From 8780eb324d78e2ba975f2f69410a8203dbad9742 Mon Sep 17 00:00:00 2001 From: curben-bot Date: Tue, 4 Jun 2019 00:24:46 +0000 Subject: [PATCH] Filter updated: Tue, 04 Jun 2019 00:24:45 UTC --- src/URLhaus.txt | 96 ++++++++++++++++- urlhaus-filter.txt | 260 +++++++++++++++++++++------------------------ 2 files changed, 217 insertions(+), 139 deletions(-) diff --git a/src/URLhaus.txt b/src/URLhaus.txt index 0684b27b..ac8f829b 100644 --- a/src/URLhaus.txt +++ b/src/URLhaus.txt @@ -1,12 +1,106 @@ ################################################################ # abuse.ch URLhaus Plain-Text URL List (URLs only) # -# Last updated: 2019-06-03 12:18:03 (UTC) # +# Last updated: 2019-06-03 22:49:04 (UTC) # # # # Terms Of Use: https://urlhaus.abuse.ch/api/ # # For questions please contact urlhaus [at] abuse.ch # ################################################################ # # url +http://185.126.179.107/OwO/Tsunami.mips +http://134.209.19.159/bash +http://134.209.19.159/ftp +http://185.126.179.107/OwO/Tsunami.x86 +http://134.209.19.159/ntpd +http://185.126.179.107/OwO/Tsunami.mpsl +http://185.126.179.107/OwO/Tsunami.sh4 +http://185.126.179.107/OwO/Tsunami.m68k +http://134.209.19.159/apache2 +http://134.209.19.159/wget +http://185.126.179.107/OwO/Tsunami.arm5 +http://134.209.19.159/sshd +http://134.209.19.159/sh +http://185.126.179.107/OwO/Tsunami.arm +http://134.209.19.159/pftp +http://134.209.19.159/tftp +http://134.209.19.159/nut +http://134.209.19.159/openssh +http://134.209.19.159/cron +http://185.126.179.107/OwO/Tsunami.spc +http://185.126.179.107/OwO/Tsunami.arm6 +http://185.126.179.107/OwO/Tsunami.arm7 +http://54.39.239.17/down/Userci515/vshost32.exe +http://54.39.239.17/down/Mestre/conhosts.exe +http://54.39.239.17/down/Mestre/apagaexcluir.exe +http://ritruckcentre.com/dlk.exe +http://194.36.173.3/estella/estella.arm6 +http://194.36.173.3/estella/estella.ppc +http://194.36.173.3/estella/estella.arm7 +http://194.36.173.3/estella/estella.mpsl +http://194.36.173.3/estella/estella.m68k +http://194.36.173.3/estella/estella.sh4 +http://194.36.173.3/estella/estella.x86 +http://194.36.173.3/estella/estella.arm5 +http://194.36.173.3/estella/estella.spc +http://194.36.173.3/estella/estella.mips +http://194.36.173.3/estella/estella.arm +http://54.39.239.17/down/Mestre/microsofts32.exe +http://www.sdfjke.net/oiawsj/asyn1.exe +https://jpmm3w.bn.files.1drv.com/y4mr1XeGbhzdZp3sphqMRPQ7F6-VFzrREl63F7Utv1BSiIcTMFe8YF07ncMcTTNbFNZ8eYkGMU2nwN7z4S1Q0Otn8sRgz93R13L8U79xL2dAMVJJLIwiGuFIZiLWyQCKHsNIGQAoGgN4Ne6wRGOo4YcdHFGFkKwEFt4lJFXtNOA2Ek8bfm3JZLyW8qqkbksEA5cE97khswB_BXJQDnRzvWvMg/MT103.zip?download&psid=1 +http://webnetsolrastreamento.com/Rastreamento!AG435425273BR?https://www.itau.com.br +http://webnetsolrastreamento.com/Rastreamento!AG435425273BR?https://www.santander.com.br +http://mrsstedward.pbworks.com/f/Rock%2Bcycle.doc +http://mrsstedward.pbworks.com/f/Digestion%2Brevised%2B9%3A21.doc +http://mrsstedward.pbworks.com/f/Earth%20history.doc +http://franciscossc.pbworks.com/f/8thGRSurvey4HP.doc +http://hawaiimli.pbworks.com/f/HTTHTO.doc +http://mrsstedward.pbworks.com/f/Rock%2BCycle%2Brevisec%2B9%3A22.doc +http://texet2.ug/tesptc/penelop/updatewin.exe +http://enosburgreading.pbworks.com/f/Podcast+Requirement+Sheet.doc +http://patch2.51lg.com/newpatch12/h0mm4trainer.exe +http://enosburgreading.pbworks.com/f/project+timeline.doc +http://urworld.pbworks.com/f/SOCRATIC%2BTECHNOLOGY%2BSEMINAR.doc +http://enosburgreading.pbworks.com/f/Podcast+Quotes+Chart.doc +http://wjhslanguagearts.pbworks.com/f/Holocaust%2BPlans%2BRevised.doc +http://texet2.ug/tesptc/penelop/updatewin2.exe +http://film411.pbworks.com/f/ArtSetDecsProps.doc +http://gcmsilife4teachers.pbworks.com/w/file/fetch/51490302/hwsonwprotocol8math3-2-12.doc +http://urworld.pbworks.com/f/SOCRATIC%20TECHNOLOGY%20SEMINAR.doc +http://enosburgreading.pbworks.com/f/Outsider+Podcast+Rubirc.doc +http://mcreldesi.pbworks.com/f/Bob%2BG%2Blesson.doc +http://mrsstedward.pbworks.com/f/Continental%20drift.doc +http://atheltree.com/wp-content/plugins/apikey/3.04_Stub_Windows_x86.exe +http://rocknrolltrain.cn/build_t.exe +http://54.39.239.17/down/Userci515/vshost64.exe +https://jpmm3w.bn.files.1drv.com/y4mXfJ_4Nx0TpriLoVfjbGcE7Qu0OTxG0vBGaHGjFtaex0bBMewdJ8sfIBR9BEFNtzCOi_oNr_b8HG6q7isY7nLgJJtwaqM-JXjmK7_ucIz5BBuc38i_UjPpgdbZW-LQVefwQ4gmudhgFLVRiL_EBz-qv-OrjUMnk31_h84T6e82bDDZ_P9Ez1AG3bNlDT_UUZR6tETWP798Lrv1AlLzPKQcQ/MT103.zip?download&psid=1 +http://54.39.239.17/down/Userci515/microsofts32.exe +http://learn.cloudience.com/ojekwaeng/yugo/shit.exe +http://mrsstedward.pbworks.com/f/Rock+Cycle+revisec+9:22.doc +http://idesiree.ru/wp-admin/ClientC.exe +http://85.214.32.153:8080/2tK59px0yrPP49Xp14fRx50c +http://enosburgreading.pbworks.com/f/Podcast%20Quotes%20Chart.doc +http://bienangel.com/bienangel/templates/beez3/html/com_contact/categories/waterMark.bin +http://vaigacafe.com/app/webroot/assets/images/about/team/waterMark.bin +http://foothillenglish1b.pbworks.com/w/file/fetch/38913899/CriticalReadingStrategies.doc +http://mcreldesi.pbworks.com/f/science.doc +http://enosburgreading.pbworks.com/f/Podcast+Script+Organizer.doc +http://enosburgreading.pbworks.com/f/Capone+Character+Scrapbook.doc +https://comteconerneraphedb.info/awvword7.tmp +http://atfile.com/ftp/data/02/CapZZang_Installer.exe +http://fastsoft.onlinedown.net/down/onekeyyijianhuanyuan.exe +http://hawaiimli.pbworks.com/f/Architect.doc +http://wjhslanguagearts.pbworks.com/f/Holocaust+Plans+Revised.doc +http://msthompsonsclass.pbworks.com/f/Circlemaps.doc +http://dpeasesummithilltoppers.pbworks.com/w/file/fetch/54910966/classrulesmissionstate.doc +http://texet2.ug/tesptc/penelop/updatewin1.exe +http://texet2.ug/tesptc/penelop/5.exe +http://film411.pbworks.com/f/InterviewWith+Animal+Handler.doc +http://hawaiimli.pbworks.com/f/pces_mathematical.tasks.doc +http://186.183.210.119:54280/.i +http://mcreldesi.pbworks.com/f/Bob+G+lesson.doc +http://217.147.169.179/systemservices.sig +http://mrsstedward.pbworks.com/f/Continental+drift.doc +http://mcreldesi.pbworks.com/f/Bob%20G%20lesson.doc http://enosburgreading.pbworks.com/f/project%20timeline.doc http://hawaiimli.pbworks.com/f/THTO.doc http://franciscossc.pbworks.com/f/facilitatorQuestions.doc diff --git a/urlhaus-filter.txt b/urlhaus-filter.txt index a32e2a9d..3b6f49a1 100644 --- a/urlhaus-filter.txt +++ b/urlhaus-filter.txt @@ -1,5 +1,5 @@ ! Title: abuse.ch URLhaus Malicious URL Blocklist -! Updated: Mon, 03 Jun 2019 12:23:30 UTC +! Updated: Tue, 04 Jun 2019 00:24:45 UTC ! Expires: 1 day (update frequency) ! Repo: https://gitlab.com/curben/urlhaus-filter ! License: https://creativecommons.org/publicdomain/zero/1.0/ @@ -1203,6 +1203,7 @@ 134.209.182.141 134.209.185.46 134.209.188.127 +134.209.19.159 134.209.190.132 134.209.191.12 134.209.195.57 @@ -3260,6 +3261,7 @@ 185.121.166.109 185.125.230.212 185.125.231.40 +185.126.179.107 185.126.179.154 185.127.25.165 185.128.213.110 @@ -3714,6 +3716,7 @@ 186.15.16.108 186.179.243.45 186.179.253.137 +186.183.210.119 186.188.229.46 186.213.180.128 186.214.167.250 @@ -4459,7 +4462,7 @@ 1roof.ltd.uk 1sana1bana.estepeta.com.tr 1sandiegohomesales.com -1satcom.com +1satcom.com/wp-content/themes/twentysixteen/css/kia.zip 1sbs.unb.br 1serp.ru 1sfdhlkl.gq @@ -6693,7 +6696,7 @@ 4gs2etr.pw 4gstartup.com 4hourbook.com -4i7i.com +4i7i.com/11.exe 4im.us 4ingroup.com 4jt4l032ayqiw.com @@ -7074,6 +7077,7 @@ 54.39.151.1 54.39.175.169 54.39.190.154 +54.39.239.17 54.39.3.59 54.39.7.8 54.39.74.124 @@ -8165,6 +8169,7 @@ 85.185.20.69 85.204.124.0 85.204.74.14 +85.214.32.153 85.214.72.154 85.217.170.6 85.222.91.82 @@ -8274,7 +8279,13 @@ 8800rus.ru 887.basinbultenigonderimi.com 887sconline.com -88b.me +88b.me/R/SURIA.arm +88b.me/R/SURIA.arm5 +88b.me/R/SURIA.mips +88b.me/dlk/upg/bf.mips +88b.me/nbt/bf.arm +88b.me/nbt/bf.mips +88b.me/nbt/bf.mipsel 88four8.com 88fpw.com 88hardwood.com @@ -11645,7 +11656,7 @@ apicecon.com.br apicforme.com apidava.tk apieceoftoastblog.com -apigeoip.com +apigeoip.com/cl.exe apihomes.us apiperjuangan.com apipro.com.br @@ -11693,7 +11704,7 @@ apotheekgids.org