diff --git a/src/URLhaus.csv b/src/URLhaus.csv
index f81887a6..f4bee5e7 100644
--- a/src/URLhaus.csv
+++ b/src/URLhaus.csv
@@ -1,16 +1,37 @@
 ################################################################
 # abuse.ch URLhaus Database Dump (CSV)                         #
-# Last updated: 2018-11-18 09:31:05 (UTC)                      #
+# Last updated: 2018-11-18 18:10:02 (UTC)                      #
 #                                                              #
 # Terms Of Use: https://urlhaus.abuse.ch/api/                  #
 # For questions please contact urlhaus [at] abuse.ch           #
 ################################################################
 #
 # id,dateadded,url,url_status,threat,tags,urlhaus_link
-"81930","2018-11-18 09:31:05","http://www.soveregnshipping.com/tolds/new.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/81930/"
-"81929","2018-11-18 09:31:03","http://www.soveregnshipping.com/tdfs/hawk.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/81929/"
-"81928","2018-11-18 09:17:04","http://www.soveregnshipping.com/dd/ugo.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/81928/"
-"81927","2018-11-18 09:17:03","http://www.soveregnshipping.com/dd/hawk.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/81927/"
+"81951","2018-11-18 18:10:02","http://92.63.197.48/crb.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/81951/"
+"81950","2018-11-18 17:18:10","http://ghost246630.worldhosts.ru/GEWJYXFBEW.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/81950/"
+"81949","2018-11-18 17:18:06","http://ghost246630.worldhosts.ru/kwhvepeuou.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/81949/"
+"81946","2018-11-18 16:48:06","http://89.46.79.57/rbot.arm5","online","malware_download","elf","https://urlhaus.abuse.ch/url/81946/"
+"81947","2018-11-18 16:48:06","http://89.46.79.57/rbot.arm6","online","malware_download","elf","https://urlhaus.abuse.ch/url/81947/"
+"81948","2018-11-18 16:48:06","http://89.46.79.57/rbot.arm7","online","malware_download","elf","https://urlhaus.abuse.ch/url/81948/"
+"81944","2018-11-18 16:48:05","http://89.46.79.57/rbot.i686","online","malware_download","elf","https://urlhaus.abuse.ch/url/81944/"
+"81945","2018-11-18 16:48:05","http://89.46.79.57/rbot.x64","online","malware_download","elf","https://urlhaus.abuse.ch/url/81945/"
+"81943","2018-11-18 16:48:04","http://rucop.ru/java.dat","online","malware_download","exe","https://urlhaus.abuse.ch/url/81943/"
+"81942","2018-11-18 16:46:01","http://92.63.197.48/m/o.exe","offline","malware_download","exe,GandCrab,Ransomware,Ransomware.GandCrab","https://urlhaus.abuse.ch/url/81942/"
+"81941","2018-11-18 16:45:03","http://kharkiv.biz.ua/hPpD/","online","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/81941/"
+"81940","2018-11-18 15:48:03","http://88.249.120.216:48942/.i","online","malware_download","elf","https://urlhaus.abuse.ch/url/81940/"
+"81939","2018-11-18 14:38:03","https://sairetail.com/wp/","offline","malware_download","None","https://urlhaus.abuse.ch/url/81939/"
+"81938","2018-11-18 14:22:03","http://5.79.106.222/bins/hoho.ppc","online","malware_download","elf","https://urlhaus.abuse.ch/url/81938/"
+"81937","2018-11-18 14:22:02","http://5.79.106.222/bins/hoho.mips","online","malware_download","elf","https://urlhaus.abuse.ch/url/81937/"
+"81936","2018-11-18 14:14:02","http://5.79.106.222/bins/hoho.m68k","online","malware_download","elf","https://urlhaus.abuse.ch/url/81936/"
+"81935","2018-11-18 14:13:03","http://5.79.106.222/bins/hoho.arm6","online","malware_download","elf","https://urlhaus.abuse.ch/url/81935/"
+"81934","2018-11-18 14:13:02","http://5.79.106.222/bins/hoho.sh4","online","malware_download","elf","https://urlhaus.abuse.ch/url/81934/"
+"81933","2018-11-18 13:23:02","http://5.79.106.222/bins/hoho.x86","online","malware_download","elf","https://urlhaus.abuse.ch/url/81933/"
+"81932","2018-11-18 12:46:05","http://docs.herobo.com/mr/z.txt","online","malware_download","opendir,vbs","https://urlhaus.abuse.ch/url/81932/"
+"81931","2018-11-18 12:46:02","https://files.catbox.moe/9u2fpa.vbs","offline","malware_download","opendir,vbs","https://urlhaus.abuse.ch/url/81931/"
+"81930","2018-11-18 09:31:05","http://www.soveregnshipping.com/tolds/new.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/81930/"
+"81929","2018-11-18 09:31:03","http://www.soveregnshipping.com/tdfs/hawk.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/81929/"
+"81928","2018-11-18 09:17:04","http://www.soveregnshipping.com/dd/ugo.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/81928/"
+"81927","2018-11-18 09:17:03","http://www.soveregnshipping.com/dd/hawk.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/81927/"
 "81926","2018-11-18 08:41:02","http://92.63.197.60/crabin.exe?NSIjJOd","offline","malware_download","exe,GandCrab,Ransomware","https://urlhaus.abuse.ch/url/81926/"
 "81925","2018-11-18 08:32:09","http://interraniternational.com/docfle/dhl.exe","online","malware_download","None","https://urlhaus.abuse.ch/url/81925/"
 "81924","2018-11-18 08:32:06","https://e.coka.la/pULBnh.jpg","online","malware_download","RemcosRAT","https://urlhaus.abuse.ch/url/81924/"
@@ -19,11 +40,11 @@
 "81921","2018-11-18 07:39:02","http://212.237.58.51/nvitpj","online","malware_download","elf","https://urlhaus.abuse.ch/url/81921/"
 "81920","2018-11-18 07:38:04","http://5.79.106.222/sh4","offline","malware_download","elf","https://urlhaus.abuse.ch/url/81920/"
 "81918","2018-11-18 07:38:03","http://212.237.58.51/vvglma","online","malware_download","elf","https://urlhaus.abuse.ch/url/81918/"
-"81919","2018-11-18 07:38:03","http://95.179.231.176/bins/kwari.mips","online","malware_download","elf","https://urlhaus.abuse.ch/url/81919/"
+"81919","2018-11-18 07:38:03","http://95.179.231.176/bins/kwari.mips","offline","malware_download","elf","https://urlhaus.abuse.ch/url/81919/"
 "81917","2018-11-18 07:38:02","http://212.237.58.51/atxhua","online","malware_download","elf","https://urlhaus.abuse.ch/url/81917/"
 "81916","2018-11-18 07:37:04","http://194.36.173.228/vi/mips.bushido","online","malware_download","elf","https://urlhaus.abuse.ch/url/81916/"
 "81915","2018-11-18 07:37:03","http://178.128.122.4/ankit/jno.sh4","online","malware_download","elf","https://urlhaus.abuse.ch/url/81915/"
-"81914","2018-11-18 07:37:02","http://95.179.231.176/bins/kwari.x86","online","malware_download","elf","https://urlhaus.abuse.ch/url/81914/"
+"81914","2018-11-18 07:37:02","http://95.179.231.176/bins/kwari.x86","offline","malware_download","elf","https://urlhaus.abuse.ch/url/81914/"
 "81913","2018-11-18 07:36:04","http://212.237.58.51/fwdfvf","online","malware_download","elf","https://urlhaus.abuse.ch/url/81913/"
 "81912","2018-11-18 07:36:03","http://178.128.122.4/ankit/jno.mpsl","online","malware_download","elf","https://urlhaus.abuse.ch/url/81912/"
 "81911","2018-11-18 07:35:06","http://199.19.225.161/tftp","online","malware_download","elf","https://urlhaus.abuse.ch/url/81911/"
@@ -45,7 +66,7 @@
 "81895","2018-11-18 07:31:02","http://212.237.58.51/ZeZe.arm","online","malware_download","elf","https://urlhaus.abuse.ch/url/81895/"
 "81894","2018-11-18 07:30:03","http://212.237.58.51/ZeZe.i586","online","malware_download","elf","https://urlhaus.abuse.ch/url/81894/"
 "81893","2018-11-18 07:19:02","http://212.237.58.51/lnkfmx","online","malware_download","elf","https://urlhaus.abuse.ch/url/81893/"
-"81892","2018-11-18 07:19:02","http://95.179.231.176/bins/kwari.m68k","online","malware_download","elf","https://urlhaus.abuse.ch/url/81892/"
+"81892","2018-11-18 07:19:02","http://95.179.231.176/bins/kwari.m68k","offline","malware_download","elf","https://urlhaus.abuse.ch/url/81892/"
 "81891","2018-11-18 07:18:05","http://194.36.173.228/vi/arm5.bushido","online","malware_download","elf","https://urlhaus.abuse.ch/url/81891/"
 "81890","2018-11-18 07:18:04","http://194.36.173.228/vi/arm7.bushido","online","malware_download","elf","https://urlhaus.abuse.ch/url/81890/"
 "81889","2018-11-18 07:18:03","http://194.36.173.228/vi/arm6.bushido","online","malware_download","elf","https://urlhaus.abuse.ch/url/81889/"
@@ -58,9 +79,9 @@
 "81882","2018-11-18 07:15:04","http://46.101.109.160/3MaF4G/shinto.ppc","online","malware_download","elf","https://urlhaus.abuse.ch/url/81882/"
 "81881","2018-11-18 07:15:03","http://199.19.225.161/wget","online","malware_download","elf","https://urlhaus.abuse.ch/url/81881/"
 "81879","2018-11-18 07:14:05","http://199.19.225.161/apache2","online","malware_download","elf","https://urlhaus.abuse.ch/url/81879/"
-"81880","2018-11-18 07:14:05","http://95.179.231.176/bins/kwari.mpsl","online","malware_download","elf","https://urlhaus.abuse.ch/url/81880/"
+"81880","2018-11-18 07:14:05","http://95.179.231.176/bins/kwari.mpsl","offline","malware_download","elf","https://urlhaus.abuse.ch/url/81880/"
 "81878","2018-11-18 07:14:03","http://194.36.173.228/vi/ppc.bushido","online","malware_download","elf","https://urlhaus.abuse.ch/url/81878/"
-"81877","2018-11-18 07:14:02","http://95.179.231.176/bins/kwari.sh4","online","malware_download","elf","https://urlhaus.abuse.ch/url/81877/"
+"81877","2018-11-18 07:14:02","http://95.179.231.176/bins/kwari.sh4","offline","malware_download","elf","https://urlhaus.abuse.ch/url/81877/"
 "81876","2018-11-18 07:13:05","http://46.101.109.160/3MaF4G/shinto.arm6","online","malware_download","elf","https://urlhaus.abuse.ch/url/81876/"
 "81875","2018-11-18 07:13:04","http://199.19.225.161/bash","online","malware_download","elf","https://urlhaus.abuse.ch/url/81875/"
 "81874","2018-11-18 07:13:03","http://199.19.225.161/sh","online","malware_download","elf","https://urlhaus.abuse.ch/url/81874/"
@@ -78,8 +99,8 @@
 "81862","2018-11-18 07:09:05","http://194.36.173.228/vi/x86.bushido","online","malware_download","elf","https://urlhaus.abuse.ch/url/81862/"
 "81861","2018-11-18 07:09:03","http://199.19.225.161/nut","online","malware_download","elf","https://urlhaus.abuse.ch/url/81861/"
 "81860","2018-11-18 07:08:05","http://178.128.122.4/ankit/jno.mips","online","malware_download","elf","https://urlhaus.abuse.ch/url/81860/"
-"81859","2018-11-18 07:08:03","http://95.179.231.176/bins/kwari.arm7","online","malware_download","elf","https://urlhaus.abuse.ch/url/81859/"
-"81858","2018-11-18 07:08:02","http://95.179.231.176/bins/kwari.ppc","online","malware_download","elf","https://urlhaus.abuse.ch/url/81858/"
+"81859","2018-11-18 07:08:03","http://95.179.231.176/bins/kwari.arm7","offline","malware_download","elf","https://urlhaus.abuse.ch/url/81859/"
+"81858","2018-11-18 07:08:02","http://95.179.231.176/bins/kwari.ppc","offline","malware_download","elf","https://urlhaus.abuse.ch/url/81858/"
 "81857","2018-11-18 06:59:02","http://212.237.58.51/ZeZe.x86","online","malware_download","elf","https://urlhaus.abuse.ch/url/81857/"
 "81856","2018-11-18 06:58:04","http://80.211.86.86/AB4g5/Josho.x86","online","malware_download","elf","https://urlhaus.abuse.ch/url/81856/"
 "81855","2018-11-18 06:58:03","http://212.237.58.51/ZeZe.mpsl","online","malware_download","elf","https://urlhaus.abuse.ch/url/81855/"
@@ -111,7 +132,7 @@
 "81829","2018-11-17 19:43:06","http://cb1d30efad.pw/algo/Adobe/x64v8/data.dat","offline","malware_download","exe","https://urlhaus.abuse.ch/url/81829/"
 "81828","2018-11-17 19:43:05","http://cb1d30efad.pw/algo/Adobe/chek.dat","offline","malware_download","exe","https://urlhaus.abuse.ch/url/81828/"
 "81827","2018-11-17 19:43:04","http://cb1d30efad.pw/algo/Adobe/x86v8/x.dat","offline","malware_download","exe","https://urlhaus.abuse.ch/url/81827/"
-"81826","2018-11-17 19:43:03","http://1200447.ru/azor.exe","online","malware_download","AZORult,exe","https://urlhaus.abuse.ch/url/81826/"
+"81826","2018-11-17 19:43:03","http://1200447.ru/azor.exe","offline","malware_download","AZORult,exe","https://urlhaus.abuse.ch/url/81826/"
 "81825","2018-11-17 18:24:04","http://177.139.177.37:49901/.i","online","malware_download","elf","https://urlhaus.abuse.ch/url/81825/"
 "81824","2018-11-17 18:17:03","http://canoninstant.com/LOVER/fairdoc.exe","online","malware_download","exe,Formbook","https://urlhaus.abuse.ch/url/81824/"
 "81823","2018-11-17 17:50:12","http://canhoquan8.com.vn/invoices/Download/EN_en/Question/","online","malware_download","None","https://urlhaus.abuse.ch/url/81823/"
@@ -126,7 +147,7 @@
 "81814","2018-11-17 13:36:05","http://lootototic.com/YER/files/marb10.wos","online","malware_download","exe,Gozi","https://urlhaus.abuse.ch/url/81814/"
 "81813","2018-11-17 13:36:04","http://lootototic.com/YER/files/marb3.wos","online","malware_download","exe,Gozi","https://urlhaus.abuse.ch/url/81813/"
 "81812","2018-11-17 11:51:04","http://e.coka.la/rVo3c0","online","malware_download","exe,rtfkit","https://urlhaus.abuse.ch/url/81812/"
-"81811","2018-11-17 11:51:02","https://pasteboard.co/images/HMTQPDK.jpg/download","online","malware_download","exe,rtfkit","https://urlhaus.abuse.ch/url/81811/"
+"81811","2018-11-17 11:51:02","https://pasteboard.co/images/HMTQPDK.jpg/download","offline","malware_download","exe,rtfkit","https://urlhaus.abuse.ch/url/81811/"
 "81810","2018-11-17 11:31:03","http://mnahel.com/fonts/ota/bin.exe","online","malware_download","NetWire","https://urlhaus.abuse.ch/url/81810/"
 "81809","2018-11-17 09:47:07","http://209.141.33.126/idinahui/plexcoo.x86","offline","malware_download","elf","https://urlhaus.abuse.ch/url/81809/"
 "81808","2018-11-17 09:47:06","http://114.32.242.135:44004/.i","online","malware_download","elf","https://urlhaus.abuse.ch/url/81808/"
@@ -167,7 +188,7 @@
 "81773","2018-11-17 06:37:03","http://104.161.40.195/s443ls","online","malware_download","elf","https://urlhaus.abuse.ch/url/81773/"
 "81772","2018-11-17 02:42:03","http://3.120.153.6/uji.msi","online","malware_download","msi","https://urlhaus.abuse.ch/url/81772/"
 "81771","2018-11-17 02:23:16","http://182.16.29.107:3721/Linux-arm","offline","malware_download","elf","https://urlhaus.abuse.ch/url/81771/"
-"81770","2018-11-17 02:22:04","http://194.147.32.132/Network.mips","online","malware_download","elf","https://urlhaus.abuse.ch/url/81770/"
+"81770","2018-11-17 02:22:04","http://194.147.32.132/Network.mips","offline","malware_download","elf","https://urlhaus.abuse.ch/url/81770/"
 "81769","2018-11-17 02:22:03","http://185.205.210.160/bins/hoho.mpsl","offline","malware_download","elf","https://urlhaus.abuse.ch/url/81769/"
 "81768","2018-11-17 02:22:02","http://194.147.32.132/Network.m68k","online","malware_download","elf","https://urlhaus.abuse.ch/url/81768/"
 "81766","2018-11-17 02:21:03","http://185.205.210.160/bins/hoho.m68k","offline","malware_download","elf","https://urlhaus.abuse.ch/url/81766/"
@@ -180,17 +201,17 @@
 "81760","2018-11-17 02:19:03","http://185.205.210.160/bins/hoho.mips","offline","malware_download","elf","https://urlhaus.abuse.ch/url/81760/"
 "81758","2018-11-17 02:19:02","http://185.205.210.160/bins/hoho.arm","offline","malware_download","elf","https://urlhaus.abuse.ch/url/81758/"
 "81759","2018-11-17 02:19:02","http://185.205.210.160/bins/hoho.x86","offline","malware_download","elf","https://urlhaus.abuse.ch/url/81759/"
-"81757","2018-11-17 02:04:02","http://scan.getrektlol.xyz/bins/gemini.ppc","online","malware_download","elf","https://urlhaus.abuse.ch/url/81757/"
-"81756","2018-11-17 02:03:04","http://scan.getrektlol.xyz/bins/gemini.mpsl","online","malware_download","elf","https://urlhaus.abuse.ch/url/81756/"
-"81755","2018-11-17 02:03:03","http://scan.getrektlol.xyz/bins/gemini.spc","online","malware_download","elf","https://urlhaus.abuse.ch/url/81755/"
+"81757","2018-11-17 02:04:02","http://scan.getrektlol.xyz/bins/gemini.ppc","offline","malware_download","elf","https://urlhaus.abuse.ch/url/81757/"
+"81756","2018-11-17 02:03:04","http://scan.getrektlol.xyz/bins/gemini.mpsl","offline","malware_download","elf","https://urlhaus.abuse.ch/url/81756/"
+"81755","2018-11-17 02:03:03","http://scan.getrektlol.xyz/bins/gemini.spc","offline","malware_download","elf","https://urlhaus.abuse.ch/url/81755/"
 "81754","2018-11-17 02:03:03","http://scan.getrektlol.xyz/bins/gemini.x86_32","offline","malware_download","elf","https://urlhaus.abuse.ch/url/81754/"
-"81753","2018-11-17 02:03:02","http://scan.getrektlol.xyz/bins/gemini.mips","online","malware_download","elf","https://urlhaus.abuse.ch/url/81753/"
+"81753","2018-11-17 02:03:02","http://scan.getrektlol.xyz/bins/gemini.mips","offline","malware_download","elf","https://urlhaus.abuse.ch/url/81753/"
 "81752","2018-11-17 02:02:04","http://86.34.66.189:65333/.i","online","malware_download","elf","https://urlhaus.abuse.ch/url/81752/"
-"81751","2018-11-17 02:01:11","http://scan.getrektlol.xyz/bins/gemini.x86","online","malware_download","elf","https://urlhaus.abuse.ch/url/81751/"
+"81751","2018-11-17 02:01:11","http://scan.getrektlol.xyz/bins/gemini.x86","offline","malware_download","elf","https://urlhaus.abuse.ch/url/81751/"
 "81750","2018-11-17 02:01:10","http://59.47.72.34:8080/lpker-ud","online","malware_download","elf","https://urlhaus.abuse.ch/url/81750/"
 "81749","2018-11-17 02:01:03","http://hacerul1.do.am/client-2-.noext","online","malware_download","elf","https://urlhaus.abuse.ch/url/81749/"
-"81748","2018-11-17 01:55:03","http://scan.getrektlol.xyz/bins/gemini.arm","online","malware_download","elf","https://urlhaus.abuse.ch/url/81748/"
-"81747","2018-11-17 01:55:02","http://scan.getrektlol.xyz/bins/gemini.sh4","online","malware_download","elf","https://urlhaus.abuse.ch/url/81747/"
+"81748","2018-11-17 01:55:03","http://scan.getrektlol.xyz/bins/gemini.arm","offline","malware_download","elf","https://urlhaus.abuse.ch/url/81748/"
+"81747","2018-11-17 01:55:02","http://scan.getrektlol.xyz/bins/gemini.sh4","offline","malware_download","elf","https://urlhaus.abuse.ch/url/81747/"
 "81746","2018-11-17 01:49:03","http://e.coka.la/MsKijK.JPG","online","malware_download","exe,Pony","https://urlhaus.abuse.ch/url/81746/"
 "81745","2018-11-17 00:53:07","http://thucphamdouong.com/En_us/Transactions/112018","offline","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/81745/"
 "81744","2018-11-17 00:53:05","http://peconashville.com/US/Documents/112018/","offline","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/81744/"
@@ -271,10 +292,10 @@
 "81668","2018-11-16 16:48:14","http://fd.laomaotao.org/lmt/p/lmt_18118.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/81668/"
 "81667","2018-11-16 16:34:03","https://uc263ce43fb3ee26c2bf0ebf52c4.dl.dropboxusercontent.com/cd/0/get/AVtFOz1KdprTSuMaF2wEFj5XEygciWW2qInxooo8nXHOv8hPUw879UCUZ3tmSTCzgmqhAoKN6rQbix2QxXArCX7drD9ZpecdMGB8FiddfPnogXs2x4SudiKyU3VoGWgx5FFSdVkPNhZecq4NoGhmptKyfIKouUojQdiNBIS3TkskZTBuUO_qxGYWzmypQH3EXAA/file?dl=1","offline","malware_download","rar","https://urlhaus.abuse.ch/url/81667/"
 "81666","2018-11-16 16:33:04","http://www.dropbox.com/s/scb0rjn5fkjdz07/finalconfirmedOrder.pdf.z?dl=1","online","malware_download","rar","https://urlhaus.abuse.ch/url/81666/"
-"81665","2018-11-16 16:11:03","http://pioneerfitting.com/images/ftp/oke001.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/81665/"
-"81664","2018-11-16 15:38:10","https://claudinemogg.com/serverbin.jpg","online","malware_download","exe","https://urlhaus.abuse.ch/url/81664/"
+"81665","2018-11-16 16:11:03","http://pioneerfitting.com/images/ftp/oke001.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/81665/"
+"81664","2018-11-16 15:38:10","https://claudinemogg.com/serverbin.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/81664/"
 "81663","2018-11-16 15:17:07","http://kcQqJGTK6guBn1vf.nappybusyspark.club/files/kcQqJGTK6guBn1vf/taxator_4000.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/81663/"
-"81662","2018-11-16 15:16:38","http://pioneerfitting.com/images/ftp/oda001.exe","online","malware_download","AZORult,exe","https://urlhaus.abuse.ch/url/81662/"
+"81662","2018-11-16 15:16:38","http://pioneerfitting.com/images/ftp/oda001.exe","offline","malware_download","AZORult,exe","https://urlhaus.abuse.ch/url/81662/"
 "81661","2018-11-16 15:16:35","http://dishsouq.com/wp-admin/css/colors/blue/sserv.jpg","online","malware_download","exe,Ransomware,Troldesh","https://urlhaus.abuse.ch/url/81661/"
 "81660","2018-11-16 15:16:34","http://whoshouldbepresident.com/wp-content/themes/point/css/sserv.jpg","offline","malware_download","exe,Ransomware,Troldesh","https://urlhaus.abuse.ch/url/81660/"
 "81659","2018-11-16 15:16:29","http://185.120.144.147/tes2t","offline","malware_download","exe","https://urlhaus.abuse.ch/url/81659/"
@@ -320,7 +341,7 @@
 "81619","2018-11-16 12:47:03","http://e.coka.la/dOcsV4.jpg","online","malware_download","exe","https://urlhaus.abuse.ch/url/81619/"
 "81618","2018-11-16 12:46:07","https://uc209909e73de16edee5524b4a0c.dl.dropboxusercontent.com/cd/0/get/AVtXj8FhYaaMJnBGkAuYysI4w-XYxponwcAIKm8ozVk-q5syVgTcEl07LdXSMTMVpYrcBEJTm37Tzf7k7ZoL8sutS0bvod-p12xzXcazoyzghEOvoGwre3itm4L9jGjrQj6CQP0M1esJ5LCmP0ybJvcdLmx2vibmeKYa2yOzxnRJWVH1gBG576R4PM9tr8HIWfM/file?dl=1","offline","malware_download","zip","https://urlhaus.abuse.ch/url/81618/"
 "81617","2018-11-16 12:46:05","http://www.phpsystems.ca/DVStore_v5.3.3/setup/cl/Factura_Electronica_SII.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/81617/"
-"81616","2018-11-16 12:46:04","http://www.phpsystems.ca/DVStore_v5.3.3/setup/cl/Doc_Sii.php","online","malware_download","zip","https://urlhaus.abuse.ch/url/81616/"
+"81616","2018-11-16 12:46:04","http://www.phpsystems.ca/DVStore_v5.3.3/setup/cl/Doc_Sii.php","offline","malware_download","zip","https://urlhaus.abuse.ch/url/81616/"
 "81615","2018-11-16 12:06:06","http://faturamentocontabil.com/faturamento?get-facebook-verified/get-facebook-verified.html","online","malware_download","zip","https://urlhaus.abuse.ch/url/81615/"
 "81614","2018-11-16 12:00:33","http://lootototic.com/YER/pelim.php?l=marb13.wos","online","malware_download","exe,Gozi","https://urlhaus.abuse.ch/url/81614/"
 "81613","2018-11-16 12:00:32","http://lootototic.com/YER/pelim.php?l=marb12.wos","online","malware_download","exe,Gozi","https://urlhaus.abuse.ch/url/81613/"
@@ -344,10 +365,10 @@
 "81582","2018-11-16 10:12:04","http://apoolcondo.com/images/docx.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/81582/"
 "81581","2018-11-16 09:52:03","https://uc7b68708936df83bdea04d637e2.dl.dropboxusercontent.com/cd/0/get/AVtRsaYbyuD8psbmRvgudvQpR-VU3S8_Yzz8zS2Zbzqwh8e480eHvmXD0SeIHr-DGgFnlYwiMNqudb_9greSiwercl3iVZYJthw_B6q8ljxuSjFuqU7qqoiFf6ONAooJ0qRvVwm3vfgw-DjUQ4vqvZ-5v8F-SRsrDZR0RUsPDifZNx-2OFx0UAQm5UzdJlCxi8w/file?dl=1","offline","malware_download","zip","https://urlhaus.abuse.ch/url/81581/"
 "81580","2018-11-16 09:42:03","http://www.nidea-photography.com/wp-content/themes/stockholm/gulp/sserv.jpg","online","malware_download","exe","https://urlhaus.abuse.ch/url/81580/"
-"81579","2018-11-16 09:32:07","http://a.doko.moe/rrefip.doc","online","malware_download","doc","https://urlhaus.abuse.ch/url/81579/"
-"81578","2018-11-16 09:32:06","https://a.doko.moe/gdeypt.jpg","online","malware_download","exe,Loki,lokibot","https://urlhaus.abuse.ch/url/81578/"
-"81577","2018-11-16 09:32:05","https://a.doko.moe/pskige","online","malware_download","exe,Loki,lokibot","https://urlhaus.abuse.ch/url/81577/"
-"81576","2018-11-16 09:32:04","http://pioneerfitting.com/images/ftp/emma001.exe","online","malware_download","AZORult,exe","https://urlhaus.abuse.ch/url/81576/"
+"81579","2018-11-16 09:32:07","http://a.doko.moe/rrefip.doc","offline","malware_download","doc","https://urlhaus.abuse.ch/url/81579/"
+"81578","2018-11-16 09:32:06","https://a.doko.moe/gdeypt.jpg","offline","malware_download","exe,Loki,lokibot","https://urlhaus.abuse.ch/url/81578/"
+"81577","2018-11-16 09:32:05","https://a.doko.moe/pskige","offline","malware_download","exe,Loki,lokibot","https://urlhaus.abuse.ch/url/81577/"
+"81576","2018-11-16 09:32:04","http://pioneerfitting.com/images/ftp/emma001.exe","offline","malware_download","AZORult,exe","https://urlhaus.abuse.ch/url/81576/"
 "81575","2018-11-16 09:21:18","http://turkaline.com/zGiFH0X","offline","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/81575/"
 "81574","2018-11-16 09:21:17","http://exploraverde.co/mmR4TaGu8","online","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/81574/"
 "81573","2018-11-16 09:21:16","http://iuyouth.hcmiu.edu.vn/mVayv0I7S","online","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/81573/"
@@ -373,11 +394,11 @@
 "81553","2018-11-16 07:27:05","http://thienuyscit.com/Y6Kp3Cv/","online","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/81553/"
 "81552","2018-11-16 07:26:05","http://178.128.227.2/atxhua","online","malware_download","elf","https://urlhaus.abuse.ch/url/81552/"
 "81551","2018-11-16 07:26:04","http://178.128.227.2/earyzq","online","malware_download","elf","https://urlhaus.abuse.ch/url/81551/"
-"81550","2018-11-16 07:26:02","http://89.34.237.189/Execution.m68k","offline","malware_download","elf","https://urlhaus.abuse.ch/url/81550/"
+"81550","2018-11-16 07:26:02","http://89.34.237.189/Execution.m68k","online","malware_download","elf","https://urlhaus.abuse.ch/url/81550/"
 "81549","2018-11-16 07:25:03","http://37.218.236.157:15879/.i","online","malware_download","elf","https://urlhaus.abuse.ch/url/81549/"
 "81548","2018-11-16 07:11:04","http://209.141.57.185/bins/sora.m68k","online","malware_download","elf","https://urlhaus.abuse.ch/url/81548/"
 "81547","2018-11-16 07:11:03","http://178.128.227.2/nvitpj","online","malware_download","elf","https://urlhaus.abuse.ch/url/81547/"
-"81546","2018-11-16 07:11:02","http://89.34.237.189/Execution.i686","offline","malware_download","elf","https://urlhaus.abuse.ch/url/81546/"
+"81546","2018-11-16 07:11:02","http://89.34.237.189/Execution.i686","online","malware_download","elf","https://urlhaus.abuse.ch/url/81546/"
 "81545","2018-11-16 07:10:03","http://178.128.227.2/lnkfmx","online","malware_download","elf","https://urlhaus.abuse.ch/url/81545/"
 "81544","2018-11-16 07:09:06","http://89.34.237.189/Execution.sparc","offline","malware_download","elf","https://urlhaus.abuse.ch/url/81544/"
 "81543","2018-11-16 07:09:05","http://178.128.227.2/ajoomk","online","malware_download","elf","https://urlhaus.abuse.ch/url/81543/"
@@ -424,7 +445,7 @@
 "81502","2018-11-16 04:44:02","http://canoninstant.com/carlitos/fairdoc.exe","online","malware_download","exe,Formbook","https://urlhaus.abuse.ch/url/81502/"
 "81501","2018-11-16 04:22:17","http://upriseframing.com.br/dNoH7PRVU","offline","malware_download","heodo","https://urlhaus.abuse.ch/url/81501/"
 "81500","2018-11-16 04:22:12","http://klausnerlaw.com/tqeaGIQy","online","malware_download","heodo","https://urlhaus.abuse.ch/url/81500/"
-"81499","2018-11-16 04:22:10","http://dmdream.info/Dlv5eHU","offline","malware_download","heodo","https://urlhaus.abuse.ch/url/81499/"
+"81499","2018-11-16 04:22:10","http://dmdream.info/Dlv5eHU","online","malware_download","heodo","https://urlhaus.abuse.ch/url/81499/"
 "81498","2018-11-16 04:22:09","http://stra.org.my/917243KVSZZ/biz/Personal/","offline","malware_download","heodo","https://urlhaus.abuse.ch/url/81498/"
 "81497","2018-11-16 04:21:37","http://sphm.co.in/305MQCHT/PAY/Commercial/","offline","malware_download","heodo","https://urlhaus.abuse.ch/url/81497/"
