diff --git a/src/URLhaus.csv b/src/URLhaus.csv
index f82b4c46..f7767cfd 100644
--- a/src/URLhaus.csv
+++ b/src/URLhaus.csv
@@ -1,12 +1,399 @@
-"354710","2020-04-30 11:56:07","http://1podcast.xyz/ru53332/wondershare%20filmora%209-rtmd-addwp14fnqaapzmcaelofwasaosa_c8a.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/354710/","zbetcheckin"
-"354709","2020-04-30 11:55:15","http://1podcast.xyz/ru53332/magix+audio+cleaning+lab+23-rtmd-ac_xol7hiwaavhwcaezsfwaoab4j7koa.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/354709/","zbetcheckin"
-"354708","2020-04-30 11:55:07","https://1podcast.xyz/ru53332/-RTMD-ABMlp17_nAAAvhwCAERFFwAMAMpkk5oA.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/354708/","zbetcheckin"
-"354707","2020-04-30 11:52:13","http://185.112.146.165/meter/yala.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/354707/","zbetcheckin"
-"354706","2020-04-30 11:52:11","http://1podcast.xyz/ru53332/need+for+speed+most+wanted+(2005)-rtmd-alc7qv5xcwaa6rocafrsfwasapf5okca.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/354706/","zbetcheckin"
+"355115","2020-05-01 00:04:57","http://172.36.24.88:37562/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355115/","Gandylyan1"
+"355114","2020-05-01 00:04:26","http://221.210.211.132:55474/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355114/","Gandylyan1"
+"355113","2020-05-01 00:04:19","http://221.210.211.16:37945/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355113/","Gandylyan1"
+"355112","2020-05-01 00:04:16","http://112.17.104.45:42071/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355112/","Gandylyan1"
+"355111","2020-05-01 00:04:05","http://199.83.203.137:34781/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355111/","Gandylyan1"
+"355110","2020-05-01 00:03:00","http://vibicloud.com/wp-content/uploads/2020/04/bluoljyrzh/213610/servicecontractagreement_213610_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355110/","malware_traffic"
+"355109","2020-05-01 00:02:42","http://uyen.vn/rxmln/ServiceContractAgreement_23932918_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355109/","malware_traffic"
+"355108","2020-05-01 00:02:31","http://uyen.vn/rxmln/92790700/ServiceContractAgreement_92790700_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355108/","malware_traffic"
+"355107","2020-05-01 00:02:24","http://uyen.vn/rxmln/0944160/ServiceContractAgreement_0944160_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355107/","malware_traffic"
+"355106","2020-05-01 00:02:12","http://uyen.vn/rxmln/06521/ServiceContractAgreement_06521_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355106/","malware_traffic"
+"355105","2020-05-01 00:01:59","http://tourenhelicoptero.com/wp-content/uploads/2020/04/jrtnwyaolip/61814/ServiceContractAgreement_61814_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355105/","malware_traffic"
+"355104","2020-05-01 00:01:24","http://smollmart.com/wp-content/uploads/2020/04/swxcqhstvt/ServiceContractAgreement_47969_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355104/","malware_traffic"
+"355103","2020-05-01 00:01:22","http://smollmart.com/wp-content/uploads/2020/04/swxcqhstvt/ServiceContractAgreement_158053168_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355103/","malware_traffic"
+"355102","2020-05-01 00:01:18","http://smollmart.com/wp-content/uploads/2020/04/swxcqhstvt/ServiceContractAgreement_157301_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355102/","malware_traffic"
+"355101","2020-05-01 00:01:13","http://smollmart.com/wp-content/uploads/2020/04/swxcqhstvt/286513/ServiceContractAgreement_286513_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355101/","malware_traffic"
+"355100","2020-05-01 00:01:04","http://smollmart.com/wp-content/uploads/2020/04/swxcqhstvt/08286651/servicecontractagreement_08286651_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355100/","malware_traffic"
+"355099","2020-05-01 00:00:52","http://phuphamca.com/rftt/ServiceContractAgreement_7034895_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355099/","malware_traffic"
+"355098","2020-05-01 00:00:35","http://phuphamca.com/rftt/ServiceContractAgreement_6422943_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355098/","malware_traffic"
+"355097","2020-05-01 00:00:08","http://phuphamca.com/rftt/ServiceContractAgreement_54864195_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355097/","malware_traffic"
+"355096","2020-04-30 23:59:57","http://phuphamca.com/rftt/ServiceContractAgreement_074722_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355096/","malware_traffic"
+"355095","2020-04-30 23:59:49","http://phuphamca.com/rftt/208425456/ServiceContractAgreement_208425456_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355095/","malware_traffic"
+"355094","2020-04-30 23:59:42","http://mecbox.cn/wp-content/uploads/2020/04/pxrg/servicecontractagreement_83409172_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355094/","malware_traffic"
+"355093","2020-04-30 23:59:38","http://kposter.alexandruplesea.ro/xspqzuhv/ServiceContractAgreement_74979218_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355093/","malware_traffic"
+"355092","2020-04-30 23:59:06","http://kposter.alexandruplesea.ro/xspqzuhv/8715655/ServiceContractAgreement_8715655_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355092/","malware_traffic"
+"355091","2020-04-30 23:58:34","http://kolibri-fabrika.ru/wp-content/uploads/2020/04/tlzgibsc/52515920/servicecontractagreement_52515920_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355091/","malware_traffic"
+"355090","2020-04-30 23:58:31","http://khoztrip.ir/wp-content/uploads/2020/04/dyvopqaibo/ServiceContractAgreement_93405765_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355090/","malware_traffic"
+"355089","2020-04-30 23:58:24","http://khoztrip.ir/wp-content/uploads/2020/04/dyvopqaibo/3621110/ServiceContractAgreement_3621110_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355089/","malware_traffic"
+"355088","2020-04-30 23:58:16","http://khoztrip.ir/wp-content/uploads/2020/04/dyvopqaibo/342721658/ServiceContractAgreement_342721658_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355088/","malware_traffic"
+"355087","2020-04-30 23:58:10","http://khoztrip.ir/wp-content/uploads/2020/04/dyvopqaibo/29087603/ServiceContractAgreement_29087603_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355087/","malware_traffic"
+"355086","2020-04-30 23:58:03","https://jhorapatarastana.xyz/ptpkvgi/84191/ServiceContractAgreement_84191_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355086/","malware_traffic"
+"355085","2020-04-30 23:57:55","http://arifrehan.xyz/wp-content/uploads/2020/04/ksxdxoooi/52502623/ServiceContractAgreement_52502623_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355085/","malware_traffic"
+"355084","2020-04-30 23:57:17","http://arifrehan.xyz/wp-content/uploads/2020/04/ksxdxoooi/37943454/ServiceContractAgreement_37943454_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355084/","malware_traffic"
+"355083","2020-04-30 23:56:45","http://arifrehan.xyz/wp-content/uploads/2020/04/ksxdxoooi/289618301/ServiceContractAgreement_289618301_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355083/","malware_traffic"
+"355082","2020-04-30 23:56:04","http://adnquocte.com/jttlp/ServiceContractAgreement_19794501_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355082/","malware_traffic"
+"355081","2020-04-30 23:55:58","http://adnquocte.com/jttlp/47851039/ServiceContractAgreement_47851039_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355081/","malware_traffic"
+"355080","2020-04-30 23:55:56","http://adnquocte.com/jttlp/277768/servicecontractagreement_277768_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355080/","malware_traffic"
+"355079","2020-04-30 23:55:52","http://itrigger.cn/wp-content/uploads/2020/04/wvcmkcon/ServiceContractAgreement%20_763721_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355079/","malware_traffic"
+"355078","2020-04-30 23:55:48","http://freeprofessionalwebhosting.com/wp-content/uploads/2020/04/pozgtf/712977/ServiceContractAgreement_712977_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355078/","malware_traffic"
+"355077","2020-04-30 23:55:45","http://enixc.com/wp-content/uploads/2020/04/uxai/78850/servicecontractagreement_78850_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355077/","malware_traffic"
+"355076","2020-04-30 23:55:40","http://enixc.com/wp-content/uploads/2020/04/uxai/47119/ServiceContractAgreement_47119_04292020.zip","online","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355076/","malware_traffic"
+"355075","2020-04-30 23:55:33","http://davidd47.sg-host.com/jqpfuszuh/ServiceContractAgreement_301816_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355075/","malware_traffic"
+"355074","2020-04-30 23:55:30","http://davidd47.sg-host.com/jqpfuszuh/469080/ServiceContractAgreement_469080_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355074/","malware_traffic"
+"355073","2020-04-30 23:55:19","http://davidd47.sg-host.com/jqpfuszuh/3628001/ServiceContractAgreement_3628001_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355073/","malware_traffic"
+"355072","2020-04-30 23:55:12","http://davidd47.sg-host.com/jqpfuszuh/21721/ServiceContractAgreement_21721_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355072/","malware_traffic"
+"355071","2020-04-30 23:55:09","http://arifrehan.xyz/wp-content/uploads/2020/04/ksxdxoooi/5500091/ServiceContractAgreement_5500091_04292020.zip","offline","malware_download","Qakbot,qbot,spx109,zip","https://urlhaus.abuse.ch/url/355071/","malware_traffic"
+"355070","2020-04-30 23:42:03","http://167.250.49.155/bin/billi_7403895435d3487f9b36ed38b756b189.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/355070/","zbetcheckin"
+"355069","2020-04-30 23:38:07","http://98.159.99.37/443","online","malware_download","elf","https://urlhaus.abuse.ch/url/355069/","zbetcheckin"
+"355068","2020-04-30 23:15:34","https://pastebin.com/raw/01he7nkP","online","malware_download","None","https://urlhaus.abuse.ch/url/355068/","JayTHL"
+"355067","2020-04-30 22:41:05","https://bucketstrong.s3-us-west-1.amazonaws.com/ARQ09209881.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/355067/","zbetcheckin"
+"355066","2020-04-30 22:03:12","http://bovientix.com/Order883745.doc","online","malware_download","None","https://urlhaus.abuse.ch/url/355066/","JayTHL"
+"355065","2020-04-30 22:03:04","http://bovientix.com/order/face.mask.order.doc","online","malware_download","None","https://urlhaus.abuse.ch/url/355065/","JayTHL"
+"355064","2020-04-30 21:25:06","https://pastebin.com/raw/m1rVHyhk","offline","malware_download","None","https://urlhaus.abuse.ch/url/355064/","JayTHL"
+"355063","2020-04-30 21:03:40","http://112.17.190.176:52549/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355063/","Gandylyan1"
+"355062","2020-04-30 21:03:37","http://182.113.56.170:38704/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355062/","Gandylyan1"
+"355061","2020-04-30 21:03:33","http://123.10.135.87:49316/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355061/","Gandylyan1"
+"355060","2020-04-30 21:03:30","http://111.42.102.136:60302/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355060/","Gandylyan1"
+"355059","2020-04-30 21:03:27","http://27.41.138.49:56642/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355059/","Gandylyan1"
+"355058","2020-04-30 21:03:22","http://162.212.114.8:43329/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355058/","Gandylyan1"
+"355057","2020-04-30 21:03:17","http://199.83.203.104:33297/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355057/","Gandylyan1"
+"355056","2020-04-30 21:03:13","http://211.137.225.106:50160/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355056/","Gandylyan1"
+"355055","2020-04-30 21:03:08","http://113.133.226.226:47994/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355055/","Gandylyan1"
+"355054","2020-04-30 20:56:03","http://211.137.225.60:48342/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/355054/","zbetcheckin"
+"355053","2020-04-30 20:32:09","http://xaergtcrcd.info/a.x86","offline","malware_download","None","https://urlhaus.abuse.ch/url/355053/","JayTHL"
+"355052","2020-04-30 20:29:37","https://bovientix.com/Order883745.doc","online","malware_download","RTF","https://urlhaus.abuse.ch/url/355052/","zbetcheckin"
+"355051","2020-04-30 20:29:03","http://167.250.49.155/bin/billi_72b9a7c5071b4b7ba6afa84750488938.exe.dom_2.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/355051/","zbetcheckin"
+"355050","2020-04-30 20:28:09","http://myintromationszcj.win/EngKwhite2871.doc","offline","malware_download","None","https://urlhaus.abuse.ch/url/355050/","JayTHL"
+"355049","2020-04-30 20:27:35","http://myintromationsz.win/EngWhiteKen3081.doc","offline","malware_download","None","https://urlhaus.abuse.ch/url/355049/","JayTHL"
+"355048","2020-04-30 20:25:03","http://167.250.49.155/bin/billi_72b9a7c5071b4b7ba6afa84750488938.exe.dom_1.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/355048/","zbetcheckin"
+"355047","2020-04-30 20:24:05","http://167.250.49.155/bin/billi_72b9a7c5071b4b7ba6afa84750488938.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/355047/","zbetcheckin"
+"355046","2020-04-30 20:24:03","http://185.242.104.98/yjqf/Upload.jpg","offline","malware_download","md5:949c27be17c3828e6f4109056980fad3","https://urlhaus.abuse.ch/url/355046/","c_APT_ure"
+"355045","2020-04-30 20:21:04","http://167.250.49.155/bin/billi_4fa79931167d46f7ad70b0e5daf22b23.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/355045/","zbetcheckin"
+"355044","2020-04-30 20:20:06","http://167.250.49.155/bin/billi_4fa79931167d46f7ad70b0e5daf22b23.exe.dom_1.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/355044/","zbetcheckin"
+"355043","2020-04-30 20:20:04","http://167.250.49.155/bin/billi_4fa79931167d46f7ad70b0e5daf22b23.exe.dom_2.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/355043/","zbetcheckin"
+"355042","2020-04-30 20:17:03","http://billieellish.org/scandale/Adobe,%20Acrobat%20PDF%20Writer%203.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/355042/","zbetcheckin"
+"355041","2020-04-30 19:59:10","http://yolks.bestsellertwo.net/order/Purchase%20Sheet%202020.GZ","online","malware_download","None","https://urlhaus.abuse.ch/url/355041/","JayTHL"
+"355040","2020-04-30 19:59:06","http://yolks.bestsellertwo.net/Purchase%20Order.PDF.GZ","online","malware_download","None","https://urlhaus.abuse.ch/url/355040/","JayTHL"
+"355039","2020-04-30 19:56:04","https://srv-file9.gofile.io/download/Zw9Mex/OMS_FINANCIAL.SUPPORT.MEASURESpdf.vbs","offline","malware_download","md5:949c27be17c3828e6f4109056980fad3","https://urlhaus.abuse.ch/url/355039/","c_APT_ure"
+"355038","2020-04-30 19:38:10","http://shopjumpn.ch/a.x86","online","malware_download","None","https://urlhaus.abuse.ch/url/355038/","JayTHL"
+"355037","2020-04-30 19:34:03","https://pastebin.com/raw/aRHLvP3a","offline","malware_download","None","https://urlhaus.abuse.ch/url/355037/","JayTHL"
+"355036","2020-04-30 18:57:34","https://pastebin.com/raw/utbzF3eC","offline","malware_download","None","https://urlhaus.abuse.ch/url/355036/","JayTHL"
+"355035","2020-04-30 18:45:14","https://pastebin.com/raw/zshXy28d","offline","malware_download","None","https://urlhaus.abuse.ch/url/355035/","JayTHL"
+"355034","2020-04-30 18:40:09","https://dichthuatsnu.com/goodweb/pwofiles.php","online","malware_download","exe,Trickbot","https://urlhaus.abuse.ch/url/355034/","zbetcheckin"
+"355033","2020-04-30 18:20:05","http://37.49.226.209/bins/hoho.arm5","online","malware_download","elf","https://urlhaus.abuse.ch/url/355033/","zbetcheckin"
+"355032","2020-04-30 18:20:03","http://37.49.226.209/bins/hoho.ppc","online","malware_download","elf","https://urlhaus.abuse.ch/url/355032/","zbetcheckin"
+"355031","2020-04-30 18:16:15","http://37.49.226.209/bins/hoho.arm6","online","malware_download","elf","https://urlhaus.abuse.ch/url/355031/","zbetcheckin"
+"355030","2020-04-30 18:16:13","http://37.49.226.209/bins/hoho.mpsl","online","malware_download","elf","https://urlhaus.abuse.ch/url/355030/","zbetcheckin"
+"355029","2020-04-30 18:16:10","http://167.250.49.155/scandale/027cc450ef5f8c5f653329641ec1fed9.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/355029/","zbetcheckin"
+"355028","2020-04-30 18:16:07","http://37.49.226.209/bins/hoho.spc","online","malware_download","elf","https://urlhaus.abuse.ch/url/355028/","zbetcheckin"
+"355027","2020-04-30 18:16:05","http://37.49.226.209/bins/hoho.m68k","online","malware_download","elf","https://urlhaus.abuse.ch/url/355027/","zbetcheckin"
+"355026","2020-04-30 18:16:03","http://37.49.226.209/bins/hoho.sh4","online","malware_download","elf","https://urlhaus.abuse.ch/url/355026/","zbetcheckin"
+"355025","2020-04-30 18:11:03","http://37.49.226.209/bins/hoho.arm7","online","malware_download","elf","https://urlhaus.abuse.ch/url/355025/","zbetcheckin"
+"355024","2020-04-30 18:09:53","https://www.canaan.io/wp-content/uploads/2020/04/ktndx/ServiceContractAgreement_1948677_04292020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355024/","spamhaus"
+"355023","2020-04-30 18:09:45","https://data4i.com/azkcswshvv/88295925/ServiceContractAgreement_88295925_04292020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355023/","spamhaus"
+"355022","2020-04-30 18:09:41","https://vibicloud.com/wp-content/uploads/2020/04/bluoljyrzh/ServiceContractAgreement_517631_04292020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355022/","spamhaus"
+"355021","2020-04-30 18:09:32","http://khoztrip.ir/wp-content/uploads/2020/04/dyvopqaibo/ServiceContractAgreement_30519863_04292020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355021/","spamhaus"
+"355020","2020-04-30 18:09:27","http://adnquocte.com/jttlp/749518052/ServiceContractAgreement_749518052_04292020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355020/","spamhaus"
+"355019","2020-04-30 18:09:23","http://davidd47.sg-host.com/jqpfuszuh/ServiceContractAgreement_702732_04292020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355019/","spamhaus"
+"355018","2020-04-30 18:09:10","https://jhorapatarastana.xyz/ptpkvgi/224605/ServiceContractAgreement_224605_04292020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355018/","spamhaus"
+"355017","2020-04-30 18:09:07","http://adnquocte.com/jttlp/6169995/ServiceContractAgreement_6169995_04292020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355017/","spamhaus"
+"355016","2020-04-30 18:08:32","http://167.250.49.155/scandale/5a765351046fea1490d20f25.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/355016/","zbetcheckin"
+"355015","2020-04-30 18:08:29","http://167.250.49.155/scandale/file_4571518150a8181b403df4ae7ad54ce8b16ded0c.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/355015/","zbetcheckin"
+"355014","2020-04-30 18:08:25","https://billieellish.org/scandale/agent.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/355014/","zbetcheckin"
+"355013","2020-04-30 18:08:21","https://z.loyaltyaboveall.com/kvjkqh/ServiceContractAgreement_6979144_04292020.zip","offline","malware_download","None","https://urlhaus.abuse.ch/url/355013/","DrMattChristian"
+"355012","2020-04-30 18:08:18","http://84.10.31.238:59097/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/355012/","geenensp"
+"355011","2020-04-30 18:08:14","https://xn--d1aciabhfsdfe0a7e3b.xn--p1acf/wp-content/uploads/2020/04/vrydko/ServiceContractAgreement_192714748_04292020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355011/","spamhaus"
+"355010","2020-04-30 18:08:11","https://www.dotpay.id/wp-content/uploads/2020/04/ckfsevy/826489/ServiceContractAgreement_826489_04292020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355010/","spamhaus"
+"355009","2020-04-30 18:08:06","https://xn--d1aciabhfsdfe0a7e3b.xn--p1acf/wp-content/uploads/2020/04/vrydko/2634171/ServiceContractAgreement_2634171_04292020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/355009/","spamhaus"
+"355008","2020-04-30 18:07:29","http://27.41.213.143:37182/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355008/","Gandylyan1"
+"355007","2020-04-30 18:07:24","http://27.41.138.104:32995/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355007/","Gandylyan1"
+"355006","2020-04-30 18:07:21","http://172.36.49.78:44996/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355006/","Gandylyan1"
+"355005","2020-04-30 18:06:49","http://111.42.103.107:51147/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355005/","Gandylyan1"
+"355004","2020-04-30 18:05:41","http://111.42.102.149:44137/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355004/","Gandylyan1"
+"355003","2020-04-30 18:05:38","http://115.229.200.2:53809/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355003/","Gandylyan1"
+"355002","2020-04-30 18:05:33","http://199.83.205.205:59587/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355002/","Gandylyan1"
+"355001","2020-04-30 18:05:26","http://162.212.114.57:43242/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/355001/","Gandylyan1"
+"355000","2020-04-30 18:05:22","http://172.39.42.216:49848/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/355000/","Gandylyan1"
+"354999","2020-04-30 18:04:50","http://116.149.247.247:60337/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354999/","Gandylyan1"
+"354998","2020-04-30 18:04:42","http://110.154.250.225:51687/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354998/","Gandylyan1"
+"354997","2020-04-30 18:04:20","http://162.212.114.196:52274/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354997/","Gandylyan1"
+"354996","2020-04-30 18:04:16","http://182.126.183.195:47058/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354996/","Gandylyan1"
+"354995","2020-04-30 18:04:11","http://36.35.161.186:35150/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354995/","Gandylyan1"
+"354994","2020-04-30 18:04:05","http://123.10.101.22:48350/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354994/","Gandylyan1"