app-1536185165.000webhostapp.com app-1541815294.000webhostapp.com app-utd.nl -app.casetabs.com/n/P7NX8575 +app.casetabs.com app.cloudindustry.net app.contentpress.io app.fastnck.com @@ -11912,7 +11923,7 @@ archelons.com archeryaddictions.com archetronweb.com archi-building.kg -archiaidbd.com +archiaidbd.com/templates/shaper_helix3/css/presets/inf.inf archibaldknoxforum.com archicon.co.id archidoc-med.a403.pl @@ -12660,10 +12671,12 @@ aterrosanitarioouroverde.com.br atervaxt.org atfaexpo.vn atfalanabeebturkey.com +atfile.com atg-us.org atgmail.net ath.edu.vn athelstan.ninja +atheltree.com athemmktg.com athena-finance.com athenafoodreviews.com @@ -12766,7 +12779,7 @@ att-hellolab.com att1.bigmir.net attach.66rpg.com attach.mail.daum.net -attack.s2lol.com +attack.s2lol.com/svchosts.exe attack.ucoz.ae attackplanr.com attaqwapreneur.com @@ -13372,8 +13385,7 @@ babababy.ga babaiko.site babaldi.com babaloke.woundedwarriorscience.science -babalublog.com/anatasio/PzmDp-HdzCluVtVxSdcM_TkwgWiLJc-qQ/ -babalublog.com/image/h5jo1ao23800/ +babalublog.com babaroadways.in babaunangdong.com babeltradcenter.ro @@ -13905,7 +13917,7 @@ bazarpolymer.ir bazee365.com bazilevs.ru bazneshastesho.com -bb-shop.ru +bb-shop.ru/ups.com/WebTracking/TZV-366538908/ bb.2ba.nl bb.mrmr11.cn bb7.ir @@ -14687,6 +14699,7 @@ bidvestdigital.co.za biederman.net biegtkaczy.cba.pl bielden.net +bienangel.com bienbaogiaothong.top biengrandir37.com bienhaitien.com @@ -15558,7 +15571,7 @@ blogdaliga.com.br blogdasjujubetes.com.br blogdovarejo.campanhamartins.com.br blogforgamer.com -blogformacionpchj.inces.gob.ve/inicio/sendincsec/legal/sec/En_en/2019-03/ +blogformacionpchj.inces.gob.ve blogforprofits.com blogg.postvaxel.se blogg.website @@ -15569,7 +15582,7 @@ bloggs.xyz blogigroka.com blogkienthuc.org blogline.net -blogmiranda.inces.gob.ve/zzsm-qqz8fm-fhtu.view/ +blogmiranda.inces.gob.ve blogmydaily.com blognhakhoa.vn blogprinter.net @@ -16914,7 +16927,7 @@ calving.bid calypso-key.com cam-tech.ir cam2come.nl -cama-algemesi.org +cama-algemesi.org/wp-includes/FILE/2v778xm1yvw17mhpaa1de3oxni_ye89vcm-7764862970/ cama.io camara.pro camaragarruchos.rs.gov.br @@ -17185,8 +17198,7 @@ cargoinsurance.tk cargokz.kz cargomate-kr.cf cargomax.ru -caribbean360.com/bu40BVNZ/ -caribbean360.com/test/XChCw-sav_KomKB-Pe0/COMET/SIGNS/PAYMENT/NOTIFICATION/01/28/2019/En_us/Sales-Invoice/ +caribbean360.com carikliantiquitat.com carimbosrapidos.com.br carimint.com @@ -17708,7 +17720,11 @@ cdn.fund cdn.gameupdate.co cdn.isoskycn.com cdn.mistyblade.com -cdn.mycfg.site +cdn.mycfg.site/files/032f.exe +cdn.mycfg.site/files/AVNinja.exe +cdn.mycfg.site/files/j033a.exe +cdn.mycfg.site/files/jce032a.exe +cdn.mycfg.site/files/jclm.exe cdn.ofifinancial.com cdn.openinstall.com.s3.amazonaws.com/offers/2/chrome_search.exe cdn.prominertools.com @@ -18860,7 +18876,8 @@ cloudflarrr.ml cloudhaste.com cloudhooks.com clouding-world.online -cloudme.com +cloudme.com/v1/ws2/:dr404/:22cted/22cted.exe +cloudme.com/v1/ws2/:dr404/:MicrosoftOffice/MicrosoftOffice.exe cloudninedesign.com.au cloudphotos.party cloudresemblao.top @@ -19292,7 +19309,7 @@ completerubbishremoval.net.au completervnc.com complience.com compln.net -components.technologymindz.com/INV/AMM-7394405/ +components.technologymindz.com composecv.com composite.be compphotolab.northwestern.edu @@ -19335,6 +19352,7 @@ comservice.org comsketchwefair-watduoliprudential.com.watchdogdns.duckdns.org comsystem.ch comtechadsl.com +comteconerneraphedb.info comtrust.ro comune.perosaargentina.to.it comunicaagencia.com @@ -20914,7 +20932,7 @@ dbalive.dk dbcomestic.com dbfuppsala.se dbinario.com -dbo.ca.gov/forms/tma/callreport_forms/Call_Report_NonNMLS_2018-04-17.xls +dbo.ca.gov dboyusa.online dbravo.pro dbs-ebank.com @@ -23664,6 +23682,7 @@ dpacorp.org dparmm1.wci.com.ph dpbusinessportal.ro dpe.com.tw +dpeasesummithilltoppers.pbworks.com dpersonnel.ru dpfnewsletter.org dph.logistic.pserver.ru @@ -24554,11 +24573,7 @@ drweb.be drwilsoncaicedo.com drydock.extreme.com.bd dryerventwizard.co.uk -drytechindia.com/admin/uploads/news/symlink/Job.exe -drytechindia.com/admin/uploads/news/symlink/Rose%20Os.exe -drytechindia.com/admin/uploads/news/symlink/finebobo.exe -drytechindia.com/admin/uploads/news/symlink/kemi.exe -drytechindia.com/admin/uploads/news/symlink/sweet.exe +drytechindia.com dryvisionbasaksehir.com drywallexpo.com drywallrepairocala.com @@ -25095,7 +25110,7 @@ ec2-35-180-41-210.eu-west-3.compute.amazonaws.com ec2-52-14-10-150.us-east-2.compute.amazonaws.com ec2-52-27-72-148.us-west-2.compute.amazonaws.com ec2-54-212-231-68.us-west-2.compute.amazonaws.com -ec2euc1.boxcloud.com/d/1/a1!1V6vIBwx7vlie5y8Jj5xM5IPOc9JdxZE8ck08Lu22jdQvqu0y23HLeDgazmXQbcUkHLgG95jBFv9p6E7N10-Td4omXyXfERhnGbpIk8IdEwOo81uTBHMYgy4yzT8Uxvxi_DNrwZVwtLndrqwk6HOtXFFG8JKPJ8-j3bYBRD7YW7N9nYzemOQEELVbjTHue6WA3yUOZgGYESvvG1o6919_NqqHATm_0MamPN9-_JTXF4S-ugI1s9il7i1vZ-euwgQoqgFeY5oJDW8thvVONRQk07JCvnmdWQnXX73l0ZvLypUuE7zJXsUcD5NGxrgNlrokmgqML3GqmVtClNBzsPt-4hCnBYbE8GFKG2PSUVv1AQ_OMqRi7_JBjnODN0K3rmScVbIHzzjAg_jacJ95hxys2NQU5-AVFI3mCsbyKrGcfCd0f0UbMxY8_U-adP_am2uYu7WJbTLhRMdeyA-WVab9_d_rsbZN6qHboBnfb-ijaBnqE8ynoZtVmMJ5-48vxc-GIMYW84qv5VvoeWLfUAZz6lHAWnqlSEHdOKo20T5TSGdq-iXNr9uPyrvqgkqG9HpKX37RCFRIzCH7msfmQqHgbz-2KEPa7CUiSQ2u8z21psh44KaSLVzJjCKzBjxAazONNQpIcsCJypBbx8vqrtOK7QhiX5gNJMoFxJGHI8DnZCDRVrzwWF9qowDQZmQle38iYkWPK_43qARZCYv53ECgLSEvFzIyq5bqgSCnvLv9YPI3DLNhkLmIJhb_-nAl1ma_y7HAzsqeQkS-c-_2pPORVY4faBAA7pPnt7cjI5VSu1JcFdQk3Xg_VoORZHo8QzmeLylrsDdbg1k4RBZK7hHQwN_sBr0owykFHvOvjqZq1lssaNL7N3SJBH_aDgRGglq2ojvYqSkLvLnet4-3Dr8qnksAAPhKHmfzagGXFfHkIuKs7n6dth09683x8T1Ape47jO8A3dU24WyvOlAHWXR0I91CZHB9fpHq2_qBHC66Ww4PYnR2KVcLrAjdII50jaO1znPE0nbdTQDqc9C4DLAdDWTrfnH-1lYwNfvm1SzR-FKy7qTF9ySduT3htYPFTCW-zwftT5YxvXPff6-XXCD599Rg8Fr2-INWCed5F8d3vC_lU3sy9p_-MfnSP_uRjY0F9rCy3LnSGb_ +ec2euc1.boxcloud.com ecadigital.com ecampus.mk ecasas.com.co @@ -25721,7 +25736,7 @@ elongsoft.com elpix.de elpqthnskbbf.tw elpresalegend.com -elprime.com +elprime.com/AntiSpamGuard.exe elprogreso.com.py elpron.ru elracosecret.com @@ -27274,6 +27289,7 @@ fastpacepersonaltraining.com fastpool.ir fastrackapp.es fastrxtransfer.com +fastsoft.onlinedown.net/down/onekeyyijianhuanyuan.exe fastsolutions-france.com fastter.allsb.ru fasttrackorganizing.com @@ -27607,7 +27623,7 @@ fikria.com file-server.online file.buttsdki.ca file.co.uk.cjllcmonthlysub.ga -file.fm +file.fm/down.php?cf&i=7pnvf2d6&n=8950003198.xls file.foxitreader.cn/file/Channel/PDFShrink/PDFShrinkSetup.exe file.foxitreader.cn/www_file/PDFShrinkSetup.exe file.importantcover.uk @@ -27653,7 +27669,7 @@ files.catbox.moe/tply68.doc files.cloud.orange.fr files.danwin1210.me files.dropmybin.me -files.enjin.com +files.enjin.com/287871/files/minecraft.exe files.fm/down.php?cf&i=r864f5z8&n=Payment_Advice.xls files.fm/down.php?cf&i=uzsby3q6&n=PaymentAdvice_413915_20181126153358.xls files.fm/down.php?i=4xjmcnqe&n=PO%237657566372ZYI43.doc @@ -27679,10 +27695,7 @@ files.fm/pa/accts/Payroll/Cash_Disbursement_Report_Sept.doc files.fm/pa/accts/Payroll/Grace091155.exe files.fm/pa/accts/Payroll/OfficeViewer.exe files.fqapps.com -files.gathercdn.com/attachments/2018-09-07/01ffb03a-b2e4-4721-b5d7-e1c33addb301/YXR_QO_3324291_931552353_09_07_2018.doc -files.gathercdn.com/attachments/2018-09-17/b6e5fbf0-7d1d-4ef6-8ba7-9e3e9a54e89d/AMS_GT_397%252FSFULF540938199_09_17_2018.doc -files.gathercdn.com/attachments/2018-09-18/c3376b01-0c2f-414b-b1eb-169358a27a71/AVE_B_694_WJXJU5696931361_09_18_2018.doc -files.gathercdn.com/attachments/2018-10-29/c05da777-1c47-4498-9c81-53470af9642e/Kowa.doc +files.gathercdn.com files.hrloo.com files.l-d.tech files.lashawnbarber.com @@ -27707,6 +27720,7 @@ fillings.myddns.me fills.info fillysrealestate.com film2frame.com +film411.pbworks.com film567.com filmbookit.website filmcinema21.com @@ -29869,8 +29883,7 @@ glfca.org glfishsuppliesgrimsby.co.uk glid.jp gligoricekofood.com -glip-vault-1.s3-accelerate.amazonaws.com/web/customer_files/1018812956684/IMAGE_020110333001001.zip?Expires=2075494478&AWSAccessKeyId=AKIAJROPQDFTIHBTLJJQ&Signature=YzxiWz8qYEyE%2FcRW%2FMpzw%2FoMHDg%3D&response-content-disposition=attachment -glip-vault-1.s3-accelerate.amazonaws.com/web/customer_files/1019027505164/Outstanding%20Payment%20Copy.zip?Expires=2075494478&AWSAccessKeyId=AKIAJROPQDFTIHBTLJJQ&Signature=7tH4mckzx%2FeV0H5QoM7Yn5hJtuE%3D&response-content-disposition=attachment +glip-vault-1.s3-accelerate.amazonaws.com glip-vault-1.s3.amazonaws.com/web/customer_files/720950280204/ACH%20PAYMENT%20REMITTANCE.DOC.zip?Expires=2075494478&AWSAccessKeyId=AKIAJROPQDFTIHBTLJJQ&Signature=APQeJXVXqVwwtpv%2FU8BoHV3zWNs%3D&response-content-disposition=attachment glip-vault-1.s3.amazonaws.com/web/customer_files/720950280204/ACH%20PAYMENT%20REMITTANCE.DOC.zip?Expires=2075494478&AWSAccessKeyId=AKIAJROPQDFTIHBTLJJQ&Signature=APQeJXVXqVwwtpv/U8BoHV3zWNs=&response-content-disposition=attachment glitzygal.net @@ -30437,7 +30450,7 @@ greatharvestbreadco.net greatharvestfranchising.com greathealthworld.com greathostnames.com -greatis.com +greatis.com/dbs.zip greatissoftware.com greatkenyatours.com greatmobiles.co.uk @@ -31364,7 +31377,11 @@ hbhcqa.com hbirkins.com hbk-phonet.eu hbmcorp.co.id -hbmonte.com +hbmonte.com/ACCOUNT/Invoice-9287563 +hbmonte.com/ACCOUNT/Invoice-9287563/ +hbmonte.com/DOC/Rechnungszahlung-Nr050648/ +hbmonte.com/HwFiV4/ +hbmonte.com/JfDz/vFk5u5/ hbpgvalve.ml hbr0.icu hbs-ernea.com @@ -32470,7 +32487,8 @@ hostname.com.ug hostname.vip hostnamepxssy.club hostnana.com -hostpp.ml +hostpp.ml/20190118/4C384435-9E82-4011-ACF3-78489BB98229.exe +hostpp.ml/20190118/multishare.exe hostprodirect.com hostrooz.com hostsoldat.cba.pl @@ -32891,7 +32909,8 @@ i.imgur.com/96vV0YR.png i.imgur.com/ecOivzx.png i.imgur.com/q3Aozv2.png i.imgur.com/xbLj5G4.png -i.ooxx.ooo +i.ooxx.ooo/2019/04/15/b39d9cbe6c63d7a621469bf13f3ea466.jpg +i.ooxx.ooo/2019/04/15/d8dfa3690186ca8ab80cb1028b01a770.jpg i.paragptfe.com i.postimg.cc/4sswVrhZ/1.jpg?dl=1 i.postimg.cc/7xHTVP4Z/13.jpg?dl=1 @@ -33173,6 +33192,7 @@ idenyaflux.co.id ideone.com/plain/sF4RBX idesa.cl ideservesomeacollades.gq +idesiree.ru ideyna.com idfutura.com idgnet.nl @@ -33641,7 +33661,7 @@ incasesafety.com incelticitayt.site inceptioneng.com inceptionradio.planetparanormal.com -inces.gob.ve/entel_online/Visualizar-fact.zip +inces.gob.ve incgoin.com inci-huidtherapie.nl inclusao.enap.gov.br @@ -35607,6 +35627,7 @@ jpfurnishings.co.uk jpheywood.co.uk jpiko.com jplymell.com +jpmm3w.bn.files.1drv.com jpmorganchasse.com jpmtech.com jpnc.co.kr @@ -35916,7 +35937,7 @@ kaitenz.com kaiwaa.com.br kaiz.ru kajastech.com -kakaocorp.link +kakaocorp.link/data/imgs/deim.gif kakatiyaangels.com kakhun.ru kakoon.co.il @@ -36653,7 +36674,7 @@ kinetics.hk kineziolog.si king-dom101.net king-lam.com -king.myapp.com +king.myapp.com/myapp/Kingroot/webapp_kingroot/solution_test/00000000000000000001457946048278.jar kingaardvark.com kingasgroup.co.uk kingcoffeetni.com @@ -37181,7 +37202,8 @@ kpogroup.bo kpopstarz.kienthucsong.info kppspgrojec.internetdsl.pl kqs.me -kr1s.ru +kr1s.ru/docv8.dat +kr1s.ru/java.dat krabben.no krafiatmada.my kraftaverk.is @@ -37315,8 +37337,7 @@ kss.edu.rs kstcl.org kstore.globalhotelsmotels.com ksuelibary.com -ksumnole.org/sitepro/css/flag-icon-css/css/sserv.jpg -ksumnole.org/wp-admin/css/colors/blue/sserv.jpg +ksumnole.org ksun.ca ksviet.com ktaghana.com @@ -38038,6 +38059,7 @@ leancrustnyc.com leandropacheco.adv.br leanidart.ru leapingmustard.com +learn.cloudience.com learn.efesmoldova.md learn.jerryxu.cn learn2comply.net @@ -41183,6 +41205,7 @@ mcoilsprings.com mcp-indonesia.com mcpbrasil.org.br mcppl.in +mcreldesi.pbworks.com mcrockstar.com mcs-belgium.com mcs-interiors.co.uk @@ -42341,7 +42364,7 @@ mmgpoti.com mmgsac.com.pe mmgsk.com mmigliac.wp-goodies.com -mmit-camt.com +mmit-camt.com/954242/ex/Rechnung/01_19/ mmj.my mmk.kim mmm.arcticdeveloper.com @@ -42738,8 +42761,7 @@ mosbirdclub.ru mosbussum.nl moschee-wil.ch moscow.bulgakovmuseum.ru -moscow00.online/GetDataAVK.exe -moscow00.online/KeyMoscow00.35.exe +moscow00.online moscow1.online/GetDataAVK.exe moscow1.online/KeyMoscow.exe moscow1.online/proxy/skapoland.chickenkiller.com.exe @@ -43022,6 +43044,7 @@ mst-net.de mstation.jp msteam18.com mstechpages.com +msthompsonsclass.pbworks.com mstone-ufa.ru mstreet.com.au mstroi-ramenskoye.ru @@ -43485,7 +43508,8 @@ myportfoliospeaks.com myprepaidfiles.ddns.net mypridehub.org myprobatedeals.com -myprofile.fit +myprofile.fit/En_us/Clients_information/122018 +myprofile.fit/En_us/Clients_information/122018/ mypromo.online mypt3.com mypuppysitter.com @@ -43952,7 +43976,12 @@ neatappletech.readysetselfie.com nebesnaya-sotnya.site nebraskacharters.com.au nebrodiescursionileanza.com -nebula-ent.com +nebula-ent.com/doc/EN_en/STATUS/HRI-Monthly-Invoice +nebula-ent.com/doc/EN_en/STATUS/HRI-Monthly-Invoice/ +nebula-ent.com/files/En_us/Jul2018/Invoice-849834311- +nebula-ent.com/files/En_us/Jul2018/Invoice-849834311/ +nebula-ent.com/t3 +nebula-ent.com/t3/ nebula.ee neccotweethearts.com necessary-evil.com @@ -44370,7 +44399,8 @@ ngitpl.com ngkidshop.com ngl-consulting.pt ngmaservice.com -ngnbinfo.com +ngnbinfo.com/gyssbm/ppplayerv3.0.exe +ngnbinfo.com/yhzjxxc/ppplayerv3.0.exe ngobito.net ngochuespa.com ngoshakarpura.online @@ -46127,7 +46157,7 @@ ostrozubovvladimi.pa.infobox.ru osttirol.news osttirolurlaub.at ostyle-shop.net -osvehprint.com/DOC/Invoice-number-541529/ +osvehprint.com osvisa.com osvisacom osweb.shop @@ -46767,6 +46797,7 @@ patandsca.exsite.info pataraqax.ru patch.avialance.eu patch.cdn.topgame.kr +patch2.51lg.com patch2.800vod.com patch2.99ddd.com patch3.51mag.com @@ -48694,6 +48725,7 @@ proxima-advertising.com proxima-solution.com proxindo.id proxy-ipv4.com +proxy.qualtrics.com proxy.qualtrics.com/proxy/?url=https%3A%2F%2Fuark.qualtrics.com%2FCP%2FFile.php%3FF%3DF_0ImYT11IuwAOVeZ&token=VaZKFD%2BFsRcUYx5fyuNAX24ZXgk5dXrGqSzM%2BPOz8fw%3D proxyholding.com proxyresume.com @@ -50463,6 +50495,7 @@ ritikavasudev.com ritimasansor.com ritimsports.com ritrovolapiazzetta.it +ritruckcentre.com ritual-shklov.by ritualscreative.com ritx.co.id @@ -50605,7 +50638,8 @@ rockmayak.ru rockmill.abcsolution.ru rockmusiclives.com rocknrolletco.top -rockpointgroup.com/BvyOYSzH1uz/ +rocknrolltrain.cn +rockpointgroup.com rockradioni.co.uk rocksolidproducts.com rocksolidstickers.com @@ -51121,7 +51155,9 @@ s2.series60.kiev.ua s214620.gridserver.com s2646b6752f64d083.jimcontent.com s287-my.sharepoint.com -s2lol.com +s2lol.com/update/botnet/svchosts.exe +s2lol.com/update/ngay_tro_ve_nd2004/AutoUpdate.exe +s2lol.com/update/volamvoson1/AutoUpdate.exe s2s-architect.com s3-ap-northeast-1.amazonaws.com s3-eu-west-1.amazonaws.com/killino2/gs5tye4fw.png @@ -52064,8 +52100,7 @@ scopice.com scopo.in scopoeidid.com scopriteistanbul.com -score-group.com/aims/files/arIx-wbq_wTt-K7/INVOICE/En/Paid-Invoice-Credit-Card-Receipt/ -score-group.com/aims/files/fuPb-Ylvcn63WK_rjzCcpvNq-MX/INV/445016FORPO/45528296823/doc/EN_en/Sales-Invoice/ +score-group.com scorpiocomunicaciones.com scorpioncontrollers.com scorzacostruzioni.it @@ -52123,6 +52158,7 @@ sdf35435345.site sdf5wer4wer.com sdfdgsgdg.ml sdfdsd.kuai-go.com +sdfjke.net sdfsd14as2334d.ru sdhfiuy.com sdhjesov.cz @@ -54333,7 +54369,7 @@ sosctb.com sosenfantsburkinafaso.fr sosh47.citycheb.ru sosofoto.cz -sosseguranca.com.br/8599192/invoicing/LLC/US_us/Document-needed/ +sosseguranca.com.br sosyalfenomen.xyz sosyalfor.xyz sosyalmedyasatisi.com @@ -54703,7 +54739,9 @@ sputnikmailru.cdnmail.ru spvgas.com spycam-kaufen.de spyguys.net -sql.4i7i.com +sql.4i7i.com/64.exe +sql.4i7i.com/MSSQL.exe +sql.4i7i.com/TQ.exe sql.bonin.home.pl sql.merkadetodoa92.com sqldefragmanager.xyz @@ -54806,7 +54844,12 @@ ssllinks.duckdns.org sslv3.at ssmmbed.com ssmthethwa.co.za -ssofhoseuegsgrfnu.ru +ssofhoseuegsgrfnu.ru/crb.exe +ssofhoseuegsgrfnu.ru/hello.exe +ssofhoseuegsgrfnu.ru/hello.exe?GvqCWVe +ssofhoseuegsgrfnu.ru/hello.exe?IGrq +ssofhoseuegsgrfnu.ru/m.exe +ssofhoseuegsgrfnu.ru/t.exe ssoocc.com ssosi.ru sspchakri.com @@ -57252,7 +57295,7 @@ teachthefuture.co teadyhedz.com teafresco.com teaheaven.co.uk -teal.download.pdfforge.org/op/op.exe +teal.download.pdfforge.org team-booking.apstrix.com team.neunoi.it team.superset.se @@ -57832,6 +57875,7 @@ texasfiddle.org texasproec.org texasranchandhome.com texeem.com +texet2.ug texsencare.com textchetna.com textielacademie.be @@ -57908,9 +57952,7 @@ thatavilellaoficial.com.br thatoilchick.com thats-amazing.com thctiedye.com -thdidm.zendesk.com/attachments/token/90twtLKKvofUaiNKT8vhMBab4/ -thdidm.zendesk.com/attachments/token/i87knteqNN582AqG1Au1GQzvc/?name=new-contract-November.doc -thdidm.zendesk.com/attachments/token/wtT4UmVAZ2oFlQshHDuiDRRGF/?name=Untitled_3LO318363.doc +thdidm.zendesk.com the-anchor-group.com the-bombay-summit.000webhostapp.com the-grizz.com @@ -59123,7 +59165,7 @@ track.smtpsendemail.com/6039663/c?p=nmYzgpvjfxvbxINlhD74pSXXT6reJPgoLBdNZH7pPqqU track.smtpsendemail.com/6039663/c?p=nmYzgpvjfxvbxINlhD74pSXXT6reJPgoLBdNZH7pPqqUMw-ev9kRLBYi59B2oPhGUZYLZm8GDg98RyBNIKgS5Tp427xBaIu_AaYea5ImoiygfkTk7kzusb5pXTFi8LFKQXykI-ZGVO0ysLmuV_Mao5BKLmqtSxXR8Yp_qqaovs8GKoC5Pg8cOx5V1pBcLg8v/ track.smtpsendemail.com/9011226/c?p=FoWocnIR-bZLvojME_8ucf_dlG9rUHaESbNtiV4k4S_ghz9xQLgnrkbwjMYho8tNF8nR8Os5R8FV1l7YL8InBR7qzFB-kllC8sX1AKZjajR-zXimiLhO_jEiLQ4HM5r2yvkham__jLoewuqIMzp_q0bXwLdtGXgg3KMJHYoPdIg=/ track.smtpsendemail.com/9011226/c?p=IZDwJHQsWgOLkBfhBEr2bjye8MwTvyJ0_GlRJ2FQcGN9fSS-2ePuPXpTG-INJ813_Qyci3KqILwfKp4cb9igE6KB0VHUl_mEH_vNmYZwYn7poI2IZ77rE4Yfuhoi2mrSdTLb_Cz_FbgZVn2AI_U5wjMWQz5sSBbenDGC8fab7PM=/ -track.smtpserver.email/5025709/c?p=DPdzPfm0ITEeSUYMbQHFqNtXhCLsDYJBqZ-fOOwix04sbB4kdpJY8mgVAVKHoy5oCUnaERSQjtyOAM8sljuqMHyX8_AC2S3jM9O3po_V6FdALrHCGEJEd4EqF14t72jTMhuI_YlbOKZq-00PtkjbWg== +track.smtpserver.email track.wizkidhosting.com track6.mixtape.moe track8.mixtape.moe @@ -59505,7 +59547,10 @@ truebluevibes.com truebox-sg.com trueke.es truenorthtimber.com -trueshare.com +trueshare.com/DirectLink/FileAccess.aspx?DLID=5iUsD63u2n341xo3F787 +trueshare.com/DirectLink/FileAccess.aspx?DLID=Ramij68ogQxqP3IjGWG3 +trueshare.com/DirectLink/FileAccess.aspx?DLID=a3xhX784BxKb5w1xgGah +trueshare.com/DirectLink/FileAccess.aspx?DLID=g512467Okv168aall61W trueterroir.co.uk trullsrodshop.com trumbullcsb.org @@ -60783,7 +60828,7 @@ url.emailprotection.link/?ayL72bfBub-Dd-Y3yvvPpz8JfYmmIlgEjoSDUuj2vrnTpKguZ2uBjd url.emailprotection.link/?bcp_LQdELwbKhxKToIznR8rOuhtt9W4qlFovFOxc0z5zmN6k8ji5zi9v7qbCrvRGePrP065w1sneU27JfM6LqozRkXpWdzWXoQHCUebEUJx-pJ0FN_jIdanzNgIHD_CY1/ url.emailprotection.link/?bgmviCpuhO15c9_q9HIofgnmKACO0q_lUjjCaeOwkfIK_HDtt1UqmBKpoVHxYkckgjOQoYTV_U0G2UMKhd4MBI9Ms8vO3Vliq2ClOuUAa6nO2a7Ij5lJFsouoEEMeMVmI/ url.emailprotection.link/?biZyxbw1FdaGSfCC1n6EP1AwPdX9DR0BrNJjqWgYAOFpW98LiMviIPVrszjnZzLUCLpEqqdYWFxWNwUDvWRLjcUFuhL2_nHA0Bs8Wz9JmbaHccIIKBseLJEWayzbE_cnD/ -url2.mailanyone.net/v1/?m=1hIbcm-0003zV-63&i=57e1b682&c=sb1BLj46bK32u6f729r5T_SLVKX-hEeWXh20_zDn9-3kTcC0-kN35FykIlpydgeYVRBWqWb5H__fK383wTDaKQftjlElxZ06jbAGlRi5jmUjnYDjKaSqXwdTG2Hn-_BE1DzRnThVvhiGYHM_TVBeW342habp8DtiT9jjlIEUc2X-IPGDGiPe7y_c9jhe69532GmnXozB5wiFJfBSTZiCAgMtPg6YXMrEAF0sq2DgO-kSY54HetFhN6GwM4kIw2VvCQx17a9bM6yKN8BWpWDJwg/ +url2.mailanyone.net url3.mailanyone.net url5459.41southbar.com url9823.ville.labrecque.qc.ca @@ -60860,75 +60905,7 @@ users.telenet.be/rudiSB/prive/cgi-bin/run.sh users.telenet.be/rudiSB/prive/cgi-bin/xmrig users.telenet.be/rudiSB/public_html/cgi-bin/run.sh users.telenet.be/rudiSB/public_html/cgi-bin/xmrig -users.tpg.com.au//soniamatas/9302030002_993.zip -users.tpg.com.au/ajsteel/222_737_81010.zip -users.tpg.com.au/ajsteel/222_737_81011.zip -users.tpg.com.au/ajsteel/222_737_81013.zip -users.tpg.com.au/ajsteel/222_737_81015.zip -users.tpg.com.au/ajsteel/222_737_81016.zip -users.tpg.com.au/ajsteel/222_737_81017.zip -users.tpg.com.au/ajsteel/222_737_81020.zip -users.tpg.com.au/ajsteel/222_737_81021.zip -users.tpg.com.au/ajsteel/222_737_81024.zip -users.tpg.com.au/ajsteel/222_737_81025.zip -users.tpg.com.au/ajsteel/222_737_81028.zip -users.tpg.com.au/ajsteel/222_737_81029.zip -users.tpg.com.au/ajsteel/222_737_81030.zip -users.tpg.com.au/ajsteel/222_737_81032.zip -users.tpg.com.au/ajsteel/222_737_81033.zip -users.tpg.com.au/ajsteel/222_737_81035.zip -users.tpg.com.au/ajsteel/222_737_81039.zip -users.tpg.com.au/ajsteel/222_737_8104.zip -users.tpg.com.au/ajsteel/222_737_81040.zip -users.tpg.com.au/ajsteel/222_737_81042.zip -users.tpg.com.au/ajsteel/222_737_8105.zip -users.tpg.com.au/ajsteel/222_737_8107.zip -users.tpg.com.au/ajsteel/222_737_8108.zip -users.tpg.com.au/ajsteel/222_737_8109.zip -users.tpg.com.au/apexdriving/1_11838_99_7287.zip -users.tpg.com.au/apexdriving/1_2838_99_7287.zip -users.tpg.com.au/apexdriving/1_29838_99_7287.zip -users.tpg.com.au/apexdriving/1_41838_99_7287.zip -users.tpg.com.au/apexdriving/1_42838_99_7287.zip -users.tpg.com.au/apexdriving/1_53838_99_7287.zip -users.tpg.com.au/apexdriving/1_5838_99_7287.zip -users.tpg.com.au/apexdriving/1_75838_99_7287.zip -users.tpg.com.au/apexdriving/1_8838_99_7287.zip -users.tpg.com.au/dimcejim/7827_99_838.zip -users.tpg.com.au/dimcejim/899848_0028.zip -users.tpg.com.au/dmrennie/067_15651_8.zip -users.tpg.com.au/dmrennie/067_16925_8.zip -users.tpg.com.au/dmrennie/067_18199_8.zip -users.tpg.com.au/dmrennie/067_20110_8.zip -users.tpg.com.au/dmrennie/067_22021_8.zip -users.tpg.com.au/dmrennie/067_25206_8.zip -users.tpg.com.au/dmrennie/067_25843_8.zip -users.tpg.com.au/dmrennie/067_27117_8.zip -users.tpg.com.au/dmrennie/067_29665_8.zip -users.tpg.com.au/dmrennie/067_30302_8.zip -users.tpg.com.au/dmrennie/067_33487_8.zip -users.tpg.com.au/dmrennie/067_34761_8.zip -users.tpg.com.au/dmrennie/067_36035_8.zip -users.tpg.com.au/dmrennie/067_38583_8.zip -users.tpg.com.au/dmrennie/067_39220_8.zip -users.tpg.com.au/dmrennie/067_42405_8.zip -users.tpg.com.au/dmrennie/067_43042_8.zip -users.tpg.com.au/dmrennie/067_47501_8.zip -users.tpg.com.au/dmrennie/067_51323_8.zip -users.tpg.com.au/dmrennie/067_55782_8.zip -users.tpg.com.au/dmrennie/067_57056_8.zip -users.tpg.com.au/dmrennie/067_6096_8.zip -users.tpg.com.au/dmrennie/067_61515_8.zip -users.tpg.com.au/dmrennie/067_63426_8.zip -users.tpg.com.au/dmrennie/067_64063_8.zip -users.tpg.com.au/dmrennie/067_8007_8.zip -users.tpg.com.au/elainew8/CBG-3983-3885-0909.zip -users.tpg.com.au/elainew8/CGB_INV_25.05.18.docx -users.tpg.com.au/elainew8/Pdform-INVGSK.zip -users.tpg.com.au/elainew8/o_inv_25.05.2018.html -users.tpg.com.au/palipane/293902399023-39922.zip -users.tpg.com.au/soniamatas/9302030002.993.zip -users.tpg.com.au/soniamatas/9302030002_993.zip +users.tpg.com.au userslinks.xyz usgmsp.com usgoldusa.com @@ -61075,6 +61052,7 @@ vagrantcafe.com vaguevague.com vaheracouncil.com vahokad.sk +vaigacafe.com vaillantteknikservisibursa.com vailvalleycouponcodes.com vaisofasangphuc.vn @@ -62573,6 +62551,9 @@ webmore.org.ua webmounts.co.ke webnahal.com webnemu.net +webnetsolrastreamento.com +webnetsolrastreamento.com/Rastreamento!AG435425273BR?https://www.itau.com.br +webnetsolrastreamento.com/Rastreamento!AG435425273BR?https://www.santander.com.br webnotitication.tk webnuskin.com webofmiscellaneous.com @@ -63162,7 +63143,8 @@ wmcforyou.com wmd9e.a3i1vvv.feteboc.com wmdcustoms.com wmg128.com -wmi.1217bye.host +wmi.1217bye.host/1.txt +wmi.1217bye.host/2.txt wmkatz.com wmo-raad.inov.me wmpatagonia.cl @@ -63411,7 +63393,7 @@ wpdabiran.yousefi.pro wpdemo.sleeplesshacker.com wpdemo.wctravel.com.au wpdemo.weboost.website -wpengine.zendesk.com/attachments/token/QiGBj5OV2VIK5lcGBzKwa3wzH/?name=LY7995522-693.doc +wpengine.zendesk.com wpgtxdtgifr.ga wpldjxxxua.ga wpmom.co @@ -63564,6 +63546,7 @@ x-soft.tomsk.ru x-soft.tomskru x-tel.com x-trade.com.pl +x.jmxded153.net x.jmxded153.net/y.z?l=http%3a%2f%2fshivmotor.com%2fNMVA-SVa_XGhzimAE-gtc%2f49390%2fSurveyQuestionsUS_us%2fSales-Invoice&r=11943112279&d=271873&p=1&t=h/ x.jmxded153.net/y.z?l=http%3a%2f%2fshivmotor.com%2fNMVA-SVa_XGhzimAE-gtc%2f49390%2fSurveyQuestionsUS_us%2fSales-Invoice&r=11943113879&d=271873&p=1&t=h/ x.jmxded153.net/y.z?l=http://thuraya.kz/iVIg-wWj_tCpHue-kR/EXT/PaymentStatus/En/Past-Due-Invoice&r=11940086345&d=271873&p=1&t=h/ @@ -64946,7 +64929,8 @@ zoodbash.com zoodoxos.gr zoolandia.boo.pl zoom-machinery.com -zoom.lk +zoom.lk/TV/touch/app/service.exe +zoom.lk/a/z/setup.exe zoomevents.pl zoomphoto.ir zooril.com