 "81496","2018-11-16 04:21:34","http://secretariaextension.unt.edu.ar/wp-content/00002/default/US/Invoice/","offline","malware_download","heodo","https://urlhaus.abuse.ch/url/81496/"
@@ -466,7 +487,7 @@
 "81459","2018-11-16 03:55:02","http://46.17.47.82/lx/apep.arm5","online","malware_download","elf","https://urlhaus.abuse.ch/url/81459/"
 "81460","2018-11-16 03:55:02","http://46.17.47.82/lx/apep.x86","online","malware_download","elf","https://urlhaus.abuse.ch/url/81460/"
 "81458","2018-11-16 03:36:02","http://46.17.47.82/lx/apep.mpsl","online","malware_download","elf","https://urlhaus.abuse.ch/url/81458/"
-"81457","2018-11-16 03:25:04","http://themexoneonline.me/CTKJGHGVJTFCHGDGDMCMGCXGFXFXFXNGCTHGCNHTGCTGCGCM/HZVZDFBJZBFJBFBB43534WBTSNERSFHSERGTAGFKS7GEFUSE4YTHSGSRGSRGDSTHSZFDGSRETGSRDZGSR345REGFDGFDXBFC.exe","online","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/81457/"
+"81457","2018-11-16 03:25:04","http://themexoneonline.me/CTKJGHGVJTFCHGDGDMCMGCXGFXFXFXNGCTHGCNHTGCTGCGCM/HZVZDFBJZBFJBFBB43534WBTSNERSFHSERGTAGFKS7GEFUSE4YTHSGSRGSRGDSTHSZFDGSRETGSRDZGSR345REGFDGFDXBFC.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/81457/"
 "81456","2018-11-16 02:20:03","http://www.leveleservizimmobiliari.it/bet.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/81456/"
 "81455","2018-11-16 02:20:02","http://www.leveleservizimmobiliari.it/hope.exe","online","malware_download","exe,NanoCore","https://urlhaus.abuse.ch/url/81455/"
 "81454","2018-11-16 02:19:02","http://www.leveleservizimmobiliari.it/bth.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/81454/"
@@ -513,7 +534,7 @@
 "81413","2018-11-16 02:10:40","http://scafrica.org/gKOXH0pMzc4TqI3iUvrk/SWIFT/Firmenkunden/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/81413/"
 "81412","2018-11-16 02:10:39","http://sadathoseyni.ir/d5HrsC7s/de_DE/Privatkunden/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/81412/"
 "81411","2018-11-16 02:10:37","http://rozdroza.com/Download/US_us/Past-Due-Invoice/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/81411/"
-"81410","2018-11-16 02:10:36","http://residenciabrisadelmar.es/euHecJxJt2zclhAGje/SWIFT/Privatkunden","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/81410/"
+"81410","2018-11-16 02:10:36","http://residenciabrisadelmar.es/euHecJxJt2zclhAGje/SWIFT/Privatkunden","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/81410/"
 "81408","2018-11-16 02:10:05","http://pragaticontainer.com/files/En_us/Important-Please-Read/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/81408/"
 "81409","2018-11-16 02:10:05","http://redcross59.ru/110ITRZKI/com/Business/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/81409/"
 "81406","2018-11-16 02:10:01","http://philadelphia.life/Download/US_us/Invoice-Number-80110/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/81406/"
@@ -597,7 +618,7 @@
 "81329","2018-11-16 02:05:19","http://cemul.com.br/epTpCnF560pJWc/biz/IhreSparkasse","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/81329/"
 "81328","2018-11-16 02:05:18","http://categoryarcade.com/wp-content/doc/EN_en/Invoices-Overdue/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/81328/"
 "81327","2018-11-16 02:05:17","http://categoryarcade.com/wp-content/doc/EN_en/Invoices-Overdu","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/81327/"
-"81326","2018-11-16 02:05:16","http://cashflowfreedom.ca/newsletter/En/Invoices-Overdue/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/81326/"
+"81326","2018-11-16 02:05:16","http://cashflowfreedom.ca/newsletter/En/Invoices-Overdue/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/81326/"
 "81325","2018-11-16 02:05:11","http://casashavana.com/default/US_us/Past-Due-Invoices/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/81325/"
 "81324","2018-11-16 02:05:10","http://bursaguzelevdeneve.com/9GJVDCX/com/US/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/81324/"
 "81323","2018-11-16 02:05:09","http://budweiseradvert.com/5398554TOTVVA/PAYMENT/Business/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/81323/"
@@ -638,11 +659,11 @@
 "81288","2018-11-16 01:42:03","http://185.10.68.191/ftp","offline","malware_download","elf","https://urlhaus.abuse.ch/url/81288/"
 "81287","2018-11-16 01:42:03","http://194.147.32.226/jiren.i686","online","malware_download","elf","https://urlhaus.abuse.ch/url/81287/"
 "81286","2018-11-16 01:32:39","http://topdottourism.co.za/imagel/leg/lge.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/81286/"
-"81285","2018-11-16 01:32:37","http://222.186.137.132:8070/chddos","online","malware_download","elf","https://urlhaus.abuse.ch/url/81285/"
+"81285","2018-11-16 01:32:37","http://222.186.137.132:8070/chddos","offline","malware_download","elf","https://urlhaus.abuse.ch/url/81285/"
 "81284","2018-11-16 01:32:02","http://194.147.32.226/jiren.arm4","online","malware_download","elf","https://urlhaus.abuse.ch/url/81284/"
 "81283","2018-11-16 01:22:07","http://topdottourism.co.za/office/nd/nde.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/81283/"
-"81282","2018-11-16 01:22:06","http://topdottourism.co.za/office/obn/obn.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/81282/"
-"81281","2018-11-16 01:22:04","http://boutiqueerotique.biz/samssassa123/misahuisa11111/youwin.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/81281/"
+"81282","2018-11-16 01:22:06","http://topdottourism.co.za/office/obn/obn.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/81282/"
+"81281","2018-11-16 01:22:04","http://boutiqueerotique.biz/samssassa123/misahuisa11111/youwin.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/81281/"
 "81280","2018-11-16 00:58:10","http://lenhydro.ru/EN_US/Attachments/11_18/","offline","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/81280/"
 "81279","2018-11-16 00:58:07","http://lenhydro.ru/EN_US/Attachments/11_18","offline","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/81279/"
 "81278","2018-11-16 00:58:03","http://acg.com.my/US/Documents/112018/","offline","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/81278/"
@@ -671,7 +692,7 @@
 "81255","2018-11-16 00:31:15","http://pleaseyoursoul.com/En_us/Clients_transactions/2018-11/","offline","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/81255/"
 "81254","2018-11-16 00:31:14","http://nhpetsave.com/En_us/Clients_information/2018-11/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/81254/"
 "81253","2018-11-16 00:31:12","http://leparadisresorts.com/En_us/Payments/11_18/","offline","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/81253/"
-"81251","2018-11-16 00:31:11","http://joatbom.com/En_us/Information/112018","online","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/81251/"
+"81251","2018-11-16 00:31:11","http://joatbom.com/En_us/Information/112018","offline","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/81251/"
 "81252","2018-11-16 00:31:11","http://kristiansund-gravstein.no/US/Clients_Messages/2018-11/","offline","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/81252/"
 "81250","2018-11-16 00:31:09","http://jimmysbait.haroocreative.com/US/Clients_transactions/112018/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/81250/"
 "81249","2018-11-16 00:31:08","http://ingadream.ru/US/Clients/112018/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/81249/"
@@ -795,7 +816,7 @@
 "81129","2018-11-15 18:12:14","http://ghost246630.worldhosts.ru/Steam.exe","online","malware_download","opendir","https://urlhaus.abuse.ch/url/81129/"
 "81128","2018-11-15 18:12:11","http://ghost246630.worldhosts.ru/koowlvpoiw.exe","offline","malware_download","opendir","https://urlhaus.abuse.ch/url/81128/"
 "81126","2018-11-15 18:12:06","http://ghost246630.worldhosts.ru/Dev.jpg","offline","malware_download","opendir","https://urlhaus.abuse.ch/url/81126/"
-"81125","2018-11-15 18:12:06","http://ghost246630.worldhosts.ru/DHFVGSDUIV.exe","online","malware_download","opendir","https://urlhaus.abuse.ch/url/81125/"
+"81125","2018-11-15 18:12:06","http://ghost246630.worldhosts.ru/DHFVGSDUIV.exe","offline","malware_download","opendir","https://urlhaus.abuse.ch/url/81125/"
 "81127","2018-11-15 18:12:06","http://ghost246630.worldhosts.ru/fastdl/cs_assault.zip","online","malware_download","opendir","https://urlhaus.abuse.ch/url/81127/"
 "81124","2018-11-15 18:10:02","http://ghost246630.worldhosts.ru/csgo.jpg","offline","malware_download","powershell","https://urlhaus.abuse.ch/url/81124/"
 "81123","2018-11-15 17:54:03","http://www.clickara.com/images/vnc64sk.rar","online","malware_download","ITA,Task,ursnif,vnc","https://urlhaus.abuse.ch/url/81123/"
@@ -1084,18 +1105,18 @@
 "80788","2018-11-15 10:56:03","http://142.54.173.194/sh","offline","malware_download","elf","https://urlhaus.abuse.ch/url/80788/"
 "80787","2018-11-15 10:35:05","https://thetoplesstraveller.com/wap/mobile.php2","online","malware_download","AUS,exe,ursnif","https://urlhaus.abuse.ch/url/80787/"
 "80786","2018-11-15 10:35:04","https://acecon365-my.sharepoint.com/:u:/g/personal/ychin_acecon_com_au/EZDeTO2lXsFFmWQBLNPrvCEBCGtxZZBJdYTXcddGoz_Nqw?e=4Fb8Ek&download=1","offline","malware_download","AUS,ursnif,zipped-VBS","https://urlhaus.abuse.ch/url/80786/"
-"80785","2018-11-15 10:33:06","http://greencolb.com/DOC/efizzydic.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/80785/"
-"80784","2018-11-15 10:33:04","http://greencolb.com/DOC/YG.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/80784/"
-"80783","2018-11-15 10:32:10","http://greencolb.com/DOC/elenanew.exe","online","malware_download","exe,HawkEye","https://urlhaus.abuse.ch/url/80783/"
-"80782","2018-11-15 10:32:08","http://greencolb.com/DOC/krossnoi.exe","online","malware_download","exe,HawkEye","https://urlhaus.abuse.ch/url/80782/"
-"80781","2018-11-15 10:32:06","http://greencolb.com/DOC/moredoc.exe","online","malware_download","exe,HawkEye","https://urlhaus.abuse.ch/url/80781/"
-"80780","2018-11-15 10:32:04","http://greencolb.com/DOC/okiloguy.exe","online","malware_download","exe,HawkEye","https://urlhaus.abuse.ch/url/80780/"
-"80779","2018-11-15 10:31:08","http://greencolb.com/DOC/boobbb.exe","online","malware_download","exe,HawkEye","https://urlhaus.abuse.ch/url/80779/"
-"80778","2018-11-15 10:31:06","http://greencolb.com/DOC/franks.exe","online","malware_download","exe,HawkEye","https://urlhaus.abuse.ch/url/80778/"
-"80777","2018-11-15 10:31:04","http://greencolb.com/DOC/LAMNODO.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/80777/"
+"80785","2018-11-15 10:33:06","http://greencolb.com/DOC/efizzydic.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/80785/"
+"80784","2018-11-15 10:33:04","http://greencolb.com/DOC/YG.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/80784/"
+"80783","2018-11-15 10:32:10","http://greencolb.com/DOC/elenanew.exe","offline","malware_download","exe,HawkEye","https://urlhaus.abuse.ch/url/80783/"
+"80782","2018-11-15 10:32:08","http://greencolb.com/DOC/krossnoi.exe","offline","malware_download","exe,HawkEye","https://urlhaus.abuse.ch/url/80782/"
+"80781","2018-11-15 10:32:06","http://greencolb.com/DOC/moredoc.exe","offline","malware_download","exe,HawkEye","https://urlhaus.abuse.ch/url/80781/"
+"80780","2018-11-15 10:32:04","http://greencolb.com/DOC/okiloguy.exe","offline","malware_download","exe,HawkEye","https://urlhaus.abuse.ch/url/80780/"
+"80779","2018-11-15 10:31:08","http://greencolb.com/DOC/boobbb.exe","offline","malware_download","exe,HawkEye","https://urlhaus.abuse.ch/url/80779/"
+"80778","2018-11-15 10:31:06","http://greencolb.com/DOC/franks.exe","offline","malware_download","exe,HawkEye","https://urlhaus.abuse.ch/url/80778/"
+"80777","2018-11-15 10:31:04","http://greencolb.com/DOC/LAMNODO.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/80777/"
 "80776","2018-11-15 10:27:10","http://peredelkino-atelie.ru/AtfuUF/","offline","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/80776/"
 "80775","2018-11-15 10:27:09","http://www.alefbookstores.com/Eh/","offline","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/80775/"
-"80774","2018-11-15 10:27:08","http://proarchiland.ru/BNN/","offline","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/80774/"
+"80774","2018-11-15 10:27:08","http://proarchiland.ru/BNN/","online","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/80774/"
 "80773","2018-11-15 10:27:05","http://radiobamtaare.com/NceL4Wi/","offline","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/80773/"
 "80772","2018-11-15 10:27:03","http://greenbeltnewsreview.com/Kk90joUU/","offline","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/80772/"
 "80771","2018-11-15 10:22:11","http://edisolutions.us/DAgOhx7xDA/","offline","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/80771/"
@@ -1109,12 +1130,12 @@
 "80763","2018-11-15 10:04:02","http://www.remnanttabernacle7thday.com/XyH3iJ4","online","malware_download","exe,heodo","https://urlhaus.abuse.ch/url/80763/"
 "80762","2018-11-15 10:00:12","http://peredelkino-atelie.ru/AtfuUF","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/80762/"
 "80761","2018-11-15 10:00:10","http://www.alefbookstores.com/Eh","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/80761/"
-"80760","2018-11-15 10:00:09","http://proarchiland.ru/BNN","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/80760/"
+"80760","2018-11-15 10:00:09","http://proarchiland.ru/BNN","online","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/80760/"
 "80759","2018-11-15 10:00:05","http://radiobamtaare.com/NceL4Wi","offline","malware_download","emotet,exe","https://urlhaus.abuse.ch/url/80759/"
 "80758","2018-11-15 10:00:04","http://greenbeltnewsreview.com/Kk90joUU","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/80758/"
 "80757","2018-11-15 09:54:07","http://www.assurance-charente.fr/sfh","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/80757/"
-"80756","2018-11-15 09:41:03","https://themexoneonline.me/CTKJGHGVJTFCHGDGDMCMGCXGFXFXFXNGCTHGCNHTGCTGCGCM/HZVZDFBJZBFJBFBB43534WBTSNERSFHSERGTAGFKS7GEFUSE4YTHSGSRGSRGDSTHSZFDGSRETGSRDZGSR345REGFDGFDXBFC.exe","online","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/80756/"
-"80755","2018-11-15 09:40:06","http://greencolb.com/DOC/frankadoc.exe","online","malware_download","exe,HawkEye","https://urlhaus.abuse.ch/url/80755/"
+"80756","2018-11-15 09:41:03","https://themexoneonline.me/CTKJGHGVJTFCHGDGDMCMGCXGFXFXFXNGCTHGCNHTGCTGCGCM/HZVZDFBJZBFJBFBB43534WBTSNERSFHSERGTAGFKS7GEFUSE4YTHSGSRGSRGDSTHSZFDGSRETGSRDZGSR345REGFDGFDXBFC.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/80756/"
+"80755","2018-11-15 09:40:06","http://greencolb.com/DOC/frankadoc.exe","offline","malware_download","exe,HawkEye","https://urlhaus.abuse.ch/url/80755/"
 "80754","2018-11-15 09:40:04","http://31.184.198.161/~winvps/1_com/pro/for.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/80754/"
 "80753","2018-11-15 09:39:05","http://www.jmgroup-iq.com/img/jpjd.exe","offline","malware_download","exe,opendir,Smoke Loader","https://urlhaus.abuse.ch/url/80753/"
 "80752","2018-11-15 09:39:04","http://31.184.198.161/~winvps/1_com/putt/kas.exe","offline","malware_download","exe,Formbook","https://urlhaus.abuse.ch/url/80752/"
@@ -1156,7 +1177,7 @@
 "80716","2018-11-15 08:24:10","http://da-amici.com/K0laIZI","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/80716/"
 "80715","2018-11-15 08:24:09","http://rumpunbudiman.com/mTb56a9M","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/80715/"
 "80714","2018-11-15 08:24:06","http://159.65.172.17/4p2PEWnb","online","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/80714/"
-"80713","2018-11-15 08:24:05","http://www.gauff.co.ug/8nTTllUXDC","online","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/80713/"
+"80713","2018-11-15 08:24:05","http://www.gauff.co.ug/8nTTllUXDC","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/80713/"
 "80712","2018-11-15 08:19:13","http://f90399s9.bget.ru/iSedo3jd4h1qiw/BIZ/Service-Center","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/80712/"
 "80711","2018-11-15 08:19:12","http://cbea.com.hk/wp-content/uploads/4641133NDA/ACH/US","online","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/80711/"
 "80710","2018-11-15 08:18:47","http://klausnerlaw.com/yIYomrxPHIlXsJQalkiQ/SEPA/200-Jahre","online","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/80710/"
@@ -1190,18 +1211,18 @@
 "80682","2018-11-15 08:01:05","http://68.183.168.183/ankit/jno.sh4","offline","malware_download","elf","https://urlhaus.abuse.ch/url/80682/"
 "80681","2018-11-15 08:01:04","http://137.74.148.234/atxhua","online","malware_download","elf","https://urlhaus.abuse.ch/url/80681/"
 "80680","2018-11-15 08:01:03","http://137.74.148.234/cemtop","online","malware_download","elf","https://urlhaus.abuse.ch/url/80680/"
-"80679","2018-11-15 08:01:02","http://104.168.151.198/yakuza.m68k","online","malware_download","elf","https://urlhaus.abuse.ch/url/80679/"
-"80678","2018-11-15 08:00:08","http://104.168.151.198/yakuza.ppc","online","malware_download","elf","https://urlhaus.abuse.ch/url/80678/"
-"80677","2018-11-15 08:00:06","http://104.168.151.198/yakuza.i586","online","malware_download","elf","https://urlhaus.abuse.ch/url/80677/"
+"80679","2018-11-15 08:01:02","http://104.168.151.198/yakuza.m68k","offline","malware_download","elf","https://urlhaus.abuse.ch/url/80679/"
+"80678","2018-11-15 08:00:08","http://104.168.151.198/yakuza.ppc","offline","malware_download","elf","https://urlhaus.abuse.ch/url/80678/"
+"80677","2018-11-15 08:00:06","http://104.168.151.198/yakuza.i586","offline","malware_download","elf","https://urlhaus.abuse.ch/url/80677/"
 "80676","2018-11-15 08:00:05","http://68.183.168.183/ankit/jno.m68k","offline","malware_download","elf","https://urlhaus.abuse.ch/url/80676/"
 "80675","2018-11-15 08:00:04","http://jinaytakyanae.com/htmlfile/new/db.exe","online","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/80675/"
 "80674","2018-11-15 07:59:05","http://68.183.168.183/ankit/jno.mips","offline","malware_download","elf","https://urlhaus.abuse.ch/url/80674/"
 "80673","2018-11-15 07:59:04","http://137.74.148.234/ajoomk","online","malware_download","elf","https://urlhaus.abuse.ch/url/80673/"
-"80672","2018-11-15 07:59:03","http://104.168.151.198/yakuza.arm6","online","malware_download","elf","https://urlhaus.abuse.ch/url/80672/"
+"80672","2018-11-15 07:59:03","http://104.168.151.198/yakuza.arm6","offline","malware_download","elf","https://urlhaus.abuse.ch/url/80672/"
 "80671","2018-11-15 07:58:04","http://68.183.168.183/ankit/jno.x86","offline","malware_download","elf","https://urlhaus.abuse.ch/url/80671/"
-"80670","2018-11-15 07:58:03","http://104.168.151.198/yakuza.sh4","online","malware_download","elf","https://urlhaus.abuse.ch/url/80670/"
+"80670","2018-11-15 07:58:03","http://104.168.151.198/yakuza.sh4","offline","malware_download","elf","https://urlhaus.abuse.ch/url/80670/"
 "80669","2018-11-15 07:58:02","http://137.74.148.234/vvglma","online","malware_download","elf","https://urlhaus.abuse.ch/url/80669/"
-"80668","2018-11-15 07:57:03","http://104.168.151.198/yakuza.x32","online","malware_download","elf","https://urlhaus.abuse.ch/url/80668/"
+"80668","2018-11-15 07:57:03","http://104.168.151.198/yakuza.x32","offline","malware_download","elf","https://urlhaus.abuse.ch/url/80668/"
 "80667","2018-11-15 07:56:05","http://68.183.168.183/ankit/jno.mpsl","offline","malware_download","elf","https://urlhaus.abuse.ch/url/80667/"
 "80665","2018-11-15 07:56:03","http://137.74.148.234/lnkfmx","online","malware_download","elf","https://urlhaus.abuse.ch/url/80665/"
 "80666","2018-11-15 07:56:03","http://80.211.134.45/bins/kowai.arm7","offline","malware_download","elf","https://urlhaus.abuse.ch/url/80666/"
@@ -1221,7 +1242,7 @@
 "80651","2018-11-15 07:13:05","http://greenboxmedia.center/WJ7Mzdv7","online","malware_download","heodo","https://urlhaus.abuse.ch/url/80651/"
 "80650","2018-11-15 07:13:03","http://xianjiaopi.com/6kYDYzhpWoYLQ67g/BIZ/IhreSparkasse/","offline","malware_download","heodo","https://urlhaus.abuse.ch/url/80650/"
 "80649","2018-11-15 07:13:00","http://vilniusmodels.lt/4VEFGLCQF/identity/US/","offline","malware_download","heodo","https://urlhaus.abuse.ch/url/80649/"
-"80648","2018-11-15 07:12:59","http://residenciabrisadelmar.es/euHecJxJt2zclhAGje/SWIFT/Privatkunden/","offline","malware_download","heodo","https://urlhaus.abuse.ch/url/80648/"
+"80648","2018-11-15 07:12:59","http://residenciabrisadelmar.es/euHecJxJt2zclhAGje/SWIFT/Privatkunden/","online","malware_download","heodo","https://urlhaus.abuse.ch/url/80648/"
 "80647","2018-11-15 07:12:58","http://klausnerlaw.com/yIYomrxPHIlXsJQalkiQ/SEPA/200-Jahre/","online","malware_download","heodo","https://urlhaus.abuse.ch/url/80647/"
 "80646","2018-11-15 07:12:56","http://findiphone.vip/87CVWIB/PAYROLL/Personal/","offline","malware_download","heodo","https://urlhaus.abuse.ch/url/80646/"
 "80645","2018-11-15 07:12:54","http://finacore.com/finuzs/njRmXU/SWIFT/PrivateBanking/","offline","malware_download","heodo","https://urlhaus.abuse.ch/url/80645/"
@@ -1251,7 +1272,7 @@
 "80621","2018-11-15 07:10:14","http://35.170.41.231/Document/EN_en/Service-Invoice/","offline","malware_download","heodo","https://urlhaus.abuse.ch/url/80621/"
 "80620","2018-11-15 07:10:13","http://teamincubation.org/En_us/Attachments/11_18/","offline","malware_download","heodo","https://urlhaus.abuse.ch/url/80620/"
 "80619","2018-11-15 07:10:12","http://powerandlighting.com.au/US/Transactions-details/2018-11/","offline","malware_download","heodo","https://urlhaus.abuse.ch/url/80619/"
-"80618","2018-11-15 07:10:11","http://joatbom.com/En_us/Information/112018/","online","malware_download","None","https://urlhaus.abuse.ch/url/80618/"
+"80618","2018-11-15 07:10:11","http://joatbom.com/En_us/Information/112018/","offline","malware_download","None","https://urlhaus.abuse.ch/url/80618/"
 "80617","2018-11-15 07:10:09","http://interieurbouwburgum.nl/EN_US/Clients_transactions/11_18/","offline","malware_download","heodo","https://urlhaus.abuse.ch/url/80617/"
 "80616","2018-11-15 07:10:08","http://athena-finance.com/EN_US/Clients_Messages/11_18/","offline","malware_download","None","https://urlhaus.abuse.ch/url/80616/"
 "80615","2018-11-15 07:10:07","http://anyes.com.cn/En_us/Clients/11_18/","offline","malware_download","heodo","https://urlhaus.abuse.ch/url/80615/"
@@ -1520,8 +1541,8 @@
 "80352","2018-11-14 22:17:14","http://ftp.collabvm.ml/vncbot/t.exe","offline","malware_download","exe,GandCrab,Ransomware,Ransomware.GandCrab","https://urlhaus.abuse.ch/url/80352/"
 "80351","2018-11-14 22:17:11","https://servis-sto.org/wp-content/themes/Avada/woocommerce/cart/sserv.jpg","offline","malware_download","exe,Ransomware,Troldesh","https://urlhaus.abuse.ch/url/80351/"
 "80350","2018-11-14 22:17:09","http://laflamme-heli.com/wp-includes/ID3/sserv.jpg","online","malware_download","exe,Ransomware,Troldesh","https://urlhaus.abuse.ch/url/80350/"
-"80349","2018-11-14 22:17:07","http://trombleoff.com/bin/stak.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/80349/"
-"80348","2018-11-14 22:17:05","http://trombleoff.com/bin/rig.exe","online","malware_download","CoinMiner,exe,miner","https://urlhaus.abuse.ch/url/80348/"
+"80349","2018-11-14 22:17:07","http://trombleoff.com/bin/stak.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/80349/"
+"80348","2018-11-14 22:17:05","http://trombleoff.com/bin/rig.exe","offline","malware_download","CoinMiner,exe,miner","https://urlhaus.abuse.ch/url/80348/"
 "80347","2018-11-14 22:17:02","http://lloydsbankonline.co.uk/docs.lloyds","offline","malware_download","exe,Trickbot","https://urlhaus.abuse.ch/url/80347/"
 "80346","2018-11-14 22:05:05","http://sunshineandrain.org/EN_US/ACH/112018/","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/80346/"
 "80345","2018-11-14 21:50:02","https://fqla3w.am.files.1drv.com/y4mvzCqDMil5p9sYxAjkaPynE7aeDI3l0OCuaFp6mFtFPtYEvAyP3PV0breP6RVXhNtdf-93I7otIAczaq1d4_nQJyWLCjUFDitc5Ixsn_IerLryGS-nKZ3czCHdssNKYDd8tEWOVSEHmultG5zH8DDNsXFmcrUsu3Bvg_S3PaCwNo42zB2fBomgysxWgR9sMBOS6OVpJVb4GMxF0ruDvSb2Q/SCANDOC003990.pdf.z?download&psid=1","offline","malware_download","rar","https://urlhaus.abuse.ch/url/80345/"
@@ -1585,12 +1606,12 @@
 "80287","2018-11-14 19:07:06","http://lmvus.com/baba/Revised%20PI.exe","offline","malware_download","Loki","https://urlhaus.abuse.ch/url/80287/"
 "80286","2018-11-14 19:07:05","http://lmvus.com/apa/New%20Order.exe","offline","malware_download","Loki","https://urlhaus.abuse.ch/url/80286/"
 "80285","2018-11-14 19:07:03","http://lmvus.com/tr/00898426767001.exe","offline","malware_download","Loki","https://urlhaus.abuse.ch/url/80285/"
-"80284","2018-11-14 18:54:22","http://juegosaleo.com/TX9YrE9bp/","online","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/80284/"
+"80284","2018-11-14 18:54:22","http://juegosaleo.com/TX9YrE9bp/","offline","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/80284/"
 "80283","2018-11-14 18:54:21","http://hgfitness.info/DozxE5V2QZ/","online","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/80283/"
 "80282","2018-11-14 18:54:15","http://ghisep.org/img/jKX2btFw/","online","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/80282/"
 "80281","2018-11-14 18:54:13","http://www.greenboxmedia.center/WJ7Mzdv7/","online","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/80281/"
 "80280","2018-11-14 18:54:12","http://vovsigorta.com/JSG351p/","offline","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/80280/"
-"80279","2018-11-14 18:52:42","http://juegosaleo.com/TX9YrE9bp","online","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/80279/"
+"80279","2018-11-14 18:52:42","http://juegosaleo.com/TX9YrE9bp","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/80279/"
 "80278","2018-11-14 18:52:41","http://hgfitness.info/DozxE5V2QZ","online","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/80278/"
 "80277","2018-11-14 18:52:36","http://ghisep.org/img/jKX2btFw","online","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/80277/"
 "80276","2018-11-14 18:52:34","http://www.greenboxmedia.center/WJ7Mzdv7","online","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/80276/"
@@ -1643,7 +1664,7 @@
 "80230","2018-11-14 18:26:02","http://inter-tractor.fi/023UTD/BIZ/Commercial/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/80230/"
 "80228","2018-11-14 18:26:00","http://iam.ru.net/041572GFNAM/oamo/Business/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/80228/"
 "80227","2018-11-14 18:25:30","http://homestuffs.com.my/5NC/oamo/Commercial/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/80227/"
-"80225","2018-11-14 18:25:28","http://harbayurveda.com/sites/EN_en/Invoice-Number-052614/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/80225/"
+"80225","2018-11-14 18:25:28","http://harbayurveda.com/sites/EN_en/Invoice-Number-052614/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/80225/"
 "80226","2018-11-14 18:25:28","http://hayvancilikhaber.com/wp-content/8P/WIRE/Personal/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/80226/"