+"354993","2020-04-30 18:03:04","http://usapglobal.usapglobal.org/smile/smileeeecry.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/354993/","zbetcheckin"
+"354992","2020-04-30 17:56:06","http://37.49.226.209/bins/hoho.mips","online","malware_download","elf","https://urlhaus.abuse.ch/url/354992/","zbetcheckin"
+"354991","2020-04-30 17:56:04","http://167.250.49.155/scandale/PDFXCview.exe","online","malware_download","exe,kovter","https://urlhaus.abuse.ch/url/354991/","zbetcheckin"
+"354990","2020-04-30 17:52:15","https://billieellish.org/scandale/Dustman.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354990/","zbetcheckin"
+"354989","2020-04-30 17:52:13","https://billieellish.org/ransomware%20builder_pack/ransomware.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/354989/","zbetcheckin"
+"354988","2020-04-30 17:52:11","http://37.49.226.209/bins/hoho.arm","online","malware_download","elf","https://urlhaus.abuse.ch/url/354988/","zbetcheckin"
+"354987","2020-04-30 17:52:09","http://167.250.49.155/scandale/hostr.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/354987/","zbetcheckin"
+"354986","2020-04-30 17:52:06","http://167.250.49.155/scandale/Win32.WannaPeace.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/354986/","zbetcheckin"
+"354985","2020-04-30 17:48:10","https://sirajaoloan.com/wp-content/plugins/ubh/PONEW_OREDER002PDF.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354985/","zbetcheckin"
+"354984","2020-04-30 17:48:05","http://217.8.117.76/pro.exe","offline","malware_download","exe,ParallaxRAT","https://urlhaus.abuse.ch/url/354984/","zbetcheckin"
+"354983","2020-04-30 17:45:12","https://linx.li/s/oojk3xw6.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/354983/","zbetcheckin"
+"354982","2020-04-30 17:19:09","https://pastebin.com/raw/PQxPFwzj","offline","malware_download","None","https://urlhaus.abuse.ch/url/354982/","JayTHL"
+"354981","2020-04-30 17:19:07","https://pastebin.com/raw/LCfGyzCf","offline","malware_download","None","https://urlhaus.abuse.ch/url/354981/","JayTHL"
+"354980","2020-04-30 17:00:38","http://htn13.com:82/Post-App.apk","offline","malware_download","#suspectedFakeSpy","https://urlhaus.abuse.ch/url/354980/","c_APT_ure"
+"354979","2020-04-30 16:58:34","http://dev.apshaps.se/sdub/58722/Buy-Sell_Agreement_58722_04282020.zip","offline","malware_download","Qakbot,qbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354979/","p5yb34m"
+"354977","2020-04-30 16:56:34","http://oralloy.com/xyqkbu/13340409/Buy-Sell_Agreement_13340409_04282020.zip","online","malware_download","Qakbot,qbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354977/","p5yb34m"
+"354976","2020-04-30 16:54:32","https://pastebin.com/raw/WGWLwAVh","offline","malware_download","None","https://urlhaus.abuse.ch/url/354976/","JayTHL"
+"354975","2020-04-30 16:09:25","https://xn--d1aciabhfsdfe0a7e3b.xn--p1acf/wp-content/uploads/2020/04/vrydko/2472006/ServiceContractAgreement_2472006_04292020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354975/","spamhaus"
+"354974","2020-04-30 16:09:22","https://www.vendeaki.online/wp-content/uploads/2020/04/qnuhlexxe/ServiceContractAgreement_35200_04292020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354974/","spamhaus"
+"354973","2020-04-30 16:09:14","https://z.loyaltyaboveall.com/kvjkqh/84185/ServiceContractAgreement_84185_04292020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354973/","spamhaus"
+"354972","2020-04-30 15:54:29","https://cursdictie.ro/wp-content/uploads/2020/04/lrghgtmjic/8002270/ServiceContractAgreement_8002270_04292020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354972/","spamhaus"
+"354971","2020-04-30 15:54:26","https://paste.ee/r/U1Nmo","offline","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/354971/","fr0s7_"
+"354970","2020-04-30 15:54:22","http://saglikodemelerinial.org/20gb_hediye_internet.apk","online","malware_download","anubis,apk ","https://urlhaus.abuse.ch/url/354970/","mertcangokgoz"
+"354969","2020-04-30 15:54:18","https://u.teknik.io/EuIZ8.txt","offline","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/354969/","fr0s7_"
+"354968","2020-04-30 15:44:05","http://usapglobal.usapglobal.org/fresh/freshojakkkkk.exe","online","malware_download","lokibot","https://urlhaus.abuse.ch/url/354968/","James_inthe_box"
+"354967","2020-04-30 15:40:19","https://freeprofessionalwebhosting.com/wp-content/uploads/2020/04/pozgtf/ServiceContractAgreement_079375775_04292020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354967/","spamhaus"
+"354966","2020-04-30 15:40:17","https://data4i.com/azkcswshvv/ServiceContractAgreement_992381969_04292020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354966/","spamhaus"
+"354965","2020-04-30 15:26:44","http://promassager.ga/yltkoe/Buy-Sell_Agreement_3650_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354965/","spamhaus"
+"354964","2020-04-30 15:26:11","http://45.95.168.247/AB4g5/kiga.spc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/354964/","zbetcheckin"
+"354963","2020-04-30 15:26:09","http://178.62.204.84/Binarys/atomic.mpsl","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/354963/","zbetcheckin"
+"354962","2020-04-30 15:25:37","http://45.95.168.247/AB4g5/kiga.arm5","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/354962/","zbetcheckin"
+"354961","2020-04-30 15:25:35","https://technology-bd.com/wp-content/plugins/apikey/yezbv/ServiceContractAgreement_48798_04292020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354961/","spamhaus"
+"354960","2020-04-30 15:24:04","http://gmassurance.fr/wp-content/uploads/2020/04/phsse/8888.png","online","malware_download","exe,Qakbot,Quakbot,spx109","https://urlhaus.abuse.ch/url/354960/","lazyactivist192"
+"354959","2020-04-30 15:23:28","http://ngon10.com/phsse/8888.png","offline","malware_download","exe,Qakbot,Quakbot,spx109","https://urlhaus.abuse.ch/url/354959/","lazyactivist192"
+"354958","2020-04-30 15:22:56","http://herrfischer.me/phsse/8888.png","online","malware_download","exe,Qakbot,Quakbot,spx109","https://urlhaus.abuse.ch/url/354958/","lazyactivist192"
+"354957","2020-04-30 15:22:22","http://moinmo.de/phsse/8888.png","online","malware_download","exe,Qakbot,Quakbot,spx109","https://urlhaus.abuse.ch/url/354957/","lazyactivist192"
+"354956","2020-04-30 15:21:48","http://tradingwithharmony.com/wp-content/uploads/2020/04/phsse/8888.png","offline","malware_download","exe,Qakbot,spx109","https://urlhaus.abuse.ch/url/354956/","lazyactivist192"
+"354955","2020-04-30 15:21:16","http://37.49.226.209/bins/hoho.x86","online","malware_download","32-bit,elf,x86-32","https://urlhaus.abuse.ch/url/354955/","geenensp"
+"354954","2020-04-30 15:21:14","http://171.232.106.147:31136/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/354954/","geenensp"
+"354953","2020-04-30 15:20:33","http://178.62.204.84/Binarys/atomic.mips","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/354953/","zbetcheckin"
+"354952","2020-04-30 15:19:03","http://45.95.168.247/AB4g5/kiga.ppc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/354952/","zbetcheckin"
+"354951","2020-04-30 15:16:04","https://pastebin.com/raw/8bFFYipj","offline","malware_download","None","https://urlhaus.abuse.ch/url/354951/","JayTHL"
+"354950","2020-04-30 15:15:04","http://45.95.168.247/AB4g5/kiga.mpsl","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/354950/","zbetcheckin"
+"354949","2020-04-30 15:13:06","https://www.dotpay.id/wp-content/uploads/2020/04/ckfsevy/ServiceContractAgreement_0615706_04292020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354949/","spamhaus"
+"354948","2020-04-30 15:11:05","http://45.95.168.247/AB4g5/kiga.mips","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/354948/","zbetcheckin"
+"354947","2020-04-30 15:11:03","http://45.95.168.247/AB4g5/kiga.sh4","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/354947/","zbetcheckin"
+"354946","2020-04-30 15:08:06","http://45.95.168.247/AB4g5/kiga.m68k","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/354946/","zbetcheckin"
+"354945","2020-04-30 15:08:04","http://45.95.168.247/AB4g5/kiga.arm7","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/354945/","zbetcheckin"
+"354944","2020-04-30 15:08:02","http://45.95.168.247/AB4g5/kiga.arm6","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/354944/","zbetcheckin"
+"354943","2020-04-30 15:07:36","http://45.95.168.247/sensi.sh","offline","malware_download","shellscript","https://urlhaus.abuse.ch/url/354943/","zbetcheckin"
+"354942","2020-04-30 15:07:34","https://pastebin.com/raw/0GDV0vg2","offline","malware_download","None","https://urlhaus.abuse.ch/url/354942/","JayTHL"
+"354941","2020-04-30 15:07:32","http://221.210.211.30:45426/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354941/","Gandylyan1"
+"354940","2020-04-30 15:07:28","http://180.116.47.28:40003/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354940/","Gandylyan1"
+"354939","2020-04-30 15:06:54","http://49.82.196.117:42695/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354939/","Gandylyan1"
+"354938","2020-04-30 15:06:23","http://172.36.45.41:45155/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354938/","Gandylyan1"
+"354937","2020-04-30 15:05:51","http://182.222.195.192:3884/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354937/","Gandylyan1"
+"354936","2020-04-30 15:05:45","http://125.44.241.64:55036/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354936/","Gandylyan1"
+"354935","2020-04-30 15:05:38","http://119.102.153.184:45923/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354935/","Gandylyan1"
+"354934","2020-04-30 15:05:28","http://110.154.15.122:58741/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354934/","Gandylyan1"
+"354933","2020-04-30 15:04:39","http://182.127.64.253:54695/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354933/","Gandylyan1"
+"354932","2020-04-30 15:04:32","http://182.113.220.114:42221/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354932/","Gandylyan1"
+"354931","2020-04-30 15:04:28","http://121.233.116.232:44223/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354931/","Gandylyan1"
+"354930","2020-04-30 15:04:22","http://221.14.237.63:48812/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354930/","Gandylyan1"
+"354929","2020-04-30 15:04:13","http://116.114.95.89:44423/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354929/","Gandylyan1"
+"354928","2020-04-30 15:04:10","http://125.125.44.18:54549/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354928/","Gandylyan1"
+"354927","2020-04-30 15:04:04","http://222.138.133.206:49382/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354927/","Gandylyan1"
+"354926","2020-04-30 15:01:39","http://morruko.antesos.com/fqtylehpb/4690/Buy-Sell_Agreement_4690_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354926/","spamhaus"
+"354925","2020-04-30 15:01:07","http://66.57.55.210:54699/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/354925/","geenensp"
+"354924","2020-04-30 15:01:03","http://45.95.168.247/AB4g5/kiga.arm","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/354924/","zbetcheckin"
+"354923","2020-04-30 15:00:09","https://tapss.com.br/wp-content/uploads/2020/04/uqwra/ServiceContractAgreement_679250639_04292020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354923/","spamhaus"
+"354922","2020-04-30 14:59:34","https://www.azenzatowers.com/wp-content/uploads/2020/04/zgesczf/20434069/ServiceContractAgreement_20434069_04292020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354922/","spamhaus"
+"354921","2020-04-30 14:58:37","https://avestor.uz/wp-content/uploads/2020/04/dbaogom/ServiceContractAgreement_15800_04292020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354921/","spamhaus"
+"354920","2020-04-30 14:57:05","http://217.8.117.76/rev.exe","offline","malware_download","exe,RemcosRAT","https://urlhaus.abuse.ch/url/354920/","abuse_ch"
+"354919","2020-04-30 14:56:33","http://boscanatural.com/wp/secure.accounts.send.com/","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/354919/","zbetcheckin"
+"354918","2020-04-30 14:55:16","https://sirajaoloan.com/wp-content/plugins/ubh/PaymentSwiftPDF.exe","offline","malware_download","exe,NanoCore","https://urlhaus.abuse.ch/url/354918/","jstrosch"
+"354917","2020-04-30 14:54:38","https://rrinteriores.neoistone.site/wp-content/uploads/2020/04/exskkcowpfp/49913/ServiceContractAgreement_49913_04292020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354917/","spamhaus"
+"354916","2020-04-30 14:39:03","https://pastebin.com/raw/nzULABGd","offline","malware_download","None","https://urlhaus.abuse.ch/url/354916/","JayTHL"
+"354915","2020-04-30 14:32:04","http://jessymart.flexyhub.com/ssuzzix/9952/Buy-Sell_Agreement_9952_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354915/","spamhaus"
+"354914","2020-04-30 14:23:15","https://bluecollarfinancial.net/gfmixt/Buy-Sell_Agreement_429077_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354914/","spamhaus"
+"354913","2020-04-30 14:23:10","http://116.100.249.121:11296/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/354913/","geenensp"
+"354912","2020-04-30 14:12:12","http://setsd.xyz/sagawa4.2.3.apk","offline","malware_download","None","https://urlhaus.abuse.ch/url/354912/","JayTHL"
+"354911","2020-04-30 14:12:06","http://setss.xyz/sagawa6.8.7.apk","offline","malware_download","None","https://urlhaus.abuse.ch/url/354911/","JayTHL"
+"354910","2020-04-30 14:02:30","https://pastebin.com/raw/hzxuFBgf","offline","malware_download","None","https://urlhaus.abuse.ch/url/354910/","JayTHL"
+"354909","2020-04-30 13:53:03","http://koravit.zaeteaw.net/okmqhrfdsvj/Buy-Sell_Agreement_0423623_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354909/","spamhaus"
+"354908","2020-04-30 13:42:13","http://rockersdolphin.co.za/dj/dj.exe","offline","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/354908/","James_inthe_box"
+"354907","2020-04-30 13:38:15","https://dr080.com/INV-004562.jar","online","malware_download","Adwind,jar","https://urlhaus.abuse.ch/url/354907/","spamhaus"
+"354906","2020-04-30 13:38:09","http://demo13.dsdemosite.com/alugzfn/Buy-Sell_Agreement_1165478_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354906/","spamhaus"
+"354905","2020-04-30 13:38:03","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/Buy-Sell_Agreement_2605470_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354905/","spamhaus"
+"354904","2020-04-30 13:26:11","http://ddl7.data.hu/get/320756/12414239/company_profile_as_requested_and_Purchase_Order_.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/354904/","spamhaus"
+"354903","2020-04-30 13:15:08","http://evdekaldiye20-gb.com/kazan20gbturkiye.apk","online","malware_download","apk ,Cerberus","https://urlhaus.abuse.ch/url/354903/","mertcangokgoz"
+"354902","2020-04-30 13:14:13","http://uygulamalarim-hediyeinternet.org/20gb_hediye_internet.apk","online","malware_download","anubis,apk ","https://urlhaus.abuse.ch/url/354902/","mertcangokgoz"
+"354901","2020-04-30 13:14:09","http://178.62.204.84/Binarys/atomic.x86","offline","malware_download","32-bit,elf,x86-32","https://urlhaus.abuse.ch/url/354901/","geenensp"
+"354900","2020-04-30 13:14:04","http://www-ecimer-uygulamayukleme-govtr.com/cimer.apk","online","malware_download","anubis,apk ","https://urlhaus.abuse.ch/url/354900/","mertcangokgoz"
+"354899","2020-04-30 12:48:51","http://ucretsiz20gbturkiye.com/kkazan20gb.apk","offline","malware_download","anubis,apk ","https://urlhaus.abuse.ch/url/354899/","mertcangokgoz"
+"354889","2020-04-30 12:48:06","http://122.243.173.3:60917/Mozi.m","online","malware_download","elf,gafgyt,Mozi","https://urlhaus.abuse.ch/url/354889/","07ac0n"
+"354886","2020-04-30 12:47:40","http://167.250.49.155/bin/billi_a0e85740669b439f8da813fa4c85cc02.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354886/","anonymous"
+"354885","2020-04-30 12:47:38","http://muhtessemramazan20gb.com/20gb_hediye_internet.apk","offline","malware_download","anubis,apk ","https://urlhaus.abuse.ch/url/354885/","mertcangokgoz"
+"354879","2020-04-30 12:47:01","http://185.112.146.165/bin/bg_8e18e1872cca4a21a79be2f996ef2e90.exe.dom_2.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354879/","anonymous"
+"354878","2020-04-30 12:46:59","http://badmildiou.com/bin/bg_8e18e1872cca4a21a79be2f996ef2e90.exe.dom_1.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354878/","anonymous"
+"354876","2020-04-30 12:46:45","http://185.112.146.165/bin/bg_8e18e1872cca4a21a79be2f996ef2e90.exe.dom_1.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354876/","anonymous"
+"354875","2020-04-30 12:46:42","http://badmildiou.com/bin/bg_8e18e1872cca4a21a79be2f996ef2e90.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354875/","anonymous"
+"354874","2020-04-30 12:46:40","http://treefighter.org/bin/bg_8e18e1872cca4a21a79be2f996ef2e90.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354874/","anonymous"
+"354873","2020-04-30 12:46:36","http://185.112.146.165/bin/bg_8e18e1872cca4a21a79be2f996ef2e90.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354873/","anonymous"
+"354872","2020-04-30 12:46:34","http://badmildiou.com/bin/bg_0bcf3fd535cb491c9bd61537a91540fd.exe.upx.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354872/","anonymous"
+"354871","2020-04-30 12:46:32","http://treefighter.org/bin/bg_0bcf3fd535cb491c9bd61537a91540fd.exe.upx.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354871/","anonymous"
+"354870","2020-04-30 12:46:30","http://185.112.146.165/bin/bg_0bcf3fd535cb491c9bd61537a91540fd.exe.upx.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354870/","anonymous"
+"354869","2020-04-30 12:46:27","http://badmildiou.com/bin/bg_0bcf3fd535cb491c9bd61537a91540fd.exe.dom_2.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354869/","anonymous"
+"354868","2020-04-30 12:46:21","http://treefighter.org/bin/bg_0bcf3fd535cb491c9bd61537a91540fd.exe.dom_2.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354868/","anonymous"
+"354867","2020-04-30 12:46:19","http://185.112.146.165/bin/bg_0bcf3fd535cb491c9bd61537a91540fd.exe.dom_2.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354867/","anonymous"
+"354866","2020-04-30 12:46:16","http://badmildiou.com/bin/bg_0bcf3fd535cb491c9bd61537a91540fd.exe.dom_1.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354866/","anonymous"
+"354865","2020-04-30 12:46:12","http://treefighter.org/bin/bg_0bcf3fd535cb491c9bd61537a91540fd.exe.dom_1.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354865/","anonymous"
+"354864","2020-04-30 12:46:10","http://185.112.146.165/bin/bg_0bcf3fd535cb491c9bd61537a91540fd.exe.dom_1.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354864/","anonymous"
+"354863","2020-04-30 12:46:07","http://treefighter.org/bin/bg_0bcf3fd535cb491c9bd61537a91540fd.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354863/","anonymous"
+"354862","2020-04-30 12:46:05","http://185.112.146.165/bin/bg_0bcf3fd535cb491c9bd61537a91540fd.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354862/","anonymous"
+"354861","2020-04-30 12:46:02","http://185.112.146.165/bin/bg_94fc30aed0534be3a58189ebf5fc9c27.exe.upx.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354861/","anonymous"
+"354860","2020-04-30 12:44:35","http://badmildiou.com/bin/bg_0bcf3fd535cb491c9bd61537a91540fd.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354860/","anonymous"
+"354859","2020-04-30 12:44:33","http://badmildiou.com/bin/bg_94fc30aed0534be3a58189ebf5fc9c27.exe.upx.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354859/","anonymous"
+"354858","2020-04-30 12:44:31","http://treefighter.org/bin/bg_94fc30aed0534be3a58189ebf5fc9c27.exe.upx.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354858/","anonymous"
+"354857","2020-04-30 12:44:27","http://badmildiou.com/bin/bg_94fc30aed0534be3a58189ebf5fc9c27.exe.dom_2.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354857/","anonymous"
+"354856","2020-04-30 12:44:24","http://treefighter.org/bin/bg_94fc30aed0534be3a58189ebf5fc9c27.exe.dom_2.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354856/","anonymous"
+"354855","2020-04-30 12:44:20","http://185.112.146.165/bin/bg_94fc30aed0534be3a58189ebf5fc9c27.exe.dom_2.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354855/","anonymous"
+"354854","2020-04-30 12:44:18","http://badmildiou.com/bin/bg_94fc30aed0534be3a58189ebf5fc9c27.exe.dom_1.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354854/","anonymous"
+"354853","2020-04-30 12:44:16","http://treefighter.org/bin/bg_94fc30aed0534be3a58189ebf5fc9c27.exe.dom_1.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354853/","anonymous"
+"354852","2020-04-30 12:44:14","http://185.112.146.165/bin/bg_94fc30aed0534be3a58189ebf5fc9c27.exe.dom_1.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354852/","anonymous"
+"354851","2020-04-30 12:44:12","http://badmildiou.com/bin/bg_94fc30aed0534be3a58189ebf5fc9c27.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354851/","anonymous"
+"354850","2020-04-30 12:44:09","http://treefighter.org/bin/bg_94fc30aed0534be3a58189ebf5fc9c27.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354850/","anonymous"
+"354849","2020-04-30 12:44:07","http://185.112.146.165/bin/bg_94fc30aed0534be3a58189ebf5fc9c27.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354849/","anonymous"
+"354848","2020-04-30 12:44:04","http://treefighter.org/bin/bg_937a8ac2364b43df9e090625c21263cd.exe.upx.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354848/","anonymous"
+"354847","2020-04-30 12:44:02","http://185.112.146.165/bin/bg_937a8ac2364b43df9e090625c21263cd.exe.upx.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354847/","anonymous"
+"354846","2020-04-30 12:43:25","http://badmildiou.com/bin/bg_937a8ac2364b43df9e090625c21263cd.exe.upx.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354846/","anonymous"
+"354845","2020-04-30 12:43:20","http://211.192.121.74:44435/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/354845/","geenensp"
+"354844","2020-04-30 12:43:15","http://badmildiou.com/bin/bg_937a8ac2364b43df9e090625c21263cd.exe.dom_2.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354844/","anonymous"
