dW.png
+u.teknik.io/JQixh.txt
+u.teknik.io/KwabJ.hta
+u.teknik.io/MeBDb.jpg
+u.teknik.io/MpK9X.jpg
+u.teknik.io/NGwO0.jpg
+u.teknik.io/O58NP.jpg
+u.teknik.io/OLTNk.bin
+u.teknik.io/PmM6z.txt
+u.teknik.io/RuMP7.hta
+u.teknik.io/Rwg4P.jpg
+u.teknik.io/SI7PR.png
+u.teknik.io/T2Wfx.hta
+u.teknik.io/V9wPq.jpg
+u.teknik.io/VLXsm.hta
+u.teknik.io/VdpsU.jpg
+u.teknik.io/Vrfgd.hta
+u.teknik.io/Y4MZG.jpg
+u.teknik.io/Y8f6S.jpg
+u.teknik.io/ZhkMI.hta
+u.teknik.io/aGryy.hta
+u.teknik.io/bCC2b.jpg
+u.teknik.io/bZJal.jpg
+u.teknik.io/bybag.hta
+u.teknik.io/c0jmS.jpg
+u.teknik.io/dvdd1.txt
+u.teknik.io/g7H1X.txt
+u.teknik.io/gnLgU.txt
+u.teknik.io/hd39E.jpg
+u.teknik.io/hgs14.jpg
+u.teknik.io/hihc5.scr
+u.teknik.io/iE9f7.jpg
+u.teknik.io/iVKDk.txt
+u.teknik.io/ioAzA.hta
+u.teknik.io/jvvyJ.jpg
+u.teknik.io/jxPU8.txt
+u.teknik.io/kqXHz.jpg
+u.teknik.io/m9tCz.jpg
+u.teknik.io/n42bg.exe
+u.teknik.io/nDjGJ.png
+u.teknik.io/nmv27.hta
+u.teknik.io/sKXEW.exe
+u.teknik.io/sYEYi.jpg
+u.teknik.io/syuvl.doc
+u.teknik.io/ttlyI.jpg
+u.teknik.io/uKY9l.hta
+u.teknik.io/wEfXg.txt
+u.teknik.io/x907w.txt
+u.teknik.io/zfjr0.jpg
+u.teknik.io:443/n42bg.exe
 u0005132m0005jp.u023jp9938.info
 u0039435.cp.regruhosting.ru
 u0287442.isp.regruhosting.ru
@@ -129138,6 +129203,7 @@ up.oxvkeq.co
 up.qatarw.com
 up.vltk1ctc.com
 up2m.politanisamarinda.ac.id
+up4net.com
 up9.co.99.com
 upa1.hognoob.se
 upa2.hognoob.se
@@ -129389,7 +129455,7 @@ url.emailprotection.link/?bcp_LQdELwbKhxKToIznR8rOuhtt9W4qlFovFOxc0z5zmN6k8ji5zi
 url.emailprotection.link/?bgmviCpuhO15c9_q9HIofgnmKACO0q_lUjjCaeOwkfIK_HDtt1UqmBKpoVHxYkckgjOQoYTV_U0G2UMKhd4MBI9Ms8vO3Vliq2ClOuUAa6nO2a7Ij5lJFsouoEEMeMVmI/
 url.emailprotection.link/?biZyxbw1FdaGSfCC1n6EP1AwPdX9DR0BrNJjqWgYAOFpW98LiMviIPVrszjnZzLUCLpEqqdYWFxWNwUDvWRLjcUFuhL2_nHA0Bs8Wz9JmbaHccIIKBseLJEWayzbE_cnD/
 url.sg
-url2.mailanyone.net
+url2.mailanyone.net/v1/?m=1hIbcm-0003zV-63&i=57e1b682&c=sb1BLj46bK32u6f729r5T_SLVKX-hEeWXh20_zDn9-3kTcC0-kN35FykIlpydgeYVRBWqWb5H__fK383wTDaKQftjlElxZ06jbAGlRi5jmUjnYDjKaSqXwdTG2Hn-_BE1DzRnThVvhiGYHM_TVBeW342habp8DtiT9jjlIEUc2X-IPGDGiPe7y_c9jhe69532GmnXozB5wiFJfBSTZiCAgMtPg6YXMrEAF0sq2DgO-kSY54HetFhN6GwM4kIw2VvCQx17a9bM6yKN8BWpWDJwg/
 url3.mailanyone.net
 url5459.41southbar.com