 "80223","2018-11-14 18:25:26","http://fitingym.nl/596245E/PAYMENT/Commercial/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/80223/"
 "80224","2018-11-14 18:25:26","http://fundeppr.com.br/2455N/com/Commercial/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/80224/"
@@ -1712,7 +1733,7 @@
 "80159","2018-11-14 17:32:24","https://argosbrindes.com.br/multimedia/Download/US_us/Invoice","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/80159/"
 "80158","2018-11-14 17:32:21","http://www.xianjiaopi.com/6kYDYzhpWoYLQ67g/BIZ/IhreSparkasse/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/80158/"
 "80157","2018-11-14 17:32:19","http://www.xianjiaopi.com/6kYDYzhpWoYLQ67g/BIZ/IhreSparkasse","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/80157/"
-"80156","2018-11-14 17:32:14","http://www.residenciabrisadelmar.es/euHecJxJt2zclhAGje/SWIFT/Privatkunden/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/80156/"
+"80156","2018-11-14 17:32:14","http://www.residenciabrisadelmar.es/euHecJxJt2zclhAGje/SWIFT/Privatkunden/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/80156/"
 "80155","2018-11-14 17:32:12","http://www.klausnerlaw.com/yIYomrxPHIlXsJQalkiQ/SEPA/200-Jahre/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/80155/"
 "80154","2018-11-14 17:32:10","http://www.finacore.com/finuzs/njRmXU/SWIFT/PrivateBanking/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/80154/"
 "80153","2018-11-14 17:32:06","http://www.finacore.com/finuzs/njRmXU/SWIFT/PrivateBanking","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/80153/"
@@ -1793,7 +1814,7 @@
 "80078","2018-11-14 17:28:07","http://alindco.com/tBlDZUZlChjVq/SEP/Privatkunden/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/80078/"
 "80077","2018-11-14 17:28:05","http://aipkema.unimus.ac.id/wp-content/gV211P8ilcHoGteEo9/BIZ/Service-Center/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/80077/"
 "80076","2018-11-14 17:28:03","http://1stniag.com/RoKx9kBL/BIZ/Service-Center/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/80076/"
-"80075","2018-11-14 17:23:05","http://cashflowfreedom.ca/newsletter/En/Invoices-Overdue","online","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/80075/"
+"80075","2018-11-14 17:23:05","http://cashflowfreedom.ca/newsletter/En/Invoices-Overdue","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/80075/"
 "80074","2018-11-14 17:23:03","http://www.edcampwateachlead.org/default/En/Invoice-for-you","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/80074/"
 "80073","2018-11-14 17:12:02","http://alkazan.ru/US/Transactions/112018/","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/80073/"
 "80072","2018-11-14 16:44:03","http://farmasi.uin-malang.ac.id/wp-content/Corporation/59790ET/SWIFT/Smallbusiness/","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/80072/"
@@ -1864,7 +1885,7 @@
 "80007","2018-11-14 14:32:05","http://assurance-charente.fr/sfh/","offline","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/80007/"
 "80006","2018-11-14 14:32:04","http://ogrodyusmiechu.pl/iubv8v/","offline","malware_download","emotet,epoch2,exe","https://urlhaus.abuse.ch/url/80006/"
 "80005","2018-11-14 14:32:03","http://diahmarsidi.com/MPCTKG/","offline","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/80005/"
-"80004","2018-11-14 14:32:02","http://pizzeriarondo.si/z8cG/","online","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/80004/"
+"80004","2018-11-14 14:32:02","http://pizzeriarondo.si/z8cG/","offline","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/80004/"
 "80003","2018-11-14 14:02:04","http://listyourhomes.ca/F8AsP7UFtXKbGqk/biz/Service-Center/","online","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/80003/"
 "80002","2018-11-14 13:40:04","http://idocemail.netfinity.net/link.php?M=31442&N=285&L=283&F=H","online","malware_download","doc","https://urlhaus.abuse.ch/url/80002/"
 "80001","2018-11-14 13:39:06","http://pteacademicvoucher.in/8lVruWa/","offline","malware_download","exe,heodo","https://urlhaus.abuse.ch/url/80001/"
@@ -1881,14 +1902,14 @@
 "79990","2018-11-14 13:09:03","http://trabanatours.com/u/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/79990/"
 "79989","2018-11-14 13:04:06","http://1stniag.com/RoKx9kBL/BIZ/Service-Center","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/79989/"
 "79988","2018-11-14 13:04:04","http://boxofgiggles.com/Ts73IIRJEm7CRlN9/de_DE/PrivateBanking","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/79988/"
-"79987","2018-11-14 13:02:04","http://141.105.66.253/bins/yagi.i586","online","malware_download","elf","https://urlhaus.abuse.ch/url/79987/"
-"79986","2018-11-14 13:02:03","http://141.105.66.253/bins/yagi.ppc440","online","malware_download","elf","https://urlhaus.abuse.ch/url/79986/"
-"79985","2018-11-14 13:02:02","http://141.105.66.253/bins/yagi.m68k","online","malware_download","elf","https://urlhaus.abuse.ch/url/79985/"
-"79984","2018-11-14 13:02:01","http://141.105.66.253/bins/yagi.arm","online","malware_download","elf","https://urlhaus.abuse.ch/url/79984/"
-"79983","2018-11-14 13:01:02","http://141.105.66.253/bins/yagi.mpsl","online","malware_download","elf","https://urlhaus.abuse.ch/url/79983/"
-"79982","2018-11-14 13:00:04","http://141.105.66.253/bins/yagi.spc","online","malware_download","elf","https://urlhaus.abuse.ch/url/79982/"
-"79981","2018-11-14 13:00:03","http://141.105.66.253/bins/yagi.i686","online","malware_download","elf","https://urlhaus.abuse.ch/url/79981/"
-"79980","2018-11-14 13:00:02","http://141.105.66.253/bins/yagi.sh4","online","malware_download","elf","https://urlhaus.abuse.ch/url/79980/"
+"79987","2018-11-14 13:02:04","http://141.105.66.253/bins/yagi.i586","offline","malware_download","elf","https://urlhaus.abuse.ch/url/79987/"
+"79986","2018-11-14 13:02:03","http://141.105.66.253/bins/yagi.ppc440","offline","malware_download","elf","https://urlhaus.abuse.ch/url/79986/"
+"79985","2018-11-14 13:02:02","http://141.105.66.253/bins/yagi.m68k","offline","malware_download","elf","https://urlhaus.abuse.ch/url/79985/"
+"79984","2018-11-14 13:02:01","http://141.105.66.253/bins/yagi.arm","offline","malware_download","elf","https://urlhaus.abuse.ch/url/79984/"
+"79983","2018-11-14 13:01:02","http://141.105.66.253/bins/yagi.mpsl","offline","malware_download","elf","https://urlhaus.abuse.ch/url/79983/"
+"79982","2018-11-14 13:00:04","http://141.105.66.253/bins/yagi.spc","offline","malware_download","elf","https://urlhaus.abuse.ch/url/79982/"
+"79981","2018-11-14 13:00:03","http://141.105.66.253/bins/yagi.i686","offline","malware_download","elf","https://urlhaus.abuse.ch/url/79981/"
+"79980","2018-11-14 13:00:02","http://141.105.66.253/bins/yagi.sh4","offline","malware_download","elf","https://urlhaus.abuse.ch/url/79980/"
 "79979","2018-11-14 12:49:02","https://sightspansecurity.com/Az8bhPsa0/BIZ/PrivateBanking/","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/79979/"
 "79978","2018-11-14 12:27:04","http://192.227.186.151/worming.png","offline","malware_download","exe,Trickbot","https://urlhaus.abuse.ch/url/79978/"
 "79977","2018-11-14 12:26:04","http://192.227.186.151/toler.png","offline","malware_download","Trickbot","https://urlhaus.abuse.ch/url/79977/"
@@ -1896,7 +1917,7 @@
 "79975","2018-11-14 12:13:10","http://assurance-charente.fr/sfh","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/79975/"
 "79974","2018-11-14 12:13:09","http://ogrodyusmiechu.pl/iubv8v","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/79974/"
 "79973","2018-11-14 12:13:08","http://diahmarsidi.com/MPCTKG","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/79973/"
-"79972","2018-11-14 12:13:06","http://pizzeriarondo.si/z8cG","online","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/79972/"
+"79972","2018-11-14 12:13:06","http://pizzeriarondo.si/z8cG","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/79972/"
 "79971","2018-11-14 12:13:04","http://trabanatours.com/u","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/79971/"
 "79970","2018-11-14 12:08:54","http://casellamoving.com/587FUIZR/PAY/US","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/79970/"
 "79969","2018-11-14 12:08:53","http://clock.noixun.com/3sSnQZuzXGQtlC0VBs/SEP/PrivateBanking","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/79969/"
@@ -1928,7 +1949,7 @@
 "79943","2018-11-14 12:03:12","http://www.jmgroup-iq.com/img/biha.exe","offline","malware_download","exe,opendir,Smoke Loader","https://urlhaus.abuse.ch/url/79943/"
 "79942","2018-11-14 12:03:11","http://www.jmgroup-iq.com/img/cas.exe","offline","malware_download","exe,Loki,opendir","https://urlhaus.abuse.ch/url/79942/"
 "79941","2018-11-14 12:03:02","http://a.doko.moe/claigy.hta","offline","malware_download","hta,rtfkit","https://urlhaus.abuse.ch/url/79941/"
-"79940","2018-11-14 11:57:04","http://micropcsystem.com/vburieu/teursiz.exe","online","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/79940/"
+"79940","2018-11-14 11:57:04","http://micropcsystem.com/vburieu/teursiz.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/79940/"
 "79939","2018-11-14 11:48:17","http://jfogal.com/50682RUWTQCJG/BIZ/Business","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/79939/"
 "79938","2018-11-14 11:48:14","http://intranet2.providencia.cl/76720RANB/oamo/Business","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/79938/"
 "79937","2018-11-14 11:48:12","http://hciot.net/kPSX2Hd1gDpMKjdAa2Ya/219744KTN/BIZ/Commercial","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/79937/"
@@ -1937,7 +1958,7 @@
 "79934","2018-11-14 11:48:09","http://cine80.co.kr/wvw/22PSKBWS/oamo/Personal","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/79934/"
 "79933","2018-11-14 11:45:02","https://astrologyu.com/update/56v354yerg.txt","offline","malware_download","BITS,GBR,geofenced,headersfenced,ITA,ramnit","https://urlhaus.abuse.ch/url/79933/"
 "79932","2018-11-14 11:12:06","http://loei.drr.go.th/wp-content/6590845YZB/PAYROLL/Commercial","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/79932/"
-"79931","2018-11-14 11:12:05","http://189.47.10.54:19706/.i","online","malware_download","elf","https://urlhaus.abuse.ch/url/79931/"
+"79931","2018-11-14 11:12:05","http://189.47.10.54:19706/.i","offline","malware_download","elf","https://urlhaus.abuse.ch/url/79931/"
 "79930","2018-11-14 10:44:03","https://a.doko.moe/usrtij.jpg","offline","malware_download","exe,Loki,lokibot","https://urlhaus.abuse.ch/url/79930/"
 "79929","2018-11-14 10:28:03","https://uc666aea658e1a38f98e24c5fd6b.dl.dropboxusercontent.com/cd/0/get/AVjgvNoQvaB2tNIgYititW7BkgOs8MOJ0KVZ9hnSXuURYmAmLCSKOIhpKkIagckgWcvZcIykTEjQ0Sz65sd278UJviw1kmmswiAtGCejtxIPkoNDsroAUKBv8szAu1x1ClPRU5Xj9yoKmZDo-0irMtK0gVn40nK6_4-4VhvqGG55FppxEdLE4aUzc7tu3nr1tH4/file?dl=1","offline","malware_download","rar","https://urlhaus.abuse.ch/url/79929/"
 "79928","2018-11-14 09:47:20","http://giangnguyenreal.com/","offline","malware_download","emotet,epoch2,exe","https://urlhaus.abuse.ch/url/79928/"
@@ -2029,7 +2050,7 @@
 "79842","2018-11-14 07:20:55","http://nilsguzellik.com/wordpress/5486UHBAHJG/PAY/Personal","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/79842/"
 "79841","2018-11-14 07:20:54","http://mininghotel.biz/9N/SEP/Commercial","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/79841/"
 "79840","2018-11-14 07:20:24","http://zaini.in/03760FNWLO/WIRE/US","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/79840/"
-"79839","2018-11-14 07:20:22","http://harbayurveda.com/sites/EN_en/Invoice-Number-052614","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/79839/"
+"79839","2018-11-14 07:20:22","http://harbayurveda.com/sites/EN_en/Invoice-Number-052614","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/79839/"
 "79838","2018-11-14 07:20:20","http://lookbuylook.ru/417V/PAYROLL/Smallbusiness","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/79838/"
 "79837","2018-11-14 07:20:18","http://thespars.com/51XHW/identity/Business","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/79837/"
 "79836","2018-11-14 07:20:17","http://ruhelp.info/839363ZGLGF/biz/Personal","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/79836/"
@@ -2091,7 +2112,7 @@
 "79780","2018-11-14 07:18:18","http://budweiseradvert.com/0FS/PAYROLL/Business","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/79780/"
 "79779","2018-11-14 07:18:16","http://behcosanat.com/3N/SEP/Business","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/79779/"
 "79778","2018-11-14 07:18:15","http://kemahasiswaan.um.ac.id/wp-content/uploads/544XIWAQEOZ/PAYMENT/Smallbusiness","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/79778/"
-"79777","2018-11-14 07:18:12","http://simplemakemoneyonline.com/43504QXB/PAYMENT/Smallbusiness","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/79777/"
+"79777","2018-11-14 07:18:12","http://simplemakemoneyonline.com/43504QXB/PAYMENT/Smallbusiness","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/79777/"
 "79776","2018-11-14 07:18:10","http://chrislinegh.com/139DHYEFBLC/identity/Smallbusiness","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/79776/"
 "79775","2018-11-14 07:18:08","http://mrquick.co.il/wp-content/29E/WIRE/Commercial","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/79775/"
 "79774","2018-11-14 07:18:06","http://blacharhost.com/4XNSX/biz/Personal","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/79774/"
@@ -2124,11 +2145,11 @@
 "79747","2018-11-14 06:54:09","http://vpentimex.com/Dd1OSOO","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/79747/"
 "79746","2018-11-14 06:54:07","http://mentor1st.com/GPjQt2Pxe","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/79746/"
 "79745","2018-11-14 06:54:04","http://anayacontracting.ggbro.club/W61Td2h","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/79745/"
-"79744","2018-11-14 06:50:07","http://stud100.biz/nTXsGe8VH/","offline","malware_download","exe,heodo","https://urlhaus.abuse.ch/url/79744/"
+"79744","2018-11-14 06:50:07","http://stud100.biz/nTXsGe8VH/","online","malware_download","exe,heodo","https://urlhaus.abuse.ch/url/79744/"
 "79743","2018-11-14 06:46:25","http://cainfirley.com/lEGcINYm","offline","malware_download","None","https://urlhaus.abuse.ch/url/79743/"
 "79742","2018-11-14 06:46:23","http://xyhfountainlights.com/4846RXA/PAY/Personal/","offline","malware_download","heodo","https://urlhaus.abuse.ch/url/79742/"
 "79741","2018-11-14 06:46:21","http://xn--28-vlc2ak.xn--p1ai/454337ESYOSMTZ/PAYMENT/Smallbusiness/","online","malware_download","heodo","https://urlhaus.abuse.ch/url/79741/"
-"79739","2018-11-14 06:46:19","http://semra.com/LLC/US_us/Sales-Invoice/","offline","malware_download","heodo","https://urlhaus.abuse.ch/url/79739/"
+"79739","2018-11-14 06:46:19","http://semra.com/LLC/US_us/Sales-Invoice/","online","malware_download","heodo","https://urlhaus.abuse.ch/url/79739/"
 "79740","2018-11-14 06:46:19","http://showersw.com/files/US_us/Invoice-Corrections-for-18/74/","offline","malware_download","heodo","https://urlhaus.abuse.ch/url/79740/"
 "79738","2018-11-14 06:46:16","http://moratomengineering.com/1628920LHZHNATG/identity/Personal/","online","malware_download","heodo","https://urlhaus.abuse.ch/url/79738/"
 "79737","2018-11-14 06:46:15","http://meico.com.co/wp-content/plugins/wp-mail-smtp/33NGYR/identity/Smallbusiness/","offline","malware_download","heodo","https://urlhaus.abuse.ch/url/79737/"
@@ -2151,7 +2172,7 @@
 "79720","2018-11-14 06:44:18","http://conceptsacademy.co.in/wp-content/uploads/2018/En_us/Clients_Messages/2018-11/","offline","malware_download","None","https://urlhaus.abuse.ch/url/79720/"
 "79719","2018-11-14 06:44:16","http://baglung.net/US/Payments/112018/","offline","malware_download","heodo","https://urlhaus.abuse.ch/url/79719/"
 "79718","2018-11-14 06:44:02","http://aaag-maroc.com/EN_US/Messages/2018-11/","offline","malware_download","heodo","https://urlhaus.abuse.ch/url/79718/"
-"79717","2018-11-14 06:42:17","http://giangnguyenreal.com/T","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/79717/"
+"79717","2018-11-14 06:42:17","http://giangnguyenreal.com/T","online","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/79717/"
 "79716","2018-11-14 06:42:13","http://insumex.com.mx/zTMd2","online","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/79716/"
 "79715","2018-11-14 06:42:11","http://saisiddh.com/YoWZd4","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/79715/"
 "79714","2018-11-14 06:42:09","http://besttravels.live/5pU","online","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/79714/"
@@ -2189,7 +2210,7 @@
 "79682","2018-11-14 06:06:03","http://159.65.172.17/1956MYCLGUS/PAYMENT/Personal/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/79682/"
 "79681","2018-11-14 06:05:03","http://webmadrasa.com/US/Clients_Messages/11_18/","offline","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/79681/"
 "79680","2018-11-14 06:04:05","http://squamishplumbing.ca/EN_US/Messages/2018-11/","offline","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/79680/"
-"79679","2018-11-14 06:04:04","http://rtodealeradsforless.com/En_us/Payments/11_18/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/79679/"
+"79679","2018-11-14 06:04:04","http://rtodealeradsforless.com/En_us/Payments/11_18/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/79679/"
 "79678","2018-11-14 06:04:03","http://asesoresycasas.com.mx/US/Transactions/112018/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/79678/"
 "79677","2018-11-14 06:04:02","https://87.247.155.12/run.msi","offline","malware_download","None","https://urlhaus.abuse.ch/url/79677/"
 "79676","2018-11-14 06:02:26","http://34.244.180.39/wws.msi","offline","malware_download","None","https://urlhaus.abuse.ch/url/79676/"
@@ -2282,8 +2303,8 @@
 "79589","2018-11-13 22:36:24","http://lasnaro.com/476043RZK/BIZ/Commercial/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/79589/"
 "79588","2018-11-13 22:36:23","http://lahlopa.com/2160CMPRTBY/com/Business/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/79588/"
 "79587","2018-11-13 22:36:22","http://lahlopa.com/2160CMPRTBY/com/Business","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/79587/"
-"79586","2018-11-13 22:36:19","http://korczak.wielun.pl/57GACIZE/PAYMENT/Commercial/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/79586/"
-"79584","2018-11-13 22:36:18","http://keymailuk.com/212DJSPVTCX/ACH/Personal/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/79584/"
+"79586","2018-11-13 22:36:19","http://korczak.wielun.pl/57GACIZE/PAYMENT/Commercial/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/79586/"
+"79584","2018-11-13 22:36:18","http://keymailuk.com/212DJSPVTCX/ACH/Personal/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/79584/"
 "79585","2018-11-13 22:36:18","http://klining-expert.ru/FILE/EN_en/Invoice","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/79585/"
 "79583","2018-11-13 22:36:16","http://kebun.net/023LN/SEP/US/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/79583/"
 "79582","2018-11-13 22:36:12","http://katandimedia.org/5170RYALNRVA/PAYROLL/Smallbusiness/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/79582/"
@@ -2352,7 +2373,7 @@
 "79519","2018-11-13 20:42:02","http://bespoke.masiavuvu.fr/5RM/ACH/Commercial/","online","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/79519/"
 "79518","2018-11-13 20:40:14","http://andreasmannegren.com/wp-content/plugins/revslider/views/great2_outputBD4467F.exe","offline","malware_download","exe,Formbook","https://urlhaus.abuse.ch/url/79518/"
 "79517","2018-11-13 20:40:11","http://www.multiversemail.com/emb/link_link.php?M=1936522&N=755&L=420&F=H","online","malware_download","doc","https://urlhaus.abuse.ch/url/79517/"
-"79516","2018-11-13 20:30:04","http://korczak.wielun.pl/57GACIZE/PAYMENT/Commercial","online","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/79516/"
+"79516","2018-11-13 20:30:04","http://korczak.wielun.pl/57GACIZE/PAYMENT/Commercial","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/79516/"
 "79515","2018-11-13 20:30:03","http://209.141.33.126/idinahui/proxypipe.sh4","offline","malware_download","elf","https://urlhaus.abuse.ch/url/79515/"
 "79514","2018-11-13 20:20:06","http://ntslab.pl/IRIhtk","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/79514/"
 "79513","2018-11-13 20:20:04","http://elsoler.cat/7JxzZW","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/79513/"
@@ -2377,7 +2398,7 @@
 "79494","2018-11-13 19:32:07","http://woodkids.fun/2MXJ/com/Smallbusiness","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/79494/"
 "79493","2018-11-13 19:32:05","http://ralfschumann.com/DOC/En/Invoice-for-t/o-11/13/2018","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/79493/"
 "79492","2018-11-13 19:32:04","http://visionforconstruction.com/doc/US_us/Scan","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/79492/"
-"79491","2018-11-13 19:32:03","http://juegosaleo.com/va2sYCtNM0SFogKwpYa/SEP/IhreSparkasse","online","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/79491/"
+"79491","2018-11-13 19:32:03","http://juegosaleo.com/va2sYCtNM0SFogKwpYa/SEP/IhreSparkasse","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/79491/"
 "79490","2018-11-13 19:16:03","http://estudiostratta.com/1LROMPGR/com/Commercial/","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/79490/"
 "79489","2018-11-13 19:15:02","http://proffice.com.pl/2091826KVVFRYBA/SWIFT/Commercial/","online","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/79489/"
 "79488","2018-11-13 19:03:05","http://performance.mn/US/Information/11_18/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/79488/"
@@ -2393,7 +2414,7 @@
 "79478","2018-11-13 18:30:05","http://mini-onderdelen.nl/xerox/En_us/Invoice-Corrections-for-86/86","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/79478/"
 "79476","2018-11-13 18:30:04","http://lunixes.myjino.ru/D69kUsZix6/SWIFT/Firmenkunden","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/79476/"
 "79477","2018-11-13 18:30:04","http://lunixes.myjino.ru/D69kUsZix6/SWIFT/Firmenkunden/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/79477/"
-"79474","2018-11-13 18:30:03","http://hipkerstpakket.nl/newsletter/US_us/Invoice-for-you","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/79474/"
+"79474","2018-11-13 18:30:03","http://hipkerstpakket.nl/newsletter/US_us/Invoice-for-you","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/79474/"
 "79475","2018-11-13 18:30:03","http://hipkerstpakket.nl/newsletter/US_us/Invoice-for-you/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/79475/"
 "79473","2018-11-13 18:24:03","http://tudosobreseguros.org.br/wp-content/_uploads/4uehh8m/","offline","malware_download","exe,heodo","https://urlhaus.abuse.ch/url/79473/"
 "79472","2018-11-13 18:23:09","http://www.baglung.net/US/Payments/112018/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/79472/"
@@ -2479,10 +2500,10 @@
 "79391","2018-11-13 17:50:31","http://bihanirealty.com/wp-content/uploads/32708ACSWK/WIRE/Smallbusiness","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/79391/"
 "79390","2018-11-13 17:50:29","http://asmnutrition.ru/doc/En_us/Invoice","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/79390/"
 "79389","2018-11-13 17:50:28","http://seegeesolutions.com/DOC/En_us/Invoices-attached","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/79389/"
-"79388","2018-11-13 17:50:26","http://keymailuk.com/212DJSPVTCX/ACH/Personal","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/79388/"
+"79388","2018-11-13 17:50:26","http://keymailuk.com/212DJSPVTCX/ACH/Personal","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/79388/"
 "79387","2018-11-13 17:50:23","http://www.conci.pt/2752LRESK/PAYROLL/US","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/79387/"
 "79386","2018-11-13 17:50:22","http://kebun.net/023LN/SEP/US","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/79386/"
-"79385","2018-11-13 17:50:19","http://korczak.wielun.pl//57GACIZE/PAYMENT/Commercial","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/79385/"
+"79385","2018-11-13 17:50:19","http://korczak.wielun.pl//57GACIZE/PAYMENT/Commercial","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/79385/"
 "79384","2018-11-13 17:50:18","http://esf-ltd.com/INFO/En_us/Invoice-9762238","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/79384/"
 "79382","2018-11-13 17:50:17","http://repka.digital/2jBu5yOGKm5/SWIFT/Privatkunden","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/79382/"
 "79380","2018-11-13 17:50:14","http://wire-products.co.za/845XO/PAYROLL/Commercial","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/79380/"
@@ -2794,7 +2815,7 @@
 "79069","2018-11-13 06:09:03","http://greencolb.com/DOC/WIZZYBOY.exe","offline","malware_download","exe,HawkEye","https://urlhaus.abuse.ch/url/79069/"
 "79068","2018-11-13 06:08:04","http://greencolb.com/DOC/limpapa.exe","offline","malware_download","exe,HawkEye","https://urlhaus.abuse.ch/url/79068/"
 "79067","2018-11-13 06:07:04","http://greencolb.com/DOC/DOCJ.exe","offline","malware_download","exe,HawkEye","https://urlhaus.abuse.ch/url/79067/"
-"79066","2018-11-13 05:12:04","http://greencolb.com/DOC/bongo.exe","online","malware_download","exe,HawkEye","https://urlhaus.abuse.ch/url/79066/"
+"79066","2018-11-13 05:12:04","http://greencolb.com/DOC/bongo.exe","offline","malware_download","exe,HawkEye","https://urlhaus.abuse.ch/url/79066/"
 "79065","2018-11-13 05:11:05","http://micropcsystem.com/ggnrt/ignrtx.exe","online","malware_download","exe,Formbook,RemcosRAT","https://urlhaus.abuse.ch/url/79065/"
 "79064","2018-11-13 04:55:15","http://xn--80agpqajcme4aij.xn--p1ai/FOFWzv/de/200-Jahre","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/79064/"
 "79063","2018-11-13 04:55:14","http://www.greaterhopeinc.org/wp-content/plugins/disable-xml-rpc/tthCo0yb/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/79063/"
@@ -2849,7 +2870,7 @@
 "79014","2018-11-13 03:00:04","https://a.doko.moe/shuipl.msi","offline","malware_download","Formbook","https://urlhaus.abuse.ch/url/79014/"
 "79013","2018-11-13 02:58:02","http://energym63.com/10451372/ie2.exe","online","malware_download","exe,tinynuke","https://urlhaus.abuse.ch/url/79013/"
 "79012","2018-11-13 02:44:31","http://investicon.in/wp-content/plugins/workfence/509DNAHXVHH/PAYMENT/US","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/79012/"
-"79011","2018-11-13 02:40:06","http://tryonpres.org/templates/main/css/sserv.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/79011/"
+"79011","2018-11-13 02:40:06","http://tryonpres.org/templates/main/css/sserv.jpg","online","malware_download","exe","https://urlhaus.abuse.ch/url/79011/"
 "79010","2018-11-13 02:12:05","http://mandala.mn/update/cab.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/79010/"
 "79009","2018-11-13 02:08:03","https://a.doko.moe/mhyqwy.msi","offline","malware_download","None","https://urlhaus.abuse.ch/url/79009/"
 "79008","2018-11-13 01:38:02","http://167.99.87.204/apache2","offline","malware_download","elf","https://urlhaus.abuse.ch/url/79008/"