+"354843","2020-04-30 12:43:13","http://treefighter.org/bin/bg_937a8ac2364b43df9e090625c21263cd.exe.dom_2.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354843/","anonymous"
+"354842","2020-04-30 12:43:11","http://185.112.146.165/bin/bg_937a8ac2364b43df9e090625c21263cd.exe.dom_2.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354842/","anonymous"
+"354841","2020-04-30 12:43:09","http://badmildiou.com/bin/bg_937a8ac2364b43df9e090625c21263cd.exe.dom_1.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354841/","anonymous"
+"354840","2020-04-30 12:43:07","http://treefighter.org/bin/bg_937a8ac2364b43df9e090625c21263cd.exe.dom_1.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354840/","anonymous"
+"354839","2020-04-30 12:43:05","http://185.112.146.165/bin/bg_937a8ac2364b43df9e090625c21263cd.exe.dom_1.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354839/","anonymous"
+"354838","2020-04-30 12:43:03","http://badmildiou.com/bin/bg_937a8ac2364b43df9e090625c21263cd.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354838/","anonymous"
+"354837","2020-04-30 12:43:01","http://treefighter.org/bin/bg_937a8ac2364b43df9e090625c21263cd.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354837/","anonymous"
+"354836","2020-04-30 12:42:58","http://185.112.146.165/bin/bg_937a8ac2364b43df9e090625c21263cd.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354836/","anonymous"
+"354835","2020-04-30 12:42:56","http://badmildiou.com/bin/bg_81ca3ee6fd1c40d687a8b65827f748cf.exe.upx.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354835/","anonymous"
+"354834","2020-04-30 12:42:55","http://treefighter.org/bin/bg_81ca3ee6fd1c40d687a8b65827f748cf.exe.upx.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354834/","anonymous"
+"354833","2020-04-30 12:42:51","http://185.112.146.165/bin/bg_81ca3ee6fd1c40d687a8b65827f748cf.exe.upx.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354833/","anonymous"
+"354832","2020-04-30 12:42:49","http://badmildiou.com/bin/bg_81ca3ee6fd1c40d687a8b65827f748cf.exe.dom_2.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354832/","anonymous"
+"354831","2020-04-30 12:42:45","http://treefighter.org/bin/bg_81ca3ee6fd1c40d687a8b65827f748cf.exe.dom_2.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354831/","anonymous"
+"354830","2020-04-30 12:42:43","http://185.112.146.165/bin/bg_81ca3ee6fd1c40d687a8b65827f748cf.exe.dom_2.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354830/","anonymous"
+"354829","2020-04-30 12:42:40","http://badmildiou.com/bin/bg_81ca3ee6fd1c40d687a8b65827f748cf.exe.dom_1.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354829/","anonymous"
+"354828","2020-04-30 12:42:36","http://treefighter.org/bin/bg_81ca3ee6fd1c40d687a8b65827f748cf.exe.dom_1.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354828/","anonymous"
+"354827","2020-04-30 12:42:24","http://185.112.146.165/bin/bg_81ca3ee6fd1c40d687a8b65827f748cf.exe.dom_1.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354827/","anonymous"
+"354826","2020-04-30 12:42:21","http://badmildiou.com/bin/bg_81ca3ee6fd1c40d687a8b65827f748cf.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354826/","anonymous"
+"354825","2020-04-30 12:42:17","http://treefighter.org/bin/bg_81ca3ee6fd1c40d687a8b65827f748cf.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354825/","anonymous"
+"354824","2020-04-30 12:42:06","http://185.112.146.165/bin/bg_81ca3ee6fd1c40d687a8b65827f748cf.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354824/","anonymous"
+"354823","2020-04-30 12:42:03","http://badmildiou.com/bin/bg_55dcf3886d7143dabd909d843e96562d.exe.upx.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354823/","anonymous"
+"354822","2020-04-30 12:42:01","http://treefighter.org/bin/bg_55dcf3886d7143dabd909d843e96562d.exe.upx.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354822/","anonymous"
+"354821","2020-04-30 12:41:58","http://185.112.146.165/bin/bg_55dcf3886d7143dabd909d843e96562d.exe.upx.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354821/","anonymous"
+"354820","2020-04-30 12:41:56","http://badmildiou.com/bin/bg_55dcf3886d7143dabd909d843e96562d.exe.dom_2.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354820/","anonymous"
+"354819","2020-04-30 12:41:45","http://treefighter.org/bin/bg_55dcf3886d7143dabd909d843e96562d.exe.dom_2.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354819/","anonymous"
+"354818","2020-04-30 12:41:42","http://185.112.146.165/bin/bg_55dcf3886d7143dabd909d843e96562d.exe.dom_2.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354818/","anonymous"
+"354817","2020-04-30 12:41:40","http://badmildiou.com/bin/bg_55dcf3886d7143dabd909d843e96562d.exe.dom_1.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354817/","anonymous"
+"354816","2020-04-30 12:41:32","http://treefighter.org/bin/bg_55dcf3886d7143dabd909d843e96562d.exe.dom_1.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354816/","anonymous"
+"354815","2020-04-30 12:41:28","http://185.112.146.165/bin/bg_55dcf3886d7143dabd909d843e96562d.exe.dom_1.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354815/","anonymous"
+"354814","2020-04-30 12:41:26","http://badmildiou.com/bin/bg_55dcf3886d7143dabd909d843e96562d.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354814/","anonymous"
+"354813","2020-04-30 12:41:24","http://treefighter.org/bin/bg_55dcf3886d7143dabd909d843e96562d.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354813/","anonymous"
+"354812","2020-04-30 12:41:19","http://185.112.146.165/bin/bg_55dcf3886d7143dabd909d843e96562d.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354812/","anonymous"
+"354811","2020-04-30 12:41:17","http://badmildiou.com/bin/bg_e86963cf38eb49e2964d396e8f4fd9a9.exe.upx.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354811/","anonymous"
+"354810","2020-04-30 12:41:14","http://treefighter.org/bin/bg_e86963cf38eb49e2964d396e8f4fd9a9.exe.upx.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354810/","anonymous"
+"354809","2020-04-30 12:41:12","http://185.112.146.165/bin/bg_e86963cf38eb49e2964d396e8f4fd9a9.exe.upx.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354809/","anonymous"
+"354808","2020-04-30 12:41:10","http://badmildiou.com/bin/bg_e86963cf38eb49e2964d396e8f4fd9a9.exe.dom_2.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354808/","anonymous"
+"354807","2020-04-30 12:41:03","http://treefighter.org/bin/bg_e86963cf38eb49e2964d396e8f4fd9a9.exe.dom_2.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354807/","anonymous"
+"354806","2020-04-30 12:40:57","http://185.112.146.165/bin/bg_e86963cf38eb49e2964d396e8f4fd9a9.exe.dom_2.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354806/","anonymous"
+"354805","2020-04-30 12:40:54","http://badmildiou.com/bin/bg_e86963cf38eb49e2964d396e8f4fd9a9.exe.dom_1.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354805/","anonymous"
+"354804","2020-04-30 12:40:52","http://treefighter.org/bin/bg_e86963cf38eb49e2964d396e8f4fd9a9.exe.dom_1.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354804/","anonymous"
+"354803","2020-04-30 12:40:50","http://185.112.146.165/bin/bg_e86963cf38eb49e2964d396e8f4fd9a9.exe.dom_1.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354803/","anonymous"
+"354802","2020-04-30 12:40:48","http://badmildiou.com/bin/bg_e86963cf38eb49e2964d396e8f4fd9a9.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354802/","anonymous"
+"354801","2020-04-30 12:40:46","http://treefighter.org/bin/bg_e86963cf38eb49e2964d396e8f4fd9a9.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354801/","anonymous"
+"354800","2020-04-30 12:40:44","http://185.112.146.165/bin/bg_e86963cf38eb49e2964d396e8f4fd9a9.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354800/","anonymous"
+"354799","2020-04-30 12:40:42","http://badmildiou.com/bin/bg_a38a87338bf74e199a44a987e2dcedaf.exe.upx.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354799/","anonymous"
+"354798","2020-04-30 12:40:40","http://treefighter.org/bin/bg_a38a87338bf74e199a44a987e2dcedaf.exe.upx.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354798/","anonymous"
+"354797","2020-04-30 12:40:38","http://185.112.146.165/bin/bg_a38a87338bf74e199a44a987e2dcedaf.exe.upx.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354797/","anonymous"
+"354796","2020-04-30 12:40:37","http://badmildiou.com/bin/bg_a38a87338bf74e199a44a987e2dcedaf.exe.dom_2.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354796/","anonymous"
+"354795","2020-04-30 12:40:34","http://treefighter.org/bin/bg_a38a87338bf74e199a44a987e2dcedaf.exe.dom_2.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354795/","anonymous"
+"354794","2020-04-30 12:40:32","http://185.112.146.165/bin/bg_a38a87338bf74e199a44a987e2dcedaf.exe.dom_2.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354794/","anonymous"
+"354793","2020-04-30 12:40:29","http://badmildiou.com/bin/bg_a38a87338bf74e199a44a987e2dcedaf.exe.dom_1.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354793/","anonymous"
+"354792","2020-04-30 12:40:23","http://treefighter.org/bin/bg_a38a87338bf74e199a44a987e2dcedaf.exe.dom_1.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354792/","anonymous"
+"354791","2020-04-30 12:40:21","http://185.112.146.165/bin/bg_a38a87338bf74e199a44a987e2dcedaf.exe.dom_1.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354791/","anonymous"
+"354790","2020-04-30 12:40:19","http://badmildiou.com/bin/bg_a38a87338bf74e199a44a987e2dcedaf.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354790/","anonymous"
+"354789","2020-04-30 12:40:16","http://treefighter.org/bin/bg_a38a87338bf74e199a44a987e2dcedaf.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354789/","anonymous"
+"354788","2020-04-30 12:40:04","http://185.112.146.165/bin/bg_a38a87338bf74e199a44a987e2dcedaf.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354788/","anonymous"
+"354787","2020-04-30 12:37:41","http://79.18.119.169:43936/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/354787/","geenensp"
+"354786","2020-04-30 12:37:37","http://muhtesem20gb.xyz/20gb_hediye_internet.apk","offline","malware_download","anubis,apk ","https://urlhaus.abuse.ch/url/354786/","mertcangokgoz"
+"354785","2020-04-30 12:37:33","http://badmildiou.com/bin/bg_d60d3828273246bf90510842555eb477.exe.upx.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354785/","anonymous"
+"354784","2020-04-30 12:37:31","http://treefighter.org/bin/bg_d60d3828273246bf90510842555eb477.exe.upx.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354784/","anonymous"
+"354783","2020-04-30 12:37:29","http://185.112.146.165/bin/bg_d60d3828273246bf90510842555eb477.exe.upx.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354783/","anonymous"
+"354782","2020-04-30 12:37:26","http://badmildiou.com/bin/bg_d60d3828273246bf90510842555eb477.exe.dom_2.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354782/","anonymous"
+"354781","2020-04-30 12:37:22","http://treefighter.org/bin/bg_d60d3828273246bf90510842555eb477.exe.dom_2.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354781/","anonymous"
+"354780","2020-04-30 12:37:20","http://185.112.146.165/bin/bg_d60d3828273246bf90510842555eb477.exe.dom_2.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354780/","anonymous"
+"354779","2020-04-30 12:37:17","http://badmildiou.com/bin/bg_d60d3828273246bf90510842555eb477.exe.dom_1.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354779/","anonymous"
+"354778","2020-04-30 12:37:13","http://treefighter.org/bin/bg_d60d3828273246bf90510842555eb477.exe.dom_1.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354778/","anonymous"
+"354777","2020-04-30 12:37:10","http://185.112.146.165/bin/bg_d60d3828273246bf90510842555eb477.exe.dom_1.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354777/","anonymous"
+"354776","2020-04-30 12:37:08","http://badmildiou.com/bin/bg_d60d3828273246bf90510842555eb477.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354776/","anonymous"
+"354775","2020-04-30 12:37:06","http://treefighter.org/bin/bg_d60d3828273246bf90510842555eb477.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354775/","anonymous"
+"354774","2020-04-30 12:37:03","http://185.112.146.165/bin/bg_d60d3828273246bf90510842555eb477.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354774/","anonymous"
+"354773","2020-04-30 12:35:05","https://pastebin.com/raw/R2nyTfX8","offline","malware_download","None","https://urlhaus.abuse.ch/url/354773/","JayTHL"
+"354772","2020-04-30 12:30:08","https://pastebin.com/raw/GUfYcZ6J","offline","malware_download","meterpreter","https://urlhaus.abuse.ch/url/354772/","viql"
+"354771","2020-04-30 12:30:06","https://pastebin.com/raw/F50fVbME","offline","malware_download","meterpreter","https://urlhaus.abuse.ch/url/354771/","viql"
+"354770","2020-04-30 12:29:05","http://185.112.146.165/meter/yueueu.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354770/","zbetcheckin"
+"354769","2020-04-30 12:29:03","http://185.112.146.165/meter/plouf.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354769/","zbetcheckin"
+"354768","2020-04-30 12:28:05","http://milebgd.mycpanel.rs/home.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/354768/","abuse_ch"
+"354767","2020-04-30 12:25:46","http://185.112.146.165/meter/payload.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354767/","zbetcheckin"
+"354766","2020-04-30 12:25:44","http://185.112.146.165/meter/irlipili.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354766/","zbetcheckin"
+"354765","2020-04-30 12:25:42","http://185.112.146.165/meter/99.99.trump.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354765/","zbetcheckin"
+"354764","2020-04-30 12:25:40","http://hediyem20gb-internet.org/20gb_hediye_internet.apk","online","malware_download","anubis,apk ","https://urlhaus.abuse.ch/url/354764/","mertcangokgoz"
+"354763","2020-04-30 12:25:34","http://badmildiou.com/bin/bg_windows.meterpreter.reverse_tcp.exe.upx.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354763/","anonymous"
+"354762","2020-04-30 12:25:33","http://treefighter.org/bin/bg_windows.meterpreter.reverse_tcp.exe.upx.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354762/","anonymous"
+"354761","2020-04-30 12:25:31","http://185.112.146.165/bin/bg_windows.meterpreter.reverse_tcp.exe.upx.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354761/","anonymous"
+"354760","2020-04-30 12:25:29","http://badmildiou.com/bin/bg_windows.meterpreter.reverse_tcp.exe.dom_badmildiou.com.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354760/","anonymous"
+"354759","2020-04-30 12:25:27","http://treefighter.org/bin/bg_windows.meterpreter.reverse_tcp.exe.dom_badmildiou.com.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354759/","anonymous"
+"354758","2020-04-30 12:25:26","http://185.112.146.165/bin/bg_windows.meterpreter.reverse_tcp.exe.dom_badmildiou.com.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354758/","anonymous"
+"354757","2020-04-30 12:25:24","http://badmildiou.com/bin/bg_windows.meterpreter.reverse_tcp.exe.dom_treefighter.org.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354757/","anonymous"
+"354756","2020-04-30 12:25:22","http://treefighter.org/bin/bg_windows.meterpreter.reverse_tcp.exe.dom_treefighter.org.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354756/","anonymous"
+"354755","2020-04-30 12:25:20","http://185.112.146.165/bin/bg_windows.meterpreter.reverse_tcp.exe.dom_treefighter.org.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354755/","anonymous"
+"354754","2020-04-30 12:25:19","http://badmildiou.com/bin/bg_windows.meterpreter.reverse_tcp.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354754/","anonymous"
+"354753","2020-04-30 12:25:14","http://treefighter.org/bin/bg_windows.meterpreter.reverse_tcp.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354753/","anonymous"
+"354752","2020-04-30 12:25:02","http://185.112.146.165/bin/bg_windows.meterpreter.reverse_tcp.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354752/","anonymous"
+"354751","2020-04-30 12:23:06","https://pastebin.com/raw/RCwMJ9bm","offline","malware_download","None","https://urlhaus.abuse.ch/url/354751/","JayTHL"
+"354750","2020-04-30 12:23:03","https://pastebin.com/raw/2HspQ3J2","offline","malware_download","None","https://urlhaus.abuse.ch/url/354750/","JayTHL"
+"354749","2020-04-30 12:21:14","http://185.112.146.165/meter/plaf.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354749/","zbetcheckin"
+"354748","2020-04-30 12:21:12","http://185.112.146.165/meter/2.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354748/","zbetcheckin"
+"354747","2020-04-30 12:21:10","http://thesecuritysoftwarescannerindustrgreat.duckdns.org/badi/svch.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/354747/","zbetcheckin"
+"354746","2020-04-30 12:21:03","http://185.112.146.165/meter/bidam.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354746/","zbetcheckin"
+"354745","2020-04-30 12:18:08","https://gitlab.com/burov/tools/raw/master/bin/fp-sb-test.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354745/","zbetcheckin"
+"354744","2020-04-30 12:17:12","http://thesecuritysoftwarescannerindustrgreat.duckdns.org/badi/vbc.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/354744/","zbetcheckin"
+"354743","2020-04-30 12:17:09","http://tinckorm.beget.tech/testbuild.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/354743/","zbetcheckin"
+"354742","2020-04-30 12:17:05","http://baritaco.com/rem.exe","online","malware_download","exe,RemcosRAT","https://urlhaus.abuse.ch/url/354742/","abuse_ch"
+"354741","2020-04-30 12:16:04","http://45.95.168.247/AB4g5/kiga.x86","offline","malware_download","32-bit,elf,x86-32","https://urlhaus.abuse.ch/url/354741/","geenensp"
+"354740","2020-04-30 12:13:10","http://185.112.146.165/meter/99.kiri.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354740/","zbetcheckin"
+"354739","2020-04-30 12:13:08","http://185.112.146.165/meter/waza.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354739/","zbetcheckin"
+"354738","2020-04-30 12:13:06","http://185.112.146.165/meter/niark.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354738/","zbetcheckin"
+"354737","2020-04-30 12:13:03","http://185.112.146.165/meter/99.ban.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354737/","zbetcheckin"
+"354736","2020-04-30 12:11:05","https://pastebin.com/raw/Tc3GcmnK","offline","malware_download","None","https://urlhaus.abuse.ch/url/354736/","JayTHL"
+"354735","2020-04-30 12:10:11","https://pastebin.com/raw/Pq2STUhP","offline","malware_download","None","https://urlhaus.abuse.ch/url/354735/","JayTHL"
+"354734","2020-04-30 12:10:08","https://pastebin.com/raw/cZD0Bm0c","offline","malware_download","None","https://urlhaus.abuse.ch/url/354734/","JayTHL"
+"354733","2020-04-30 12:10:03","http://185.112.146.165/meter/99.fa99.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354733/","zbetcheckin"
+"354732","2020-04-30 12:09:05","http://185.112.146.165/meter/99.faf.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354732/","zbetcheckin"
+"354731","2020-04-30 12:09:03","http://185.112.146.165/meter/1.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354731/","zbetcheckin"
+"354730","2020-04-30 12:06:19","http://1podcast.xyz/ru53332/fl%20studio%2020-rtmd-akerpf4cnqaa7xocafvbgqasadftnbma.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354730/","zbetcheckin"
+"354729","2020-04-30 12:06:14","https://1podcast.xyz/ru53332/xh%20a1%20firmware%20update-RTMD-apk5g14obgaatbecaerffwamalkudh8a.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354729/","zbetcheckin"
+"354728","2020-04-30 12:06:06","http://185.112.146.165/meter/3.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354728/","zbetcheckin"
+"354727","2020-04-30 12:06:03","http://185.112.146.165/meter/wouuthch.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354727/","zbetcheckin"
+"354726","2020-04-30 12:05:19","http://115.49.246.62:36895/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354726/","Gandylyan1"
+"354725","2020-04-30 12:05:15","http://42.115.12.180:35740/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354725/","Gandylyan1"
+"354724","2020-04-30 12:05:09","http://111.43.223.121:54267/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354724/","Gandylyan1"
+"354723","2020-04-30 12:05:02","http://222.142.196.145:36431/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354723/","Gandylyan1"
+"354722","2020-04-30 12:04:30","http://77.43.133.49:44840/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354722/","Gandylyan1"
+"354721","2020-04-30 12:03:58","http://49.81.134.147:35592/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354721/","Gandylyan1"
+"354720","2020-04-30 12:03:54","http://182.117.160.121:37741/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354720/","Gandylyan1"
+"354719","2020-04-30 12:03:49","http://125.47.248.28:60029/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354719/","Gandylyan1"
+"354718","2020-04-30 12:03:43","http://219.155.62.175:46545/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354718/","Gandylyan1"
+"354717","2020-04-30 12:03:40","http://61.168.136.199:37608/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354717/","Gandylyan1"
+"354716","2020-04-30 12:03:35","http://116.114.95.108:59609/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354716/","Gandylyan1"
+"354715","2020-04-30 12:03:31","http://112.17.166.50:35881/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354715/","Gandylyan1"
+"354714","2020-04-30 12:03:09","http://162.212.114.62:45575/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354714/","Gandylyan1"
+"354713","2020-04-30 12:03:04","http://125.44.215.179:45207/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354713/","Gandylyan1"
+"354712","2020-04-30 12:01:39","http://185.112.146.165/meter/99.gz.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354712/","zbetcheckin"
+"354711","2020-04-30 12:01:36","http://1podcast.xyz/ru53332/free+download+revo+uninstaller+pro+4-rtmd-ahdoqf7rlwaapzmcaelegqasag0ucwca.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354711/","zbetcheckin"