 url9823.ville.labrecque.qc.ca
@@ -130622,7 +130688,7 @@ vip-rocket.net
 vip-watch.store
 vip.lijinxi.com
 vip.maohuagong.com
-vip.muabannhanh.com/wp-admin/FILE/mkg7rmymjr_ibrls0nrj-411618777016/
+vip.muabannhanh.com
 vip.recommendedtoyoo.com
 vip.zbfcxx.cn
 vip163.cf
@@ -131670,11 +131736,7 @@ web.ismt.pt
 web.mit.edu/kolya/.f/root/net.mit.edu/net/user/chris/WinNT/MIT_Agenda2a.doc
 web.mit.edu/kolya/.f/root/net.mit.edu/sipb/user/kolya/afs/root.afs/net/user/chris/WinNT/MIT_Agenda2a.doc
 web.muasam360.com
-web.opendrive.com/api/v1/download/file.json/MTBfOTc2Mzk3NDNf?inline=0
-web.opendrive.com/api/v1/download/file.json/MjBfNTg5OTkzNl8?inline=1
-web.opendrive.com/api/v1/download/file.json/NzNfMTUyMjE5OTdf?inline=0
-web.opendrive.com/api/v1/download/file.json/OTBfMTcwNDM3ODRf?inline=0
-web.opendrive.com/api/v1/download/file.json/OTlfMTY1MDczODRf?inline=0
+web.opendrive.com
 web.pa-cirebon.go.id
 web.plf.vn
 web.riderit.com
@@ -132411,7 +132473,7 @@ win.tue.nl
 win1more.com
 win32.x10host.com
 winactive.host
-winandgo-dz.com
+winandgo-dz.com/sec.bin
 winapp24.pl
 winast.com
 winbacklostlove.com
@@ -132618,7 +132680,8 @@ wmdcustoms.com
 wmebbiz.co.za
 wmf.desevens.com.ng
 wmg128.com
-wmi.1217bye.host
+wmi.1217bye.host/1.txt
+wmi.1217bye.host/2.txt
 wmi.4i7i.com/11.exe
 wmkatz.com
 wmo-raad.inov.me
@@ -132720,7 +132783,7 @@ woodmeister.nl
 woodmillcreek.com
 woodnbitz.com
 woodofkosta.com
-woodsiam.com
+woodsiam.com/update.php
 woodstocktimbers.com
 woodstoneltd.com
 woodsytech.com
@@ -133220,7 +133283,7 @@ wz-architekten.de
 wz6.com.cn
 wzgysg.com
 wzjp.boyuberq.ru
-wzlegal.com/wp-content/themes/bridge/vc_templates/msg.jpg
+wzlegal.com
 wzry173.com
 wzrysp.com
 wzsfkq.dm.files.1drv.com
@@ -133411,10 +133474,7 @@ xinblasta.us
 xinchao.asia
 xindetrading.000webhostapp.com
 xing.monerov9.com
-xingyang-glove.com/GTppMtRhzMYUcA6.exe
-xingyang-glove.com/NbJ6CxcNnNZzHQg.exe
-xingyang-glove.com/new/8YhGxwHDPBnpgVD.exe
-xingyang-glove.com/new/fBK9fBjAuvHAour.exe
+xingyang-glove.com
 xingyiqinhang.com
 xinhkorea.com
 xinlou.info
@@ -135324,7 +135384,7 @@ zsz-spb.ru
 ztarx.com/AAkJtNm
 ztarx.com/AAkJtNm/
 ztbearing68.com
-ztds.online/20190118/multishare.exe
+ztds.online
 ztds2.online
 zteandroid.com
 ztecom.cn