@@ -3299,7 +3320,7 @@
 "78527","2018-11-12 06:55:05","https://e.coka.la/PugNto.jpg","online","malware_download","exe,NanoCore","https://urlhaus.abuse.ch/url/78527/"
 "78526","2018-11-12 06:55:04","http://www.davidjuliet.com/EN_en/DOC/Auditor-of-State-Notification-of-EFT-Deposit/","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/78526/"
 "78525","2018-11-12 06:55:03","http://www.davidjuliet.com/Past-Due-Invoices","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/78525/"
-"78524","2018-11-12 06:54:05","http://151.233.56.139:43968/.i","online","malware_download","elf","https://urlhaus.abuse.ch/url/78524/"
+"78524","2018-11-12 06:54:05","http://151.233.56.139:43968/.i","offline","malware_download","elf","https://urlhaus.abuse.ch/url/78524/"
 "78523","2018-11-12 06:54:02","http://188.215.245.237/bins/tnxl2.mips","online","malware_download","elf","https://urlhaus.abuse.ch/url/78523/"
 "78522","2018-11-12 06:53:02","http://188.215.245.237/bins/tnxl2.ppc","online","malware_download","elf","https://urlhaus.abuse.ch/url/78522/"
 "78521","2018-11-12 06:53:01","http://188.215.245.237/bins/tnxl2.arm","online","malware_download","elf","https://urlhaus.abuse.ch/url/78521/"
@@ -3344,10 +3365,10 @@
 "78482","2018-11-12 04:35:09","http://greencolb.com/DOC/milito%20guy.exe","offline","malware_download","exe,HawkEye","https://urlhaus.abuse.ch/url/78482/"
 "78481","2018-11-12 04:35:07","http://greencolb.com/DOC/boblero.exe","offline","malware_download","exe,HawkEye","https://urlhaus.abuse.ch/url/78481/"
 "78480","2018-11-12 04:35:05","http://greencolb.com/DOC/wiz.exe","offline","malware_download","exe,HawkEye","https://urlhaus.abuse.ch/url/78480/"
-"78479","2018-11-12 04:34:11","http://greencolb.com/DOC/face.exe","online","malware_download","exe,HawkEye","https://urlhaus.abuse.ch/url/78479/"
+"78479","2018-11-12 04:34:11","http://greencolb.com/DOC/face.exe","offline","malware_download","exe,HawkEye","https://urlhaus.abuse.ch/url/78479/"
 "78478","2018-11-12 04:34:09","http://greencolb.com/DOC/zico.exe","online","malware_download","exe,HawkEye","https://urlhaus.abuse.ch/url/78478/"
 "78477","2018-11-12 04:34:07","http://greencolb.com/DOC/new%20senkere.exe","offline","malware_download","exe,HawkEye","https://urlhaus.abuse.ch/url/78477/"
-"78476","2018-11-12 04:34:05","http://greencolb.com/DOC/challashit.exe","online","malware_download","exe,HawkEye","https://urlhaus.abuse.ch/url/78476/"
+"78476","2018-11-12 04:34:05","http://greencolb.com/DOC/challashit.exe","offline","malware_download","exe,HawkEye","https://urlhaus.abuse.ch/url/78476/"
 "78475","2018-11-12 04:25:05","http://greencolb.com/DOC/kroossss.exe","offline","malware_download","exe,HawkEye","https://urlhaus.abuse.ch/url/78475/"
 "78474","2018-11-12 04:12:03","http://173.234.25.110/pftp","offline","malware_download","elf","https://urlhaus.abuse.ch/url/78474/"
 "78473","2018-11-12 04:11:03","http://173.234.25.110/ftp","offline","malware_download","elf","https://urlhaus.abuse.ch/url/78473/"
@@ -3533,7 +3554,7 @@
 "78292","2018-11-10 22:09:04","https://s3.us-east-2.amazonaws.com/qued/reregli.exe","offline","malware_download","exe,NanoCore,rat","https://urlhaus.abuse.ch/url/78292/"
 "78291","2018-11-10 22:08:38","https://s3.us-east-2.amazonaws.com/qued/jjjjjjjjjjjjjjjjjjjjjjjj.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/78291/"
 "78290","2018-11-10 22:08:35","https://s3.us-east-2.amazonaws.com/qued/faxbyjeny33.exe","offline","malware_download","exe,Imminent,ImminentRAT,rat","https://urlhaus.abuse.ch/url/78290/"
-"78289","2018-11-10 22:08:32","https://pasteboard.co/images/HLoGpNO.jpg/download","online","malware_download","exe","https://urlhaus.abuse.ch/url/78289/"
+"78289","2018-11-10 22:08:32","https://pasteboard.co/images/HLoGpNO.jpg/download","offline","malware_download","exe","https://urlhaus.abuse.ch/url/78289/"
 "78288","2018-11-10 22:08:30","https://s3.us-east-2.amazonaws.com/qued/dcu.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/78288/"
 "78287","2018-11-10 22:08:28","https://s3.us-east-2.amazonaws.com/qued/Protected.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/78287/"
 "78286","2018-11-10 22:08:25","https://s3.us-east-2.amazonaws.com/qued/uio.jpg","offline","malware_download","exe,NanoCore,rat","https://urlhaus.abuse.ch/url/78286/"
@@ -4069,10 +4090,10 @@
 "77729","2018-11-09 06:39:08","http://greencolb.com/DOC/dec%20bro.exe","offline","malware_download","exe,HawkEye","https://urlhaus.abuse.ch/url/77729/"
 "77728","2018-11-09 06:39:07","http://greencolb.com/DOC/phynonigga.exe","offline","malware_download","exe,HawkEye","https://urlhaus.abuse.ch/url/77728/"
 "77727","2018-11-09 06:39:05","http://greencolb.com/DOC/wene.exe","offline","malware_download","exe,HawkEye","https://urlhaus.abuse.ch/url/77727/"
-"77726","2018-11-09 06:38:12","http://greencolb.com/DOC/jasparo.exe","online","malware_download","exe,HawkEye","https://urlhaus.abuse.ch/url/77726/"
+"77726","2018-11-09 06:38:12","http://greencolb.com/DOC/jasparo.exe","offline","malware_download","exe,HawkEye","https://urlhaus.abuse.ch/url/77726/"
 "77725","2018-11-09 06:38:10","http://greencolb.com/DOC/decku.exe","offline","malware_download","exe,HawkEye","https://urlhaus.abuse.ch/url/77725/"
 "77724","2018-11-09 06:38:08","http://greencolb.com/DOC/ygman.exe","offline","malware_download","exe,HawkEye","https://urlhaus.abuse.ch/url/77724/"
-"77723","2018-11-09 06:38:05","http://greencolb.com/DOC/limpopo.exe","online","malware_download","exe,HawkEye","https://urlhaus.abuse.ch/url/77723/"
+"77723","2018-11-09 06:38:05","http://greencolb.com/DOC/limpopo.exe","offline","malware_download","exe,HawkEye","https://urlhaus.abuse.ch/url/77723/"
 "77722","2018-11-09 06:37:08","http://greencolb.com/DOC/cha.exe","offline","malware_download","exe,HawkEye","https://urlhaus.abuse.ch/url/77722/"
 "77721","2018-11-09 06:36:07","http://duwon.net/wpp-app/K/","online","malware_download","exe,heodo","https://urlhaus.abuse.ch/url/77721/"
 "77720","2018-11-09 06:36:04","http://diskominfo.asahankab.go.id/kkYOegA/","offline","malware_download","exe,heodo","https://urlhaus.abuse.ch/url/77720/"
@@ -4199,7 +4220,7 @@
 "77599","2018-11-09 02:29:19","http://forzavoila.net/En_us/Clients_information/11_18","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/77599/"
 "77598","2018-11-09 02:29:18","http://atelierdellegno.it/EN_US/Clients/11_18","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/77598/"
 "77597","2018-11-09 02:29:17","http://karyailmiah.stks.ac.id/wp-admin/EN_US/Clients_Messages/2018-11","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/77597/"
-"77596","2018-11-09 02:29:09","http://korczak.wielun.pl//US/ACH/112018","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/77596/"
+"77596","2018-11-09 02:29:09","http://korczak.wielun.pl//US/ACH/112018","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/77596/"
 "77595","2018-11-09 02:29:08","http://muschelsaal-bielefeld.com/US/Transactions/2018-11","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/77595/"
 "77594","2018-11-09 02:29:07","http://amalblysk.eu/FILE/US/Invoices-attached","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/77594/"
 "77593","2018-11-09 02:29:06","http://hciot.net/3KZSNNTXT/Corporation/US_us/Invoice-receipt","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/77593/"
@@ -4310,7 +4331,7 @@
 "77477","2018-11-09 01:46:15","http://shaunsmyth.ch/2424068FKYQQBG/PAYMENT/US/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/77477/"
 "77475","2018-11-09 01:46:14","http://seo1mexico.com/Corporation/US/Scan/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/77475/"
 "77473","2018-11-09 01:46:13","http://sahinhurdageridonusum.net/96399M/SWIFT/Business","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/77473/"
-"77474","2018-11-09 01:46:13","http://salon-semeynaya.ru/6JCUBEA/identity/US/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/77474/"
+"77474","2018-11-09 01:46:13","http://salon-semeynaya.ru/6JCUBEA/identity/US/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/77474/"
 "77472","2018-11-09 01:46:11","http://sagestls.com/wp-content/95OPU/identity/Commercial/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/77472/"
 "77471","2018-11-09 01:46:10","http://raeesp.com/4827GWQCGH/com/Commercial/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/77471/"
 "77470","2018-11-09 01:46:09","http://qinyongjin.net/yqkjgqgj/4532692NJ/biz/Business/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/77470/"
@@ -4325,13 +4346,13 @@
 "77461","2018-11-09 01:45:58","http://netsupmali.com/34DJZJAKV/WIRE/Smallbusiness/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/77461/"
 "77460","2018-11-09 01:45:57","http://napm-india.org/1LQU/SEP/US/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/77460/"
 "77459","2018-11-09 01:45:56","http://mosti-tonneli.ru/sites/En/Open-Past-Due-Orders/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/77459/"
-"77458","2018-11-09 01:45:55","http://mironovka-school.ru/doc/US/Outstanding-Invoices/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/77458/"
+"77458","2018-11-09 01:45:55","http://mironovka-school.ru/doc/US/Outstanding-Invoices/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/77458/"
 "77457","2018-11-09 01:45:35","http://mint05.ph/5VCIFIJ/WIRE/Personal/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/77457/"
 "77456","2018-11-09 01:45:32","http://lrksafari.com/126082IR/SWIFT/Business/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/77456/"
 "77455","2018-11-09 01:45:31","http://lovalledor.cl/DOC/US/Past-Due-Invoices/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/77455/"
 "77454","2018-11-09 01:45:30","http://loei.drr.go.th/wp-content/FILE/US/Document-needed/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/77454/"
 "77453","2018-11-09 01:45:29","http://laurascarr.com/INFO/US_us/Overdue-payment/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/77453/"
-"77452","2018-11-09 01:45:28","http://lambpainting.com/281690VGW/PAY/Smallbusiness/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/77452/"
+"77452","2018-11-09 01:45:28","http://lambpainting.com/281690VGW/PAY/Smallbusiness/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/77452/"
 "77450","2018-11-09 01:45:26","http://juegosaleo.com/sites/EN_en/Open-Past-Due-Orders/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/77450/"
 "77451","2018-11-09 01:45:26","http://kamadecor.ru/qe0mKLJTQYHYFUSSs/BIZ/PrivateBanking/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/77451/"
 "77448","2018-11-09 01:45:25","http://inspiraat.nu/MwcvvWPg8pVbOYZZ4/SEPA/PrivateBanking/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/77448/"
@@ -4444,7 +4465,7 @@
 "77342","2018-11-08 23:54:18","http://mebelsb32.ru/US/Documents/2018-11/","offline","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/77342/"
 "77341","2018-11-08 23:54:17","http://mangos.ir/wp-content/En_us/Documents/2018-11/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/77341/"
 "77340","2018-11-08 23:54:15","http://librafans.com/US/Transaction_details/2018-11/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/77340/"
-"77339","2018-11-08 23:54:14","http://korczak.wielun.pl/US/ACH/112018/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/77339/"
+"77339","2018-11-08 23:54:14","http://korczak.wielun.pl/US/ACH/112018/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/77339/"
 "77337","2018-11-08 23:54:13","http://himalayanridersandtrekkers.com/EN_US/Messages/2018-11/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/77337/"
 "77338","2018-11-08 23:54:13","http://irparnian.ir/administrator/En_us/Attachments/2018-11/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/77338/"
 "77336","2018-11-08 23:54:11","http://friv10friv100.com/En_us/Clients_information/112018/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/77336/"
@@ -4536,7 +4557,7 @@
 "77249","2018-11-08 21:05:07","http://spurpromo.com/b9eYIWM","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/77249/"
 "77248","2018-11-08 21:05:03","http://ipuclascolinas.com/8x6SFxw7","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/77248/"
 "77247","2018-11-08 21:02:06","http://destinasidunia.com/files/En_us/INVOICE-STATUS/Pay-Invoice","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/77247/"
-"77246","2018-11-08 21:00:21","http://korczak.wielun.pl/US/ACH/112018","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/77246/"
+"77246","2018-11-08 21:00:21","http://korczak.wielun.pl/US/ACH/112018","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/77246/"
 "77245","2018-11-08 21:00:19","http://guvelioglu.com/En_us/Clients/2018-11","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/77245/"
 "77244","2018-11-08 21:00:18","http://masterdireccionyliderazgo.webs.uvigo.es/EN_US/Documents/112018","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/77244/"
 "77243","2018-11-08 21:00:16","http://laurascarr.com/INFO/US_us/Overdue-payment","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/77243/"
@@ -4763,7 +4784,7 @@
 "77021","2018-11-08 15:46:48","http://fastoffset.ru/p9gxj4I9d7LYdcFZRU/de/Service-Center","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/77021/"
 "77020","2018-11-08 15:46:47","http://bullet-time.su/video/En_us/Information/112018","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/77020/"
 "77019","2018-11-08 15:46:46","http://emilyxu.com/5AFBW/BIZ/Smallbusiness","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/77019/"
-"77018","2018-11-08 15:46:35","http://mironovka-school.ru/doc/US/Outstanding-Invoices)","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/77018/"
+"77018","2018-11-08 15:46:35","http://mironovka-school.ru/doc/US/Outstanding-Invoices)","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/77018/"
 "77017","2018-11-08 15:41:07","https://e.coka.la/lRTczu.jpg","online","malware_download","exe,RemcosRAT","https://urlhaus.abuse.ch/url/77017/"
 "77015","2018-11-08 15:41:04","https://a.doko.moe/fibduf.jpg","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/77015/"
 "77013","2018-11-08 14:52:01","http://cleaningprof.ru/6006590QH/BIZ/Personal/","offline","malware_download","doc","https://urlhaus.abuse.ch/url/77013/"
@@ -4831,7 +4852,7 @@
 "76952","2018-11-08 14:42:49","http://investicon.in/wp-content/plugins/workfence/89614BAPN/PAY/Smallbusiness","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/76952/"
 "76950","2018-11-08 14:42:46","http://www.modernizar.com.br/062OFLNJWG/PAY/Commercial","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/76950/"
 "76949","2018-11-08 14:42:43","http://perflow.com/990521WYBZFUKO/SWIFT/Smallbusiness","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/76949/"
-"76948","2018-11-08 14:42:11","http://mironovka-school.ru/doc/US/Outstanding-Invoices","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/76948/"
+"76948","2018-11-08 14:42:11","http://mironovka-school.ru/doc/US/Outstanding-Invoices","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/76948/"
 "76947","2018-11-08 14:41:39","http://futuregarage.com.br/files/US_us/Invoice","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/76947/"
 "76946","2018-11-08 14:41:38","http://www.finacore.com/finuzs/068744DPKQJJZB/biz/Business","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/76946/"
 "76945","2018-11-08 14:41:27","http://hellodocumentary.com/doc/EN_en/Invoices-Overdue","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/76945/"
@@ -4955,7 +4976,7 @@
 "76813","2018-11-08 12:35:06","http://greencolb.com/DOC/eyoYG.exe","offline","malware_download","exe,HawkEye","https://urlhaus.abuse.ch/url/76813/"
 "76812","2018-11-08 12:35:05","http://greencolb.com/DOC/jaspero.exe","offline","malware_download","exe,HawkEye","https://urlhaus.abuse.ch/url/76812/"
 "76811","2018-11-08 12:35:04","http://greencolb.com/DOC/phynofino.exe","offline","malware_download","exe,HawkEye","https://urlhaus.abuse.ch/url/76811/"
-"76810","2018-11-08 12:18:06","http://greencolb.com/DOC/okilo.exe","online","malware_download","exe,HawkEye","https://urlhaus.abuse.ch/url/76810/"
+"76810","2018-11-08 12:18:06","http://greencolb.com/DOC/okilo.exe","offline","malware_download","exe,HawkEye","https://urlhaus.abuse.ch/url/76810/"
 "76809","2018-11-08 12:18:04","http://greencolb.com/DOC/BONGOTBV.exe","offline","malware_download","exe,HawkEye","https://urlhaus.abuse.ch/url/76809/"
 "76808","2018-11-08 12:18:01","http://104.206.242.208/wiinnlog.doc","offline","malware_download","RTF","https://urlhaus.abuse.ch/url/76808/"
 "76807","2018-11-08 12:17:01","http://104.206.242.208/wiininilog.doc","offline","malware_download","AZORult,RTF","https://urlhaus.abuse.ch/url/76807/"
@@ -5622,7 +5643,7 @@
 "76143","2018-11-07 19:10:02","http://balassi-eger.hu/xerox/En/Invoice-9057893/","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/76143/"
 "76142","2018-11-07 19:09:02","http://sempatikopekoteli.com/Corporation/US_us/Invoice-46582575-November/","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/76142/"
 "76141","2018-11-07 19:07:02","http://diamondlanka.info/files/En_us/Open-invoices/","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/76141/"
-"76140","2018-11-07 18:31:06","http://greencolb.com/DOC/ygguy.exe","online","malware_download","HawkEye","https://urlhaus.abuse.ch/url/76140/"
+"76140","2018-11-07 18:31:06","http://greencolb.com/DOC/ygguy.exe","offline","malware_download","HawkEye","https://urlhaus.abuse.ch/url/76140/"
 "76139","2018-11-07 18:31:05","http://greencolb.com/DOC/wizzyboi.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/76139/"
 "76138","2018-11-07 18:31:03","http://greencolb.com/DOC/phynoshit.exe","offline","malware_download","HawkEye","https://urlhaus.abuse.ch/url/76138/"
 "76137","2018-11-07 18:30:15","http://greencolb.com/DOC/limpo.exe","offline","malware_download","HawkEye","https://urlhaus.abuse.ch/url/76137/"
@@ -5630,8 +5651,8 @@
 "76135","2018-11-07 18:30:12","http://greencolb.com/DOC/frankie.exe","offline","malware_download","HawkEye","https://urlhaus.abuse.ch/url/76135/"
 "76134","2018-11-07 18:30:11","http://greencolb.com/DOC/efizzy.exe","offline","malware_download","HawkEye","https://urlhaus.abuse.ch/url/76134/"
 "76133","2018-11-07 18:30:10","http://greencolb.com/DOC/doc.exe","offline","malware_download","HawkEye","https://urlhaus.abuse.ch/url/76133/"
-"76132","2018-11-07 18:30:08","http://greencolb.com/DOC/bless.exe","online","malware_download","HawkEye","https://urlhaus.abuse.ch/url/76132/"
-"76131","2018-11-07 18:30:07","http://greencolb.com/DOC/barrister.exe","online","malware_download","HawkEye","https://urlhaus.abuse.ch/url/76131/"
+"76132","2018-11-07 18:30:08","http://greencolb.com/DOC/bless.exe","offline","malware_download","HawkEye","https://urlhaus.abuse.ch/url/76132/"
+"76131","2018-11-07 18:30:07","http://greencolb.com/DOC/barrister.exe","offline","malware_download","HawkEye","https://urlhaus.abuse.ch/url/76131/"
 "76130","2018-11-07 18:30:06","http://greencolb.com/DOC/YGshit.exe","offline","malware_download","HawkEye","https://urlhaus.abuse.ch/url/76130/"
 "76129","2018-11-07 18:30:05","http://greencolb.com/DOC/BOB.exe","offline","malware_download","HawkEye","https://urlhaus.abuse.ch/url/76129/"
 "76128","2018-11-07 18:08:16","http://goldschmittestans.ch/wtqNM","offline","malware_download","None","https://urlhaus.abuse.ch/url/76128/"
@@ -5808,7 +5829,7 @@
 "75955","2018-11-07 15:09:33","http://jinan.pengai.com.cn/wp-content/uploads/1863VY/identity/US","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/75955/"
 "75954","2018-11-07 15:09:28","http://www.shevruh.com.ua/En_us/Transaction_details/112018","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/75954/"
 "75953","2018-11-07 15:09:24","http://magicmoove.com/497910JJP/PAY/Smallbusiness","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/75953/"
-"75952","2018-11-07 15:09:22","http://lambpainting.com/281690VGW/PAY/Smallbusiness","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/75952/"
+"75952","2018-11-07 15:09:22","http://lambpainting.com/281690VGW/PAY/Smallbusiness","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/75952/"
 "75951","2018-11-07 15:09:20","http://avion-x.com/En_us/Payments/11_18","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/75951/"
 "75950","2018-11-07 15:09:18","http://duzcetekbiranahtar.com/En_us/Transactions-details/11_18","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/75950/"
 "75949","2018-11-07 15:09:17","http://www.playden.in/US/Attachments/2018-11","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/75949/"
@@ -5914,8 +5935,8 @@
 "75849","2018-11-07 14:37:01","http://www.alliancenh.com/21540QTUBNJM/com/Personal/","offline","malware_download","doc","https://urlhaus.abuse.ch/url/75849/"
 "75848","2018-11-07 14:36:13","http://tangfuzi.com/562498CHTL/biz/Business","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/75848/"
 "75847","2018-11-07 12:46:03","https://alitamo.us/known","offline","malware_download","gootkit,ITA","https://urlhaus.abuse.ch/url/75847/"
-"75846","2018-11-07 12:25:07","http://46.29.165.143/fearlessntpd","online","malware_download","elf","https://urlhaus.abuse.ch/url/75846/"
-"75845","2018-11-07 12:25:06","http://46.29.165.143/fearlessopenssh","offline","malware_download","elf","https://urlhaus.abuse.ch/url/75845/"
+"75846","2018-11-07 12:25:07","http://46.29.165.143/fearlessntpd","offline","malware_download","elf","https://urlhaus.abuse.ch/url/75846/"
+"75845","2018-11-07 12:25:06","http://46.29.165.143/fearlessopenssh","online","malware_download","elf","https://urlhaus.abuse.ch/url/75845/"
 "75844","2018-11-07 12:25:05","http://cdncomfortgroup.website/kub/tir/ajax.exe","offline","malware_download","AZORult,exe","https://urlhaus.abuse.ch/url/75844/"
 "75843","2018-11-07 12:25:04","http://e.coka.la/rYjYdE.jpg","online","malware_download","exe,HawkEye","https://urlhaus.abuse.ch/url/75843/"
 "75842","2018-11-07 12:24:03","https://e.coka.la/TtcjAF.jpg","online","malware_download","exe","https://urlhaus.abuse.ch/url/75842/"
@@ -6216,14 +6237,14 @@
 "75544","2018-11-07 07:05:02","http://185.244.25.248/xm2cron","online","malware_download","elf","https://urlhaus.abuse.ch/url/75544/"
 "75542","2018-11-07 07:04:47","http://167.114.111.251/i686","offline","malware_download","elf","https://urlhaus.abuse.ch/url/75542/"
 "75541","2018-11-07 07:04:46","http://46.29.165.143/fearlessapache2","online","malware_download","elf","https://urlhaus.abuse.ch/url/75541/"
-"75540","2018-11-07 07:03:58","http://46.29.165.143/fearlesstftp","online","malware_download","elf","https://urlhaus.abuse.ch/url/75540/"
+"75540","2018-11-07 07:03:58","http://46.29.165.143/fearlesstftp","offline","malware_download","elf","https://urlhaus.abuse.ch/url/75540/"
 "75539","2018-11-07 07:03:02","http://45.76.1.172/AB4g5/Josho.ppc","offline","malware_download","elf","https://urlhaus.abuse.ch/url/75539/"
 "75538","2018-11-07 07:02:03","http://185.244.25.248/xm2ntpd","online","malware_download","elf","https://urlhaus.abuse.ch/url/75538/"
 "75537","2018-11-07 07:02:03","http://46.29.165.143/fearlesswget","online","malware_download","elf","https://urlhaus.abuse.ch/url/75537/"
 "75536","2018-11-07 07:01:05","http://185.244.25.248/xm2tftp","online","malware_download","elf","https://urlhaus.abuse.ch/url/75536/"
 "75535","2018-11-07 07:01:04","http://45.76.1.172/AB4g5/Josho.arm6","offline","malware_download","elf","https://urlhaus.abuse.ch/url/75535/"
 "75534","2018-11-07 07:01:03","http://167.114.111.251/armv7l","offline","malware_download","elf","https://urlhaus.abuse.ch/url/75534/"
-"75533","2018-11-07 07:01:02","http://46.29.165.143/fearlessftp","online","malware_download","elf","https://urlhaus.abuse.ch/url/75533/"
+"75533","2018-11-07 07:01:02","http://46.29.165.143/fearlessftp","offline","malware_download","elf","https://urlhaus.abuse.ch/url/75533/"
 "75532","2018-11-07 07:00:04","http://167.114.111.251/powerpc","offline","malware_download","elf","https://urlhaus.abuse.ch/url/75532/"
 "75530","2018-11-07 07:00:03","http://167.114.111.251/m68k","offline","malware_download","elf","https://urlhaus.abuse.ch/url/75530/"
 "75531","2018-11-07 07:00:03","http://89.40.127.84/Hytek/Hytek.arm6","offline","malware_download","elf","https://urlhaus.abuse.ch/url/75531/"
@@ -6842,7 +6863,7 @@
 "74912","2018-11-06 13:32:03","http://gpa.com.pt/omklzG2kK","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/74912/"
 "74911","2018-11-06 13:27:04","http://gpa.com.pt/omklzG2kK/","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/74911/"
 "74910","2018-11-06 13:13:02","https://dhcboston.com/update/47h475ytdfetrhb.txt","offline","malware_download","BITS,certutil,GBR,geofenced,headersfenced,ramnit,sLoad","https://urlhaus.abuse.ch/url/74910/"
-"74909","2018-11-06 12:57:32","http://hexadevelopers.com/Download/US_us/Past-Due-Invoice/","online","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/74909/"
+"74909","2018-11-06 12:57:32","http://hexadevelopers.com/Download/US_us/Past-Due-Invoice/","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/74909/"
 "74908","2018-11-06 12:57:02","http://prva-gradanska-posmrtna-pripomoc.hr/0599AOLG/PAYROLL/Commercial/","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/74908/"
 "74907","2018-11-06 12:55:04","http://garamaproperty.com/scan/En_us/Sales-Invoice/","online","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/74907/"
 "74906","2018-11-06 12:54:04","http://imefer.com.br/96500B/identity/Smallbusiness/","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/74906/"
@@ -6955,7 +6976,7 @@
 "74799","2018-11-06 08:39:21","http://luchars.com/3317479BDHAUO/WIRE/Commercial","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/74799/"
 "74798","2018-11-06 08:39:13","http://mactransport.ca/552558KI/PAYROLL/Personal","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/74798/"
 "74797","2018-11-06 08:39:11","http://groupesival.com/Nov2018/En_us/Overdue-payment","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/74797/"
-"74796","2018-11-06 08:39:10","http://hexadevelopers.com/Download/US_us/Past-Due-Invoice","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/74796/"
+"74796","2018-11-06 08:39:10","http://hexadevelopers.com/Download/US_us/Past-Due-Invoice","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/74796/"
 "74795","2018-11-06 08:39:06","http://garamaproperty.com/scan/En_us/Sales-Invoice","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/74795/"
 "74794","2018-11-06 08:39:02","http://bobfeick.com/INFO/En_us/Paid-Invoice-Credit-Card-Receipt","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/74794/"
 "74793","2018-11-06 08:38:32","http://april-photography.com/229643LMFKOQF/PAYROLL/Personal","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/74793/"
@@ -7075,7 +7096,7 @@
 "74679","2018-11-06 06:30:04","http://www.willbcn.com/sites/US_us/Invoice/","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/74679/"
 "74678","2018-11-06 06:30:04","https://e.coka.la/LcpioD.jpg","online","malware_download","exe","https://urlhaus.abuse.ch/url/74678/"