+"354710","2020-04-30 11:56:07","http://1podcast.xyz/ru53332/wondershare%20filmora%209-rtmd-addwp14fnqaapzmcaelofwasaosa_c8a.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354710/","zbetcheckin"
+"354709","2020-04-30 11:55:15","http://1podcast.xyz/ru53332/magix+audio+cleaning+lab+23-rtmd-ac_xol7hiwaavhwcaezsfwaoab4j7koa.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354709/","zbetcheckin"
+"354708","2020-04-30 11:55:07","https://1podcast.xyz/ru53332/-RTMD-ABMlp17_nAAAvhwCAERFFwAMAMpkk5oA.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354708/","zbetcheckin"
+"354707","2020-04-30 11:52:13","http://185.112.146.165/meter/yala.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354707/","zbetcheckin"
+"354706","2020-04-30 11:52:11","http://1podcast.xyz/ru53332/need+for+speed+most+wanted+(2005)-rtmd-alc7qv5xcwaa6rocafrsfwasapf5okca.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354706/","zbetcheckin"
 "354705","2020-04-30 11:44:18","http://185.172.110.221/powerpc","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/354705/","zbetcheckin"
 "354704","2020-04-30 11:44:15","http://185.172.110.221/armv5l","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/354704/","zbetcheckin"
 "354703","2020-04-30 11:44:13","http://185.172.110.221/sparc","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/354703/","zbetcheckin"
-"354702","2020-04-30 11:44:11","http://lastmorgoth.com/bin/bg_c95a978d83014bb6a6bf97492c828898.exe.dom_1.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/354702/","anonymous"
+"354702","2020-04-30 11:44:11","http://lastmorgoth.com/bin/bg_c95a978d83014bb6a6bf97492c828898.exe.dom_1.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354702/","anonymous"
 "354701","2020-04-30 11:40:15","http://185.172.110.221/mipsel","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/354701/","zbetcheckin"
 "354700","2020-04-30 11:40:13","http://185.172.110.221/i686","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/354700/","zbetcheckin"
 "354699","2020-04-30 11:40:11","http://185.172.110.221/armv6l","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/354699/","zbetcheckin"
@@ -16,47 +403,47 @@
 "354695","2020-04-30 11:36:05","http://185.172.110.221/x86","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/354695/","zbetcheckin"
 "354694","2020-04-30 11:36:02","http://185.172.110.221/i586","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/354694/","zbetcheckin"
 "354693","2020-04-30 11:08:06","https://linx.li/s/r7a3hqws.exe","online","malware_download","exe,Formbook","https://urlhaus.abuse.ch/url/354693/","abuse_ch"
-"354692","2020-04-30 10:57:34","https://pastebin.com/raw/vp25LrZF","online","malware_download","None","https://urlhaus.abuse.ch/url/354692/","JayTHL"
-"354691","2020-04-30 10:51:06","https://e-internetim.com/Corona%20Takip.apk","online","malware_download","None","https://urlhaus.abuse.ch/url/354691/","JAMESWT_MHT"
-"354690","2020-04-30 10:51:03","https://hediye-internet.site/Corona%20Takip.apk","online","malware_download","None","https://urlhaus.abuse.ch/url/354690/","JAMESWT_MHT"
+"354692","2020-04-30 10:57:34","https://pastebin.com/raw/vp25LrZF","offline","malware_download","None","https://urlhaus.abuse.ch/url/354692/","JayTHL"
+"354691","2020-04-30 10:51:06","https://e-internetim.com/Corona%20Takip.apk","offline","malware_download","None","https://urlhaus.abuse.ch/url/354691/","JAMESWT_MHT"
+"354690","2020-04-30 10:51:03","https://hediye-internet.site/Corona%20Takip.apk","offline","malware_download","None","https://urlhaus.abuse.ch/url/354690/","JAMESWT_MHT"
 "354689","2020-04-30 10:48:20","https://www.schoongezicht.org/wp-content/plugins/yikes-inc-easy-mailchimp-extender/public/SAMPLE.scan..exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/354689/","abuse_ch"
-"354688","2020-04-30 10:48:15","http://duongfpt.ga/lxgqgox/Buy-Sell_Agreement_9389_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354688/","spamhaus"
-"354687","2020-04-30 10:47:08","http://duongfpt.ga/lxgqgox/91390437/Buy-Sell_Agreement_91390437_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354687/","spamhaus"
+"354688","2020-04-30 10:48:15","http://duongfpt.ga/lxgqgox/Buy-Sell_Agreement_9389_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354688/","spamhaus"
+"354687","2020-04-30 10:47:08","http://duongfpt.ga/lxgqgox/91390437/Buy-Sell_Agreement_91390437_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354687/","spamhaus"
 "354686","2020-04-30 10:46:13","http://platisher.xyz/10.apk","online","malware_download","None","https://urlhaus.abuse.ch/url/354686/","JAMESWT_MHT"
 "354685","2020-04-30 10:46:11","http://platisher.xyz/playservices.apk","online","malware_download","None","https://urlhaus.abuse.ch/url/354685/","JAMESWT_MHT"
-"354684","2020-04-30 10:45:28","https://gitlab.com/ordulkemal/ere/-/raw/master/yalan_obf.apk","online","malware_download","None","https://urlhaus.abuse.ch/url/354684/","JAMESWT_MHT"
-"354683","2020-04-30 10:45:24","https://gitlab.com/ordulkemal/ere/-/raw/master/hediye20gb.apk","online","malware_download","None","https://urlhaus.abuse.ch/url/354683/","JAMESWT_MHT"
-"354682","2020-04-30 10:45:17","https://gitlab.com/ordulkemal/ere/-/raw/master/hayatevesigar.apk","online","malware_download","None","https://urlhaus.abuse.ch/url/354682/","JAMESWT_MHT"
-"354681","2020-04-30 10:45:13","https://gitlab.com/ordulkemal/ere/-/raw/master/30gbhediye.apk","online","malware_download","None","https://urlhaus.abuse.ch/url/354681/","JAMESWT_MHT"
-"354680","2020-04-30 10:45:07","https://gitlab.com/ordulkemal/ere/-/raw/master/20gbhediyeinternet.apk","online","malware_download","None","https://urlhaus.abuse.ch/url/354680/","JAMESWT_MHT"
-"354679","2020-04-30 10:44:32","https://gitlab.com/ordulkemal/ere/-/raw/master/20gbhediye.apk","online","malware_download","None","https://urlhaus.abuse.ch/url/354679/","JAMESWT_MHT"
-"354678","2020-04-30 10:44:27","https://gitlab.com/ordulkemal/ere/-/raw/master/15gbhediye.apk","online","malware_download","None","https://urlhaus.abuse.ch/url/354678/","JAMESWT_MHT"
-"354677","2020-04-30 10:44:16","https://gitlab.com/ordulkemal/ere/-/raw/master/10gbhediye.apk","online","malware_download","None","https://urlhaus.abuse.ch/url/354677/","JAMESWT_MHT"
-"354676","2020-04-30 10:44:11","https://pastebin.com/raw/ThVGnprR","online","malware_download","None","https://urlhaus.abuse.ch/url/354676/","JayTHL"
-"354675","2020-04-30 10:44:06","https://gitlab.com/ordulkemal/ere/-/raw/master/1000tldevletdestegi.apk","online","malware_download","None","https://urlhaus.abuse.ch/url/354675/","JAMESWT_MHT"
+"354684","2020-04-30 10:45:28","https://gitlab.com/ordulkemal/ere/-/raw/master/yalan_obf.apk","offline","malware_download","None","https://urlhaus.abuse.ch/url/354684/","JAMESWT_MHT"
+"354683","2020-04-30 10:45:24","https://gitlab.com/ordulkemal/ere/-/raw/master/hediye20gb.apk","offline","malware_download","None","https://urlhaus.abuse.ch/url/354683/","JAMESWT_MHT"
+"354682","2020-04-30 10:45:17","https://gitlab.com/ordulkemal/ere/-/raw/master/hayatevesigar.apk","offline","malware_download","None","https://urlhaus.abuse.ch/url/354682/","JAMESWT_MHT"
+"354681","2020-04-30 10:45:13","https://gitlab.com/ordulkemal/ere/-/raw/master/30gbhediye.apk","offline","malware_download","None","https://urlhaus.abuse.ch/url/354681/","JAMESWT_MHT"
+"354680","2020-04-30 10:45:07","https://gitlab.com/ordulkemal/ere/-/raw/master/20gbhediyeinternet.apk","offline","malware_download","None","https://urlhaus.abuse.ch/url/354680/","JAMESWT_MHT"
+"354679","2020-04-30 10:44:32","https://gitlab.com/ordulkemal/ere/-/raw/master/20gbhediye.apk","offline","malware_download","None","https://urlhaus.abuse.ch/url/354679/","JAMESWT_MHT"
+"354678","2020-04-30 10:44:27","https://gitlab.com/ordulkemal/ere/-/raw/master/15gbhediye.apk","offline","malware_download","None","https://urlhaus.abuse.ch/url/354678/","JAMESWT_MHT"
+"354677","2020-04-30 10:44:16","https://gitlab.com/ordulkemal/ere/-/raw/master/10gbhediye.apk","offline","malware_download","None","https://urlhaus.abuse.ch/url/354677/","JAMESWT_MHT"
+"354676","2020-04-30 10:44:11","https://pastebin.com/raw/ThVGnprR","offline","malware_download","None","https://urlhaus.abuse.ch/url/354676/","JayTHL"
+"354675","2020-04-30 10:44:06","https://gitlab.com/ordulkemal/ere/-/raw/master/1000tldevletdestegi.apk","offline","malware_download","None","https://urlhaus.abuse.ch/url/354675/","JAMESWT_MHT"
 "354674","2020-04-30 10:38:07","https://updateflashplayer.link/flashplayer_update11_5_1.apk","online","malware_download","None","https://urlhaus.abuse.ch/url/354674/","JAMESWT_MHT"
-"354673","2020-04-30 10:37:03","http://treefighter.org/bin/bg_fdf2230f83c148d681353bd8336603b8.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/354673/","zbetcheckin"
-"354672","2020-04-30 10:24:07","http://denunciesoftwareilegal.org.br/wp-content/plugins/apikey/bfgvnffqfo/33665600/Buy-Sell_Agreement_33665600_04282020.zip","","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354672/","spamhaus"
-"354671","2020-04-30 10:24:04","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/02913/Buy-Sell_Agreement_02913_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354671/","spamhaus"
-"354670","2020-04-30 10:19:03","https://pastebin.com/raw/fDvgc3Tg","online","malware_download","None","https://urlhaus.abuse.ch/url/354670/","JayTHL"
+"354673","2020-04-30 10:37:03","http://treefighter.org/bin/bg_fdf2230f83c148d681353bd8336603b8.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354673/","zbetcheckin"
+"354672","2020-04-30 10:24:07","http://denunciesoftwareilegal.org.br/wp-content/plugins/apikey/bfgvnffqfo/33665600/Buy-Sell_Agreement_33665600_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354672/","spamhaus"
+"354671","2020-04-30 10:24:04","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/02913/Buy-Sell_Agreement_02913_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354671/","spamhaus"
+"354670","2020-04-30 10:19:03","https://pastebin.com/raw/fDvgc3Tg","offline","malware_download","None","https://urlhaus.abuse.ch/url/354670/","JayTHL"
 "354669","2020-04-30 10:15:09","http://167.250.49.155:8081/K4XSc6J9r8n3bvZvqcRkeAyFjEiVgdPrS6jaPk7fLBtcU0UD6Qe41cM5g_lTTqaDAlJh1FGKmf_JSc7Y8w_KWmS9ocvQhWb1SxGZUtqiombBenQJCcnirUvoXyEDh7","offline","malware_download","None","https://urlhaus.abuse.ch/url/354669/","JAMESWT_MHT"
-"354668","2020-04-30 10:15:04","http://23.99.177.235/ratty/ratty.exe","online","malware_download","AveMariaRAT","https://urlhaus.abuse.ch/url/354668/","JAMESWT_MHT"
-"354667","2020-04-30 10:07:08","http://treefighter.org/bin/bg_6b4131b99633431e8d2a09784711b1ac.exe","online","malware_download","None","https://urlhaus.abuse.ch/url/354667/","anonymous"
-"354666","2020-04-30 10:06:33","http://badmildiou.com/bin/bg_6b4131b99633431e8d2a09784711b1ac.exe","online","malware_download","None","https://urlhaus.abuse.ch/url/354666/","anonymous"
-"354665","2020-04-30 10:06:31","http://badmildiou.com/bin/bg_99dedb26e1c9492794e9a6462a2fc9f3.exe","online","malware_download","None","https://urlhaus.abuse.ch/url/354665/","anonymous"
-"354664","2020-04-30 10:06:26","http://badmildiou.com/bin/bg_6b4131b99633431e8d2a09784711b1ac.exe.upx.exe","online","malware_download","None","https://urlhaus.abuse.ch/url/354664/","anonymous"
+"354668","2020-04-30 10:15:04","http://23.99.177.235/ratty/ratty.exe","offline","malware_download","AveMariaRAT","https://urlhaus.abuse.ch/url/354668/","JAMESWT_MHT"
+"354667","2020-04-30 10:07:08","http://treefighter.org/bin/bg_6b4131b99633431e8d2a09784711b1ac.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/354667/","anonymous"
+"354666","2020-04-30 10:06:33","http://badmildiou.com/bin/bg_6b4131b99633431e8d2a09784711b1ac.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/354666/","anonymous"
+"354665","2020-04-30 10:06:31","http://badmildiou.com/bin/bg_99dedb26e1c9492794e9a6462a2fc9f3.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/354665/","anonymous"
+"354664","2020-04-30 10:06:26","http://badmildiou.com/bin/bg_6b4131b99633431e8d2a09784711b1ac.exe.upx.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/354664/","anonymous"
 "354662","2020-04-30 10:06:16","http://185.172.110.221/mips","online","malware_download","32-bit,elf,mips","https://urlhaus.abuse.ch/url/354662/","geenensp"
 "354661","2020-04-30 10:06:09","http://176.32.35.22/shoppinglistbins.sh","online","malware_download","script","https://urlhaus.abuse.ch/url/354661/","geenensp"
-"354660","2020-04-30 10:06:06","http://oskarnews.gazashare.com/pelsq/4716189/Buy-Sell_Agreement_4716189_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354660/","spamhaus"
-"354659","2020-04-30 09:47:11","http://1podcast.xyz/ru53332/-RTMD-.exe","online","malware_download","glupteba","https://urlhaus.abuse.ch/url/354659/","vxvault"
-"354658","2020-04-30 09:43:03","https://pastebin.com/raw/cUZRd9HN","online","malware_download","None","https://urlhaus.abuse.ch/url/354658/","JayTHL"
+"354660","2020-04-30 10:06:06","http://oskarnews.gazashare.com/pelsq/4716189/Buy-Sell_Agreement_4716189_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354660/","spamhaus"
+"354659","2020-04-30 09:47:11","http://1podcast.xyz/ru53332/-RTMD-.exe","offline","malware_download","glupteba","https://urlhaus.abuse.ch/url/354659/","vxvault"
+"354658","2020-04-30 09:43:03","https://pastebin.com/raw/cUZRd9HN","offline","malware_download","None","https://urlhaus.abuse.ch/url/354658/","JayTHL"
 "354657","2020-04-30 09:36:07","http://koravit.zaeteaw.net/okmqhrfdsvj/Buy-Sell_Agreement_208322_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354657/","spamhaus"
-"354656","2020-04-30 09:36:04","http://oralloy.com/xyqkbu/Buy-Sell_Agreement_6055941_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354656/","spamhaus"
-"354655","2020-04-30 09:30:20","https://nilemixitupd.biz.pl/IHJHKJ/COJHJHHGHVCDKNJKJ.exe","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/354655/","abuse_ch"
+"354656","2020-04-30 09:36:04","http://oralloy.com/xyqkbu/Buy-Sell_Agreement_6055941_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354656/","spamhaus"
+"354655","2020-04-30 09:30:20","https://nilemixitupd.biz.pl/IHJHKJ/COJHJHHGHVCDKNJKJ.exe","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/354655/","abuse_ch"
 "354654","2020-04-30 09:26:18","http://russchine2wsdyspecia20plumbingmaterialnb.duckdns.org/russdoc/regasm.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/354654/","gorimpthon"
 "354653","2020-04-30 09:26:16","http://alexandredekerchove.com/ylwhbcphyy/Buy-Sell_Agreement_6970_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354653/","spamhaus"
 "354652","2020-04-30 09:26:13","http://koravit.zaeteaw.net/okmqhrfdsvj/Buy-Sell_Agreement_5690_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354652/","spamhaus"
-"354651","2020-04-30 09:26:11","https://aelogica.com/zznohyxa/Buy-Sell_Agreement_06229_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354651/","spamhaus"
+"354651","2020-04-30 09:26:11","https://aelogica.com/zznohyxa/Buy-Sell_Agreement_06229_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354651/","spamhaus"
 "354650","2020-04-30 09:26:05","http://187.250.220.89:45717/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/354650/","geenensp"
 "354649","2020-04-30 09:18:05","http://45.84.196.200/bins/Hilix.arm5","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/354649/","zbetcheckin"
 "354648","2020-04-30 09:18:03","http://45.84.196.200/bins/Hilix.arm","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/354648/","zbetcheckin"
@@ -68,13 +455,13 @@
 "354642","2020-04-30 09:08:05","http://45.84.196.200/bins/Hilix.mpsl","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/354642/","zbetcheckin"
 "354641","2020-04-30 09:08:03","http://45.84.196.200/bins/Hilix.arm7","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/354641/","zbetcheckin"
 "354640","2020-04-30 09:06:46","http://218.70.144.50:40190/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354640/","Gandylyan1"
-"354639","2020-04-30 09:06:37","http://117.87.72.41:58679/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354639/","Gandylyan1"
+"354639","2020-04-30 09:06:37","http://117.87.72.41:58679/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354639/","Gandylyan1"
 "354638","2020-04-30 09:06:32","http://199.83.204.132:38890/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354638/","Gandylyan1"
 "354637","2020-04-30 09:06:23","http://199.83.206.38:41493/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354637/","Gandylyan1"
-"354636","2020-04-30 09:06:17","http://111.43.223.194:57786/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354636/","Gandylyan1"
+"354636","2020-04-30 09:06:17","http://111.43.223.194:57786/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354636/","Gandylyan1"
 "354635","2020-04-30 09:06:14","http://111.43.223.181:45562/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354635/","Gandylyan1"
-"354634","2020-04-30 09:06:10","http://162.212.112.189:36233/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354634/","Gandylyan1"
-"354633","2020-04-30 09:06:06","http://61.53.197.182:47965/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354633/","Gandylyan1"
+"354634","2020-04-30 09:06:10","http://162.212.112.189:36233/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354634/","Gandylyan1"
+"354633","2020-04-30 09:06:06","http://61.53.197.182:47965/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354633/","Gandylyan1"
 "354632","2020-04-30 09:06:01","http://111.42.103.78:37641/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354632/","Gandylyan1"
 "354631","2020-04-30 09:05:57","http://172.39.59.220:49336/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354631/","Gandylyan1"
 "354630","2020-04-30 09:05:25","http://211.137.225.126:58698/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354630/","Gandylyan1"
@@ -84,35 +471,35 @@
 "354626","2020-04-30 09:04:35","http://115.53.102.161:45503/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354626/","Gandylyan1"
 "354625","2020-04-30 09:04:32","http://172.39.35.1:47243/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354625/","Gandylyan1"
 "354624","2020-04-30 09:03:22","http://drinkopolykopen.nl/wp-content/uploads/2020/04/nnpebk/Buy-Sell_Agreement_39481614_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354624/","spamhaus"
-"354623","2020-04-30 09:03:16","https://vip.recommendedtoyoo.com/bdhycmsxctp/1063760/Buy-Sell_Agreement_1063760_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354623/","spamhaus"
+"354623","2020-04-30 09:03:16","https://vip.recommendedtoyoo.com/bdhycmsxctp/1063760/Buy-Sell_Agreement_1063760_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354623/","spamhaus"
 "354622","2020-04-30 09:03:09","https://britica.vn/dqsfv/Buy-Sell_Agreement_77334_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354622/","spamhaus"
-"354621","2020-04-30 09:02:37","http://denunciesoftwareilegal.org.br/wp-content/plugins/apikey/bfgvnffqfo/Buy-Sell_Agreement_854345_04282020.zip","","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354621/","spamhaus"
-"354620","2020-04-30 09:02:29","https://cryptoomarket.com/fhws/0892174/Buy-Sell_Agreement_0892174_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354620/","spamhaus"
+"354621","2020-04-30 09:02:37","http://denunciesoftwareilegal.org.br/wp-content/plugins/apikey/bfgvnffqfo/Buy-Sell_Agreement_854345_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354621/","spamhaus"
+"354620","2020-04-30 09:02:29","https://cryptoomarket.com/fhws/0892174/Buy-Sell_Agreement_0892174_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354620/","spamhaus"
 "354619","2020-04-30 09:02:17","http://dev.apshaps.se/sdub/29584/Buy-Sell_Agreement_29584_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354619/","spamhaus"
-"354618","2020-04-30 09:02:15","http://dzapasigroup.usapglobal.org/pbnxnmc/Buy-Sell_Agreement_182548_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354618/","spamhaus"
-"354617","2020-04-30 09:02:10","http://jaservicioscontables.casteviajes.com/xekqbxkehlx/Buy-Sell_Agreement_47813_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354617/","spamhaus"
+"354618","2020-04-30 09:02:15","http://dzapasigroup.usapglobal.org/pbnxnmc/Buy-Sell_Agreement_182548_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354618/","spamhaus"
+"354617","2020-04-30 09:02:10","http://jaservicioscontables.casteviajes.com/xekqbxkehlx/Buy-Sell_Agreement_47813_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354617/","spamhaus"
 "354616","2020-04-30 09:02:02","http://dev.apshaps.se/sdub/Buy-Sell_Agreement_93059574_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354616/","spamhaus"
 "354615","2020-04-30 09:01:52","http://morruko.antesos.com/fqtylehpb/Buy-Sell_Agreement_5316_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354615/","spamhaus"
 "354614","2020-04-30 09:01:50","http://morruko.antesos.com/fqtylehpb/5968/Buy-Sell_Agreement_5968_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354614/","spamhaus"
 "354613","2020-04-30 09:01:47","http://dev.apshaps.se/sdub/Buy-Sell_Agreement_57424999_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354613/","spamhaus"
-"354612","2020-04-30 09:01:43","http://Muanha.xyz/cfewahhzze/24677275/Buy-Sell_Agreement_24677275_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354612/","spamhaus"
+"354612","2020-04-30 09:01:43","http://Muanha.xyz/cfewahhzze/24677275/Buy-Sell_Agreement_24677275_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354612/","spamhaus"
 "354611","2020-04-30 09:00:17","https://kamagra.in.rs/bqcbhf/865772/Buy-Sell_Agreement_865772_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354611/","spamhaus"
 "354610","2020-04-30 08:59:43","https://bluecollarfinancial.net/gfmixt/Buy-Sell_Agreement_3474002_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354610/","spamhaus"
 "354609","2020-04-30 08:59:08","http://dev.apshaps.se/sdub/2766780/Buy-Sell_Agreement_2766780_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354609/","spamhaus"