 "74677","2018-11-06 06:30:02","http://www.martabadias.com/8481483FGDDG/PAYROLL/Commercial/","online","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/74677/"
-"74676","2018-11-06 06:29:04","http://mironovka-school.ru/977878WBVWYKBV/BIZ/Smallbusiness/","online","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/74676/"
+"74676","2018-11-06 06:29:04","http://mironovka-school.ru/977878WBVWYKBV/BIZ/Smallbusiness/","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/74676/"
 "74675","2018-11-06 06:29:03","http://e.coka.la/lsb97n.jpg","online","malware_download","exe,NanoCore","https://urlhaus.abuse.ch/url/74675/"
 "74674","2018-11-06 06:15:05","https://e.coka.la/tYhgKv.png","online","malware_download","exe,Loki,lokibot","https://urlhaus.abuse.ch/url/74674/"
 "74673","2018-11-06 06:15:04","http://107.175.82.197/41t8nsqkjwie.exe","offline","malware_download","exe,Gozi,ursnif","https://urlhaus.abuse.ch/url/74673/"
@@ -7251,7 +7272,7 @@
 "74497","2018-11-05 19:37:37","http://chefshots.com/57953PMYDYHBV/SWIFT/Commercial","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/74497/"
 "74496","2018-11-05 19:37:35","http://touchandlearn.pt/wp-content/uploads/81944UBMHWQIH/PAY/Business","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/74496/"
 "74495","2018-11-05 19:37:34","http://investicon.in/wp-content/plugins/workfence/649494OUWHGA/oamo/Personal","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/74495/"
-"74494","2018-11-05 19:37:32","http://mironovka-school.ru/977878WBVWYKBV/BIZ/Smallbusiness","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/74494/"
+"74494","2018-11-05 19:37:32","http://mironovka-school.ru/977878WBVWYKBV/BIZ/Smallbusiness","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/74494/"
 "74493","2018-11-05 19:37:31","http://www.aes.co.th/web/wp-content/upgrade/newsletter/US/Inv-867015-PO-5O966375","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/74493/"
 "74492","2018-11-05 19:37:28","http://www.retailtechexpo.cn/en/wp-content/wp-rocket-config/scan/US_us/Scan","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/74492/"
 "74491","2018-11-05 19:37:23","http://chungelliott.com/wp-admin/Nov2018/US/Question","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/74491/"
@@ -7796,7 +7817,7 @@
 "73946","2018-11-03 09:02:03","http://arkei.foxovsky.ru/CSWOPAWOZRMCOVEY.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/73946/"
 "73945","2018-11-03 09:01:04","http://dealertrafficgenerator.com/Mazi/SOA.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/73945/"
 "73944","2018-11-03 09:00:14","http://213.7.246.198:6152/.i","online","malware_download","elf","https://urlhaus.abuse.ch/url/73944/"
-"73943","2018-11-03 09:00:12","http://78.38.31.88:44108/.i","online","malware_download","elf","https://urlhaus.abuse.ch/url/73943/"
+"73943","2018-11-03 09:00:12","http://78.38.31.88:44108/.i","offline","malware_download","elf","https://urlhaus.abuse.ch/url/73943/"
 "73942","2018-11-03 09:00:09","http://hammer-protection.com/wp-content/themes/twentysixteen/Shipping%20documents.rar","online","malware_download","zip","https://urlhaus.abuse.ch/url/73942/"
 "73941","2018-11-03 09:00:05","http://ehsancreative.com/jf.php","online","malware_download","zip","https://urlhaus.abuse.ch/url/73941/"
 "73940","2018-11-03 08:29:04","http://cb61775.tmweb.ru/faq.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/73940/"
@@ -7896,7 +7917,7 @@
 "73845","2018-11-02 18:13:08","http://www.go2l.ink/1ubC","offline","malware_download","AZORult,exe","https://urlhaus.abuse.ch/url/73845/"
 "73844","2018-11-02 18:13:05","http://wiedmeierlauren.pserver.ru/voice/voicemailMp3.scr","offline","malware_download","AZORult,exe","https://urlhaus.abuse.ch/url/73844/"
 "73843","2018-11-02 17:53:03","http://moscow33.online/proxy/assno.chickenkiller.com.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/73843/"
-"73842","2018-11-02 17:52:03","http://167.88.161.40/adb.arm","online","malware_download","elf","https://urlhaus.abuse.ch/url/73842/"
+"73842","2018-11-02 17:52:03","http://167.88.161.40/adb.arm","offline","malware_download","elf","https://urlhaus.abuse.ch/url/73842/"
 "73841","2018-11-02 17:51:06","http://moscow33.online/KeyMoscow33.35.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/73841/"
 "73840","2018-11-02 17:51:05","http://178.131.61.0:31835/.i","online","malware_download","elf","https://urlhaus.abuse.ch/url/73840/"
 "73839","2018-11-02 17:04:04","http://www.elpqthnskbbf.tw/ltggle/030002_848137.html","offline","malware_download","gzip","https://urlhaus.abuse.ch/url/73839/"
@@ -7906,7 +7927,7 @@
 "73835","2018-11-02 15:47:06","http://itsababygirl.co/wp-admin/css/colors/blue/chrome.jpg","online","malware_download","exe","https://urlhaus.abuse.ch/url/73835/"
 "73834","2018-11-02 15:47:03","http://moscow33.online/KeyMoscow33.40.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/73834/"
 "73833","2018-11-02 14:53:07","http://neudimensions.com/wealth/kelvin.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/73833/"
-"73832","2018-11-02 14:53:04","https://popandshop.ru/r1.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/73832/"
+"73832","2018-11-02 14:53:04","https://popandshop.ru/r1.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/73832/"
 "73831","2018-11-02 14:43:21","http://www.hymanlawgroup.com/modules/blockcontact/jaz.txt","online","malware_download","AZORult","https://urlhaus.abuse.ch/url/73831/"
 "73830","2018-11-02 14:24:45","http://satysservs.com/setup6-158.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/73830/"
 "73827","2018-11-02 14:23:03","http://officehomems.com/lsm","offline","malware_download","exe","https://urlhaus.abuse.ch/url/73827/"
@@ -8478,7 +8499,7 @@
 "73262","2018-11-02 06:21:04","http://185.244.25.155/ntpd","offline","malware_download","elf","https://urlhaus.abuse.ch/url/73262/"
 "73261","2018-11-02 06:21:03","http://e.coka.la/Grw5R.jpg","offline","malware_download","exe,ImminentRAT","https://urlhaus.abuse.ch/url/73261/"
 "73260","2018-11-02 06:20:06","https://e.coka.la/Pf40Vm.jpg","online","malware_download","exe","https://urlhaus.abuse.ch/url/73260/"
-"73259","2018-11-02 06:20:05","https://popandshop.ru/r2.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/73259/"
+"73259","2018-11-02 06:20:05","https://popandshop.ru/r2.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/73259/"
 "73258","2018-11-02 06:20:03","https://popandshop.ru/slnative.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/73258/"
 "73257","2018-11-02 06:08:02","http://185.244.25.155/sh","offline","malware_download","elf","https://urlhaus.abuse.ch/url/73257/"
 "73256","2018-11-02 06:07:05","http://185.244.25.155/pftp","offline","malware_download","elf","https://urlhaus.abuse.ch/url/73256/"
@@ -8615,8 +8636,8 @@
 "73123","2018-11-01 12:08:02","http://oceanicproducts.eu/frankjoe/frankjoe.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/73123/"
 "73122","2018-11-01 12:07:03","http://oceanicproducts.eu/oscadave/oscadave.exe","offline","malware_download","exe,Formbook","https://urlhaus.abuse.ch/url/73122/"
 "73121","2018-11-01 11:58:03","http://oceanicproducts.eu/jeff/jeff.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/73121/"
-"73120","2018-11-01 11:53:18","http://popandshop.ru/r1.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/73120/"
-"73119","2018-11-01 11:53:16","http://popandshop.ru/r2.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/73119/"
+"73120","2018-11-01 11:53:18","http://popandshop.ru/r1.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/73120/"
+"73119","2018-11-01 11:53:16","http://popandshop.ru/r2.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/73119/"
 "73118","2018-11-01 11:53:15","http://popandshop.ru/slnative.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/73118/"
 "73117","2018-11-01 11:53:13","http://satysservs.com/setup6-156.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/73117/"
 "73116","2018-11-01 11:52:31","http://savegglserps.com/install6.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/73116/"
@@ -8736,19 +8757,19 @@
 "72999","2018-11-01 06:37:06","http://clean.crypt24.in/traf/file988.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/72999/"
 "72997","2018-11-01 06:37:05","http://clean.crypt24.in/traf/bb10.exe","online","malware_download","exe,gootkit","https://urlhaus.abuse.ch/url/72997/"
 "72996","2018-11-01 06:37:05","http://clean.crypt24.in/traf/bg11.exe","online","malware_download","exe,gootkit","https://urlhaus.abuse.ch/url/72996/"
-"72995","2018-11-01 06:30:04","http://80.211.185.192/bins/hoho.mips","online","malware_download","elf","https://urlhaus.abuse.ch/url/72995/"
-"72994","2018-11-01 06:30:03","http://80.211.185.192/bins/hoho.sh4","online","malware_download","elf","https://urlhaus.abuse.ch/url/72994/"
+"72995","2018-11-01 06:30:04","http://80.211.185.192/bins/hoho.mips","offline","malware_download","elf","https://urlhaus.abuse.ch/url/72995/"
+"72994","2018-11-01 06:30:03","http://80.211.185.192/bins/hoho.sh4","offline","malware_download","elf","https://urlhaus.abuse.ch/url/72994/"
 "72993","2018-11-01 06:30:02","http://142.93.152.247/ankit/jno.m68k","offline","malware_download","elf","https://urlhaus.abuse.ch/url/72993/"
 "72992","2018-11-01 06:29:03","http://142.93.152.247/ankit/jno.ppc","offline","malware_download","elf","https://urlhaus.abuse.ch/url/72992/"
 "72990","2018-11-01 06:29:02","http://142.93.152.247/ankit/jno.arm","offline","malware_download","elf","https://urlhaus.abuse.ch/url/72990/"
-"72991","2018-11-01 06:29:02","http://80.211.185.192/bins/hoho.m68k","online","malware_download","elf","https://urlhaus.abuse.ch/url/72991/"
-"72988","2018-11-01 06:28:02","http://80.211.185.192/bins/hoho.arm5","online","malware_download","elf","https://urlhaus.abuse.ch/url/72988/"
-"72989","2018-11-01 06:28:02","http://80.211.185.192/bins/hoho.ppc","online","malware_download","elf","https://urlhaus.abuse.ch/url/72989/"
+"72991","2018-11-01 06:29:02","http://80.211.185.192/bins/hoho.m68k","offline","malware_download","elf","https://urlhaus.abuse.ch/url/72991/"
+"72988","2018-11-01 06:28:02","http://80.211.185.192/bins/hoho.arm5","offline","malware_download","elf","https://urlhaus.abuse.ch/url/72988/"
+"72989","2018-11-01 06:28:02","http://80.211.185.192/bins/hoho.ppc","offline","malware_download","elf","https://urlhaus.abuse.ch/url/72989/"
 "72987","2018-11-01 06:22:03","https://e.coka.la/iz3gvt.jpg","online","malware_download","exe,RemcosRAT","https://urlhaus.abuse.ch/url/72987/"
 "72986","2018-11-01 06:06:03","https://a.doko.moe/trmgjq.jpg","offline","malware_download","AZORult,exe","https://urlhaus.abuse.ch/url/72986/"
 "72985","2018-11-01 05:40:04","http://185.244.25.149/bins/mirai.x86","offline","malware_download","None","https://urlhaus.abuse.ch/url/72985/"
 "72984","2018-11-01 05:40:03","http://142.93.152.247/ankit/jno.x86","offline","malware_download","None","https://urlhaus.abuse.ch/url/72984/"
-"72983","2018-11-01 05:40:02","http://80.211.185.192/bins/hoho.x86","online","malware_download","None","https://urlhaus.abuse.ch/url/72983/"
+"72983","2018-11-01 05:40:02","http://80.211.185.192/bins/hoho.x86","offline","malware_download","None","https://urlhaus.abuse.ch/url/72983/"
 "72982","2018-11-01 05:39:15","http://nworldorg.com/toil/vkw.exe","online","malware_download","exe,Loki,NanoCore,RemcosRAT,stealer","https://urlhaus.abuse.ch/url/72982/"
 "72981","2018-11-01 05:39:11","http://becker-tm.org/rversx/tclq.exe","offline","malware_download","autoit,exe,NetWire","https://urlhaus.abuse.ch/url/72981/"
 "72980","2018-11-01 05:39:07","http://nworldorg.com/xvlz/fio.exe","online","malware_download","backdoor,exe,remcos,RemcosRAT,stealer","https://urlhaus.abuse.ch/url/72980/"
@@ -9434,7 +9455,7 @@
 "72298","2018-10-30 10:52:03","https://uc9dc107f06a0228baa4ae9952fd.dl.dropboxusercontent.com/cd/0/get/AUT8HHhzoiiET7zHDcZ7OOuIWYNazuMVnmet6xphmbVGUAFs8AAwv_LA1fS7n0i-fv1ZXJgZeTutfMhL7Mas7vtHE0KZLj_Nr8_XrnM4Wp2NILPmptphMYznm_MHF8SV9w1HFSw7HCeZHInxVFVVNcimR_l07UIMfJK7rFbg2oJMVBlZ2blYUJrIEPxm4ypLQM4/file?dl=1","offline","malware_download","zip","https://urlhaus.abuse.ch/url/72298/"
 "72297","2018-10-30 10:51:04","https://www.dropbox.com/s/9czp7qja5vrv9ch/Scan_84301836492637647.pdf.z?dl=1","offline","malware_download","zip","https://urlhaus.abuse.ch/url/72297/"
 "72296","2018-10-30 10:39:02","http://167.99.147.162/loli.mips","offline","malware_download","elf","https://urlhaus.abuse.ch/url/72296/"
-"72294","2018-10-30 10:24:03","https://vanypeluquerias.com/wp-content/themes/betheme/bbpress/dex.exe","online","malware_download","exe,Retefe","https://urlhaus.abuse.ch/url/72294/"
+"72294","2018-10-30 10:24:03","https://vanypeluquerias.com/wp-content/themes/betheme/bbpress/dex.exe","offline","malware_download","exe,Retefe","https://urlhaus.abuse.ch/url/72294/"
 "72293","2018-10-30 10:09:05","http://76.168.111.32:52069/.i","online","malware_download","elf","https://urlhaus.abuse.ch/url/72293/"
 "72292","2018-10-30 09:49:02","http://104.206.242.208/catcche.doc","offline","malware_download","RTF","https://urlhaus.abuse.ch/url/72292/"
 "72290","2018-10-30 09:42:43","https://chicagosnapshot.org/management/personal-customer-9MN48242","offline","malware_download","lnk,sLoad,zip","https://urlhaus.abuse.ch/url/72290/"
@@ -9561,19 +9582,19 @@
 "72170","2018-10-30 08:02:16","http://194.5.98.70:4560/met2.msi","offline","malware_download","msi","https://urlhaus.abuse.ch/url/72170/"
 "72169","2018-10-30 08:01:02","http://194.182.65.56/bins/lry.x86","offline","malware_download","elf","https://urlhaus.abuse.ch/url/72169/"
 "72168","2018-10-30 07:59:03","http://194.182.65.56/bins/larry.mips","offline","malware_download","elf","https://urlhaus.abuse.ch/url/72168/"
-"72167","2018-10-30 07:59:02","http://185.244.25.138/bins/gemini.ppc","online","malware_download","elf","https://urlhaus.abuse.ch/url/72167/"
+"72167","2018-10-30 07:59:02","http://185.244.25.138/bins/gemini.ppc","offline","malware_download","elf","https://urlhaus.abuse.ch/url/72167/"
 "72166","2018-10-30 07:59:02","http://185.244.25.149/bins/Prussa.m68k","offline","malware_download","elf","https://urlhaus.abuse.ch/url/72166/"
 "72165","2018-10-30 07:58:02","http://185.244.25.149/bins/Prussa.arm","offline","malware_download","elf","https://urlhaus.abuse.ch/url/72165/"
 "72164","2018-10-30 07:58:02","http://185.244.25.149/bins/Prussa.mips","offline","malware_download","elf","https://urlhaus.abuse.ch/url/72164/"
 "72163","2018-10-30 07:58:01","http://185.244.25.149/bins/gemini.ppc","offline","malware_download","elf","https://urlhaus.abuse.ch/url/72163/"
-"72161","2018-10-30 07:57:03","http://185.244.25.138/bins/gemini.m68k","online","malware_download","elf","https://urlhaus.abuse.ch/url/72161/"
+"72161","2018-10-30 07:57:03","http://185.244.25.138/bins/gemini.m68k","offline","malware_download","elf","https://urlhaus.abuse.ch/url/72161/"
 "72162","2018-10-30 07:57:03","http://185.244.25.149/bins/gemini.arm5","offline","malware_download","elf","https://urlhaus.abuse.ch/url/72162/"
-"72160","2018-10-30 07:57:02","http://185.244.25.138/bins/gemini.mips","online","malware_download","elf","https://urlhaus.abuse.ch/url/72160/"
-"72159","2018-10-30 07:56:03","http://185.244.25.138/bins/gemini.sh4","online","malware_download","elf","https://urlhaus.abuse.ch/url/72159/"
+"72160","2018-10-30 07:57:02","http://185.244.25.138/bins/gemini.mips","offline","malware_download","elf","https://urlhaus.abuse.ch/url/72160/"
+"72159","2018-10-30 07:56:03","http://185.244.25.138/bins/gemini.sh4","offline","malware_download","elf","https://urlhaus.abuse.ch/url/72159/"
 "72158","2018-10-30 07:56:02","http://185.244.25.149/bins/gemini.mips","offline","malware_download","elf","https://urlhaus.abuse.ch/url/72158/"
 "72157","2018-10-30 07:56:02","http://185.244.25.149/bins/gemini.sh4","offline","malware_download","elf","https://urlhaus.abuse.ch/url/72157/"
 "72156","2018-10-30 07:55:03","http://185.244.25.149/bins/Prussa.sh4","offline","malware_download","elf","https://urlhaus.abuse.ch/url/72156/"
-"72154","2018-10-30 07:55:02","http://185.244.25.138/bins/gemini.arm7","online","malware_download","elf","https://urlhaus.abuse.ch/url/72154/"
+"72154","2018-10-30 07:55:02","http://185.244.25.138/bins/gemini.arm7","offline","malware_download","elf","https://urlhaus.abuse.ch/url/72154/"
 "72155","2018-10-30 07:55:02","http://194.182.65.56/bins/larry.arm","offline","malware_download","elf","https://urlhaus.abuse.ch/url/72155/"
 "72153","2018-10-30 07:54:02","http://185.244.25.149/bins/gemini.m68k","offline","malware_download","elf","https://urlhaus.abuse.ch/url/72153/"
 "72152","2018-10-30 07:54:02","http://194.182.65.56/bins/lry.arm7","offline","malware_download","elf","https://urlhaus.abuse.ch/url/72152/"
@@ -9630,7 +9651,7 @@
 "72101","2018-10-30 05:19:03","http://185.244.25.149/bins/gemini.x86","offline","malware_download","None","https://urlhaus.abuse.ch/url/72101/"
 "72100","2018-10-30 05:19:03","http://185.244.25.149/bins/Prussa.x86","offline","malware_download","None","https://urlhaus.abuse.ch/url/72100/"
 "72098","2018-10-30 05:19:02","http://159.65.42.17/bins.sh","offline","malware_download","None","https://urlhaus.abuse.ch/url/72098/"
-"72099","2018-10-30 05:19:02","http://185.244.25.138/bins/gemini.x86","online","malware_download","None","https://urlhaus.abuse.ch/url/72099/"
+"72099","2018-10-30 05:19:02","http://185.244.25.138/bins/gemini.x86","offline","malware_download","None","https://urlhaus.abuse.ch/url/72099/"
 "72097","2018-10-30 05:19:01","http://194.182.65.56/bins/larry.x86","offline","malware_download","None","https://urlhaus.abuse.ch/url/72097/"
 "72096","2018-10-30 04:39:05","https://www.dropbox.com/s/hsdr7iavoohqqkj/payslip.doc?dl=1","offline","malware_download","doc","https://urlhaus.abuse.ch/url/72096/"
 "72095","2018-10-30 04:39:03","https://ucca9fe9eeec760134ffc656f6c9.dl.dropboxusercontent.com/cd/0/get/AUQAzRPinVJo1jHB1Y1weixlqvTN9rT3d48hYAQKfyvhP91wLkoWnMAe5QprpVp7wm5YyXcs-sDjJUfGQMuksI9gsQZf4_3sSWrhkAfjxDN_TooUXHBRJA7nlVpK4DBNgRpomkoosBVfM-QzmYLxCJF2CasLorK9Mb86_ZzN7hLoQDgzmhrd4MMZhOtW0Vx3MlY/file?dl=1","offline","malware_download","doc","https://urlhaus.abuse.ch/url/72095/"
@@ -10107,7 +10128,7 @@
 "71623","2018-10-28 01:38:03","http://178.62.238.124/8LASUU8K1","offline","malware_download","elf","https://urlhaus.abuse.ch/url/71623/"
 "71622","2018-10-28 01:38:02","http://178.62.238.124/TL7O3A3I9","offline","malware_download","elf","https://urlhaus.abuse.ch/url/71622/"
 "71621","2018-10-28 01:32:08","https://e.coka.la/lvhPMk.jpg","online","malware_download","exe","https://urlhaus.abuse.ch/url/71621/"
-"71620","2018-10-28 01:32:06","http://5.43.95.157:39449/.i","online","malware_download","elf","https://urlhaus.abuse.ch/url/71620/"
+"71620","2018-10-28 01:32:06","http://5.43.95.157:39449/.i","offline","malware_download","elf","https://urlhaus.abuse.ch/url/71620/"
 "71619","2018-10-28 01:32:04","http://180.177.76.161:63053/.i","offline","malware_download","elf","https://urlhaus.abuse.ch/url/71619/"
 "71618","2018-10-28 01:31:06","http://42.117.62.88:6947/.i","offline","malware_download","elf","https://urlhaus.abuse.ch/url/71618/"
 "71616","2018-10-28 00:03:02","http://138.197.99.186/Demon.ppc","offline","malware_download","elf","https://urlhaus.abuse.ch/url/71616/"
@@ -11403,7 +11424,7 @@
 "70294","2018-10-22 13:54:20","https://ipkzone.marketingdigital.srv.br/Remittance_MAIN_ASD101918_PDF.jar","offline","malware_download","jar","https://urlhaus.abuse.ch/url/70294/"
 "70293","2018-10-22 13:54:19","https://cidadefm87.com.br/Remittance_Advice_scan_pdf.jar","offline","malware_download","jar","https://urlhaus.abuse.ch/url/70293/"
 "70292","2018-10-22 13:54:17","https://infocs.rio.br/Remittance_Advice_WILLERBY101918_PDF.jar","offline","malware_download","jar","https://urlhaus.abuse.ch/url/70292/"
-"70291","2018-10-22 13:54:14","http://ayakkokulari.com/order.exe","online","malware_download","exe,Loki,Pony,stealer","https://urlhaus.abuse.ch/url/70291/"
+"70291","2018-10-22 13:54:14","http://ayakkokulari.com/order.exe","offline","malware_download","exe,Loki,Pony,stealer","https://urlhaus.abuse.ch/url/70291/"
 "70290","2018-10-22 13:54:12","http://ayakkokulari.com/PURCHASEORDERR.bat","offline","malware_download","exe,exetomsi,Loki,stealer","https://urlhaus.abuse.ch/url/70290/"
 "70289","2018-10-22 13:54:09","http://vostokllc.com/js/jquery/Panel/five/fre.php","offline","malware_download","c2,lokibot","https://urlhaus.abuse.ch/url/70289/"
 "70288","2018-10-22 13:54:08","https://uguzamedics.com/portfolio/custom-popups/popup-01/img/iljjj.exe","offline","malware_download","exe,lokibot","https://urlhaus.abuse.ch/url/70288/"
@@ -12209,8 +12230,8 @@
 "69488","2018-10-18 21:26:02","http://80.211.113.214/hakai.arm7","offline","malware_download","elf","https://urlhaus.abuse.ch/url/69488/"
 "69487","2018-10-18 21:15:03","http://printnow.club/au3.exe","offline","malware_download","AZORult,exe","https://urlhaus.abuse.ch/url/69487/"
 "69486","2018-10-18 19:38:11","http://citbagroup.com/1/crypt.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/69486/"
-"69485","2018-10-18 19:38:03","http://167.88.161.40/bins/telnet.m68k","online","malware_download","elf","https://urlhaus.abuse.ch/url/69485/"
-"69484","2018-10-18 19:31:04","http://167.88.161.40/bins/telnet.sh4","online","malware_download","elf","https://urlhaus.abuse.ch/url/69484/"
+"69485","2018-10-18 19:38:03","http://167.88.161.40/bins/telnet.m68k","offline","malware_download","elf","https://urlhaus.abuse.ch/url/69485/"
+"69484","2018-10-18 19:31:04","http://167.88.161.40/bins/telnet.sh4","offline","malware_download","elf","https://urlhaus.abuse.ch/url/69484/"
 "69483","2018-10-18 19:31:03","http://167.88.161.40/bins/telnet.mips","online","malware_download","elf","https://urlhaus.abuse.ch/url/69483/"
 "69482","2018-10-18 19:30:03","http://167.88.161.40/bins/telnet.ppc","online","malware_download","elf","https://urlhaus.abuse.ch/url/69482/"
 "69481","2018-10-18 19:23:03","http://209.141.40.213/bins/sefa.mips","offline","malware_download","elf","https://urlhaus.abuse.ch/url/69481/"
@@ -13498,7 +13519,7 @@
 "68194","2018-10-16 05:59:04","http://173.82.243.124/bins/adb.arm7","offline","malware_download","elf","https://urlhaus.abuse.ch/url/68194/"
 "68193","2018-10-16 05:59:02","http://173.82.243.124/bins/sefa.arm7","offline","malware_download","elf","https://urlhaus.abuse.ch/url/68193/"
 "68192","2018-10-16 05:58:03","http://173.82.243.124/bins/adb.x86","offline","malware_download","elf","https://urlhaus.abuse.ch/url/68192/"
-"68191","2018-10-16 05:24:03","https://pasteboard.co/images/HIzhg49.jpg/download","online","malware_download","exe,steganography","https://urlhaus.abuse.ch/url/68191/"
+"68191","2018-10-16 05:24:03","https://pasteboard.co/images/HIzhg49.jpg/download","offline","malware_download","exe,steganography","https://urlhaus.abuse.ch/url/68191/"
 "68190","2018-10-16 05:17:03","http://173.82.243.124/bins/sefa.x86","offline","malware_download","None","https://urlhaus.abuse.ch/url/68190/"
 "68189","2018-10-16 05:08:04","http://technoscienceacademy.com/images/lg/lieg.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/68189/"
 "68188","2018-10-16 05:08:02","https://a.uguu.se/Vex2Kay0QuzC_233360629.png","offline","malware_download","rtfkit","https://urlhaus.abuse.ch/url/68188/"
@@ -14894,7 +14915,7 @@
 "66784","2018-10-11 12:58:04","http://medipedics.com/ponygrace/Panel/chucksboy.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/66784/"
 "66783","2018-10-11 12:38:02","https://d.coka.la/NWp40R.jpg","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/66783/"
 "66782","2018-10-11 12:07:02","http://memeconi.com/TNT/index.php?l=anti2.tkn","offline","malware_download","ursnif","https://urlhaus.abuse.ch/url/66782/"
-"66781","2018-10-11 12:06:03","https://pasteboard.co/images/HHKrjPX.jpg/download","online","malware_download","exe","https://urlhaus.abuse.ch/url/66781/"
+"66781","2018-10-11 12:06:03","https://pasteboard.co/images/HHKrjPX.jpg/download","offline","malware_download","exe","https://urlhaus.abuse.ch/url/66781/"
 "66780","2018-10-11 11:55:05","http://thepinkonionusa.com/97UGXGIEED/SWIFT/Smallbusiness","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/66780/"
 "66779","2018-10-11 11:55:03","http://demeter.icu/files/agents/e0b000e5dd86e986f91a16894680e285-1287.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/66779/"
 "66778","2018-10-11 11:33:04","http://jadema.com.py/process/WeTransfr/images/_purchase%20order_000345.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/66778/"
@@ -16205,9 +16226,9 @@
 "65458","2018-10-06 10:18:06","http://wt1.9ht.com/zy/siwanguiwu3xiugaiqi.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/65458/"
 "65457","2018-10-06 08:51:03","http://www.ikotoman.com/0009.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/65457/"
 "65456","2018-10-06 08:17:21","http://36.80.93.228:19408/.i","offline","malware_download","elf","https://urlhaus.abuse.ch/url/65456/"
-"65455","2018-10-06 08:10:44","http://n.didiwl.com/PC/CFJSSDFCFJ_GR.ZIP","offline","malware_download","zip","https://urlhaus.abuse.ch/url/65455/"
-"65454","2018-10-06 08:10:41","http://n.didiwl.com/PC3/GZJDGGRJ_PJ.ZIP","offline","malware_download","zip","https://urlhaus.abuse.ch/url/65454/"
-"65453","2018-10-06 08:10:35","http://n.didiwl.com/PC/PPDJDAFASQFZ_GR.ZIP","offline","malware_download","zip","https://urlhaus.abuse.ch/url/65453/"
+"65455","2018-10-06 08:10:44","http://n.didiwl.com/PC/CFJSSDFCFJ_GR.ZIP","online","malware_download","zip","https://urlhaus.abuse.ch/url/65455/"
+"65454","2018-10-06 08:10:41","http://n.didiwl.com/PC3/GZJDGGRJ_PJ.ZIP","online","malware_download","zip","https://urlhaus.abuse.ch/url/65454/"
+"65453","2018-10-06 08:10:35","http://n.didiwl.com/PC/PPDJDAFASQFZ_GR.ZIP","online","malware_download","zip","https://urlhaus.abuse.ch/url/65453/"
 "65452","2018-10-06 08:10:03","http://n.didiwl.com/pc3/eset_reg.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/65452/"
 "65451","2018-10-06 08:09:33","http://n.didiwl.com/PC/QSAHDAHDADWDFZ_GR.ZIP","online","malware_download","zip","https://urlhaus.abuse.ch/url/65451/"
 "65450","2018-10-06 08:08:02","http://n.didiwl.com/PC3/YYMSHDSDSDRJ_GR.ZIP","online","malware_download","zip","https://urlhaus.abuse.ch/url/65450/"
@@ -16558,7 +16579,7 @@
 "65095","2018-10-04 23:09:13","http://conecta.aliz.com.br/gqbsu/LLC/US_us/Invoice-receipt/","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/65095/"
 "65094","2018-10-04 22:20:17","http://kinomakia.com.br/EzTEDF3","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/65094/"
 "65093","2018-10-04 22:20:11","http://branfinancial.com/STh0UBUc","online","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/65093/"
-"65092","2018-10-04 22:20:09","http://brazilianbuttaugmentation.net/Ku23l8mPs","online","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/65092/"
+"65092","2018-10-04 22:20:09","http://brazilianbuttaugmentation.net/Ku23l8mPs","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/65092/"
 "65091","2018-10-04 22:20:07","http://avaleathercraft.com/pjSIYse","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/65091/"
 "65090","2018-10-04 22:20:04","http://bobfeick.com/zAm7xgKP","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/65090/"
 "65089","2018-10-04 22:19:06","http://192.3.162.102/out/biggy.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/65089/"
@@ -17212,7 +17233,7 @@
 "64441","2018-10-03 23:20:10","http://tunjihost.ga/svr/fgee.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/64441/"
 "64440","2018-10-03 23:20:06","http://201.68.207.93:43793/.i","offline","malware_download","elf","https://urlhaus.abuse.ch/url/64440/"
 "64439","2018-10-03 23:20:04","http://remcuahaiduong.com/8UPG/PAY/Commercial/","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/64439/"
-"64438","2018-10-03 23:09:08","http://wt1.9ht.com/wf/kxxwlyfz_v22.5_9ht.com.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/64438/"
+"64438","2018-10-03 23:09:08","http://wt1.9ht.com/wf/kxxwlyfz_v22.5_9ht.com.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/64438/"
 "64437","2018-10-03 23:07:04","http://192.3.162.102/out/huang.exe","offline","malware_download","exe,Formbook","https://urlhaus.abuse.ch/url/64437/"
 "64435","2018-10-03 23:07:02","http://ansamovil.com/US/Attachments/10_18","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/64435/"
 "64436","2018-10-03 23:07:02","http://tunjihost.ga/doc/fgee.doc","offline","malware_download","RTF","https://urlhaus.abuse.ch/url/64436/"
@@ -17288,7 +17309,7 @@
 "64365","2018-10-03 18:43:46","http://bo2.co.id/En_us/Payments/10_18","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/64365/"
 "64364","2018-10-03 18:43:42","http://bsrcellular.com/LLC/US_us/Past-Due-Invoices","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/64364/"
 "64363","2018-10-03 18:43:41","http://littleaid.co.uk/En_us/Attachments/102018","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/64363/"
-"64362","2018-10-03 18:43:40","http://hexadevelopers.com/EN_US/Documents/102018","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/64362/"
+"64362","2018-10-03 18:43:40","http://hexadevelopers.com/EN_US/Documents/102018","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/64362/"
 "64361","2018-10-03 18:43:35","http://www.alliancedirect.com/US/Documents/10_18","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/64361/"
 "64360","2018-10-03 18:43:32","http://faizts.com/EN_US/Attachments/10_18","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/64360/"
 "64359","2018-10-03 18:43:29","http://krood.pt/050SOHQYS/PAY/Commercial","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/64359/"
@@ -17641,7 +17662,7 @@
 "64000","2018-10-03 07:22:33","http://tact-yl.fr/HqnEMKw/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/64000/"
 "63999","2018-10-03 07:22:32","http://realby.club/u6jm0PDA/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/63999/"
 "63998","2018-10-03 07:22:02","http://glad.cab/iOM/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/63998/"
-"63997","2018-10-03 07:08:03","http://satsantafe.com.ar/Invoice-Corrections-for-94/48","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/63997/"
+"63997","2018-10-03 07:08:03","http://satsantafe.com.ar/Invoice-Corrections-for-94/48","online","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/63997/"
 "63996","2018-10-03 06:35:00","http://divine-arts.in/newsletter/US/Service-Invoice","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/63996/"
 "63995","2018-10-03 06:34:58","http://bollyboer.com.au/INFO/US/Paid-Invoice","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/63995/"
 "63993","2018-10-03 06:34:54","http://www.naturallythrivingyou.com/doc/EN_en/Past-Due-Invoice","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/63993/"
@@ -17952,7 +17973,7 @@
 "63681","2018-10-02 16:00:07","http://larcab.org.br/EN_US/Clients/102018","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/63681/"
 "63680","2018-10-02 16:00:04","http://www.diyetyemek.com.tr/En_us/Transaction_details/102018","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/63680/"
 "63679","2018-10-02 15:59:04","http://amtvefubdqnlnbqktsvc.pro/acab.exe","offline","malware_download","FRA,MakLoader","https://urlhaus.abuse.ch/url/63679/"
-"63678","2018-10-02 15:44:07","http://us.cdn.persiangig.com/dl/eFcspg/vjakfree.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/63678/"
+"63678","2018-10-02 15:44:07","http://us.cdn.persiangig.com/dl/eFcspg/vjakfree.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/63678/"
 "63677","2018-10-02 15:44:04","http://us.cdn.persiangig.com/dl/b0HEoI/test.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/63677/"
 "63676","2018-10-02 15:44:03","http://beyondedu.in/En_us/Transaction_details/10_18/","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/63676/"
 "63675","2018-10-02 15:36:10","http://bd18.52lishi.com/bd65146.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/63675/"
@@ -19992,7 +20013,7 @@
 "61605","2018-09-27 23:34:07","http://majulia.com/0SCWsxxVD","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/61605/"
 "61604","2018-09-27 23:34:01","http://demo.chengcoach.com/nAYckMFZ","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/61604/"
 "61603","2018-09-27 23:33:19","http://consultoresyempresas.com/x5WHXPfqh","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/61603/"
-"61602","2018-09-27 23:33:16","http://wt1.9ht.com/pw/longtianfuzhu3.1.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/61602/"
+"61602","2018-09-27 23:33:16","http://wt1.9ht.com/pw/longtianfuzhu3.1.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/61602/"
 "61601","2018-09-27 23:32:07","http://wt1.9ht.com/pw/KillGameV12.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/61601/"
 "61600","2018-09-27 23:28:09","http://grandtour.com.ge/EN_US/Clients/09_18","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/61600/"
 "61599","2018-09-27 23:28:04","http://pixelcrush.net/En_us/Documents/092018","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/61599/"
@@ -21573,7 +21594,7 @@
 "60002","2018-09-24 21:42:03","http://pbt-demo.web2de.com/LLC/US_us/Invoices-attached","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/60002/"
 "60001","2018-09-24 21:41:04","http://mbr.kill0604.ru/upsnew2.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/60001/"
 "60000","2018-09-24 21:26:06","http://67.21.81.79/dtacard.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/60000/"
-"59999","2018-09-24 21:25:35","http://soft.duote.com.cn/sycpdf_1.0.0.0.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/59999/"
+"59999","2018-09-24 21:25:35","http://soft.duote.com.cn/sycpdf_1.0.0.0.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/59999/"
 "59998","2018-09-24 21:25:09","http://dc.amegt.com/wp-content/sites/En/New-Order-Upcoming/Invoice","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/59998/"
 "59997","2018-09-24 21:24:10","http://hotellaspalmashmo.com/92WKNDMR/PAYMENT/Smallbusiness","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/59997/"
 "59996","2018-09-24 21:24:05","http://67.21.81.79/datacard.doc","offline","malware_download","RTF","https://urlhaus.abuse.ch/url/59996/"
@@ -22033,7 +22054,7 @@
 "59539","2018-09-24 06:48:40","http://optics-line.com/vUUp9ygDE","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/59539/"
 "59538","2018-09-24 06:48:37","http://montegrappa.com.pa/OkyoMANm","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/59538/"
 "59537","2018-09-24 06:48:34","http://kulikovonn.ru/l5vT7q19U","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/59537/"
-"59536","2018-09-24 06:48:32","http://dh.3ayl.cn/dh_pz/sjhitgnd_005.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/59536/"
+"59536","2018-09-24 06:48:32","http://dh.3ayl.cn/dh_pz/sjhitgnd_005.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/59536/"
 "59535","2018-09-24 06:45:09","http://atlet72.ru/Windows.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/59535/"
 "59534","2018-09-24 06:38:06","http://myblogforyou.is/1/v/aghgE","offline","malware_download","exe","https://urlhaus.abuse.ch/url/59534/"
 "59533","2018-09-24 06:37:10","https://u.lewd.se/l5ogCo_RQbUTBOG.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/59533/"
@@ -22484,7 +22505,7 @@
 "59088","2018-09-22 23:11:04","https://u.coka.la/U9Ja9Z.jpg","online","malware_download","exe","https://urlhaus.abuse.ch/url/59088/"
 "59087","2018-09-22 20:26:02","http://5.8.78.5/Kuso69/Akiru.sh4","offline","malware_download","elf","https://urlhaus.abuse.ch/url/59087/"
 "59086","2018-09-22 20:23:11","http://wfdblinds.com/Protected.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/59086/"
-"59085","2018-09-22 20:23:09","http://31.25.129.85:1126/.i","online","malware_download","elf","https://urlhaus.abuse.ch/url/59085/"
+"59085","2018-09-22 20:23:09","http://31.25.129.85:1126/.i","offline","malware_download","elf","https://urlhaus.abuse.ch/url/59085/"
 "59084","2018-09-22 20:16:06","http://5.8.78.5/Kuso69/Akiru.ppc","offline","malware_download","elf","https://urlhaus.abuse.ch/url/59084/"
 "59083","2018-09-22 20:16:04","http://5.8.78.5/Kuso69/Akiru.m68k","offline","malware_download","elf","https://urlhaus.abuse.ch/url/59083/"
 "59082","2018-09-22 20:15:57","http://196.27.64.243/tl.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/59082/"
@@ -22592,8 +22613,8 @@
 "58980","2018-09-22 05:10:11","http://heavyaromaticsolvents.net/CK/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/58980/"
 "58979","2018-09-22 05:10:06","http://docecreativo.com/dm/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/58979/"
 "58978","2018-09-22 05:00:08","http://128.199.137.201/bins/hades.x86","offline","malware_download","None","https://urlhaus.abuse.ch/url/58978/"
-"58977","2018-09-22 04:06:05","http://185.244.25.222/cron","online","malware_download","elf","https://urlhaus.abuse.ch/url/58977/"
-"58976","2018-09-22 04:05:14","http://185.244.25.222/ftp","online","malware_download","elf","https://urlhaus.abuse.ch/url/58976/"
+"58977","2018-09-22 04:06:05","http://185.244.25.222/cron","offline","malware_download","elf","https://urlhaus.abuse.ch/url/58977/"
+"58976","2018-09-22 04:05:14","http://185.244.25.222/ftp","offline","malware_download","elf","https://urlhaus.abuse.ch/url/58976/"
 "58975","2018-09-22 04:05:13","http://167.99.60.176/pftp","offline","malware_download","elf","https://urlhaus.abuse.ch/url/58975/"
 "58974","2018-09-22 04:05:11","http://167.99.60.176/nut","offline","malware_download","elf","https://urlhaus.abuse.ch/url/58974/"
 "58973","2018-09-22 04:05:07","http://167.99.60.176/apache2","offline","malware_download","elf","https://urlhaus.abuse.ch/url/58973/"
@@ -22645,7 +22666,7 @@
 "58927","2018-09-22 00:03:05","http://aleem.alabdulbasith.com/85919OUMLVQMU/oamo/Smallbusiness","online","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/58927/"
 "58926","2018-09-22 00:02:09","http://23.249.161.109/wrd/vbc.exe","offline","malware_download","exe,Formbook","https://urlhaus.abuse.ch/url/58926/"
 "58925","2018-09-22 00:02:07","http://201.171.140.65:44456/.i","offline","malware_download","elf","https://urlhaus.abuse.ch/url/58925/"
-"58924","2018-09-22 00:01:06","http://87.27.96.3:7464/.i","online","malware_download","elf","https://urlhaus.abuse.ch/url/58924/"
+"58924","2018-09-22 00:01:06","http://87.27.96.3:7464/.i","offline","malware_download","elf","https://urlhaus.abuse.ch/url/58924/"
 "58923","2018-09-21 23:46:05","http://afan.xin/23635KDSO/PAYMENT/US","online","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/58923/"
 "58922","2018-09-21 23:38:06","http://58.218.66.246:8088/mma.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/58922/"
 "58921","2018-09-21 23:37:05","http://206.189.112.57/Build.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/58921/"
@@ -22684,7 +22705,7 @@
 "58888","2018-09-21 19:32:07","http://africimmo.com/default/US_us/Statement/Invoice-4983077","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/58888/"
 "58887","2018-09-21 19:32:05","https://www.dropbox.com/s/dl/6rjz7mwz975jmg7/%D0%BF%D1%80%D0%B8%D0%BB%D0%BE%D0%B6%D0%B5%D0%BD%D0%B8%D0%B5.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/58887/"
 "58886","2018-09-21 19:26:04","http://africimmo.com/3UR/SEP/Smallbusiness","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/58886/"
-"58885","2018-09-21 19:25:28","http://www.heartware.dk/ChapterMaker.EXE","online","malware_download","exe","https://urlhaus.abuse.ch/url/58885/"
+"58885","2018-09-21 19:25:28","http://www.heartware.dk/ChapterMaker.EXE","offline","malware_download","exe","https://urlhaus.abuse.ch/url/58885/"
 "58884","2018-09-21 19:17:14","http://art-nail.net/Y","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/58884/"
 "58883","2018-09-21 19:17:08","http://vkontekste.net/db20","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/58883/"
 "58882","2018-09-21 19:17:07","http://djteresa.net/RTKYqE","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/58882/"
@@ -22695,7 +22716,7 @@
 "58877","2018-09-21 19:14:51","http://crewdesk.in/176NXY/BIZ/US","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/58877/"
 "58876","2018-09-21 19:14:49","http://bavmed.ru/819930F/com/Personal","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/58876/"
 "58875","2018-09-21 19:14:47","http://charliefox.com.br/633G/identity/Smallbusiness","offline","malware_download","doc,emotet","https://urlhaus.abuse.ch/url/58875/"
-"58874","2018-09-21 19:14:14","http://qa4sw.com/40TFTJRE/PAYMENT/Personal","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/58874/"
+"58874","2018-09-21 19:14:14","http://qa4sw.com/40TFTJRE/PAYMENT/Personal","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/58874/"
 "58873","2018-09-21 19:14:12","http://aditifacilitators.com/578289THTCLME/biz/Commercial","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/58873/"
 "58872","2018-09-21 19:14:07","http://yblfood.com.au/workmode/FUNC/40KVCX/BIZ/Business","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/58872/"
 "58871","2018-09-21 18:42:03","https://vista.travelexmaroc.com/problemi/avrai.nes","offline","malware_download","exe,gootkit,ITA","https://urlhaus.abuse.ch/url/58871/"
@@ -22863,14 +22884,14 @@
 "58707","2018-09-21 14:47:15","http://klezmerpodcast.com/35BIKT/oamo/Business","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/58707/"
 "58706","2018-09-21 14:47:13","http://formulaonegym.co.uk/7640K/SEP/Business","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/58706/"
 "58705","2018-09-21 14:47:07","http://glid.jp/1LS/SEP/US","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/58705/"
-"58704","2018-09-21 14:43:06","http://blog.51cto.com/attachment/201206/4594712_1339322511.rar","online","malware_download","exe","https://urlhaus.abuse.ch/url/58704/"
-"58703","2018-09-21 14:43:04","http://blog.51cto.com/attachment/201206/4594712_1339204846.rar","online","malware_download","exe","https://urlhaus.abuse.ch/url/58703/"
+"58704","2018-09-21 14:43:06","http://blog.51cto.com/attachment/201206/4594712_1339322511.rar","offline","malware_download","exe","https://urlhaus.abuse.ch/url/58704/"
+"58703","2018-09-21 14:43:04","http://blog.51cto.com/attachment/201206/4594712_1339204846.rar","offline","malware_download","exe","https://urlhaus.abuse.ch/url/58703/"
 "58702","2018-09-21 14:42:06","http://joredxfg.cf/sajikhgd/nnn.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/58702/"
-"58701","2018-09-21 14:41:17","http://blog.51cto.com/attachment/201203/4594712_1332952194.rar","online","malware_download","exe","https://urlhaus.abuse.ch/url/58701/"
+"58701","2018-09-21 14:41:17","http://blog.51cto.com/attachment/201203/4594712_1332952194.rar","offline","malware_download","exe","https://urlhaus.abuse.ch/url/58701/"
 "58700","2018-09-21 14:41:09","http://secumor.com/wp-includes/beng.exe","online","malware_download","exe,Formbook","https://urlhaus.abuse.ch/url/58700/"
 "58699","2018-09-21 14:39:08","http://regalb2bsolutions.com/jol.exe","online","malware_download","exe,HawkEye","https://urlhaus.abuse.ch/url/58699/"
-"58698","2018-09-21 14:39:04","http://blog.51cto.com/attachment/201205/4594712_1336003045.rar","online","malware_download","exe","https://urlhaus.abuse.ch/url/58698/"
-"58697","2018-09-21 14:38:09","http://blog.51cto.com/attachment/201203/4594712_1333015433.rar","online","malware_download","exe","https://urlhaus.abuse.ch/url/58697/"
+"58698","2018-09-21 14:39:04","http://blog.51cto.com/attachment/201205/4594712_1336003045.rar","offline","malware_download","exe","https://urlhaus.abuse.ch/url/58698/"
+"58697","2018-09-21 14:38:09","http://blog.51cto.com/attachment/201203/4594712_1333015433.rar","offline","malware_download","exe","https://urlhaus.abuse.ch/url/58697/"
 "58696","2018-09-21 14:28:12","http://wt1.9ht.com/xf/qqyzztbm.assist.0318.9ht.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/58696/"
 "58695","2018-09-21 14:26:05","http://lollipopx.ru/fest.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/58695/"
 "58694","2018-09-21 14:24:09","http://blog.51cto.com/attachment/201206/4594712_1339151181.rar","online","malware_download","exe","https://urlhaus.abuse.ch/url/58694/"
@@ -22917,7 +22938,7 @@
 "58652","2018-09-21 11:26:15","http://blog.51cto.com/attachment/201206/4594712_1338695549.rar","online","malware_download","exe","https://urlhaus.abuse.ch/url/58652/"
 "58651","2018-09-21 11:26:07","http://blog.51cto.com/attachment/201206/4594712_1339300909.rar","online","malware_download","exe","https://urlhaus.abuse.ch/url/58651/"
 "58650","2018-09-21 11:19:08","http://blog.51cto.com/attachment/201206/4594712_1339560294.rar","online","malware_download","exe","https://urlhaus.abuse.ch/url/58650/"
-"58649","2018-09-21 11:16:20","http://bd1.52lishi.com/bd60861.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/58649/"
+"58649","2018-09-21 11:16:20","http://bd1.52lishi.com/bd60861.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/58649/"
 "58648","2018-09-21 11:15:55","http://wt1.9ht.com/pw/yingloups.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/58648/"
 "58647","2018-09-21 11:14:05","http://wt1.9ht.com/zy/m3k4edit.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/58647/"
 "58646","2018-09-21 11:13:14","http://wt1.9ht.com/pw/qqsm.gjfq_9ht.com.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/58646/"
@@ -22984,10 +23005,10 @@
 "58579","2018-09-21 10:33:04","http://blog.51cto.com/attachment/201206/4594712_1338854338.rar","online","malware_download","exe","https://urlhaus.abuse.ch/url/58579/"
 "58578","2018-09-21 10:32:07","http://blog.51cto.com/attachment/201206/4594712_1339410537.rar","online","malware_download","exe","https://urlhaus.abuse.ch/url/58578/"
 "58577","2018-09-21 10:30:19","http://wt1.9ht.com/wf/zhanlongsanguotianzi_9ht.com.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/58577/"
-"58576","2018-09-21 10:30:09","http://bd1.52lishi.com/bd11778.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/58576/"
+"58576","2018-09-21 10:30:09","http://bd1.52lishi.com/bd11778.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/58576/"
 "58572","2018-09-21 10:23:09","http://wt1.9ht.com/pw/KML2EXCEL.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/58572/"
 "58571","2018-09-21 10:21:26","http://wt1.9ht.com/wc/kprocmgrex.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/58571/"
-"58570","2018-09-21 10:21:19","http://bd1.52lishi.com/bd80507.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/58570/"
+"58570","2018-09-21 10:21:19","http://bd1.52lishi.com/bd80507.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/58570/"
 "58569","2018-09-21 10:17:06","http://blog.51cto.com/attachment/201206/4594712_1339027989.rar","online","malware_download","exe","https://urlhaus.abuse.ch/url/58569/"
 "58567","2018-09-21 10:10:10","http://blog.51cto.com/attachment/201205/4594712_1338219299.rar","online","malware_download","exe","https://urlhaus.abuse.ch/url/58567/"
 "58566","2018-09-21 10:10:09","http://blog.51cto.com/attachment/201206/4594712_1339042034.rar","online","malware_download","exe","https://urlhaus.abuse.ch/url/58566/"
@@ -23040,7 +23061,7 @@
 "58519","2018-09-21 09:14:04","http://tomas.datanom.fi/testlab/427704YTQLGGZ/BIZ/Personal","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/58519/"
 "58518","2018-09-21 09:13:47","http://429days.com/66239FLVG/biz/US","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/58518/"
 "58517","2018-09-21 09:13:42","http://africimmo.com/95416KZS/PAYMENT/Business","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/58517/"
-"58516","2018-09-21 09:13:19","http://egomall.net/1420285WCGJO/SEP/Business","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/58516/"
+"58516","2018-09-21 09:13:19","http://egomall.net/1420285WCGJO/SEP/Business","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/58516/"
 "58515","2018-09-21 09:13:13","http://bfxplode.de/newfolde_r/389CJSP/PAYMENT/Commercial","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/58515/"
 "58514","2018-09-21 09:13:09","http://buladoremedio.com/562VCMAC/PAY/US","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/58514/"
 "58513","2018-09-21 09:13:03","http://enhancepotential.com/39FEH/com/US","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/58513/"
@@ -23263,7 +23284,7 @@
 "58293","2018-09-20 14:36:02","http://surreyslopitch.com/Download/EN_en/2-Past-Due-Invoices","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/58293/"
 "58292","2018-09-20 14:20:06","http://surreyslopitch.com/886562OIYKYK/PAYMENT/Commercial","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/58292/"
 "58291","2018-09-20 13:48:14","http://lonestarcustompainting.com/9j","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/58291/"
-"58290","2018-09-20 13:48:12","http://tests2018.giantstrawdragon.com/r7","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/58290/"
+"58290","2018-09-20 13:48:12","http://tests2018.giantstrawdragon.com/r7","online","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/58290/"
 "58289","2018-09-20 13:48:10","http://kulikovonn.ru/FbEEbtTY","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/58289/"
 "58288","2018-09-20 13:48:08","http://notehashtom.ir/O9va","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/58288/"
 "58287","2018-09-20 13:48:05","http://jedecouvrelemaroc.com/XdbArre","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/58287/"
@@ -24329,7 +24350,7 @@
 "57210","2018-09-17 19:34:04","http://akgemc.com/43707YHJ/SEP/Commercial/","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/57210/"
 "57209","2018-09-17 19:20:14","http://tbilisitimes.ge/INFO/En/Invoice-for-you","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/57209/"
 "57208","2018-09-17 19:20:12","http://mybestgiftsfor.com/1811OEN/WIRE/Smallbusiness","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/57208/"
-"57207","2018-09-17 19:20:09","http://van-wonders.co.uk/wwvvv/862RNNE/73846WN/com/US","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/57207/"
+"57207","2018-09-17 19:20:09","http://van-wonders.co.uk/wwvvv/862RNNE/73846WN/com/US","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/57207/"
 "57206","2018-09-17 19:20:06","http://aleem.alabdulbasith.com/scan/En/Invoice-Number-292636","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/57206/"
 "57205","2018-09-17 18:58:10","http://www.ultigamer.com/wp-admin/includes/216ZVOKXLK/PAY/Business/","online","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/57205/"
 "57204","2018-09-17 18:58:06","http://ussvictory.org/a/","offline","malware_download","exe,heodo","https://urlhaus.abuse.ch/url/57204/"
@@ -24338,7 +24359,7 @@
 "57201","2018-09-17 18:35:27","http://birmetalciningezinotlari.com/8NE/PAYROLL/Cpf2tl","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/57201/"
 "57200","2018-09-17 18:35:17","http://betwext.com/PTa1a1aF","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/57200/"
 "57199","2018-09-17 18:35:08","http://brkini.net/Rfb","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/57199/"
-"57198","2018-09-17 18:32:03","http://van-wonders.co.uk/wwvvv/862RNNE/73846WN/com/US/","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/57198/"
+"57198","2018-09-17 18:32:03","http://van-wonders.co.uk/wwvvv/862RNNE/73846WN/com/US/","online","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/57198/"
 "57197","2018-09-17 18:31:18","http://www.ultigamer.com/wp-admin/includes/216ZVOKXLK/PAY/Business","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/57197/"
 "57196","2018-09-17 18:31:12","http://www.thefxgroup.co.za/Document/EN_en/Paid-Invoice-Credit-Card-Receipt","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/57196/"
 "57195","2018-09-17 18:31:09","http://roingenieria.cl/files/US/Invoice-for-you","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/57195/"
@@ -25267,7 +25288,7 @@
 "56260","2018-09-14 00:49:19","http://syubbanulakhyar.com/wp-content/upgrade/jad.txt","offline","malware_download","exe","https://urlhaus.abuse.ch/url/56260/"
 "56259","2018-09-14 00:49:04","http://www.leveleservizimmobiliari.it//HPP4_Commercial_Terms.pdf.ace","offline","malware_download","zip","https://urlhaus.abuse.ch/url/56259/"
 "56258","2018-09-14 00:39:09","http://www.compulife.us/cqs/renewal/3005929/renew.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/56258/"
-"56257","2018-09-14 00:39:06","http://down1.greenxf.com:8010/SOFTCAIJI/8/FENGYUNZHIMENGHANZ.RAR","offline","malware_download","rar","https://urlhaus.abuse.ch/url/56257/"
+"56257","2018-09-14 00:39:06","http://down1.greenxf.com:8010/SOFTCAIJI/8/FENGYUNZHIMENGHANZ.RAR","online","malware_download","rar","https://urlhaus.abuse.ch/url/56257/"
 "56256","2018-09-14 00:38:25","http://down1.greenxf.com:8010/%E5%AA%92%E4%BD%93%E5%B7%A5%E5%85%B7/%E5%AA%92%E4%BD%93%E5%BD%95%E5%88%B6/srecorder(www.greenxf.com).zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/56256/"
 "56255","2018-09-14 00:38:17","http://down1.greenxf.com:8010/SOFTCAIJI/8/80HOUTXT.RAR","online","malware_download","rar","https://urlhaus.abuse.ch/url/56255/"
 "56254","2018-09-14 00:15:19","http://itray.co.kr/wp-content/B6b2J","online","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/56254/"
@@ -25874,7 +25895,7 @@
 "55631","2018-09-12 15:07:42","http://120.92.168.177/BB%E7%B3%96%E6%9E%9C1.02.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/55631/"
 "55630","2018-09-12 15:06:07","http://122.114.6.167/lasst.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/55630/"
 "55629","2018-09-12 15:02:48","http://72.11.140.2/remcos-agent.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/55629/"
-"55628","2018-09-12 15:02:44","http://213.141.146.119/helpmmm.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/55628/"
+"55628","2018-09-12 15:02:44","http://213.141.146.119/helpmmm.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/55628/"
 "55627","2018-09-12 15:02:39","http://116.196.123.15/10211.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/55627/"
 "55626","2018-09-12 14:53:35","http://120.92.168.177/BB%E7%B3%96%E6%9E%9C1.01.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/55626/"
 "55625","2018-09-12 14:52:38","http://122.114.6.167/conimes.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/55625/"
@@ -26571,7 +26592,7 @@