-"354608","2020-04-30 08:58:35","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/Buy-Sell_Agreement_41879921_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354608/","spamhaus"
+"354608","2020-04-30 08:58:35","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/Buy-Sell_Agreement_41879921_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354608/","spamhaus"
 "354607","2020-04-30 08:54:24","https://pastebin.com/raw/TFER19JK","offline","malware_download","None","https://urlhaus.abuse.ch/url/354607/","JayTHL"
 "354606","2020-04-30 08:54:18","https://pastebin.com/raw/fves4YW3","offline","malware_download","None","https://urlhaus.abuse.ch/url/354606/","JayTHL"
 "354605","2020-04-30 08:54:11","http://cloud-server-updater2.co.za/doc/buer.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/354605/","abuse_ch"
-"354604","2020-04-30 08:54:06","https://vip.recommendedtoyoo.com/bdhycmsxctp/515173/Buy-Sell_Agreement_515173_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354604/","spamhaus"
-"354603","2020-04-30 08:53:02","https://rangebroadcasting.com/vfbc/6613/Buy-Sell_Agreement_6613_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354603/","spamhaus"
+"354604","2020-04-30 08:54:06","https://vip.recommendedtoyoo.com/bdhycmsxctp/515173/Buy-Sell_Agreement_515173_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354604/","spamhaus"
+"354603","2020-04-30 08:53:02","https://rangebroadcasting.com/vfbc/6613/Buy-Sell_Agreement_6613_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354603/","spamhaus"
 "354602","2020-04-30 08:52:57","https://aelogica.com/zznohyxa/Buy-Sell_Agreement_0991292_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354602/","spamhaus"
 "354601","2020-04-30 08:52:50","http://morruko.antesos.com/fqtylehpb/Buy-Sell_Agreement_7410_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354601/","spamhaus"
 "354600","2020-04-30 08:52:47","https://www.francois-champion.com/lqkb/3923182/Buy-Sell_Agreement_3923182_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354600/","spamhaus"
 "354599","2020-04-30 08:52:43","http://drinkopolykopen.nl/wp-content/uploads/2020/04/nnpebk/7230934/Buy-Sell_Agreement_7230934_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354599/","spamhaus"
-"354598","2020-04-30 08:52:39","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/Buy-Sell_Agreement_65313434_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354598/","spamhaus"
+"354598","2020-04-30 08:52:39","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/Buy-Sell_Agreement_65313434_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354598/","spamhaus"
 "354597","2020-04-30 08:52:33","http://koravit.zaeteaw.net/okmqhrfdsvj/82347/Buy-Sell_Agreement_82347_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354597/","spamhaus"
-"354596","2020-04-30 08:52:31","https://rangebroadcasting.com/vfbc/7041182/Buy-Sell_Agreement_7041182_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354596/","spamhaus"
-"354595","2020-04-30 08:52:26","http://Muanha.xyz/cfewahhzze/Buy-Sell_Agreement_3947_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354595/","spamhaus"
+"354596","2020-04-30 08:52:31","https://rangebroadcasting.com/vfbc/7041182/Buy-Sell_Agreement_7041182_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354596/","spamhaus"
+"354595","2020-04-30 08:52:26","http://Muanha.xyz/cfewahhzze/Buy-Sell_Agreement_3947_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354595/","spamhaus"
 "354594","2020-04-30 08:52:23","http://cheriyilbuilders.com/ixwqumcq/192745/Buy-Sell_Agreement_192745_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354594/","spamhaus"
 "354593","2020-04-30 08:52:21","http://duongfpt.ga/lxgqgox/383159/Buy-Sell_Agreement_383159_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354593/","spamhaus"
 "354592","2020-04-30 08:52:15","http://ade.topepics.com/pkthdrgdb/1719/Buy-Sell_Agreement_1719_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354592/","spamhaus"
@@ -120,34 +507,34 @@
 "354590","2020-04-30 08:41:06","http://greenleaveperu.com/media/cms/more.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/354590/","zbetcheckin"
 "354589","2020-04-30 08:41:03","https://pastebin.com/raw/dpcdmkv4","offline","malware_download","None","https://urlhaus.abuse.ch/url/354589/","JayTHL"
 "354588","2020-04-30 08:39:14","http://tinckorm.beget.tech/klip.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354588/","abuse_ch"
-"354587","2020-04-30 08:36:36","http://arcticprospectus.com/filesmy/filemy.exe","online","malware_download","DanaBot,exe,opendir","https://urlhaus.abuse.ch/url/354587/","abuse_ch"
+"354587","2020-04-30 08:36:36","http://arcticprospectus.com/filesmy/filemy.exe","online","malware_download","DanaBot,exe,opendir,Trickbot","https://urlhaus.abuse.ch/url/354587/","abuse_ch"
 "354586","2020-04-30 08:36:26","http://cheriyilbuilders.com/ixwqumcq/1200859/Buy-Sell_Agreement_1200859_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354586/","spamhaus"
 "354585","2020-04-30 08:36:21","http://cheriyilbuilders.com/ixwqumcq/8638399/Buy-Sell_Agreement_8638399_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354585/","spamhaus"
 "354584","2020-04-30 08:36:19","http://cerradocredito.com.br/wp-content/uploads/2020/04/beazvgceu/Buy-Sell_Agreement_9562_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354584/","spamhaus"
-"354583","2020-04-30 08:36:12","http://staging.popclusive.asia/okppdsnq/314752/Buy-Sell_Agreement_314752_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354583/","spamhaus"
+"354583","2020-04-30 08:36:12","http://staging.popclusive.asia/okppdsnq/314752/Buy-Sell_Agreement_314752_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354583/","spamhaus"
 "354582","2020-04-30 08:36:07","http://alexandredekerchove.com/ylwhbcphyy/0870/Buy-Sell_Agreement_0870_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354582/","spamhaus"
-"354581","2020-04-30 08:36:05","http://duongfpt.ga/lxgqgox/74547418/Buy-Sell_Agreement_74547418_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354581/","spamhaus"
+"354581","2020-04-30 08:36:05","http://duongfpt.ga/lxgqgox/74547418/Buy-Sell_Agreement_74547418_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354581/","spamhaus"
 "354580","2020-04-30 08:35:58","http://sunboom-gift.com/zwbaxf/892950/Buy-Sell_Agreement_892950_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354580/","spamhaus"
 "354579","2020-04-30 08:35:53","http://dev.apshaps.se/sdub/43746/Buy-Sell_Agreement_43746_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354579/","spamhaus"
 "354578","2020-04-30 08:35:49","http://ade.topepics.com/pkthdrgdb/495230/Buy-Sell_Agreement_495230_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354578/","spamhaus"
 "354577","2020-04-30 08:35:30","http://sunboom-gift.com/zwbaxf/67620255/Buy-Sell_Agreement_67620255_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354577/","spamhaus"
-"354576","2020-04-30 08:35:16","http://demo13.dsdemosite.com/alugzfn/13617731/Buy-Sell_Agreement_13617731_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354576/","spamhaus"
+"354576","2020-04-30 08:35:16","http://demo13.dsdemosite.com/alugzfn/13617731/Buy-Sell_Agreement_13617731_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354576/","spamhaus"
 "354575","2020-04-30 08:35:09","http://alexandredekerchove.com/ylwhbcphyy/29047/Buy-Sell_Agreement_29047_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354575/","spamhaus"
 "354574","2020-04-30 08:35:06","http://koravit.zaeteaw.net/okmqhrfdsvj/Buy-Sell_Agreement_459078_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354574/","spamhaus"
 "354573","2020-04-30 08:28:29","http://silverstargalaxy.com.silverstartv.website/cmea/9982/Buy-Sell_Agreement_9982_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354573/","spamhaus"
-"354572","2020-04-30 08:28:26","https://supportalaskausa.org/2_WDxDpF243.bin","online","malware_download","encrypted,opendir","https://urlhaus.abuse.ch/url/354572/","abuse_ch"
-"354571","2020-04-30 08:28:23","https://supportalaskausa.org/spad.msi","online","malware_download","msi,opendir","https://urlhaus.abuse.ch/url/354571/","abuse_ch"
-"354570","2020-04-30 08:28:18","https://vip.recommendedtoyoo.com/bdhycmsxctp/6643/Buy-Sell_Agreement_6643_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354570/","spamhaus"
-"354569","2020-04-30 08:28:13","https://vip.recommendedtoyoo.com/bdhycmsxctp/Buy-Sell_Agreement_404343_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354569/","spamhaus"
+"354572","2020-04-30 08:28:26","https://supportalaskausa.org/2_WDxDpF243.bin","offline","malware_download","encrypted,opendir","https://urlhaus.abuse.ch/url/354572/","abuse_ch"
+"354571","2020-04-30 08:28:23","https://supportalaskausa.org/spad.msi","offline","malware_download","msi,opendir","https://urlhaus.abuse.ch/url/354571/","abuse_ch"
+"354570","2020-04-30 08:28:18","https://vip.recommendedtoyoo.com/bdhycmsxctp/6643/Buy-Sell_Agreement_6643_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354570/","spamhaus"
+"354569","2020-04-30 08:28:13","https://vip.recommendedtoyoo.com/bdhycmsxctp/Buy-Sell_Agreement_404343_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354569/","spamhaus"
 "354568","2020-04-30 08:28:09","https://rangebroadcasting.com/vfbc/Buy-Sell_Agreement_421253_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354568/","spamhaus"
 "354567","2020-04-30 08:28:04","http://113.116.176.162:7555/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/354567/","geenensp"
-"354566","2020-04-30 08:27:48","http://oskarnews.gazashare.com/pelsq/5187/Buy-Sell_Agreement_5187_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354566/","spamhaus"
+"354566","2020-04-30 08:27:48","http://oskarnews.gazashare.com/pelsq/5187/Buy-Sell_Agreement_5187_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354566/","spamhaus"
 "354565","2020-04-30 08:27:43","https://e-internetim.com/hediye10gb.apk","offline","malware_download","anubis,apk ","https://urlhaus.abuse.ch/url/354565/","mertcangokgoz"
 "354564","2020-04-30 08:27:36","https://hediye-internet.site/hediye20gb.apk","offline","malware_download","anubis,apk ","https://urlhaus.abuse.ch/url/354564/","mertcangokgoz"
 "354563","2020-04-30 08:27:18","https://kamagra.in.rs/bqcbhf/Buy-Sell_Agreement_9051_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354563/","spamhaus"
 "354562","2020-04-30 08:27:10","https://bluecollarfinancial.net/gfmixt/676447/Buy-Sell_Agreement_676447_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354562/","spamhaus"
 "354561","2020-04-30 08:26:59","http://xn--20gb-tanmla-kullan-l0c.com/20gb_tanimlama.apk","offline","malware_download","anubis,apk ","https://urlhaus.abuse.ch/url/354561/","mertcangokgoz"
-"354560","2020-04-30 08:26:53","http://oralloy.com/xyqkbu/Buy-Sell_Agreement_71800141_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354560/","spamhaus"
+"354560","2020-04-30 08:26:53","http://oralloy.com/xyqkbu/Buy-Sell_Agreement_71800141_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354560/","spamhaus"
 "354559","2020-04-30 08:26:48","http://kazanin20gbturkiye.com/20gb_hediye_internet.apk","online","malware_download","anubis,apk ","https://urlhaus.abuse.ch/url/354559/","mertcangokgoz"
 "354558","2020-04-30 08:26:37","http://sunboom-gift.com/zwbaxf/Buy-Sell_Agreement_0465995_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354558/","spamhaus"
 "354557","2020-04-30 08:26:33","http://alexandredekerchove.com/ylwhbcphyy/Buy-Sell_Agreement_9048_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354557/","spamhaus"
@@ -156,63 +543,63 @@
 "354554","2020-04-30 08:26:22","http://koravit.zaeteaw.net/okmqhrfdsvj/Buy-Sell_Agreement_14617310_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354554/","spamhaus"
 "354553","2020-04-30 08:26:19","https://cryptoomarket.com/fhws/Buy-Sell_Agreement_92112_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354553/","spamhaus"
 "354552","2020-04-30 08:26:13","http://bolescy.com/otue/0297/Buy-Sell_Agreement_0297_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354552/","spamhaus"
-"354551","2020-04-30 08:26:10","http://Muanha.xyz/cfewahhzze/Buy-Sell_Agreement_5400_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354551/","spamhaus"
+"354551","2020-04-30 08:26:10","http://Muanha.xyz/cfewahhzze/Buy-Sell_Agreement_5400_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354551/","spamhaus"
 "354550","2020-04-30 08:26:07","http://drinkopolykopen.nl/wp-content/uploads/2020/04/nnpebk/72985/Buy-Sell_Agreement_72985_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354550/","spamhaus"
-"354549","2020-04-30 08:25:35","http://ade.topepics.com/pkthdrgdb/Buy-Sell_Agreement_17553402_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354549/","spamhaus"
+"354549","2020-04-30 08:25:35","http://ade.topepics.com/pkthdrgdb/Buy-Sell_Agreement_17553402_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354549/","spamhaus"
 "354548","2020-04-30 08:25:31","http://jessymart.flexyhub.com/ssuzzix/Buy-Sell_Agreement_3869557_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354548/","spamhaus"
-"354547","2020-04-30 08:25:26","https://cryptoomarket.com/fhws/8830/Buy-Sell_Agreement_8830_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354547/","spamhaus"
-"354546","2020-04-30 08:25:19","https://cryptoomarket.com/fhws/74651/Buy-Sell_Agreement_74651_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354546/","spamhaus"
-"354545","2020-04-30 08:25:16","http://jessymart.flexyhub.com/ssuzzix/Buy-Sell_Agreement_3544_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354545/","spamhaus"
+"354547","2020-04-30 08:25:26","https://cryptoomarket.com/fhws/8830/Buy-Sell_Agreement_8830_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354547/","spamhaus"
+"354546","2020-04-30 08:25:19","https://cryptoomarket.com/fhws/74651/Buy-Sell_Agreement_74651_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354546/","spamhaus"
+"354545","2020-04-30 08:25:16","http://jessymart.flexyhub.com/ssuzzix/Buy-Sell_Agreement_3544_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354545/","spamhaus"
 "354544","2020-04-30 08:19:07","http://fundbook.xyz/ru53332/ak3sol4cnqaa7xocafjvfwamamv02caa/fl+studio+20.6.2.1549+crack.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354544/","zbetcheckin"
 "354543","2020-04-30 08:19:05","http://fundbook.xyz/ru53332/AB2ak17nlgAAvhwCAERFFwAmAPMfGScA/Spectrasonics%20Omnisphere%202.6%20Cracked%20[Fixed].exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354543/","zbetcheckin"
 "354542","2020-04-30 08:17:12","http://allpetsandpaws.com/sport/rockstar.php","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354542/","abuse_ch"
 "354541","2020-04-30 08:04:03","http://fundbook.xyz/ru53332/AG9Jpl70lQAAvhwCAERFFwASAKjxU88A/multik.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354541/","zbetcheckin"
 "354540","2020-04-30 07:39:03","https://pastebin.com/raw/SRuPYCQZ","offline","malware_download","None","https://urlhaus.abuse.ch/url/354540/","JayTHL"
-"354539","2020-04-30 07:35:03","http://45.89.230.141/Pipe/i586","online","malware_download","elf","https://urlhaus.abuse.ch/url/354539/","zbetcheckin"
-"354538","2020-04-30 07:31:20","http://45.89.230.141/Pipe/armv5l","online","malware_download","elf","https://urlhaus.abuse.ch/url/354538/","zbetcheckin"
-"354537","2020-04-30 07:31:18","http://45.89.230.141/Pipe/sparc","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/354537/","zbetcheckin"
-"354536","2020-04-30 07:31:16","http://45.89.230.141/Pipe/sh4","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/354536/","zbetcheckin"
-"354535","2020-04-30 07:31:14","http://45.89.230.141/Pipe/powerpc","online","malware_download","elf","https://urlhaus.abuse.ch/url/354535/","zbetcheckin"
-"354534","2020-04-30 07:31:12","http://45.89.230.141/Pipe/m68k","online","malware_download","elf","https://urlhaus.abuse.ch/url/354534/","zbetcheckin"
-"354533","2020-04-30 07:31:10","http://45.89.230.141/Pipe/x86","online","malware_download","elf","https://urlhaus.abuse.ch/url/354533/","zbetcheckin"
-"354532","2020-04-30 07:31:08","http://45.89.230.141/Pipe/mipsel","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/354532/","zbetcheckin"
-"354531","2020-04-30 07:31:06","http://45.89.230.141/Pipe/i686","online","malware_download","elf","https://urlhaus.abuse.ch/url/354531/","zbetcheckin"
-"354530","2020-04-30 07:31:03","http://45.89.230.141/Pipe/armv4l","online","malware_download","elf","https://urlhaus.abuse.ch/url/354530/","zbetcheckin"
-"354529","2020-04-30 07:27:35","http://45.89.230.141/Pipe/armv6l","online","malware_download","elf","https://urlhaus.abuse.ch/url/354529/","zbetcheckin"
+"354539","2020-04-30 07:35:03","http://45.89.230.141/Pipe/i586","offline","malware_download","elf","https://urlhaus.abuse.ch/url/354539/","zbetcheckin"
+"354538","2020-04-30 07:31:20","http://45.89.230.141/Pipe/armv5l","offline","malware_download","elf","https://urlhaus.abuse.ch/url/354538/","zbetcheckin"
+"354537","2020-04-30 07:31:18","http://45.89.230.141/Pipe/sparc","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/354537/","zbetcheckin"
+"354536","2020-04-30 07:31:16","http://45.89.230.141/Pipe/sh4","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/354536/","zbetcheckin"
+"354535","2020-04-30 07:31:14","http://45.89.230.141/Pipe/powerpc","offline","malware_download","elf","https://urlhaus.abuse.ch/url/354535/","zbetcheckin"
+"354534","2020-04-30 07:31:12","http://45.89.230.141/Pipe/m68k","offline","malware_download","elf","https://urlhaus.abuse.ch/url/354534/","zbetcheckin"
+"354533","2020-04-30 07:31:10","http://45.89.230.141/Pipe/x86","offline","malware_download","elf","https://urlhaus.abuse.ch/url/354533/","zbetcheckin"
+"354532","2020-04-30 07:31:08","http://45.89.230.141/Pipe/mipsel","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/354532/","zbetcheckin"
+"354531","2020-04-30 07:31:06","http://45.89.230.141/Pipe/i686","offline","malware_download","elf","https://urlhaus.abuse.ch/url/354531/","zbetcheckin"
+"354530","2020-04-30 07:31:03","http://45.89.230.141/Pipe/armv4l","offline","malware_download","elf","https://urlhaus.abuse.ch/url/354530/","zbetcheckin"
+"354529","2020-04-30 07:27:35","http://45.89.230.141/Pipe/armv6l","offline","malware_download","elf","https://urlhaus.abuse.ch/url/354529/","zbetcheckin"
 "354528","2020-04-30 07:27:33","https://pastebin.com/raw/HQAYuhFf","offline","malware_download","None","https://urlhaus.abuse.ch/url/354528/","JayTHL"
-"354527","2020-04-30 07:19:54","http://demo13.dsdemosite.com/alugzfn/9836/Buy-Sell_Agreement_9836_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354527/","spamhaus"
+"354527","2020-04-30 07:19:54","http://demo13.dsdemosite.com/alugzfn/9836/Buy-Sell_Agreement_9836_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354527/","spamhaus"
 "354526","2020-04-30 07:19:48","http://NCERTSOLUTIONACADEMY.COM/yghks/Buy-Sell_Agreement_02599_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354526/","spamhaus"
 "354525","2020-04-30 07:19:36","http://jaservicioscontables.casteviajes.com/xekqbxkehlx/Buy-Sell_Agreement_351038_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354525/","spamhaus"
 "354524","2020-04-30 07:19:29","http://duongfpt.ga/lxgqgox/1215867/Buy-Sell_Agreement_1215867_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354524/","spamhaus"
 "354523","2020-04-30 07:19:24","https://kamagra.in.rs/bqcbhf/428972/Buy-Sell_Agreement_428972_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354523/","spamhaus"
 "354522","2020-04-30 07:19:15","http://koravit.zaeteaw.net/okmqhrfdsvj/Buy-Sell_Agreement_9160_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354522/","spamhaus"
 "354521","2020-04-30 07:19:13","http://189.252.214.199:46043/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/354521/","geenensp"
-"354520","2020-04-30 07:19:08","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/9864025/Buy-Sell_Agreement_9864025_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354520/","spamhaus"
+"354520","2020-04-30 07:19:08","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/9864025/Buy-Sell_Agreement_9864025_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354520/","spamhaus"
 "354519","2020-04-30 07:19:00","https://rangebroadcasting.com/vfbc/95996/Buy-Sell_Agreement_95996_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354519/","spamhaus"
-"354518","2020-04-30 07:18:55","http://oralloy.com/xyqkbu/Buy-Sell_Agreement_660534_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354518/","spamhaus"
-"354517","2020-04-30 07:18:51","https://cryptoomarket.com/fhws/710920/Buy-Sell_Agreement_710920_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354517/","spamhaus"
+"354518","2020-04-30 07:18:55","http://oralloy.com/xyqkbu/Buy-Sell_Agreement_660534_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354518/","spamhaus"
+"354517","2020-04-30 07:18:51","https://cryptoomarket.com/fhws/710920/Buy-Sell_Agreement_710920_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354517/","spamhaus"
 "354516","2020-04-30 07:18:48","http://koravit.zaeteaw.net/okmqhrfdsvj/154744/Buy-Sell_Agreement_154744_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354516/","spamhaus"
 "354515","2020-04-30 07:18:46","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/6680/Buy-Sell_Agreement_6680_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354515/","spamhaus"
 "354514","2020-04-30 07:18:40","http://bolescy.com/otue/1563143/Buy-Sell_Agreement_1563143_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354514/","spamhaus"
 "354513","2020-04-30 07:18:35","http://cerradocredito.com.br/wp-content/uploads/2020/04/beazvgceu/Buy-Sell_Agreement_58325_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354513/","spamhaus"
 "354512","2020-04-30 07:18:33","http://alexandredekerchove.com/ylwhbcphyy/0358/Buy-Sell_Agreement_0358_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354512/","spamhaus"
 "354511","2020-04-30 07:18:31","https://www.francois-champion.com/lqkb/Buy-Sell_Agreement_8444_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354511/","spamhaus"