 "54919","2018-09-11 13:07:16","http://nz.dilmah.com/0060JJJURNP/biz/Commercial","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/54919/"
 "54918","2018-09-11 13:07:15","http://momentsindigital.com/FILE/En_us/Important-Please-Read","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/54918/"
 "54917","2018-09-11 13:07:13","http://lesbouchesrient.com/logsite/95595GWHQCYE/SEP/Commercial","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/54917/"
-"54916","2018-09-11 13:07:12","http://jobarba.com/wp-content/62DIT/PAY/Personal","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/54916/"
+"54916","2018-09-11 13:07:12","http://jobarba.com/wp-content/62DIT/PAY/Personal","online","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/54916/"
 "54915","2018-09-11 13:07:09","http://infratecweb.com.br/43RERKZFLU/oamo/Smallbusiness","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/54915/"
 "54914","2018-09-11 13:06:38","http://gcare-support.com/868441AWKW/PAY/US","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/54914/"
 "54913","2018-09-11 13:06:36","http://fkpres.com.tr/0354262GXUFPLP/PAYMENT/Business","offline","malware_download","doc","https://urlhaus.abuse.ch/url/54913/"
@@ -28924,7 +28945,7 @@
 "52515","2018-09-06 03:16:21","http://miyno.com/4254813YHBCPJ/ACH/Commercial/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/52515/"
 "52514","2018-09-06 03:16:19","http://mistryhills.co.za/382427MUTPNM/oamo/Business/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/52514/"
 "52513","2018-09-06 03:16:16","http://menaramannamulia.com/869783TPV/com/Commercial/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/52513/"
-"52512","2018-09-06 03:16:14","http://medregisalmaty.kz/1MWZQ/SWIFT/Smallbusiness","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/52512/"
+"52512","2018-09-06 03:16:14","http://medregisalmaty.kz/1MWZQ/SWIFT/Smallbusiness","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/52512/"
 "52511","2018-09-06 03:16:11","http://mazuryrowery.pl/wp-admin/FILE/En/Past-Due-Invoices/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/52511/"
 "52510","2018-09-06 03:16:09","http://marcinwadon.cba.pl/3318XAMOLQUB/biz/Commercial/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/52510/"
 "52509","2018-09-06 03:16:07","http://mail.wasafi.tv/40REENH/BIZ/Commercial/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/52509/"
@@ -29253,7 +29274,7 @@
 "52185","2018-09-05 14:20:16","http://inthealthpass.com/Payments","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/52185/"
 "52184","2018-09-05 14:20:13","http://cereriaterenzi.com/sites/EN_en/Invoices-Overdue","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/52184/"
 "52183","2018-09-05 14:20:06","http://consultorialegal.cl/137757CCGDK/PAYROLL/Smallbusiness","offline","malware_download","doc,emotet","https://urlhaus.abuse.ch/url/52183/"
-"52182","2018-09-05 14:15:07","http://egomall.net/newsletter/EN_en/Paid-Invoice-Credit-Card-Receipt/","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/52182/"
+"52182","2018-09-05 14:15:07","http://egomall.net/newsletter/EN_en/Paid-Invoice-Credit-Card-Receipt/","online","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/52182/"
 "52181","2018-09-05 14:14:13","http://89.38.98.97/161bKjddnnsa.exe","offline","malware_download","Lethic","https://urlhaus.abuse.ch/url/52181/"
 "52180","2018-09-05 14:14:11","http://89.38.98.97/38bKjddnnsa.exe","offline","malware_download","Lethic","https://urlhaus.abuse.ch/url/52180/"
 "52179","2018-09-05 14:14:10","http://89.38.98.97/226bKjddnnsa.exe","offline","malware_download","Lethic","https://urlhaus.abuse.ch/url/52179/"
@@ -30621,7 +30642,7 @@
 "50802","2018-09-02 14:24:08","http://telechargement-facture.pro/facture?123456","offline","malware_download","FRA,tinynuke","https://urlhaus.abuse.ch/url/50802/"
 "50800","2018-09-02 10:45:08","http://arf.arkiomanger.eu/eako12/bigb7.exe","offline","malware_download","exe,Trickbot","https://urlhaus.abuse.ch/url/50800/"
 "50799","2018-09-02 10:45:05","http://blackgelik.com/ashjhmfn/guram.exe","offline","malware_download","exe,Trickbot","https://urlhaus.abuse.ch/url/50799/"
-"50798","2018-09-02 08:02:08","http://www.heartware.dk/AudioConverter.EXE","online","malware_download","exe","https://urlhaus.abuse.ch/url/50798/"
+"50798","2018-09-02 08:02:08","http://www.heartware.dk/AudioConverter.EXE","offline","malware_download","exe","https://urlhaus.abuse.ch/url/50798/"
 "50797","2018-09-02 07:31:03","https://raw.githubusercontent.com/naniko13/jopa/master/Pubg_01.09.2018.exe","offline","malware_download","CoinMiner,exe","https://urlhaus.abuse.ch/url/50797/"
 "50796","2018-09-02 06:11:09","http://latemia.com.br/4/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/50796/"
 "50795","2018-09-02 06:11:05","http://lamemoria.in/2ib2Pt/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/50795/"
@@ -30882,7 +30903,7 @@
 "50540","2018-09-01 05:33:29","http://www.thejewelrypouchstore.com/mk/","offline","malware_download","exe","https://urlhaus.abuse.ch/url/50540/"
 "50539","2018-09-01 05:33:28","http://ah-xinli.cn/news/449129/4757181.html","offline","malware_download","None","https://urlhaus.abuse.ch/url/50539/"
 "50538","2018-09-01 05:32:56","http://uwtgvrsg.sha58.me/c2a67addca7d4bf95868d9b49b2fb3ad/XhYN/ONOtI/ezcolmnpkp10190.apk","offline","malware_download","zip","https://urlhaus.abuse.ch/url/50538/"
-"50537","2018-09-01 05:32:55","http://01.azrj-phone.zuliyego.cn/wenbenchakanqi_yxdown.com.apk","offline","malware_download","zip","https://urlhaus.abuse.ch/url/50537/"
+"50537","2018-09-01 05:32:55","http://01.azrj-phone.zuliyego.cn/wenbenchakanqi_yxdown.com.apk","online","malware_download","zip","https://urlhaus.abuse.ch/url/50537/"
 "50536","2018-09-01 05:32:34","http://patch2.800vod.com/2010/gsbplus7t.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/50536/"
 "50535","2018-09-01 05:32:28","http://uwtgvrsg.sha58.me/507475798464e8c3219af1be9a066ef8/DoJY/0vxtL/usaqtuagyd10190.apk","offline","malware_download","zip","https://urlhaus.abuse.ch/url/50535/"
 "50534","2018-09-01 05:32:28","http://uwtgvrsg.sha58.me/b738ecf216a19f6faa0bfe6c526cbf6d/nNTR/1MF5i/usaqtuagyd10337.apk","offline","malware_download","zip","https://urlhaus.abuse.ch/url/50534/"
@@ -30960,8 +30981,8 @@
 "50461","2018-09-01 05:26:58","http://uebhyhxw.afgktv.cn/1/44278-C01","online","malware_download","zip","https://urlhaus.abuse.ch/url/50461/"
 "50460","2018-09-01 05:26:50","http://iuwrwcvz.applekid.cn/1/44217-C01","offline","malware_download","zip","https://urlhaus.abuse.ch/url/50460/"
 "50459","2018-09-01 05:26:44","http://aimmvqsf.ahhxdl.cn/1/42062-C01","offline","malware_download","zip","https://urlhaus.abuse.ch/url/50459/"
-"50458","2018-09-01 05:26:37","http://xblbnlws.appdoit.cn/1/42046-C01","offline","malware_download","zip","https://urlhaus.abuse.ch/url/50458/"
-"50457","2018-09-01 05:26:23","http://aygwzxqa.applekid.cn/1/42046-C01","offline","malware_download","zip","https://urlhaus.abuse.ch/url/50457/"
+"50458","2018-09-01 05:26:37","http://xblbnlws.appdoit.cn/1/42046-C01","online","malware_download","zip","https://urlhaus.abuse.ch/url/50458/"
+"50457","2018-09-01 05:26:23","http://aygwzxqa.applekid.cn/1/42046-C01","online","malware_download","zip","https://urlhaus.abuse.ch/url/50457/"
 "50456","2018-09-01 05:26:10","http://tpjsgq.loan/","offline","malware_download","None","https://urlhaus.abuse.ch/url/50456/"
 "50455","2018-09-01 05:26:06","http://one.wing138.info/glib","offline","malware_download","None","https://urlhaus.abuse.ch/url/50455/"
 "50454","2018-09-01 05:26:01","http://r06.yunshangduan.cn/sg_p465761.psd","offline","malware_download","None","https://urlhaus.abuse.ch/url/50454/"
@@ -32470,7 +32491,7 @@
 "48938","2018-08-29 05:18:09","http://pardefix.com/2481532YSSHP/doc/En/Service-Invoice/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/48938/"
 "48937","2018-08-29 05:18:03","http://oving.banachwebdesign.nl/doc/En/Service-Report-97672/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/48937/"
 "48936","2018-08-29 05:17:44","http://onlinelegalsoftware.com/FILE/US_us/9-Past-Due-Invoices/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/48936/"
-"48935","2018-08-29 05:17:43","http://online-classified-ads.ca/0977BAOHZI/com/US/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/48935/"
+"48935","2018-08-29 05:17:43","http://online-classified-ads.ca/0977BAOHZI/com/US/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/48935/"
 "48934","2018-08-29 05:17:40","http://nipponguru.hu/241625HST/BIZ/Smallbusiness/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/48934/"
 "48933","2018-08-29 05:17:39","http://nfs.lv/9785MSATGX/oamo/US/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/48933/"
 "48932","2018-08-29 05:17:38","http://newarchidea.com/2167504X/BIZ/Business/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/48932/"
@@ -32541,8 +32562,8 @@
 "48867","2018-08-29 05:15:44","http://bonjurparti.com/wp-admin/sites/En_us/ACH-form/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/48867/"
 "48866","2018-08-29 05:15:40","http://bodycorporatecollective.com.au/415DLXYO/ACH/Business/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/48866/"
 "48865","2018-08-29 05:15:37","http://bluesaloon.com/n373rmVh3QMow/SWIFT/Privatkunden/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/48865/"
-"48864","2018-08-29 05:15:35","http://birminghamcentrehotels.com/814824O/SEP/Commercial/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/48864/"
-"48863","2018-08-29 05:15:34","http://birminghamcentrehotels.com/814824O/SEP/Commercial","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/48863/"
+"48864","2018-08-29 05:15:35","http://birminghamcentrehotels.com/814824O/SEP/Commercial/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/48864/"
+"48863","2018-08-29 05:15:34","http://birminghamcentrehotels.com/814824O/SEP/Commercial","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/48863/"
 "48862","2018-08-29 05:15:32","http://bezoporu.wtie.tu.koszalin.pl/385FSCTIRU/WIRE/US/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/48862/"
 "48861","2018-08-29 05:15:31","http://bestcreditcardsrus.info/Corporation/EN_en/298-17-874375-781-298-17-874375-706/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/48861/"
 "48860","2018-08-29 05:15:30","http://bemao.com/1329L/com/US/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/48860/"
@@ -33705,10 +33726,10 @@
 "47686","2018-08-27 06:09:11","https://ouisorties.fr/client.php","offline","malware_download","PyLocky,zip","https://urlhaus.abuse.ch/url/47686/"
 "47685","2018-08-27 06:09:05","https://www.cjoint.com/doc/18_08/HHAvFUx2KML_DOCUMENTS-2.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/47685/"
 "47684","2018-08-27 05:20:14","http://mysit.space/123//v/2ZL1z4P","offline","malware_download","rtfkit","https://urlhaus.abuse.ch/url/47684/"
-"47675","2018-08-27 04:49:14","http://zyz-industry.cf/johnqq.jpg","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/47675/"
-"47674","2018-08-27 04:49:12","http://zyz-industry.cf/davidq.jpg","online","malware_download","AgentTesla,exe,RemcosRAT","https://urlhaus.abuse.ch/url/47674/"
+"47675","2018-08-27 04:49:14","http://zyz-industry.cf/johnqq.jpg","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/47675/"
+"47674","2018-08-27 04:49:12","http://zyz-industry.cf/davidq.jpg","offline","malware_download","AgentTesla,exe,RemcosRAT","https://urlhaus.abuse.ch/url/47674/"
 "47673","2018-08-27 04:49:09","http://denmarkheating.net/chillers/obuod/buz.jpg","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/47673/"
-"47672","2018-08-27 04:49:07","http://zyz-industry.cf/tozmaq.jpg","online","malware_download","AgentTesla,exe,RemcosRAT","https://urlhaus.abuse.ch/url/47672/"
+"47672","2018-08-27 04:49:07","http://zyz-industry.cf/tozmaq.jpg","offline","malware_download","AgentTesla,exe,RemcosRAT","https://urlhaus.abuse.ch/url/47672/"
 "47671","2018-08-27 04:49:04","https://posta.co.tz/network/Payment_notification.jar","online","malware_download","zip","https://urlhaus.abuse.ch/url/47671/"
 "47670","2018-08-27 04:48:57","http://ericanorth.net/wp-content/uploads/2013/Purchase%20order.doc","offline","malware_download","RTF","https://urlhaus.abuse.ch/url/47670/"
 "47669","2018-08-27 04:48:57","http://ericanorth.net/wp-content/uploads/2014/purchaseorder.doc","offline","malware_download","RTF","https://urlhaus.abuse.ch/url/47669/"
@@ -33719,7 +33740,7 @@
 "47664","2018-08-27 04:48:42","http://www.paulocamarao.com/leblon/galeria/rio/resources/misc/DANAAT.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/47664/"
 "47663","2018-08-27 04:48:40","http://piece-jointe.pro/dl.exe","offline","malware_download","tinynuke","https://urlhaus.abuse.ch/url/47663/"
 "47662","2018-08-27 04:48:31","http://ericanorth.net/wp-content/uploads/2016/01/purchase.doc","offline","malware_download","RTF","https://urlhaus.abuse.ch/url/47662/"
-"47661","2018-08-27 04:48:29","http://zyz-industry.cf/yugoqq.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/47661/"
+"47661","2018-08-27 04:48:29","http://zyz-industry.cf/yugoqq.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/47661/"
 "47660","2018-08-27 04:48:26","http://wjp-com.tk/flowqqqqqqq.jpg","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/47660/"
 "47659","2018-08-27 04:48:23","http://wjp-com.tk/ucheqqqqqqq.jpg","offline","malware_download","AgentTesla,exe,RemcosRAT","https://urlhaus.abuse.ch/url/47659/"
 "47658","2018-08-27 04:48:20","http://denmarkheating.net/buttons/obi/obiu.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/47658/"
@@ -34826,7 +34847,7 @@
 "46556","2018-08-23 06:24:41","http://chiaseed.vn/t6bsfiCsgwTQ","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/46556/"
 "46555","2018-08-23 06:24:37","http://thejewelrypouchstore.com/2t5ZvTvb","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/46555/"
 "46554","2018-08-23 06:24:35","http://ultigamer.com/wp-admin/includes/INFO/En_us/Service-Report-2718","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/46554/"
-"46553","2018-08-23 06:24:31","http://202.28.110.204/joomla/663591SPA/identity/Personal","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/46553/"
+"46553","2018-08-23 06:24:31","http://202.28.110.204/joomla/663591SPA/identity/Personal","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/46553/"
 "46552","2018-08-23 06:24:30","https://runerra.com/LLC/En/Invoice-Number-866813","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/46552/"
 "46551","2018-08-23 06:24:27","http://where2go2day.info/193231P/WIRE/Personal","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/46551/"
 "46550","2018-08-23 06:24:24","http://fourtion.com/Document/EN_en/Paid-Invoice","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/46550/"
@@ -35444,7 +35465,7 @@
 "45938","2018-08-22 11:27:13","http://summerlandrockers.org.au/j1A7X2uKoRbyyJK","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/45938/"
 "45937","2018-08-22 11:27:11","http://xyntegra.com/0788NL/PAYROLL/US","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/45937/"
 "45936","2018-08-22 11:27:07","http://bpo.correct.go.th/wp/wp-content/uploads/6593MLQC/PAYROLL/US","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/45936/"
-"45935","2018-08-22 11:27:01","http://www.eurekalogistics.co.id/jsn/emc/emc_driver/uploads/7403RX/com/Commercial","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/45935/"
+"45935","2018-08-22 11:27:01","http://www.eurekalogistics.co.id/jsn/emc/emc_driver/uploads/7403RX/com/Commercial","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/45935/"
 "45934","2018-08-22 11:26:57","http://laschuk.com.br/UJFTY2pSAKLempiTG9","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/45934/"
 "45933","2018-08-22 11:26:37","http://test.powerupcommunities.com/7149ESJYMVAY/com/Smallbusiness","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/45933/"
 "45932","2018-08-22 11:26:35","http://www.vensatpro.com/76207EVYMWM/PAY/Business","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/45932/"
@@ -36275,7 +36296,7 @@
 "45106","2018-08-21 08:40:14","http://lifetransformar.com/Aug2018/EN_en/INVOICES/Invoice-355826","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/45106/"
 "45105","2018-08-21 08:40:09","https://download.wetransfer.com/eu2/e40fbaa0e0422c735b6c52dc9fd9f83120180821075143/Scan%2076671514181.doc?token=eyJhbGciOiJIUzI1NiJ9.eyJ1bmlxdWUiOiJlNDBmYmFhMGUwNDIyYzczNWI2YzUyZGM5ZmQ5ZjgzMTIwMTgwODIxMDc1MTQzIiwicHJvZmlsZSI6ImV1MiIsImZpbGVuYW1lIjoiU2NhbiUyMDc2NjcxNTE0MTgxLmRvYyIsImVzY2FwZWQiOiJmYWxzZSIsImV4cGlyZXMiOjE1MzQ4Mzg1NDMsImNhbGxiYWNrIjoie1wiZm9ybWRhdGFcIjp7XCJhY3Rpb25cIjpcImh0dHA6Ly9wcm9kdWN0aW9uLmZyb250ZW5kLnNlcnZpY2UuZXUtd2VzdC0xLnd0OjMwMDAvYXBpL2JhY2tlbmQvdHJhbnNmZXJzL2U0MGZiYWEwZTA0MjJjNzM1YjZjNTJkYzlmZDlmODMxMjAxODA4MjEwNzUxNDMvZG93bmxvYWRzLzQ0NDIwNTM3MjMvY29tcGxldGVkLzMyN2I2MjI2OTVmNzk3MjNjMGU5OTU5N2RkYTFhZGM4MjAxODA4MjEwNzUxNDNcIn0sXCJmb3JtXCI6e1wic3RhdHVzXCI6W1wicGFyYW1cIixcInN0YXR1c1wiXSxcImRvd25sb2FkX2lkXCI6XCI0NDQyMDUzNzIzXCJ9fSIsIndheWJpbGxfdXJsIjoiaHR0cDovL3Byb2R1Y3Rpb24uYmFja2VuZC5zZXJ2aWNlLmV1LXdlc3QtMS53dDo5MjkyL3dheWJpbGwvdjEvZGM4MzNmYmQ2YzU1NmM3NGMzZjcwNTAxMjQ4OTVkODUzZDE4MGFjODI2Y2Y1MWIxZDQ1MTIzNzBkNzUxIn0.3JAjVmjOGLXpXqcNBWBdLWmUKM2E2v7I7dX63R688ms","offline","malware_download","None","https://urlhaus.abuse.ch/url/45105/"
 "45104","2018-08-21 08:40:06","https://linkprotect.cudasvc.com/url?a=http://irissnuances.com/Aug2018/US/Invoice-35443454&c=E","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/45104/"
-"45103","2018-08-21 08:10:06","https://u.lewd.se/yQhl7D_653031782.jpg","online","malware_download","exe,Loki,lokibot","https://urlhaus.abuse.ch/url/45103/"
+"45103","2018-08-21 08:10:06","https://u.lewd.se/yQhl7D_653031782.jpg","offline","malware_download","exe,Loki,lokibot","https://urlhaus.abuse.ch/url/45103/"
 "45102","2018-08-21 08:05:05","https://unibolcourier.com.bo/abc/boom/bin.msi","offline","malware_download","Formbook,msi","https://urlhaus.abuse.ch/url/45102/"
 "45101","2018-08-21 08:04:15","https://unibolcourier.com.bo/abc/miky/bin.msi","offline","malware_download","Formbook,msi","https://urlhaus.abuse.ch/url/45101/"
 "45100","2018-08-21 08:04:11","https://unibolcourier.com.bo/abc/spanky/bin.msi","offline","malware_download","Formbook,msi","https://urlhaus.abuse.ch/url/45100/"
@@ -36413,7 +36434,7 @@
 "44968","2018-08-21 04:46:23","http://www.iutai.tec.ve/casicoin/img/adjuntos/INFO/US_us/Invoice-for-t/t-08/21/2018/","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/44968/"
 "44967","2018-08-21 04:46:22","http://www.iutai.tec.ve/casicoin/img/adjuntos/3083235KNXAGR/SWIFT/Smallbusiness/","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/44967/"
 "44966","2018-08-21 04:46:20","http://www.grandcitythuykhue.net/default/En/INVOICE-STATUS/Invoice-9827413/","offline","malware_download","doc,emotet","https://urlhaus.abuse.ch/url/44966/"
-"44965","2018-08-21 04:46:18","http://www.eurekalogistics.co.id/jsn/emc/emc_driver/uploads/856774Z/WIRE/US/","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/44965/"
+"44965","2018-08-21 04:46:18","http://www.eurekalogistics.co.id/jsn/emc/emc_driver/uploads/856774Z/WIRE/US/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/44965/"
 "44964","2018-08-21 04:46:17","http://www.espacolumiar.com/default/US/ACCOUNT/Deposit/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/44964/"
 "44963","2018-08-21 04:46:15","http://www.duanvinhomeshanoi.net/766717AOJYPCA/PAY/Personal/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/44963/"
 "44962","2018-08-21 04:46:12","http://www.africimmo.com/97682F/PAY/Business/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/44962/"
@@ -37321,7 +37342,7 @@
 "44043","2018-08-17 13:42:05","http://news.digirook.com/OH7l","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/44043/"
 "44042","2018-08-17 13:37:58","http://olsenelectric.com/2GDULZ/BIZ/US","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/44042/"
 "44041","2018-08-17 13:37:56","http://abakus-biuro.net/2554665QRWKOF/PAYMENT/Personal","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/44041/"
-"44040","2018-08-17 13:37:55","http://www.eurekalogistics.co.id/jsn/emc/emc_driver/uploads/856774Z/WIRE/US","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/44040/"
+"44040","2018-08-17 13:37:55","http://www.eurekalogistics.co.id/jsn/emc/emc_driver/uploads/856774Z/WIRE/US","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/44040/"
 "44039","2018-08-17 13:37:53","http://ahappierself.info/442604YEKQII/oamo/Personal","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/44039/"
 "44038","2018-08-17 13:37:52","http://unclebudspice.com/6958JSBZZTT/com/Smallbusiness","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/44038/"
 "44037","2018-08-17 13:37:50","http://patimpatam.net/newsletter/EN_en/Aug2018/Invoice","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/44037/"
@@ -37900,7 +37921,7 @@
 "43464","2018-08-16 03:42:13","http://www.mundofoto.net/Wellsfargo/Smallbusiness/Aug-15-2018/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/43464/"
 "43463","2018-08-16 03:42:11","http://www.mega360.kiennhay.vn/wp-content/uploads/VVGMdvGzeTaa0/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/43463/"
 "43462","2018-08-16 03:42:08","http://www.madephone.com/Rp3kWI1/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/43462/"
-"43461","2018-08-16 03:42:06","http://www.eurekalogistics.co.id/jsn/emc/emc_driver/uploads/default/EN_en/STATUS/Invoice-39156953944-08-15-2018/","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/43461/"
+"43461","2018-08-16 03:42:06","http://www.eurekalogistics.co.id/jsn/emc/emc_driver/uploads/default/EN_en/STATUS/Invoice-39156953944-08-15-2018/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/43461/"
 "43460","2018-08-16 03:42:04","http://www.duanvinhomeshanoi.net/vITOvOvx2w2mm94SfUV/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/43460/"
 "43459","2018-08-16 03:42:00","http://www.chiaseed.vn/WellsFargo/Personal/Aug-15-2018/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/43459/"
 "43458","2018-08-16 03:41:55","http://wordpress-18375-253162.cloudwaysapps.com/newsletter/En/Open-invoices/36681","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/43458/"
@@ -39690,7 +39711,7 @@
 "41669","2018-08-13 15:05:33","http://settecieli.com/wp-content/plugins/limit-login-attempts/1","offline","malware_download","None","https://urlhaus.abuse.ch/url/41669/"
 "41668","2018-08-13 15:05:31","http://rapidappdev.com/wp-content/plugins/si-contact-form/includes/1","offline","malware_download","None","https://urlhaus.abuse.ch/url/41668/"
 "41667","2018-08-13 15:05:29","http://stevenmcquillen.com/wp-content/plugins/ajax-event-calendar/1","offline","malware_download","None","https://urlhaus.abuse.ch/url/41667/"
-"41659","2018-08-13 14:15:39","http://www.eurekalogistics.co.id/jsn/emc/emc_driver/uploads/64RSDownload/PELO85176459112MEZJR/Aug-13-2018-112816815/NXM-YUOXR/","online","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/41659/"
+"41659","2018-08-13 14:15:39","http://www.eurekalogistics.co.id/jsn/emc/emc_driver/uploads/64RSDownload/PELO85176459112MEZJR/Aug-13-2018-112816815/NXM-YUOXR/","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/41659/"
 "41658","2018-08-13 14:15:37","http://www.prueba6.extrasistemas.com/newsletter/En/Invoice-for-sent/Invoice-56295291-081318/","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/41658/"
 "41657","2018-08-13 14:15:36","http://paradisoristorante.com/doc/US_us/Aug2018/Pay-Invoice/","offline","malware_download","doc","https://urlhaus.abuse.ch/url/41657/"
 "41656","2018-08-13 14:15:35","http://saladesom.com.br/6KTFILE/QRRT9634718766YIEDQL/97693830977/JY-HOF/","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/41656/"
@@ -39712,7 +39733,7 @@
 "41640","2018-08-13 13:32:39","http://www2.itcm.edu.mx/33APAYMENT/KWCU51871932DJZ/435627751/FGD-IUEXE-Aug-10-2018","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/41640/"
 "41639","2018-08-13 13:32:37","http://aldosimon.com/24ZQYPAYMENT/SLT567647500L/76366582770/CMQO-XXZ-Aug-13-2018","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/41639/"
 "41638","2018-08-13 13:32:34","http://abakus-biuro.net//2HCLLC/NI8214953927Y/Aug-13-2018-406688/SXQ-NVYXF","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/41638/"
-"41637","2018-08-13 13:32:33","http://www.eurekalogistics.co.id/jsn/emc/emc_driver/uploads/64RSDownload/PELO85176459112MEZJR/Aug-13-2018-112816815/NXM-YUOXR","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/41637/"
+"41637","2018-08-13 13:32:33","http://www.eurekalogistics.co.id/jsn/emc/emc_driver/uploads/64RSDownload/PELO85176459112MEZJR/Aug-13-2018-112816815/NXM-YUOXR","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/41637/"
 "41636","2018-08-13 13:32:30","http://ferrazemprestimos.com.br/default/En_us/INVOICES/Past-Due-invoice","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/41636/"
 "41635","2018-08-13 13:32:27","http://emulsiflex.com/newsletter/US_us/OVERDUE-ACCOUNT/Invoice-467913388-081318","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/41635/"
 "41634","2018-08-13 13:32:25","http://eeodlewnia.pl/49NLLC/QXAG79088448WCKLJB/Aug-13-2018-679287278/PZNU-DUV","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/41634/"
@@ -42827,7 +42848,7 @@
 "38490","2018-08-03 05:19:18","http://hesq.co.za/administrator/Aug2018/EN_en/Details-to-update","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/38490/"
 "38489","2018-08-03 05:19:17","http://www.radiotremp.cat/Aug2018/EN_en/Payment-with-a-new-address","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/38489/"
 "38488","2018-08-03 05:19:12","http://pruebas.litcel.com/files/US_us/New-payment-details-and-address-update","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/38488/"
-"38487","2018-08-03 05:19:10","http://202.28.110.204/joomla/files/US/Payment-enclosed","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/38487/"
+"38487","2018-08-03 05:19:10","http://202.28.110.204/joomla/files/US/Payment-enclosed","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/38487/"
 "38486","2018-08-03 05:19:08","http://ap3f.fr/DHL/US_us","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/38486/"
 "38485","2018-08-03 05:19:07","http://naturalnyrolnik.pl/files/US_us/Bill-address-change","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/38485/"
 "38484","2018-08-03 05:19:06","http://nizansigorta.com/default/EN_en/My-current-address-update","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/38484/"
@@ -43272,7 +43293,7 @@
 "38039","2018-08-02 14:55:18","http://scrapgoldpile.com/wp-content/plugins/google-sitemap-generator/2","offline","malware_download","None","https://urlhaus.abuse.ch/url/38039/"
 "38037","2018-08-02 14:55:17","http://carimint.com/wp-content/plugins/jetpack/modules/2","offline","malware_download","None","https://urlhaus.abuse.ch/url/38037/"
 "38038","2018-08-02 14:55:17","http://zsgmm.com/wp-content/plugins/themegrill-demo-importer/2","offline","malware_download","None","https://urlhaus.abuse.ch/url/38038/"