-"354510","2020-04-30 07:18:29","https://cryptoomarket.com/fhws/Buy-Sell_Agreement_119635_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354510/","spamhaus"
-"354509","2020-04-30 07:18:25","http://ade.topepics.com/pkthdrgdb/5287/Buy-Sell_Agreement_5287_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354509/","spamhaus"
-"354508","2020-04-30 07:18:16","http://demo13.dsdemosite.com/alugzfn/3042/Buy-Sell_Agreement_3042_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354508/","spamhaus"
+"354510","2020-04-30 07:18:29","https://cryptoomarket.com/fhws/Buy-Sell_Agreement_119635_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354510/","spamhaus"
+"354509","2020-04-30 07:18:25","http://ade.topepics.com/pkthdrgdb/5287/Buy-Sell_Agreement_5287_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354509/","spamhaus"
+"354508","2020-04-30 07:18:16","http://demo13.dsdemosite.com/alugzfn/3042/Buy-Sell_Agreement_3042_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354508/","spamhaus"
 "354507","2020-04-30 07:18:11","http://koravit.zaeteaw.net/okmqhrfdsvj/92052482/Buy-Sell_Agreement_92052482_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354507/","spamhaus"
-"354506","2020-04-30 07:18:09","http://Muanha.xyz/cfewahhzze/Buy-Sell_Agreement_4069_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354506/","spamhaus"
+"354506","2020-04-30 07:18:09","http://Muanha.xyz/cfewahhzze/Buy-Sell_Agreement_4069_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354506/","spamhaus"
 "354505","2020-04-30 07:18:06","http://cerradocredito.com.br/wp-content/uploads/2020/04/beazvgceu/Buy-Sell_Agreement_2816_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354505/","spamhaus"
 "354504","2020-04-30 07:14:03","https://pastebin.com/raw/PMtXMCXc","offline","malware_download","None","https://urlhaus.abuse.ch/url/354504/","JayTHL"
 "354503","2020-04-30 06:53:10","http://cheriyilbuilders.com/ixwqumcq/Buy-Sell_Agreement_2041_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354503/","spamhaus"
 "354502","2020-04-30 06:53:08","https://aelogica.com/zznohyxa/2412243/Buy-Sell_Agreement_2412243_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354502/","spamhaus"
 "354501","2020-04-30 06:53:01","http://bolescy.com/otue/84224564/Buy-Sell_Agreement_84224564_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354501/","spamhaus"
-"354500","2020-04-30 06:52:59","http://oralloy.com/xyqkbu/Buy-Sell_Agreement_30899059_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354500/","spamhaus"
+"354500","2020-04-30 06:52:59","http://oralloy.com/xyqkbu/Buy-Sell_Agreement_30899059_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354500/","spamhaus"
 "354499","2020-04-30 06:52:55","https://www.francois-champion.com/lqkb/Buy-Sell_Agreement_3670858_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354499/","spamhaus"
 "354498","2020-04-30 06:52:53","http://alexandredekerchove.com/ylwhbcphyy/Buy-Sell_Agreement_191491_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354498/","spamhaus"
 "354497","2020-04-30 06:52:51","http://drinkopolykopen.nl/wp-content/uploads/2020/04/nnpebk/999774/Buy-Sell_Agreement_999774_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354497/","spamhaus"
 "354496","2020-04-30 06:52:17","https://cryptoomarket.com/fhws/78798619/Buy-Sell_Agreement_78798619_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354496/","spamhaus"
-"354495","2020-04-30 06:52:12","http://oralloy.com/xyqkbu/51265010/Buy-Sell_Agreement_51265010_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354495/","spamhaus"
+"354495","2020-04-30 06:52:12","http://oralloy.com/xyqkbu/51265010/Buy-Sell_Agreement_51265010_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354495/","spamhaus"
 "354494","2020-04-30 06:52:08","http://bolescy.com/otue/Buy-Sell_Agreement_6965292_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354494/","spamhaus"
 "354493","2020-04-30 06:52:05","http://45.84.196.200/bins/Hilix.mips","offline","malware_download","32-bit,elf,mips","https://urlhaus.abuse.ch/url/354493/","geenensp"
 "354492","2020-04-30 06:52:03","http://45.84.196.200/bins/Hilix.x86","offline","malware_download","32-bit,elf,x86-32","https://urlhaus.abuse.ch/url/354492/","geenensp"
@@ -220,21 +607,21 @@
 "354490","2020-04-30 06:50:10","https://pastebin.com/raw/YH1Je1M4","offline","malware_download","None","https://urlhaus.abuse.ch/url/354490/","JayTHL"
 "354489","2020-04-30 06:50:06","https://pastebin.com/raw/XEXSZtR1","offline","malware_download","None","https://urlhaus.abuse.ch/url/354489/","JayTHL"
 "354488","2020-04-30 06:34:41","http://denunciesoftwareilegal.org.br/wp-content/plugins/apikey/bfgvnffqfo/Buy-Sell_Agreement_1791315_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354488/","spamhaus"
-"354487","2020-04-30 06:34:35","http://sendeyararlanturkiye20gb.com/kazan20gbturkiye.apk","online","malware_download","apk ,Cerberus","https://urlhaus.abuse.ch/url/354487/","mertcangokgoz"
+"354487","2020-04-30 06:34:35","http://sendeyararlanturkiye20gb.com/kazan20gbturkiye.apk","offline","malware_download","apk ,Cerberus","https://urlhaus.abuse.ch/url/354487/","mertcangokgoz"
 "354486","2020-04-30 06:34:25","http://morruko.antesos.com/fqtylehpb/03382687/Buy-Sell_Agreement_03382687_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354486/","spamhaus"
 "354485","2020-04-30 06:34:19","http://dev.apshaps.se/sdub/Buy-Sell_Agreement_65188123_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354485/","spamhaus"
 "354484","2020-04-30 06:34:16","http://chnes17wsdywealthandmoduleorganisationui.duckdns.org/secure/svchost.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/354484/","gorimpthon"
-"354483","2020-04-30 06:34:13","http://45.89.230.141/Pipe/mips","online","malware_download","32-bit,elf,mips","https://urlhaus.abuse.ch/url/354483/","geenensp"
-"354482","2020-04-30 06:34:11","http://45.89.230.141/Pipe/EkSgbins.sh","online","malware_download","script","https://urlhaus.abuse.ch/url/354482/","geenensp"
-"354481","2020-04-30 06:34:08","https://vip.recommendedtoyoo.com/bdhycmsxctp/Buy-Sell_Agreement_033755_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354481/","spamhaus"
+"354483","2020-04-30 06:34:13","http://45.89.230.141/Pipe/mips","offline","malware_download","32-bit,elf,mips","https://urlhaus.abuse.ch/url/354483/","geenensp"
+"354482","2020-04-30 06:34:11","http://45.89.230.141/Pipe/EkSgbins.sh","offline","malware_download","script","https://urlhaus.abuse.ch/url/354482/","geenensp"
+"354481","2020-04-30 06:34:08","https://vip.recommendedtoyoo.com/bdhycmsxctp/Buy-Sell_Agreement_033755_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354481/","spamhaus"
 "354480","2020-04-30 06:34:04","https://cdn.discordapp.com/attachments/687683954882641920/704665307087896576/COVID-19.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/354480/","spamhaus"
-"354479","2020-04-30 06:33:31","http://thesecuritysoftwarescannerindustrgreat.duckdns.org/lvc/vbc.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/354479/","gorimpthon"
+"354479","2020-04-30 06:33:31","http://thesecuritysoftwarescannerindustrgreat.duckdns.org/lvc/vbc.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/354479/","gorimpthon"
 "354478","2020-04-30 06:33:26","http://thesecuritysoftwarescannerindustrgreat.duckdns.org/lvc/mn.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/354478/","gorimpthon"
 "354477","2020-04-30 06:33:24","http://88.247.194.52:7124/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/354477/","geenensp"
-"354476","2020-04-30 06:33:19","http://staging.popclusive.asia/okppdsnq/9982249/Buy-Sell_Agreement_9982249_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354476/","spamhaus"
+"354476","2020-04-30 06:33:19","http://staging.popclusive.asia/okppdsnq/9982249/Buy-Sell_Agreement_9982249_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354476/","spamhaus"
 "354475","2020-04-30 06:33:17","http://59.126.35.242:59827/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/354475/","geenensp"
 "354474","2020-04-30 06:33:11","http://sunboom-gift.com/zwbaxf/749231/Buy-Sell_Agreement_749231_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354474/","spamhaus"
-"354473","2020-04-30 06:32:57","http://dzapasigroup.usapglobal.org/pbnxnmc/19361253/Buy-Sell_Agreement_19361253_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354473/","spamhaus"
+"354473","2020-04-30 06:32:57","http://dzapasigroup.usapglobal.org/pbnxnmc/19361253/Buy-Sell_Agreement_19361253_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354473/","spamhaus"
 "354472","2020-04-30 06:32:53","http://koravit.zaeteaw.net/okmqhrfdsvj/867799/Buy-Sell_Agreement_867799_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354472/","spamhaus"
 "354471","2020-04-30 06:32:51","http://promassager.ga/yltkoe/058877/Buy-Sell_Agreement_058877_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354471/","spamhaus"
 "354470","2020-04-30 06:32:48","http://koravit.zaeteaw.net/okmqhrfdsvj/592051/Buy-Sell_Agreement_592051_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354470/","spamhaus"
@@ -243,10 +630,10 @@
 "354467","2020-04-30 06:32:33","http://www.cheriyilbuilders.com/herevryxugc/Buy-Sell_Agreement_64373_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354467/","spamhaus"
 "354466","2020-04-30 06:32:21","http://cerradocredito.com.br/wp-content/uploads/2020/04/beazvgceu/5761227/Buy-Sell_Agreement_5761227_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354466/","spamhaus"
 "354465","2020-04-30 06:32:13","http://koravit.zaeteaw.net/okmqhrfdsvj/Buy-Sell_Agreement_3379_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354465/","spamhaus"
-"354464","2020-04-30 06:32:11","http://oralloy.com/xyqkbu/286537/Buy-Sell_Agreement_286537_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354464/","spamhaus"
+"354464","2020-04-30 06:32:11","http://oralloy.com/xyqkbu/286537/Buy-Sell_Agreement_286537_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354464/","spamhaus"
 "354463","2020-04-30 06:32:07","http://www.cheriyilbuilders.com/herevryxugc/9767904/Buy-Sell_Agreement_9767904_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354463/","spamhaus"
 "354462","2020-04-30 06:32:04","https://www.francois-champion.com/lqkb/Buy-Sell_Agreement_64516_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354462/","spamhaus"
-"354461","2020-04-30 06:32:02","https://aelogica.com/zznohyxa/Buy-Sell_Agreement_2972_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354461/","spamhaus"
+"354461","2020-04-30 06:32:02","https://aelogica.com/zznohyxa/Buy-Sell_Agreement_2972_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354461/","spamhaus"
 "354460","2020-04-30 06:25:34","http://cerradocredito.com.br/wp-content/uploads/2020/04/beazvgceu/Buy-Sell_Agreement_199795_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354460/","spamhaus"
 "354459","2020-04-30 06:24:36","http://sunboom-gift.com/zwbaxf/85728/Buy-Sell_Agreement_85728_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354459/","spamhaus"
 "354458","2020-04-30 06:14:08","https://pastebin.com/raw/aQsDT3md","offline","malware_download","None","https://urlhaus.abuse.ch/url/354458/","JayTHL"
@@ -255,7 +642,7 @@
 "354455","2020-04-30 06:13:49","http://jaservicioscontables.casteviajes.com/xekqbxkehlx/Buy-Sell_Agreement_162998_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354455/","spamhaus"
 "354454","2020-04-30 06:13:44","http://duongfpt.ga/lxgqgox/93282146/Buy-Sell_Agreement_93282146_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354454/","spamhaus"
 "354453","2020-04-30 06:13:41","https://rangebroadcasting.com/vfbc/Buy-Sell_Agreement_0679634_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354453/","spamhaus"
-"354452","2020-04-30 06:13:34","http://virustreatments.empeeevents.com/eyyudu/Buy-Sell_Agreement_3812_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354452/","spamhaus"
+"354452","2020-04-30 06:13:34","http://virustreatments.empeeevents.com/eyyudu/Buy-Sell_Agreement_3812_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354452/","spamhaus"
 "354451","2020-04-30 06:13:27","http://oralloy.com/xyqkbu/Buy-Sell_Agreement_3496851_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354451/","spamhaus"
 "354450","2020-04-30 06:13:24","http://dev.apshaps.se/sdub/954656/Buy-Sell_Agreement_954656_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354450/","spamhaus"
 "354449","2020-04-30 06:13:19","http://duongfpt.ga/lxgqgox/2278274/Buy-Sell_Agreement_2278274_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354449/","spamhaus"
@@ -266,7 +653,7 @@
 "354444","2020-04-30 06:12:47","http://koravit.zaeteaw.net/okmqhrfdsvj/Buy-Sell_Agreement_71264_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354444/","spamhaus"
 "354443","2020-04-30 06:12:42","https://kamagra.in.rs/bqcbhf/Buy-Sell_Agreement_75361572_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354443/","spamhaus"
 "354442","2020-04-30 06:12:24","http://dzapasigroup.usapglobal.org/pbnxnmc/Buy-Sell_Agreement_8881589_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354442/","spamhaus"
-"354441","2020-04-30 06:12:21","http://oralloy.com/xyqkbu/51023/Buy-Sell_Agreement_51023_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354441/","spamhaus"
+"354441","2020-04-30 06:12:21","http://oralloy.com/xyqkbu/51023/Buy-Sell_Agreement_51023_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354441/","spamhaus"
 "354440","2020-04-30 06:12:17","https://bluecollarfinancial.net/gfmixt/24655/Buy-Sell_Agreement_24655_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354440/","spamhaus"
 "354439","2020-04-30 06:12:10","http://61.75.111.224:46181/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/354439/","geenensp"
 "354438","2020-04-30 06:12:05","http://81.249.64.61:47159/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/354438/","geenensp"
@@ -274,14 +661,14 @@
 "354436","2020-04-30 06:11:49","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/Buy-Sell_Agreement_3466_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354436/","spamhaus"
 "354435","2020-04-30 06:11:44","https://www.francois-champion.com/lqkb/776618/Buy-Sell_Agreement_776618_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354435/","spamhaus"
 "354434","2020-04-30 06:11:38","http://drinkopolykopen.nl/wp-content/uploads/2020/04/nnpebk/54192/Buy-Sell_Agreement_54192_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354434/","spamhaus"
-"354433","2020-04-30 06:11:35","http://virustreatments.empeeevents.com/eyyudu/5220/Buy-Sell_Agreement_5220_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354433/","spamhaus"
+"354433","2020-04-30 06:11:35","http://virustreatments.empeeevents.com/eyyudu/5220/Buy-Sell_Agreement_5220_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354433/","spamhaus"
 "354432","2020-04-30 06:11:30","http://cheriyilbuilders.com/ixwqumcq/78911569/Buy-Sell_Agreement_78911569_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354432/","spamhaus"
 "354431","2020-04-30 06:11:26","http://morruko.antesos.com/fqtylehpb/Buy-Sell_Agreement_4479_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354431/","spamhaus"
 "354430","2020-04-30 06:11:24","http://jaservicioscontables.casteviajes.com/xekqbxkehlx/4164189/Buy-Sell_Agreement_4164189_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354430/","spamhaus"
-"354429","2020-04-30 06:11:09","http://oralloy.com/xyqkbu/Buy-Sell_Agreement_3795_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354429/","spamhaus"
-"354428","2020-04-30 06:11:05","http://staging.popclusive.asia/okppdsnq/Buy-Sell_Agreement_66313_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354428/","spamhaus"
+"354429","2020-04-30 06:11:09","http://oralloy.com/xyqkbu/Buy-Sell_Agreement_3795_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354429/","spamhaus"
+"354428","2020-04-30 06:11:05","http://staging.popclusive.asia/okppdsnq/Buy-Sell_Agreement_66313_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354428/","spamhaus"
 "354427","2020-04-30 06:10:15","http://drinkopolykopen.nl/wp-content/uploads/2020/04/nnpebk/4496/Buy-Sell_Agreement_4496_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354427/","spamhaus"
-"354426","2020-04-30 06:10:13","http://evdekal-kampanyasi20gbhediye.com/EvdeKal-20gbhediye.apk","online","malware_download","apk ,Cerberus","https://urlhaus.abuse.ch/url/354426/","mertcangokgoz"
+"354426","2020-04-30 06:10:13","http://evdekal-kampanyasi20gbhediye.com/EvdeKal-20gbhediye.apk","offline","malware_download","apk ,Cerberus","https://urlhaus.abuse.ch/url/354426/","mertcangokgoz"
 "354425","2020-04-30 06:10:02","http://virustreatments.empeeevents.com/eyyudu/Buy-Sell_Agreement_82412_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354425/","spamhaus"
 "354424","2020-04-30 06:09:59","http://jaservicioscontables.casteviajes.com/xekqbxkehlx/02779/Buy-Sell_Agreement_02779_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354424/","spamhaus"
 "354423","2020-04-30 06:09:55","http://jaservicioscontables.casteviajes.com/xekqbxkehlx/80311/Buy-Sell_Agreement_80311_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354423/","spamhaus"
@@ -289,12 +676,12 @@
 "354421","2020-04-30 06:09:38","http://duongfpt.ga/lxgqgox/Buy-Sell_Agreement_5521_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354421/","spamhaus"
 "354420","2020-04-30 06:09:32","http://drinkopolykopen.nl/wp-content/uploads/2020/04/nnpebk/21977992/Buy-Sell_Agreement_21977992_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354420/","spamhaus"
 "354419","2020-04-30 06:06:22","http://116.177.179.202:57007/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354419/","Gandylyan1"
-"354418","2020-04-30 06:06:18","http://61.54.248.65:54517/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354418/","Gandylyan1"
+"354418","2020-04-30 06:06:18","http://61.54.248.65:54517/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354418/","Gandylyan1"
 "354417","2020-04-30 06:06:11","http://42.227.202.34:35458/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354417/","Gandylyan1"
 "354416","2020-04-30 06:06:02","http://42.239.88.109:33432/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354416/","Gandylyan1"
 "354415","2020-04-30 06:05:57","http://219.154.145.111:54077/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354415/","Gandylyan1"
 "354414","2020-04-30 06:05:53","http://27.41.208.122:53989/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354414/","Gandylyan1"
-"354413","2020-04-30 06:05:45","http://219.155.130.92:44560/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354413/","Gandylyan1"
+"354413","2020-04-30 06:05:45","http://219.155.130.92:44560/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354413/","Gandylyan1"
 "354412","2020-04-30 06:05:38","http://172.36.55.78:44524/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354412/","Gandylyan1"
 "354411","2020-04-30 06:05:06","http://172.45.20.164:50497/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354411/","Gandylyan1"
 "354410","2020-04-30 06:04:34","http://182.114.212.28:55150/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354410/","Gandylyan1"
@@ -309,20 +696,20 @@
 "354401","2020-04-30 04:46:04","https://pastebin.com/raw/XSY89q81","offline","malware_download","None","https://urlhaus.abuse.ch/url/354401/","JayTHL"
 "354400","2020-04-30 04:37:06","http://147.75.67.253/bins/","offline","malware_download","None","https://urlhaus.abuse.ch/url/354400/","JayTHL"
 "354399","2020-04-30 04:37:05","http://147.75.67.253/","offline","malware_download","None","https://urlhaus.abuse.ch/url/354399/","JayTHL"
-"354398","2020-04-30 04:37:03","http://147.75.67.253/bins.sh","online","malware_download","None","https://urlhaus.abuse.ch/url/354398/","JayTHL"
-"354397","2020-04-30 04:36:29","http://147.75.67.253/bins/enigma.x86_32","online","malware_download","None","https://urlhaus.abuse.ch/url/354397/","JayTHL"
-"354396","2020-04-30 04:36:27","http://147.75.67.253/bins/enigma.x86","online","malware_download","None","https://urlhaus.abuse.ch/url/354396/","JayTHL"
-"354395","2020-04-30 04:36:25","http://147.75.67.253/bins/enigma.spc","online","malware_download","None","https://urlhaus.abuse.ch/url/354395/","JayTHL"
-"354394","2020-04-30 04:36:23","http://147.75.67.253/bins/enigma.sh4","online","malware_download","None","https://urlhaus.abuse.ch/url/354394/","JayTHL"
-"354393","2020-04-30 04:36:21","http://147.75.67.253/bins/enigma.ppc","online","malware_download","None","https://urlhaus.abuse.ch/url/354393/","JayTHL"
-"354392","2020-04-30 04:36:19","http://147.75.67.253/bins/enigma.mpsl","online","malware_download","None","https://urlhaus.abuse.ch/url/354392/","JayTHL"
-"354391","2020-04-30 04:36:17","http://147.75.67.253/bins/enigma.mips","online","malware_download","None","https://urlhaus.abuse.ch/url/354391/","JayTHL"
-"354390","2020-04-30 04:36:14","http://147.75.67.253/bins/enigma.m68k","online","malware_download","None","https://urlhaus.abuse.ch/url/354390/","JayTHL"
-"354389","2020-04-30 04:36:12","http://147.75.67.253/bins/enigma.arm7","online","malware_download","None","https://urlhaus.abuse.ch/url/354389/","JayTHL"
-"354388","2020-04-30 04:36:09","http://147.75.67.253/bins/enigma.arm6","online","malware_download","None","https://urlhaus.abuse.ch/url/354388/","JayTHL"
-"354387","2020-04-30 04:36:07","http://147.75.67.253/bins/enigma.arm5","online","malware_download","None","https://urlhaus.abuse.ch/url/354387/","JayTHL"
-"354386","2020-04-30 04:36:05","http://147.75.67.253/bins/enigma.arm","online","malware_download","None","https://urlhaus.abuse.ch/url/354386/","JayTHL"
-"354385","2020-04-30 04:36:03","http://147.75.67.253/bins/enigma.arc","online","malware_download","None","https://urlhaus.abuse.ch/url/354385/","JayTHL"
+"354398","2020-04-30 04:37:03","http://147.75.67.253/bins.sh","offline","malware_download","None","https://urlhaus.abuse.ch/url/354398/","JayTHL"
+"354397","2020-04-30 04:36:29","http://147.75.67.253/bins/enigma.x86_32","offline","malware_download","None","https://urlhaus.abuse.ch/url/354397/","JayTHL"
+"354396","2020-04-30 04:36:27","http://147.75.67.253/bins/enigma.x86","offline","malware_download","None","https://urlhaus.abuse.ch/url/354396/","JayTHL"
+"354395","2020-04-30 04:36:25","http://147.75.67.253/bins/enigma.spc","offline","malware_download","None","https://urlhaus.abuse.ch/url/354395/","JayTHL"
+"354394","2020-04-30 04:36:23","http://147.75.67.253/bins/enigma.sh4","offline","malware_download","None","https://urlhaus.abuse.ch/url/354394/","JayTHL"
+"354393","2020-04-30 04:36:21","http://147.75.67.253/bins/enigma.ppc","offline","malware_download","None","https://urlhaus.abuse.ch/url/354393/","JayTHL"
+"354392","2020-04-30 04:36:19","http://147.75.67.253/bins/enigma.mpsl","offline","malware_download","None","https://urlhaus.abuse.ch/url/354392/","JayTHL"
+"354391","2020-04-30 04:36:17","http://147.75.67.253/bins/enigma.mips","offline","malware_download","None","https://urlhaus.abuse.ch/url/354391/","JayTHL"
+"354390","2020-04-30 04:36:14","http://147.75.67.253/bins/enigma.m68k","offline","malware_download","None","https://urlhaus.abuse.ch/url/354390/","JayTHL"
+"354389","2020-04-30 04:36:12","http://147.75.67.253/bins/enigma.arm7","offline","malware_download","None","https://urlhaus.abuse.ch/url/354389/","JayTHL"
+"354388","2020-04-30 04:36:09","http://147.75.67.253/bins/enigma.arm6","offline","malware_download","None","https://urlhaus.abuse.ch/url/354388/","JayTHL"
+"354387","2020-04-30 04:36:07","http://147.75.67.253/bins/enigma.arm5","offline","malware_download","None","https://urlhaus.abuse.ch/url/354387/","JayTHL"
+"354386","2020-04-30 04:36:05","http://147.75.67.253/bins/enigma.arm","offline","malware_download","None","https://urlhaus.abuse.ch/url/354386/","JayTHL"
+"354385","2020-04-30 04:36:03","http://147.75.67.253/bins/enigma.arc","offline","malware_download","None","https://urlhaus.abuse.ch/url/354385/","JayTHL"
 "354384","2020-04-30 04:21:03","https://pastebin.com/raw/UvfJcKRS","offline","malware_download","None","https://urlhaus.abuse.ch/url/354384/","JayTHL"
 "354383","2020-04-30 03:27:03","http://45.148.10.174/bins/Hilix.spc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/354383/","zbetcheckin"
 "354382","2020-04-30 03:24:08","http://45.148.10.174/bins/Hilix.sh4","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/354382/","zbetcheckin"
@@ -341,15 +728,15 @@
 "354369","2020-04-30 03:04:32","http://42.227.191.5:50425/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354369/","Gandylyan1"
 "354368","2020-04-30 03:04:29","http://159.255.187.47:59732/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354368/","Gandylyan1"
 "354367","2020-04-30 03:03:57","http://111.42.102.70:56189/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354367/","Gandylyan1"
-"354366","2020-04-30 03:03:53","http://162.212.115.91:44443/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354366/","Gandylyan1"
+"354366","2020-04-30 03:03:53","http://162.212.115.91:44443/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354366/","Gandylyan1"
 "354365","2020-04-30 03:03:49","http://180.118.69.15:52063/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354365/","Gandylyan1"
 "354364","2020-04-30 03:03:44","http://58.243.127.176:35890/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354364/","Gandylyan1"
-"354363","2020-04-30 03:03:40","http://112.17.130.136:43043/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354363/","Gandylyan1"
-"354362","2020-04-30 03:03:32","http://111.43.223.177:46702/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354362/","Gandylyan1"
+"354363","2020-04-30 03:03:40","http://112.17.130.136:43043/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354363/","Gandylyan1"
+"354362","2020-04-30 03:03:32","http://111.43.223.177:46702/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354362/","Gandylyan1"
 "354361","2020-04-30 03:03:29","http://111.43.223.124:52777/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354361/","Gandylyan1"
-"354360","2020-04-30 03:03:23","http://216.180.117.45:56344/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354360/","Gandylyan1"
+"354360","2020-04-30 03:03:23","http://216.180.117.45:56344/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354360/","Gandylyan1"
 "354359","2020-04-30 03:03:18","http://112.123.109.68:58903/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354359/","Gandylyan1"
-"354358","2020-04-30 03:03:09","http://199.83.205.25:44761/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354358/","Gandylyan1"
+"354358","2020-04-30 03:03:09","http://199.83.205.25:44761/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354358/","Gandylyan1"
 "354357","2020-04-30 03:03:05","http://223.95.78.250:45239/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354357/","Gandylyan1"
 "354356","2020-04-30 02:14:14","http://zeroterwwgfbot.hoesbigmadzero.tk/bins/911.ppc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/354356/","zbetcheckin"
 "354355","2020-04-30 02:14:12","http://zeroterwwgfbot.hoesbigmadzero.tk/bins/911.arm","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/354355/","zbetcheckin"
@@ -377,14 +764,14 @@
 "354333","2020-04-30 00:40:05","https://pastebin.com/raw/FYQ7L2tB","offline","malware_download","None","https://urlhaus.abuse.ch/url/354333/","JayTHL"
 "354332","2020-04-30 00:27:33","https://pastebin.com/raw/XM0kD26T","offline","malware_download","None","https://urlhaus.abuse.ch/url/354332/","JayTHL"
 "354331","2020-04-30 00:15:34","https://pastebin.com/raw/3yLuVrCA","offline","malware_download","None","https://urlhaus.abuse.ch/url/354331/","JayTHL"
-"354330","2020-04-30 00:04:12","http://115.53.63.184:53563/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354330/","Gandylyan1"
+"354330","2020-04-30 00:04:12","http://115.53.63.184:53563/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354330/","Gandylyan1"
 "354329","2020-04-30 00:04:08","http://117.90.128.14:33586/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354329/","Gandylyan1"
 "354328","2020-04-30 00:04:04","http://221.160.177.226:4245/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354328/","Gandylyan1"
 "354327","2020-04-30 00:03:59","http://182.127.201.42:59585/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354327/","Gandylyan1"
-"354326","2020-04-30 00:03:56","http://123.10.229.210:52594/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354326/","Gandylyan1"
+"354326","2020-04-30 00:03:56","http://123.10.229.210:52594/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354326/","Gandylyan1"
 "354325","2020-04-30 00:03:52","http://115.216.210.105:35318/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354325/","Gandylyan1"
 "354324","2020-04-30 00:03:40","http://115.59.118.51:34228/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354324/","Gandylyan1"
-"354323","2020-04-30 00:03:37","http://113.221.145.204:35210/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354323/","Gandylyan1"
+"354323","2020-04-30 00:03:37","http://113.221.145.204:35210/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354323/","Gandylyan1"
 "354322","2020-04-30 00:03:30","http://42.227.202.209:45436/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354322/","Gandylyan1"
 "354321","2020-04-30 00:03:27","http://111.43.223.17:59334/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354321/","Gandylyan1"
 "354320","2020-04-30 00:03:23","http://116.114.95.50:44946/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354320/","Gandylyan1"
@@ -403,7 +790,7 @@
 "354307","2020-04-29 23:25:18","http://165.227.220.189/Demon.sh4","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/354307/","zbetcheckin"
 "354306","2020-04-29 23:25:16","http://165.227.220.189/Demon.arm4","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/354306/","zbetcheckin"
 "354305","2020-04-29 23:25:13","http://104.175.99.243:30943/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/354305/","zbetcheckin"
-"354304","2020-04-29 23:25:09","http://206.189.208.7/shanksbins.sh","online","malware_download","shellscript","https://urlhaus.abuse.ch/url/354304/","zbetcheckin"
+"354304","2020-04-29 23:25:09","http://206.189.208.7/shanksbins.sh","offline","malware_download","shellscript","https://urlhaus.abuse.ch/url/354304/","zbetcheckin"
 "354303","2020-04-29 23:25:06","http://165.227.220.189/Demon.arm5","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/354303/","zbetcheckin"
 "354302","2020-04-29 23:25:03","http://165.227.220.189/Demon.i686","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/354302/","zbetcheckin"
 "354301","2020-04-29 23:21:11","http://165.227.220.189/Demon.i586","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/354301/","zbetcheckin"
@@ -431,14 +818,14 @@
 "354279","2020-04-29 21:06:35","https://3q9h.timeisletitgo.ru/1504794669.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354279/","zbetcheckin"
 "354278","2020-04-29 21:06:09","http://a.seeanu.ru/262969619.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354278/","zbetcheckin"
 "354277","2020-04-29 21:06:04","https://zzv.seeanu.ru/377134425.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354277/","zbetcheckin"
-"354276","2020-04-29 21:05:02","http://27.41.224.202:42504/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354276/","Gandylyan1"
+"354276","2020-04-29 21:05:02","http://27.41.224.202:42504/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354276/","Gandylyan1"
 "354275","2020-04-29 21:04:58","http://176.113.161.45:34472/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354275/","Gandylyan1"
 "354274","2020-04-29 21:04:56","http://180.120.12.85:41514/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354274/","Gandylyan1"
 "354273","2020-04-29 21:04:52","http://36.108.228.213:33653/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354273/","Gandylyan1"
 "354272","2020-04-29 21:04:48","http://115.49.76.131:56305/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354272/","Gandylyan1"
 "354271","2020-04-29 21:04:44","http://111.43.223.77:42503/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354271/","Gandylyan1"
 "354270","2020-04-29 21:04:41","http://115.63.60.199:39367/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354270/","Gandylyan1"
-"354269","2020-04-29 21:04:37","http://199.83.205.205:47145/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354269/","Gandylyan1"
+"354269","2020-04-29 21:04:37","http://199.83.205.205:47145/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354269/","Gandylyan1"
 "354268","2020-04-29 21:04:25","http://111.42.103.55:53196/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354268/","Gandylyan1"
 "354267","2020-04-29 21:04:22","http://182.126.213.171:50081/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354267/","Gandylyan1"
 "354266","2020-04-29 21:04:18","http://114.239.37.159:39279/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354266/","Gandylyan1"
@@ -449,33 +836,33 @@
 "354261","2020-04-29 21:02:02","http://t37b.iwakalong.ru/1734942695.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354261/","zbetcheckin"
 "354260","2020-04-29 20:58:03","https://pastebin.com/raw/v72EGxKQ","offline","malware_download","None","https://urlhaus.abuse.ch/url/354260/","JayTHL"
 "354259","2020-04-29 20:21:33","https://pastebin.com/raw/xYfJ6BrB","offline","malware_download","None","https://urlhaus.abuse.ch/url/354259/","JayTHL"
-"354258","2020-04-29 20:11:29","http://51.89.119.154/SBIDIOT/zte","offline","malware_download","None","https://urlhaus.abuse.ch/url/354258/","JayTHL"
-"354257","2020-04-29 20:11:27","http://51.89.119.154/SBIDIOT/yarn","offline","malware_download","None","https://urlhaus.abuse.ch/url/354257/","JayTHL"
-"354256","2020-04-29 20:11:25","http://51.89.119.154/SBIDIOT/x86","offline","malware_download","None","https://urlhaus.abuse.ch/url/354256/","JayTHL"
-"354255","2020-04-29 20:11:23","http://51.89.119.154/SBIDIOT/spc","offline","malware_download","None","https://urlhaus.abuse.ch/url/354255/","JayTHL"
-"354254","2020-04-29 20:11:21","http://51.89.119.154/SBIDIOT/sh4","offline","malware_download","None","https://urlhaus.abuse.ch/url/354254/","JayTHL"
-"354253","2020-04-29 20:11:19","http://51.89.119.154/SBIDIOT/rtk","offline","malware_download","None","https://urlhaus.abuse.ch/url/354253/","JayTHL"
-"354252","2020-04-29 20:11:17","http://51.89.119.154/SBIDIOT/root","offline","malware_download","None","https://urlhaus.abuse.ch/url/354252/","JayTHL"
-"354251","2020-04-29 20:11:15","http://51.89.119.154/SBIDIOT/ppc","offline","malware_download","None","https://urlhaus.abuse.ch/url/354251/","JayTHL"
-"354250","2020-04-29 20:11:13","http://51.89.119.154/SBIDIOT/mpsl","offline","malware_download","None","https://urlhaus.abuse.ch/url/354250/","JayTHL"
-"354249","2020-04-29 20:11:11","http://51.89.119.154/SBIDIOT/mips","offline","malware_download","None","https://urlhaus.abuse.ch/url/354249/","JayTHL"
-"354248","2020-04-29 20:11:09","http://51.89.119.154/SBIDIOT/m68k","offline","malware_download","None","https://urlhaus.abuse.ch/url/354248/","JayTHL"
-"354247","2020-04-29 20:11:07","http://51.89.119.154/SBIDIOT/arm7","offline","malware_download","None","https://urlhaus.abuse.ch/url/354247/","JayTHL"
-"354246","2020-04-29 20:11:04","http://51.89.119.154/SBIDIOT/arm6","offline","malware_download","None","https://urlhaus.abuse.ch/url/354246/","JayTHL"
-"354245","2020-04-29 20:11:03","http://51.89.119.154/SBIDIOT/arm","offline","malware_download","None","https://urlhaus.abuse.ch/url/354245/","JayTHL"
+"354258","2020-04-29 20:11:29","http://51.89.119.154/SBIDIOT/zte","online","malware_download","None","https://urlhaus.abuse.ch/url/354258/","JayTHL"
+"354257","2020-04-29 20:11:27","http://51.89.119.154/SBIDIOT/yarn","online","malware_download","None","https://urlhaus.abuse.ch/url/354257/","JayTHL"
+"354256","2020-04-29 20:11:25","http://51.89.119.154/SBIDIOT/x86","online","malware_download","None","https://urlhaus.abuse.ch/url/354256/","JayTHL"
+"354255","2020-04-29 20:11:23","http://51.89.119.154/SBIDIOT/spc","online","malware_download","None","https://urlhaus.abuse.ch/url/354255/","JayTHL"
+"354254","2020-04-29 20:11:21","http://51.89.119.154/SBIDIOT/sh4","online","malware_download","None","https://urlhaus.abuse.ch/url/354254/","JayTHL"
+"354253","2020-04-29 20:11:19","http://51.89.119.154/SBIDIOT/rtk","online","malware_download","None","https://urlhaus.abuse.ch/url/354253/","JayTHL"
+"354252","2020-04-29 20:11:17","http://51.89.119.154/SBIDIOT/root","online","malware_download","None","https://urlhaus.abuse.ch/url/354252/","JayTHL"
+"354251","2020-04-29 20:11:15","http://51.89.119.154/SBIDIOT/ppc","online","malware_download","None","https://urlhaus.abuse.ch/url/354251/","JayTHL"
+"354250","2020-04-29 20:11:13","http://51.89.119.154/SBIDIOT/mpsl","online","malware_download","None","https://urlhaus.abuse.ch/url/354250/","JayTHL"
+"354249","2020-04-29 20:11:11","http://51.89.119.154/SBIDIOT/mips","online","malware_download","None","https://urlhaus.abuse.ch/url/354249/","JayTHL"
+"354248","2020-04-29 20:11:09","http://51.89.119.154/SBIDIOT/m68k","online","malware_download","None","https://urlhaus.abuse.ch/url/354248/","JayTHL"
+"354247","2020-04-29 20:11:07","http://51.89.119.154/SBIDIOT/arm7","online","malware_download","None","https://urlhaus.abuse.ch/url/354247/","JayTHL"
+"354246","2020-04-29 20:11:04","http://51.89.119.154/SBIDIOT/arm6","online","malware_download","None","https://urlhaus.abuse.ch/url/354246/","JayTHL"
+"354245","2020-04-29 20:11:03","http://51.89.119.154/SBIDIOT/arm","online","malware_download","None","https://urlhaus.abuse.ch/url/354245/","JayTHL"
 "354244","2020-04-29 20:08:10","https://pastebin.com/raw/qhC2b0uA","offline","malware_download","None","https://urlhaus.abuse.ch/url/354244/","JayTHL"
 "354243","2020-04-29 19:45:11","https://bluecollarfinancial.net/gfmixt/Buy-Sell_Agreement_05487_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354243/","spamhaus"
 "354242","2020-04-29 19:45:06","http://britica.vn/dqsfv/Buy-Sell_Agreement_6587_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354242/","spamhaus"
-"354241","2020-04-29 19:38:05","http://oralloy.com/xyqkbu/Buy-Sell_Agreement_520906_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354241/","spamhaus"
+"354241","2020-04-29 19:38:05","http://oralloy.com/xyqkbu/Buy-Sell_Agreement_520906_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354241/","spamhaus"
 "354240","2020-04-29 19:33:20","https://rangebroadcasting.com/vfbc/Buy-Sell_Agreement_4975254_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354240/","spamhaus"
 "354239","2020-04-29 19:33:15","https://kamagra.in.rs/bqcbhf/52891506/Buy-Sell_Agreement_52891506_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354239/","spamhaus"
 "354238","2020-04-29 19:33:04","http://cerradocredito.com.br/wp-content/uploads/2020/04/beazvgceu/277263/Buy-Sell_Agreement_277263_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354238/","spamhaus"
-"354237","2020-04-29 19:29:26","https://aelogica.com/zznohyxa/11288831/Buy-Sell_Agreement_11288831_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354237/","spamhaus"
+"354237","2020-04-29 19:29:26","https://aelogica.com/zznohyxa/11288831/Buy-Sell_Agreement_11288831_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354237/","spamhaus"
 "354236","2020-04-29 19:29:22","http://dev.apshaps.se/sdub/Buy-Sell_Agreement_182728_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354236/","spamhaus"
 "354235","2020-04-29 19:29:19","http://drinkopolykopen.nl/wp-content/uploads/2020/04/nnpebk/43126858/Buy-Sell_Agreement_43126858_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354235/","spamhaus"
 "354234","2020-04-29 19:29:17","http://200.233.206.164:29712/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/354234/","geenensp"
 "354233","2020-04-29 19:29:13","http://sunboom-gift.com/zwbaxf/25932/Buy-Sell_Agreement_25932_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354233/","spamhaus"
-"354232","2020-04-29 19:29:10","http://www.mononet.lv/wp-admin/user/INV-11032088.jar","online","malware_download","Adwind,jar","https://urlhaus.abuse.ch/url/354232/","spamhaus"
+"354232","2020-04-29 19:29:10","http://www.mononet.lv/wp-admin/user/INV-11032088.jar","offline","malware_download","Adwind,jar","https://urlhaus.abuse.ch/url/354232/","spamhaus"
 "354231","2020-04-29 19:29:06","http://promassager.ga/yltkoe/Buy-Sell_Agreement_37585_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354231/","spamhaus"
 "354230","2020-04-29 19:29:03","http://promassager.ga/yltkoe/309140/Buy-Sell_Agreement_309140_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354230/","spamhaus"
 "354229","2020-04-29 19:18:07","http://37.49.226.209/bins/dvrbot.arm7","offline","malware_download","elf","https://urlhaus.abuse.ch/url/354229/","zbetcheckin"
@@ -492,15 +879,15 @@
 "354218","2020-04-29 19:05:04","http://37.49.226.209/bins/dvrbot.arm5","offline","malware_download","elf","https://urlhaus.abuse.ch/url/354218/","zbetcheckin"
 "354217","2020-04-29 18:54:04","https://pastebin.com/raw/bAwYmSxY","offline","malware_download","None","https://urlhaus.abuse.ch/url/354217/","JayTHL"
 "354216","2020-04-29 18:42:05","http://simpl.pw/unknown/launcher/UnknownLauncher.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354216/","zbetcheckin"
-"354215","2020-04-29 18:37:15","http://oralloy.com/xyqkbu/1564384/Buy-Sell_Agreement_1564384_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354215/","spamhaus"
-"354214","2020-04-29 18:37:13","http://oralloy.com/xyqkbu/16120/Buy-Sell_Agreement_16120_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354214/","spamhaus"
+"354215","2020-04-29 18:37:15","http://oralloy.com/xyqkbu/1564384/Buy-Sell_Agreement_1564384_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354215/","spamhaus"
+"354214","2020-04-29 18:37:13","http://oralloy.com/xyqkbu/16120/Buy-Sell_Agreement_16120_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354214/","spamhaus"
 "354213","2020-04-29 18:36:04","http://dev.apshaps.se/sdub/3655876/Buy-Sell_Agreement_3655876_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354213/","spamhaus"
-"354212","2020-04-29 18:28:03","https://vip.recommendedtoyoo.com/bdhycmsxctp/2017982/Buy-Sell_Agreement_2017982_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354212/","spamhaus"
+"354212","2020-04-29 18:28:03","https://vip.recommendedtoyoo.com/bdhycmsxctp/2017982/Buy-Sell_Agreement_2017982_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354212/","spamhaus"
 "354211","2020-04-29 18:27:20","http://silverstargalaxy.com.silverstartv.website/cmea/59975/Buy-Sell_Agreement_59975_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354211/","spamhaus"
 "354210","2020-04-29 18:27:12","http://cerradocredito.com.br/wp-content/uploads/2020/04/beazvgceu/65281/Buy-Sell_Agreement_65281_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354210/","spamhaus"
-"354209","2020-04-29 18:27:09","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/2423/Buy-Sell_Agreement_2423_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354209/","spamhaus"
+"354209","2020-04-29 18:27:09","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/2423/Buy-Sell_Agreement_2423_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354209/","spamhaus"
 "354208","2020-04-29 18:27:05","http://morruko.antesos.com/fqtylehpb/5609732/Buy-Sell_Agreement_5609732_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354208/","spamhaus"
-"354207","2020-04-29 18:26:12","http://demo13.dsdemosite.com/alugzfn/Buy-Sell_Agreement_55778_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354207/","spamhaus"
+"354207","2020-04-29 18:26:12","http://demo13.dsdemosite.com/alugzfn/Buy-Sell_Agreement_55778_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354207/","spamhaus"
 "354206","2020-04-29 18:26:07","http://dev.apshaps.se/sdub/Buy-Sell_Agreement_19540301_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354206/","spamhaus"
 "354205","2020-04-29 18:26:05","https://kamagra.in.rs/bqcbhf/Buy-Sell_Agreement_30255_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354205/","spamhaus"