-"38036","2018-08-02 14:55:16","http://cadencespa.net/wp-content/plugins/kadence-slider/redux/2","online","malware_download","None","https://urlhaus.abuse.ch/url/38036/"
+"38036","2018-08-02 14:55:16","http://cadencespa.net/wp-content/plugins/kadence-slider/redux/2","offline","malware_download","None","https://urlhaus.abuse.ch/url/38036/"
 "38035","2018-08-02 14:55:15","http://estrindesign.com/wp-content/plugins/option-tree/includes/2","offline","malware_download","None","https://urlhaus.abuse.ch/url/38035/"
 "38034","2018-08-02 14:55:14","http://scrapgoldpile.com/wp-content/plugins/google-sitemap-generator/1","offline","malware_download","None","https://urlhaus.abuse.ch/url/38034/"
 "38033","2018-08-02 14:55:10","http://zsgmm.com/wp-content/plugins/themegrill-demo-importer/1","offline","malware_download","None","https://urlhaus.abuse.ch/url/38033/"
@@ -43452,7 +43473,7 @@
 "37851","2018-08-02 00:27:02","http://www.allora.kiev.ua/default/En/Payment-enclosed","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/37851/"
 "37850","2018-08-01 22:45:05","http://bootstrapebook.com/wp-https/uz.exe","offline","malware_download","emotet,exe,Formbook","https://urlhaus.abuse.ch/url/37850/"
 "37849","2018-08-01 22:45:04","http://bootstrapebook.com/wp-https/elh.exe","offline","malware_download","emotet,exe,Formbook","https://urlhaus.abuse.ch/url/37849/"
-"37848","2018-08-01 21:18:53","http://www.yokydesign.com/default/US/New-Address-and-payment-details/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/37848/"
+"37848","2018-08-01 21:18:53","http://www.yokydesign.com/default/US/New-Address-and-payment-details/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/37848/"
 "37847","2018-08-01 21:18:49","http://www.cotala.com/files/US/Receipt-attached/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/37847/"
 "37846","2018-08-01 21:18:47","http://wordpress-18375-253162.cloudwaysapps.com/newsletter/US/Details-to-update/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/37846/"
 "37845","2018-08-01 21:18:45","http://wfactory.com/files/US/Money-transfer-details/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/37845/"
@@ -48361,7 +48382,7 @@
 "32843","2018-07-16 16:49:13","http://consorciosserragaucha.com.br/Bestellungen/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/32843/"
 "32842","2018-07-16 16:49:08","http://call4soft.com/EL-RECH/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/32842/"
 "32841","2018-07-16 16:49:06","http://arcsoluciones.cl/Bestellungen/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/32841/"
-"32840","2018-07-16 16:49:04","http://202.28.110.204/qr/Rechnungs/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/32840/"
+"32840","2018-07-16 16:49:04","http://202.28.110.204/qr/Rechnungs/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/32840/"
 "32839","2018-07-16 16:45:07","http://whoizzupp.com/files/ph.exe","offline","malware_download","exe,Pony","https://urlhaus.abuse.ch/url/32839/"
 "32838","2018-07-16 16:45:06","http://holdthatpaper33.com/bim/nine.exe","offline","malware_download","exe,Loki,Pony","https://urlhaus.abuse.ch/url/32838/"
 "32837","2018-07-16 16:45:05","http://185.148.241.52:4560/clu.exe","offline","malware_download","exe,Loki,Pony","https://urlhaus.abuse.ch/url/32837/"
@@ -49041,7 +49062,7 @@
 "32160","2018-07-13 12:09:18","http://gubo.hu/default/US/Purchase/Services-07-13-18-New-Customer-KM/","offline","malware_download","heodo","https://urlhaus.abuse.ch/url/32160/"
 "32159","2018-07-13 12:09:16","http://antenasartori.com.br/pdf/US/Order/Account-97528/","offline","malware_download","heodo","https://urlhaus.abuse.ch/url/32159/"
 "32158","2018-07-13 12:09:11","http://valquathailand.com/newsletter/En/Client/HRI-Monthly-Invoice/","offline","malware_download","heodo","https://urlhaus.abuse.ch/url/32158/"
-"32157","2018-07-13 12:09:07","http://avaagriculture.com/wp-content/uploads/default/EN_en/Statement/Invoice-755801/","online","malware_download","heodo","https://urlhaus.abuse.ch/url/32157/"
+"32157","2018-07-13 12:09:07","http://avaagriculture.com/wp-content/uploads/default/EN_en/Statement/Invoice-755801/","offline","malware_download","heodo","https://urlhaus.abuse.ch/url/32157/"
 "32156","2018-07-13 12:09:02","http://atnea.org/sites/EN_en/Client/Invoice-07-12-18/","offline","malware_download","heodo","https://urlhaus.abuse.ch/url/32156/"
 "32155","2018-07-13 12:08:57","http://stirling-bosch.com/sites/EN_en/Order/ACCOUNT219591/","offline","malware_download","heodo","https://urlhaus.abuse.ch/url/32155/"
 "32154","2018-07-13 12:08:56","http://ilkisgunu.com/default/DE_de/DOC/Rechnung-vom-12/07/2018-HEC-78-51017/","offline","malware_download","heodo","https://urlhaus.abuse.ch/url/32154/"
@@ -49610,7 +49631,7 @@
 "31578","2018-07-12 13:12:05","http://www.boldbiznet.com/Pasado-Debida-Facturas/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/31578/"
 "31577","2018-07-12 13:12:03","http://www.sreekumarnair.com/Rechnungskorrektur/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/31577/"
 "31576","2018-07-12 13:12:01","http://www.diaocvietlong.com/pdf/EN_en/Jul2018/Please-pull-invoice-543068/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/31576/"
-"31575","2018-07-12 13:11:58","http://www.avaagriculture.com/wp-content/uploads/default/EN_en/Statement/Invoice-755801/","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/31575/"
+"31575","2018-07-12 13:11:58","http://www.avaagriculture.com/wp-content/uploads/default/EN_en/Statement/Invoice-755801/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/31575/"
 "31574","2018-07-12 13:11:54","http://www.stolfactory-era.ru/Bestellungen/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/31574/"
 "31573","2018-07-12 13:11:53","http://www.healthyandbeautiful.xyz/Company-Invoices-2018-07/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/31573/"
 "31572","2018-07-12 13:11:51","http://www.stefancapaliku.com/Jul2018/En/Payment-and-address/Customer-Invoice-BO-60220745/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/31572/"
@@ -49836,7 +49857,7 @@
 "31349","2018-07-12 09:03:43","http://www.fundacionravera.com/newsletter/Rech/DOC/Rechnung-UIV-19-96138/","offline","malware_download","doc,emotet","https://urlhaus.abuse.ch/url/31349/"
 "31350","2018-07-12 09:03:43","http://www.spiritualhealerashish.com/Jul2018/En/INVOICE-STATUS/Invoices/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/31350/"
 "31348","2018-07-12 09:03:27","http://www.groovezasia.com.mm/sites/En_us/Order/Invoice-7610541/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/31348/"
-"31347","2018-07-12 09:03:20","http://www.atragon.co.uk/Jul2018/EN_en/Client/HRI-Monthly-Invoice/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/31347/"
+"31347","2018-07-12 09:03:20","http://www.atragon.co.uk/Jul2018/EN_en/Client/HRI-Monthly-Invoice/","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/31347/"
 "31346","2018-07-12 09:03:11","http://www.identify.threepiers.media/default/US_us/STATUS/Invoice-763441/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/31346/"
 "31345","2018-07-12 09:03:10","http://www.emlakofisi.tk/files/En/New-Order-Upcoming/Past-Due-invoice/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/31345/"
 "31344","2018-07-12 09:03:09","http://www.islamibankab.com/files/En/New-Order-Upcoming/Past-Due-invoice/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/31344/"
@@ -50091,7 +50112,7 @@
 "31096","2018-07-12 02:35:21","http://colodec4you.ru/Jul2018/US/DOC/ACCOUNT603203/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/31096/"
 "31094","2018-07-12 02:35:16","http://bretzel-franchising.ru/pdf/En_us/OVERDUE-ACCOUNT/Past-Due-invoice/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/31094/"
 "31093","2018-07-12 02:35:14","http://bedmanh2.bget.ru/sites/US/Order/New-Invoice-BD37087-YG-7825/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/31093/"
-"31092","2018-07-12 02:35:13","http://bazaltbezpeka.com.ua/sites/Scan/Hilfestellung/Rechnung-fur-Zahlung-AU-94-43683/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/31092/"
+"31092","2018-07-12 02:35:13","http://bazaltbezpeka.com.ua/sites/Scan/Hilfestellung/Rechnung-fur-Zahlung-AU-94-43683/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/31092/"
 "31091","2018-07-12 02:35:12","http://backselfconfidence.xyz/sites/US_us/ACCOUNT/Please-pull-invoice-32172/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/31091/"
 "31090","2018-07-12 02:35:10","http://altfix.ru/pdf/En/New-Order-Upcoming/Account-70363/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/31090/"
 "31089","2018-07-12 02:35:09","http://alpinisti.ga/newsletter/US/Payment-and-address/Services-07-12-18-New-Customer-YN/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/31089/"
@@ -50766,7 +50787,7 @@
 "30412","2018-07-11 04:12:06","http://www.bayburtmektep.net/sites/DE/DOC-Dokument/Ihre-Rechnung-vom-10.07.2018-027-846/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/30412/"
 "30411","2018-07-11 04:12:05","http://www.bak-karbal.com/sites/US_us/DOC/Customer-Invoice-IT-83825570/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/30411/"
 "30410","2018-07-11 04:12:03","http://www.axivenpestcontrol.ro/sites/US/STATUS/invoice/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/30410/"
-"30409","2018-07-11 04:12:02","http://www.avaagriculture.com/wp-content/uploads/doc/En/OVERDUE-ACCOUNT/HRI-Monthly-Invoice/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/30409/"
+"30409","2018-07-11 04:12:02","http://www.avaagriculture.com/wp-content/uploads/doc/En/OVERDUE-ACCOUNT/HRI-Monthly-Invoice/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/30409/"
 "30408","2018-07-11 04:11:58","http://www.automobi.com.br/newsletter/Scan/DOC-Dokument/Rechnungszahlung-Nr02021/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/30408/"
 "30407","2018-07-11 04:11:55","http://www.autodevices.topterra.ru/pdf/US_us/Purchase/HRI-Monthly-Invoice/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/30407/"
 "30406","2018-07-11 04:11:54","http://www.atmgross.com/pdf/EN_en/ACCOUNT/INV727672516060/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/30406/"
@@ -50946,13 +50967,13 @@
 "30232","2018-07-11 04:05:39","http://binaline.net/default/US/Jul2018/HRI-Monthly-Invoice/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/30232/"
 "30231","2018-07-11 04:05:38","http://bidatools.com/pdf/GER/Hilfestellung/Ihre-Rechnung/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/30231/"
 "30230","2018-07-11 04:05:34","http://bennett.in/wp-content/themes/sydney/images/Jul2018/US_us/Purchase/Direct-Deposit-Notice/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/30230/"
-"30229","2018-07-11 04:05:32","http://bazaltbezpeka.com.ua/Rechnungs-Details/RECHNUNG/Unsere-Rechnung-vom-09-Juli-033-880/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/30229/"
+"30229","2018-07-11 04:05:32","http://bazaltbezpeka.com.ua/Rechnungs-Details/RECHNUNG/Unsere-Rechnung-vom-09-Juli-033-880/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/30229/"
 "30228","2018-07-11 04:05:31","http://bayburtmektep.net/sites/DE/DOC-Dokument/Ihre-Rechnung-vom-10.07.2018-027-846/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/30228/"
 "30227","2018-07-11 04:05:30","http://baute.org/sites/EN_en/STATUS/Customer-Invoice-RF-7543562/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/30227/"
 "30226","2018-07-11 04:05:28","http://basketlodi.it/wp-content/uploads/sites/US/STATUS/Invoice-784196/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/30226/"
 "30225","2018-07-11 04:05:26","http://bak-karbal.com/sites/US_us/DOC/Customer-Invoice-IT-83825570/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/30225/"
 "30224","2018-07-11 04:05:25","http://aycanbasaran.com/gescanntes-Dokument/Rechnungszahlung/Hilfestellung-zu-Ihrer-Rechnung/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/30224/"
-"30223","2018-07-11 04:05:24","http://avaagriculture.com/wp-content/uploads/doc/En/OVERDUE-ACCOUNT/HRI-Monthly-Invoice/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/30223/"
+"30223","2018-07-11 04:05:24","http://avaagriculture.com/wp-content/uploads/doc/En/OVERDUE-ACCOUNT/HRI-Monthly-Invoice/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/30223/"
 "30222","2018-07-11 04:05:20","http://autodevices.topterra.ru/pdf/US_us/Purchase/HRI-Monthly-Invoice/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/30222/"
 "30221","2018-07-11 04:05:19","http://aslanzadeh.com/sites/US/OVERDUE-ACCOUNT/80261/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/30221/"
 "30220","2018-07-11 04:05:06","http://arshadziya.com/newsletter/En_us/Jul2018/Invoice-8265736/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/30220/"
@@ -56513,7 +56534,7 @@
 "24577","2018-06-28 05:38:44","http://dolaucanol.co.uk/OVERDUE-ACCOUNT/HRI-Monthly-Invoice","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/24577/"
 "24576","2018-06-28 05:38:43","http://devillabali.com/Fakturierung/Rechnung-0373427","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/24576/"
 "24575","2018-06-28 05:38:41","http://diglib.unwiku.ac.id/Purchase/Invoice-92527039-062718","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/24575/"
-"24574","2018-06-28 05:38:34","http://ct-corp.cn/Order/Past-Due-invoice","online","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/24574/"
+"24574","2018-06-28 05:38:34","http://ct-corp.cn/Order/Past-Due-invoice","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/24574/"
 "24573","2018-06-28 05:38:29","http://cselt.com.sg/Client/Direct-Deposit-Notice","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/24573/"
 "24572","2018-06-28 05:38:25","http://crystalestimating.com/Facturas-pendientes","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/24572/"
 "24571","2018-06-28 05:38:23","http://westcoastcafe.co.uk/Order/HRI-Monthly-Invoice","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/24571/"
@@ -57953,7 +57974,7 @@
 "23108","2018-06-25 07:24:02","http://s3.amazonaws.com/icee/PRT.doc","offline","malware_download","CVE201711882,RTF","https://urlhaus.abuse.ch/url/23108/"
 "23107","2018-06-25 07:20:02","http://uploadtops.is/1/f/TBYc9iY","offline","malware_download","exe,Formbook","https://urlhaus.abuse.ch/url/23107/"
 "23106","2018-06-25 07:02:12","http://www.bathoff.ru/OPnArr/","offline","malware_download","emotet,exe,heodo,Loki","https://urlhaus.abuse.ch/url/23106/"
-"23105","2018-06-25 07:02:10","http://ct-corp.cn/JkgvUOS/","offline","malware_download","emotet,exe,heodo,Loki","https://urlhaus.abuse.ch/url/23105/"
+"23105","2018-06-25 07:02:10","http://ct-corp.cn/JkgvUOS/","online","malware_download","emotet,exe,heodo,Loki","https://urlhaus.abuse.ch/url/23105/"
 "23104","2018-06-25 07:02:07","http://aquaserenehouseboats.com/t2WSTXzfu/","offline","malware_download","emotet,exe,heodo,Loki","https://urlhaus.abuse.ch/url/23104/"
 "23103","2018-06-25 07:02:05","http://www.dadevillepd.org/tBlLpOn/","offline","malware_download","emotet,exe,heodo,Loki","https://urlhaus.abuse.ch/url/23103/"
 "23102","2018-06-25 07:02:04","http://coreserv.pixelsco.com/j0fpFt/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/23102/"
@@ -73938,7 +73959,7 @@
 "4459","2018-04-11 19:47:55","http://saais.co.za/Outstanding-Invoices/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/4459/"
 "4458","2018-04-11 19:47:41","http://vandiesen.info/ACH-form/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/4458/"
 "4457","2018-04-11 15:03:18","http://servicelearning.thu.edu.tw/bon.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/4457/"
-"4456","2018-04-11 15:02:25","http://icn.tectrade.bg/fntwr.exe","online","malware_download","exe,ImminentRAT","https://urlhaus.abuse.ch/url/4456/"
+"4456","2018-04-11 15:02:25","http://icn.tectrade.bg/fntwr.exe","offline","malware_download","exe,ImminentRAT","https://urlhaus.abuse.ch/url/4456/"
 "4452","2018-04-11 14:47:13","http://pussyhunters.ru/server.exe","offline","malware_download","exe,Pontoeb","https://urlhaus.abuse.ch/url/4452/"
 "4431","2018-04-11 14:32:26","http://rufer.com/Invoice-5671523/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/4431/"
 "4430","2018-04-11 14:32:22","http://innervation.com/Need-to-send-the-attachment/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/4430/"
@@ -74082,7 +74103,7 @@
 "3984","2018-04-09 18:04:32","http://mamont-tk.ru/Download/IW7553965242GGLWT/89690962/VP-MSFZI/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/3984/"
 "3985","2018-04-09 18:04:32","http://minnich-online.de/INVOICE/VM-24022489045670/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/3985/"
 "3983","2018-04-09 18:04:26","http://lucasweb.com.br/Sales-Invoice/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/3983/"
-"3982","2018-04-09 18:04:21","http://log.yundabao.cn/Overdue-payment/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/3982/"
+"3982","2018-04-09 18:04:21","http://log.yundabao.cn/Overdue-payment/","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/3982/"
 "3981","2018-04-09 18:04:13","http://lejoliedoces.com.br/Invoice-Number-579705/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/3981/"
 "3980","2018-04-09 18:04:07","http://kimdobank.com/DOC/Invoice/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/3980/"
 "3978","2018-04-09 18:03:51","http://jmcankao.com/Invoice/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/3978/"
@@ -74961,7 +74982,7 @@
 "1875","2018-04-01 07:07:13","http://tonyslandscaping.net/X21pL/","online","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/1875/"
 "1874","2018-04-01 07:07:07","http://midorienn.jp/53z6/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/1874/"
 "1873","2018-04-01 07:07:04","http://atsithub.in/MQS19/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/1873/"
-"1872","2018-04-01 07:06:54","http://minglebyyou.com/sBn2Fb/","online","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/1872/"
+"1872","2018-04-01 07:06:54","http://minglebyyou.com/sBn2Fb/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/1872/"
 "1790","2018-03-29 16:38:12","https://www.serkanaygin.com/Paid-Invoice/paid/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/1790/"
 "1780","2018-03-29 16:10:45","http://briandswings.com/98yuhGF","offline","malware_download","quantloader","https://urlhaus.abuse.ch/url/1780/"
 "1776","2018-03-29 15:59:36","http://beauty-tea.com/hB2JAMO/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/1776/"
diff --git a/urlhaus-filter.txt b/urlhaus-filter.txt
index 9ac8a838..7a39236d 100644
--- a/urlhaus-filter.txt
+++ b/urlhaus-filter.txt
@@ -1,9 +1,10 @@
 ! Title: abuse.ch URLhaus Malicious URL Blocklist
-! Updated: Sun, 18 Nov 2018 12:24:15 UTC
+! Updated: Mon, 19 Nov 2018 00:23:32 UTC
 ! Expires: 1 day (update frequency)
 ! Repo: https://gitlab.com/curben/urlhaus-filter
 ! License: https://creativecommons.org/publicdomain/zero/1.0/
 ! Source: https://urlhaus.abuse.ch/api/
+01.azrj-phone.zuliyego.cn
 1.247.157.184
 1.34.159.137
 1.34.187.191
@@ -18,7 +19,6 @@
 103.12.201.239
 104.161.40.195
 104.162.129.153
-104.168.151.198
 104.206.242.208
 104.236.108.231
 104.248.165.108
@@ -55,7 +55,6 @@
 117.91.172.11
 117.91.172.49
 118.99.239.217
-1200447.ru
 121.189.114.4
 122.100.82.30
 122.114.246.145
@@ -80,7 +79,6 @@
 14.46.104.156
 14.46.33.116
 14.54.121.194
-141.105.66.253
 141.226.28.195
 142.129.111.185
 142.93.156.161
@@ -89,7 +87,6 @@
 142.93.217.247
 149.56.100.86
 150.co.il
-151.233.56.139
 154.85.36.119
 15666.online
 159.65.170.120
@@ -132,7 +129,6 @@
 185.193.125.147
 185.234.217.21
 185.244.25.134
-185.244.25.138
 185.244.25.140
 185.244.25.177
 185.244.25.188
@@ -154,7 +150,6 @@
 189.198.67.249
 189.223.121.48
 189.32.232.54
-189.47.10.54
 190.234.14.91
 190.69.81.172
 190.7.27.69
@@ -207,7 +202,6 @@
 211.48.208.144
 212.237.58.51
 213.122.157.8
-213.141.146.119
 213.7.246.198
 216.170.114.195
 217.147.169.210
@@ -224,7 +218,6 @@
 221.226.86.151
 221.229.31.214
 222.100.203.39
-222.186.137.132
 23.249.161.100
 23.249.167.158
 23.249.173.202
@@ -243,7 +236,6 @@
 31.168.24.115
 31.179.251.36
 31.211.138.227
-31.25.129.85
 36.67.206.31
 37.142.144.79
 37.218.236.157
@@ -277,9 +269,9 @@
 5.201.135.246
 5.29.137.12
 5.39.223.68
-5.43.95.157
 5.55.60.145
 5.63.159.203
+5.79.106.222
 5.fjwt1.crsky.com
 50.240.88.162
 50.250.107.139
@@ -317,7 +309,6 @@
 777ton.ru
 78.142.29.110
 78.188.67.250
-78.38.31.88
 78.96.20.79
 79.39.88.20
 7ballmedia.com
@@ -327,7 +318,6 @@
 80.211.134.83
 80.211.165.178
 80.211.184.72
-80.211.185.192
 80.211.28.43
 80.211.86.86
 81.4.101.221
@@ -342,8 +332,9 @@
 85.96.187.127
 86.34.66.189
 87.116.151.239
-87.27.96.3
+88.249.120.216
 89.105.202.39
+89.34.237.189
 89.34.26.134
 89.40.122.96
 89.40.124.202
@@ -359,7 +350,6 @@
 94.23.188.113
 94.52.37.14
 94i30.com
-95.179.231.176
 96.48.32.149
 98.200.233.150
 a-kiss.ru
@@ -465,15 +455,15 @@ asiapointpl.com
 asliozeker.com
 aspiringfilms.com
 atelierdupain.it
+atragon.co.uk
 attach.66rpg.com
 autokosmetykicartec.pl
 automotive.bg
-avaagriculture.com
 avalon-carver.org
 avionworld.com
 avstrust.org
-ayakkokulari.com
 aygunlersigorta.000webhostapp.com
+aygwzxqa.applekid.cn
 ayralift.com
 ayuhas.com
 azatour73.com
@@ -525,10 +515,12 @@ bfm.red
 biagioturbos.com
 bigablog.com
 bihanhtailor.com
+bihanirealty.com
 bilgetarim.com
 binar48.ru
 binaryrep.loan
 bio-vision.in
+birminghamcentrehotels.com
 bisonmanor.com
 bitcoinbank.sk
 bitcoiners.trade
@@ -551,12 +543,10 @@ bonjurparti.com
 booku.us
 borggini.com
 botnetsystem.com
-boutiqueerotique.biz
 boylondon.jaanhsoft.kr
 bpo.correct.go.th
 brands2life.b2ldigitalprojects.com
 branfinancial.com
-brazilianbuttaugmentation.net
 brians14daybody.com
 bridgeventuresllc.com
 brisaproducciones.com
@@ -579,7 +569,6 @@ c-dole.com
 c-t.com.au
 c-vietnam.es
 ca.hashnice.org
-cadencespa.net
 cameracity.vn
 camerathongminh.com.vn
 campusfinancial.net
@@ -593,7 +582,6 @@ caromijoias.com.br
 casanbenito.com
 casellamoving.com
 cash888.net
-cashflowfreedom.ca
 catherstone.co.uk
 cathome.org.tw
 cbea.com.hk
@@ -628,8 +616,8 @@ cine80.co.kr
 ciptowijayatehnik.com
 circuloproviamiga.com
 civciv.com.tr
+cjoint.com
 ckobcameroun.com
-claudinemogg.com
 clean.crypt24.in
 clickara.com
 clickclick2trip.com
@@ -716,6 +704,7 @@ depraetere.net
 desensespa.com
 dfsd.actfans.com
 dgecolesdepolice.bf
+dh.3ayl.cn
 diadelosmuertos.rocks
 dianxin8.52zsoft.com
 diendan238.net
@@ -867,7 +856,6 @@ familybusinessesofamerica.com
 fanction.jp
 fantastika.in.ua
 fastdns1.com
-faturamentocontabil.com
 fd.laomaotao.org
 feaservice.com
 fepestalozzies.com.br
@@ -909,7 +897,6 @@ gacdn.ru
 garamaproperty.com
 gardenservicepta.co.za
 garrystutz.top
-gauff.co.ug
 gaytoursmexico.com
 geckochairs.com
 geonatural.ge
@@ -920,6 +907,7 @@ ghisep.org
 ghislain.dartois.pagesperso-orange.fr
 ghost246630.worldhosts.ru
 giacongkhuynut.com
+giangnguyenreal.com
 giardiniereluigi.it
 gillisgang.us
 ginfora.com
@@ -964,20 +952,17 @@ hammer-protection.com
 haornews24.com
 haraldweinbrecht.com
 haras-dhaspel.com
-harbayurveda.com
 hassanmedia.com
 hayatverturkiye.com
 hcchanpin.com
 hciot.net
 healthydiet1.com
 heartseasealpacas.com
-heartware.dk
 heatingkentucky.com
 heavenknows.biz
 hectorcordova.com
 hengkangusa.com
 hermes.travel.pl
-hexadevelopers.com
 hgfitness.info
 highlandfamily.org
 hikeforsudan.org
@@ -1019,7 +1004,6 @@ icart.lk
 icases.pro
 iclikoftesiparisalinir.com
 icmcce.net
-icn.tectrade.bg
 iconwebs.com
 icxturkey.com
 idealse.com.br
@@ -1148,9 +1132,7 @@ knofoto.ru
 komedhold.com
 konstar.hk
 koppemotta.com.br
-korczak.wielun.pl
 kpopstarz.kienthucsong.info
-kr1s.ru
 kranskotaren.se
 kryptionit.com
 kryptoshock.com
@@ -1162,7 +1144,6 @@ laboratoriumbiolabor.pl
 lactest.by
 laflamme-heli.com
 lagreca.it
-lambpainting.com
 lameguard.ru
 lamesadelossenores.com
 landgfx.com
@@ -1203,6 +1184,7 @@ lnfm.eu
 loadhost.2zzz.ru
 localbusinesspromotion.co.uk
 loei.drr.go.th
+log.yundabao.cn
 lokahifishing.com
 lollipopx.ru
 looktravel.ge
@@ -1251,7 +1233,6 @@ mbr.kill0604.ru
 mcsuministros.com.ve
 meandoli.com
 media0.webgarden.name
-medregisalmaty.kz
 meleyrodri.com
 melonacreations.co.za
 melondisc.co.th
@@ -1270,14 +1251,12 @@ mikequartararo.com
 milaszewski.pl
 mils-group.com
 mine.zarabotaibitok.ru
-minglebyyou.com
 minifiles.net
 mininvest.com
 mint05.ph
 miracletours.jp
 miranom.ru
 mirocaffe.ro
-mironovka-school.ru
 mirror.tallysolutions.com
 mirzalar.com.tr
 mis.nbcc.ac.th
@@ -1353,6 +1332,7 @@ omlinux.com
 onepiling.com
 oneview.llt-local.com
 onl.dongphuchaianh.vn
+online-classified-ads.ca
 onlinematematik.org
 operationcloud.org
 optisaving.com
@@ -1371,7 +1351,6 @@ palisc.ps
 parsintelligent.com
 partsmaxus.com
 passwordrecoverysoft.com
-pasteboard.co
 patch2.99ddd.com
 patch3.99ddd.com
 paternoster.ro
@@ -1394,7 +1373,6 @@ picinsurancebrokers-my.sharepoint.com
 pink99.com
 pioneerfitting.com
 pirilax.su
-pizzeriarondo.si
 pjbuys.co.za
 placarepiatra.ro
 playhard.ru
@@ -1419,6 +1397,7 @@ prevlimp.com.br
 pride.ge
 primoproperty-my.sharepoint.com
 pro.netplanet.it
+proarchiland.ru
 procasa.imb.br
 proffice.com.pl
 proinstalco.ro
@@ -1460,6 +1439,7 @@ regenerationcongo.com
 reidsprite.com
 remnanttabernacle7thday.com
 renatocal.com
+residenciabrisadelmar.es
 resortmasters.com
 restaurant-intim-brasov.ro
 restaurantelataperiadel10.com
@@ -1510,7 +1490,6 @@ santoshdiesel.com
 sapphireroadweddings.com
 satsantafe.com.ar
 savegglserps.com
-scan.getrektlol.xyz
 schmalzl.it
 schuurs.net
 scouthibbs.com
@@ -1548,7 +1527,6 @@ sightspansecurity.com
 signsdesigns.com.au
 sijuki.com
 silverlineboatsales.com
-simplemakemoneyonline.com
 site.listachadebebe.com.br
 sjbnet.net
 ske.com.my
@@ -1573,7 +1551,6 @@ soo.sg
 souferramentasipiranga.com.br
 soumaille.fr
 souzavelludo.com.br
-soveregnshipping.com
 sparklecreations.net
 sparkuae.com
 speakwrite.edu.pe
@@ -1625,6 +1602,7 @@ tbilisitimes.ge
 tbnsa.org
 td111.com
 tdc.manhlinh.net
+teal.download.pdfforge.org
 techidra.com.br
 tecserv.us
 telanganabusinessinfo.com
@@ -1646,7 +1624,6 @@ thefireservice.co.uk
 thehotcopy.com
 thejutefibersbd.com
 themanorcentralpark.org
-themexoneonline.me
 thenewerabeauty.com
 thenutnofastflix2.com
 theposh-rack.com
@@ -1687,10 +1664,10 @@ treehugginpussy.de
 treesurveys.infrontdesigns.com
 trixtek.com
 trollingmotordoctor.com
-trombleoff.com
 troysumpter.com
 trs.or.th
 trumbullcsb.org
+tryonpres.org
 tsg339.com
 tuanduongmobile.vn
 turkishcentralbank.com
@@ -1706,6 +1683,7 @@ uk-novator.ru
 uksamples.com
 ultigamer.com
 ultrafreshchina.com
+ulukantasarim.com
 unavidapordakota.com
 unclebudspice.com
 underluckystar.ru
@@ -1717,6 +1695,7 @@ uplloadfile.ru
 upload.ynpxrz.com
 url.246546.com
 urrutimeoli.com
+us.cdn.persiangig.com
 usanin.info
 uwgeboortekaart.nl
 uxz.didiwl.com
@@ -1726,7 +1705,6 @@ vaatzit.autoever.com
 valencecontrols.com
 van-wonders.co.uk
 vananh.me
-vanypeluquerias.com
 vaun.com
 vav.edu.vn
 vaz-synths.com
@@ -1775,6 +1753,7 @@ wt8.52zsoft.com
 wt9.52zsoft.com
 www2.itcm.edu.mx
 x.ord-id.com
+xblbnlws.appdoit.cn
 xfredo.com
 xiazai.xiazaiba.com
 xmr-services.net
@@ -1812,4 +1791,3 @@ zingland.vn
 zionsifac.com
 zj.9553.com
 zjttkj.cn
-zyz-industry.cf