 "354204","2020-04-29 18:23:14","http://104.244.79.235/ap/ad.arm6","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/354204/","zbetcheckin"
@@ -523,7 +910,7 @@
 "354187","2020-04-29 18:04:43","http://61.52.144.240:48330/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354187/","Gandylyan1"
 "354186","2020-04-29 18:04:39","http://114.235.202.95:53247/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354186/","Gandylyan1"
 "354185","2020-04-29 18:04:34","http://42.239.132.107:56562/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354185/","Gandylyan1"
-"354184","2020-04-29 18:04:31","http://59.55.253.105:43952/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354184/","Gandylyan1"
+"354184","2020-04-29 18:04:31","http://59.55.253.105:43952/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354184/","Gandylyan1"
 "354183","2020-04-29 18:04:25","http://111.42.66.8:53180/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354183/","Gandylyan1"
 "354182","2020-04-29 18:04:23","http://42.234.86.212:33472/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354182/","Gandylyan1"
 "354181","2020-04-29 18:04:19","http://211.137.225.101:41499/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354181/","Gandylyan1"
@@ -531,60 +918,60 @@
 "354179","2020-04-29 18:04:12","http://211.137.225.77:59159/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354179/","Gandylyan1"
 "354178","2020-04-29 18:04:04","http://115.61.2.125:45051/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354178/","Gandylyan1"
 "354177","2020-04-29 18:01:39","http://staging.popclusive.asia/okppdsnq/Buy-Sell_Agreement_5038_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354177/","spamhaus"
-"354176","2020-04-29 18:01:35","http://oskarnews.gazashare.com/pelsq/Buy-Sell_Agreement_25166746_04282020.zip","offline","malware_download","geofenced,zip","https://urlhaus.abuse.ch/url/354176/","anonymous"
-"354175","2020-04-29 18:01:32","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/Buy-Sell_Agreement_86169_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354175/","spamhaus"
-"354174","2020-04-29 17:53:50","http://oskarnews.gazashare.com/pelsq/3939567/Buy-Sell_Agreement_3939567_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354174/","spamhaus"
+"354176","2020-04-29 18:01:35","http://oskarnews.gazashare.com/pelsq/Buy-Sell_Agreement_25166746_04282020.zip","online","malware_download","geofenced,zip","https://urlhaus.abuse.ch/url/354176/","anonymous"
+"354175","2020-04-29 18:01:32","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/Buy-Sell_Agreement_86169_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354175/","spamhaus"
+"354174","2020-04-29 17:53:50","http://oskarnews.gazashare.com/pelsq/3939567/Buy-Sell_Agreement_3939567_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354174/","spamhaus"
 "354173","2020-04-29 17:53:15","http://jaservicioscontables.casteviajes.com/xekqbxkehlx/5699246/Buy-Sell_Agreement_5699246_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354173/","spamhaus"
 "354172","2020-04-29 17:52:40","https://kamagra.in.rs/bqcbhf/6078657/Buy-Sell_Agreement_6078657_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354172/","spamhaus"
 "354171","2020-04-29 17:52:05","https://www.francois-champion.com/lqkb/Buy-Sell_Agreement_04275750_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354171/","spamhaus"
-"354170","2020-04-29 17:51:33","http://dzapasigroup.usapglobal.org/pbnxnmc/Buy-Sell_Agreement_3442_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354170/","spamhaus"
-"354169","2020-04-29 17:40:31","http://demo13.dsdemosite.com/alugzfn/Buy-Sell_Agreement_5506_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354169/","spamhaus"
+"354170","2020-04-29 17:51:33","http://dzapasigroup.usapglobal.org/pbnxnmc/Buy-Sell_Agreement_3442_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354170/","spamhaus"
+"354169","2020-04-29 17:40:31","http://demo13.dsdemosite.com/alugzfn/Buy-Sell_Agreement_5506_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354169/","spamhaus"
 "354168","2020-04-29 17:40:12","http://10022020newfolder1002002231-service1002.space/raccon.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/354168/","vxvault"
 "354167","2020-04-29 17:40:05","http://jaservicioscontables.casteviajes.com/xekqbxkehlx/Buy-Sell_Agreement_6726834_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354167/","spamhaus"
 "354166","2020-04-29 17:39:07","http://oz.timeisletitgo.ru/520257778.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/354166/","vxvault"
-"354165","2020-04-29 17:39:05","http://Muanha.xyz/cfewahhzze/0471/Buy-Sell_Agreement_0471_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354165/","spamhaus"
+"354165","2020-04-29 17:39:05","http://Muanha.xyz/cfewahhzze/0471/Buy-Sell_Agreement_0471_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354165/","spamhaus"
 "354164","2020-04-29 17:38:58","http://37.49.226.209/bins/dvrbot.x86","offline","malware_download","32-bit,elf,x86-32","https://urlhaus.abuse.ch/url/354164/","geenensp"
 "354163","2020-04-29 17:38:56","http://Muanha.xyz/cfewahhzze/35555/Buy-Sell_Agreement_35555_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354163/","spamhaus"
 "354162","2020-04-29 17:38:40","http://www.cheriyilbuilders.com/herevryxugc/385904/Buy-Sell_Agreement_385904_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354162/","spamhaus"
 "354161","2020-04-29 17:38:37","https://rangebroadcasting.com/vfbc/810366/Buy-Sell_Agreement_810366_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354161/","spamhaus"
 "354160","2020-04-29 17:38:33","https://kamagra.in.rs/bqcbhf/Buy-Sell_Agreement_4147_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354160/","spamhaus"
-"354159","2020-04-29 17:38:22","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/Buy-Sell_Agreement_49553_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354159/","spamhaus"
-"354158","2020-04-29 17:38:15","http://Muanha.xyz/cfewahhzze/58145827/Buy-Sell_Agreement_58145827_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354158/","spamhaus"
+"354159","2020-04-29 17:38:22","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/Buy-Sell_Agreement_49553_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354159/","spamhaus"
+"354158","2020-04-29 17:38:15","http://Muanha.xyz/cfewahhzze/58145827/Buy-Sell_Agreement_58145827_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354158/","spamhaus"
 "354157","2020-04-29 17:38:05","http://silverstargalaxy.com.silverstartv.website/cmea/Buy-Sell_Agreement_78764087_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354157/","spamhaus"
 "354156","2020-04-29 17:36:07","https://paste.ee/r/JeFGE","offline","malware_download","AgentTesla,Encoded","https://urlhaus.abuse.ch/url/354156/","abuse_ch"
 "354155","2020-04-29 17:31:37","https://pastebin.com/raw/inw8g5S4","offline","malware_download","None","https://urlhaus.abuse.ch/url/354155/","JayTHL"
 "354154","2020-04-29 17:31:21","http://morruko.antesos.com/fqtylehpb/Buy-Sell_Agreement_190951_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354154/","spamhaus"
 "354153","2020-04-29 17:30:47","http://alexandredekerchove.com/ylwhbcphyy/31131/Buy-Sell_Agreement_31131_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354153/","spamhaus"
-"354152","2020-04-29 17:30:15","https://cryptoomarket.com/fhws/Buy-Sell_Agreement_93312692_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354152/","spamhaus"
+"354152","2020-04-29 17:30:15","https://cryptoomarket.com/fhws/Buy-Sell_Agreement_93312692_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354152/","spamhaus"
 "354151","2020-04-29 17:29:42","https://www.francois-champion.com/lqkb/Buy-Sell_Agreement_0164_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354151/","spamhaus"
 "354150","2020-04-29 17:29:08","https://kamagra.in.rs/bqcbhf/Buy-Sell_Agreement_1529275_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354150/","spamhaus"
 "354149","2020-04-29 17:28:34","http://dzapasigroup.usapglobal.org/pbnxnmc/Buy-Sell_Agreement_99863546_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354149/","spamhaus"
 "354148","2020-04-29 17:25:34","https://pastebin.com/raw/PfYbwYfs","offline","malware_download","PowerShellEmpire","https://urlhaus.abuse.ch/url/354148/","viql"
-"354147","2020-04-29 17:18:29","https://cryptoomarket.com/fhws/65989452/Buy-Sell_Agreement_65989452_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354147/","spamhaus"
-"354146","2020-04-29 17:18:21","http://oskarnews.gazashare.com/pelsq/54479416/Buy-Sell_Agreement_54479416_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354146/","spamhaus"
+"354147","2020-04-29 17:18:29","https://cryptoomarket.com/fhws/65989452/Buy-Sell_Agreement_65989452_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354147/","spamhaus"
+"354146","2020-04-29 17:18:21","http://oskarnews.gazashare.com/pelsq/54479416/Buy-Sell_Agreement_54479416_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354146/","spamhaus"
 "354145","2020-04-29 17:18:11","http://sunboom-gift.com/zwbaxf/Buy-Sell_Agreement_855948_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354145/","spamhaus"
-"354144","2020-04-29 17:18:05","https://cryptoomarket.com/fhws/7289616/Buy-Sell_Agreement_7289616_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354144/","spamhaus"
+"354144","2020-04-29 17:18:05","https://cryptoomarket.com/fhws/7289616/Buy-Sell_Agreement_7289616_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354144/","spamhaus"
 "354143","2020-04-29 17:17:54","http://cheriyilbuilders.com/ixwqumcq/238380/Buy-Sell_Agreement_238380_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354143/","spamhaus"
 "354142","2020-04-29 17:17:42","https://rangebroadcasting.com/vfbc/Buy-Sell_Agreement_7507_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354142/","spamhaus"
 "354141","2020-04-29 17:17:35","http://jessymart.flexyhub.com/ssuzzix/Buy-Sell_Agreement_54933_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354141/","spamhaus"
-"354140","2020-04-29 17:17:24","http://demo13.dsdemosite.com/alugzfn/Buy-Sell_Agreement_0761_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354140/","spamhaus"
+"354140","2020-04-29 17:17:24","http://demo13.dsdemosite.com/alugzfn/Buy-Sell_Agreement_0761_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354140/","spamhaus"
 "354139","2020-04-29 17:17:14","http://www.cheriyilbuilders.com/herevryxugc/Buy-Sell_Agreement_203749_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354139/","spamhaus"
 "354138","2020-04-29 17:15:08","https://pastebin.com/raw/yjQwfwLu","offline","malware_download","None","https://urlhaus.abuse.ch/url/354138/","JayTHL"
 "354137","2020-04-29 17:15:03","https://pastebin.com/raw/Tps40B96","offline","malware_download","None","https://urlhaus.abuse.ch/url/354137/","JayTHL"
 "354136","2020-04-29 17:08:00","https://rangebroadcasting.com/vfbc/Buy-Sell_Agreement_62115_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354136/","spamhaus"
 "354135","2020-04-29 17:07:51","http://jaservicioscontables.casteviajes.com/xekqbxkehlx/Buy-Sell_Agreement_8464289_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354135/","spamhaus"
 "354134","2020-04-29 17:07:48","http://denunciesoftwareilegal.org.br/wp-content/plugins/apikey/bfgvnffqfo/389730/Buy-Sell_Agreement_389730_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354134/","spamhaus"
-"354133","2020-04-29 17:07:47","http://oralloy.com/xyqkbu/Buy-Sell_Agreement_339039_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354133/","spamhaus"
+"354133","2020-04-29 17:07:47","http://oralloy.com/xyqkbu/Buy-Sell_Agreement_339039_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354133/","spamhaus"
 "354132","2020-04-29 17:07:44","http://alexandredekerchove.com/ylwhbcphyy/Buy-Sell_Agreement_26691471_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354132/","spamhaus"
 "354131","2020-04-29 17:07:41","http://NCERTSOLUTIONACADEMY.COM/yghks/Buy-Sell_Agreement_391544_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354131/","spamhaus"
 "354130","2020-04-29 17:07:39","http://sunboom-gift.com/zwbaxf/7360/Buy-Sell_Agreement_7360_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354130/","spamhaus"
 "354129","2020-04-29 17:07:34","http://cheriyilbuilders.com/ixwqumcq/Buy-Sell_Agreement_54247895_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354129/","spamhaus"
-"354128","2020-04-29 17:07:24","http://oskarnews.gazashare.com/pelsq/21205/Buy-Sell_Agreement_21205_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354128/","spamhaus"
+"354128","2020-04-29 17:07:24","http://oskarnews.gazashare.com/pelsq/21205/Buy-Sell_Agreement_21205_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354128/","spamhaus"
 "354127","2020-04-29 17:07:19","http://denunciesoftwareilegal.org.br/wp-content/plugins/apikey/bfgvnffqfo/Buy-Sell_Agreement_8325_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354127/","spamhaus"
-"354126","2020-04-29 17:07:15","http://duongfpt.ga/lxgqgox/Buy-Sell_Agreement_8606_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354126/","spamhaus"
-"354125","2020-04-29 17:07:10","http://jessymart.flexyhub.com/ssuzzix/Buy-Sell_Agreement_32854692_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354125/","spamhaus"
+"354126","2020-04-29 17:07:15","http://duongfpt.ga/lxgqgox/Buy-Sell_Agreement_8606_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354126/","spamhaus"
+"354125","2020-04-29 17:07:10","http://jessymart.flexyhub.com/ssuzzix/Buy-Sell_Agreement_32854692_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354125/","spamhaus"
 "354124","2020-04-29 17:07:05","https://aelogica.com/zznohyxa/Buy-Sell_Agreement_56786568_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354124/","spamhaus"
-"354123","2020-04-29 17:06:14","https://drive.google.com/uc?export=download&id=1Q2PX2OM5w6WFMrF_5lIhxBuqpcaxfjtr","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/354123/","lovemalware"
+"354123","2020-04-29 17:06:14","https://drive.google.com/uc?export=download&id=1Q2PX2OM5w6WFMrF_5lIhxBuqpcaxfjtr","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/354123/","lovemalware"
 "354122","2020-04-29 17:06:04","https://onedrive.live.com/download?cid=3112E77688F09693&resid=3112E77688F09693%21320&authkey=AOOUjzuf408Dclw","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/354122/","lovemalware"
 "354121","2020-04-29 17:02:26","http://2.56.240.32/bins/Hilix.x86","offline","malware_download","None","https://urlhaus.abuse.ch/url/354121/","JayTHL"
 "354120","2020-04-29 17:02:24","http://2.56.240.32/bins/Hilix.spc","offline","malware_download","None","https://urlhaus.abuse.ch/url/354120/","JayTHL"
@@ -601,16 +988,16 @@
 "354109","2020-04-29 16:47:15","http://cheriyilbuilders.com/ixwqumcq/Buy-Sell_Agreement_660298_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354109/","spamhaus"
 "354108","2020-04-29 16:47:11","http://cheriyilbuilders.com/ixwqumcq/Buy-Sell_Agreement_07288_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354108/","spamhaus"
 "354107","2020-04-29 16:47:08","http://jaservicioscontables.casteviajes.com/xekqbxkehlx/4546012/Buy-Sell_Agreement_4546012_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354107/","spamhaus"
-"354106","2020-04-29 16:47:06","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/4852/Buy-Sell_Agreement_4852_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354106/","spamhaus"
+"354106","2020-04-29 16:47:06","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/4852/Buy-Sell_Agreement_4852_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354106/","spamhaus"
 "354105","2020-04-29 16:39:14","http://demo13.dsdemosite.com/alugzfn/Buy-Sell_Agreement_5945315_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354105/","spamhaus"
-"354104","2020-04-29 16:39:05","http://dzapasigroup.usapglobal.org/pbnxnmc/48527452/Buy-Sell_Agreement_48527452_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354104/","spamhaus"
+"354104","2020-04-29 16:39:05","http://dzapasigroup.usapglobal.org/pbnxnmc/48527452/Buy-Sell_Agreement_48527452_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354104/","spamhaus"
 "354103","2020-04-29 16:33:35","http://britica.vn/dqsfv/1457750/Buy-Sell_Agreement_1457750_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354103/","spamhaus"
 "354102","2020-04-29 16:33:27","https://aelogica.com/zznohyxa/Buy-Sell_Agreement_2316516_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354102/","spamhaus"
-"354101","2020-04-29 16:33:24","https://cryptoomarket.com/fhws/Buy-Sell_Agreement_01796037_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354101/","spamhaus"
+"354101","2020-04-29 16:33:24","https://cryptoomarket.com/fhws/Buy-Sell_Agreement_01796037_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354101/","spamhaus"
 "354100","2020-04-29 16:33:19","https://rangebroadcasting.com/vfbc/Buy-Sell_Agreement_6246_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354100/","spamhaus"
-"354099","2020-04-29 16:33:14","http://Muanha.xyz/cfewahhzze/Buy-Sell_Agreement_6877_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354099/","spamhaus"
+"354099","2020-04-29 16:33:14","http://Muanha.xyz/cfewahhzze/Buy-Sell_Agreement_6877_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354099/","spamhaus"
 "354098","2020-04-29 16:33:10","https://rangebroadcasting.com/vfbc/0127/Buy-Sell_Agreement_0127_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354098/","spamhaus"
-"354097","2020-04-29 16:33:05","https://vip.recommendedtoyoo.com/bdhycmsxctp/73579/Buy-Sell_Agreement_73579_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354097/","spamhaus"
+"354097","2020-04-29 16:33:05","https://vip.recommendedtoyoo.com/bdhycmsxctp/73579/Buy-Sell_Agreement_73579_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354097/","spamhaus"
 "354096","2020-04-29 16:32:02","http://www.cheriyilbuilders.com/herevryxugc/Buy-Sell_Agreement_39432145_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354096/","spamhaus"
 "354095","2020-04-29 16:31:58","http://81.196.213.134:6632/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/354095/","geenensp"
 "354094","2020-04-29 16:31:51","https://rangebroadcasting.com/vfbc/Buy-Sell_Agreement_7898_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354094/","spamhaus"
@@ -619,20 +1006,20 @@
 "354091","2020-04-29 16:31:31","http://cerradocredito.com.br/wp-content/uploads/2020/04/beazvgceu/5241/Buy-Sell_Agreement_5241_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354091/","spamhaus"
 "354090","2020-04-29 16:31:29","https://www.francois-champion.com/lqkb/Buy-Sell_Agreement_89308_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354090/","spamhaus"
 "354089","2020-04-29 16:31:14","http://bolescy.com/otue/Buy-Sell_Agreement_9693732_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354089/","spamhaus"
-"354088","2020-04-29 16:30:41","http://dzapasigroup.usapglobal.org/pbnxnmc/3543/Buy-Sell_Agreement_3543_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354088/","spamhaus"
+"354088","2020-04-29 16:30:41","http://dzapasigroup.usapglobal.org/pbnxnmc/3543/Buy-Sell_Agreement_3543_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354088/","spamhaus"
 "354087","2020-04-29 16:30:07","http://drinkopolykopen.nl/wp-content/uploads/2020/04/nnpebk/62008/Buy-Sell_Agreement_62008_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354087/","spamhaus"
 "354086","2020-04-29 16:29:05","http://promassager.ga/yltkoe/109475/Buy-Sell_Agreement_109475_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354086/","spamhaus"
-"354085","2020-04-29 16:28:32","http://oskarnews.gazashare.com/pelsq/Buy-Sell_Agreement_4478060_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354085/","spamhaus"
-"354084","2020-04-29 16:27:57","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/899516/Buy-Sell_Agreement_899516_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354084/","spamhaus"
+"354085","2020-04-29 16:28:32","http://oskarnews.gazashare.com/pelsq/Buy-Sell_Agreement_4478060_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354085/","spamhaus"
+"354084","2020-04-29 16:27:57","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/899516/Buy-Sell_Agreement_899516_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354084/","spamhaus"
 "354083","2020-04-29 16:27:25","http://jaservicioscontables.casteviajes.com/xekqbxkehlx/Buy-Sell_Agreement_874829_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354083/","spamhaus"
 "354082","2020-04-29 16:26:51","http://promassager.ga/yltkoe/65758864/Buy-Sell_Agreement_65758864_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354082/","spamhaus"
-"354081","2020-04-29 16:25:47","http://virustreatments.empeeevents.com/eyyudu/Buy-Sell_Agreement_3493806_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354081/","spamhaus"
+"354081","2020-04-29 16:25:47","http://virustreatments.empeeevents.com/eyyudu/Buy-Sell_Agreement_3493806_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354081/","spamhaus"
 "354080","2020-04-29 16:25:12","http://denunciesoftwareilegal.org.br/wp-content/plugins/apikey/bfgvnffqfo/Buy-Sell_Agreement_19864_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354080/","spamhaus"
 "354079","2020-04-29 16:25:11","http://alexandredekerchove.com/ylwhbcphyy/Buy-Sell_Agreement_23494_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354079/","spamhaus"
 "354078","2020-04-29 16:24:38","http://silverstargalaxy.com.silverstartv.website/cmea/94603139/Buy-Sell_Agreement_94603139_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354078/","spamhaus"
 "354077","2020-04-29 16:22:37","https://mylocalfoodie.com.au/wp-content/smiles/smileycrypt.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354077/","zbetcheckin"
 "354076","2020-04-29 15:54:09","http://bolescy.com/otue/24384257/Buy-Sell_Agreement_24384257_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354076/","spamhaus"
-"354075","2020-04-29 15:53:35","http://oralloy.com/xyqkbu/61120196/Buy-Sell_Agreement_61120196_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354075/","spamhaus"
+"354075","2020-04-29 15:53:35","http://oralloy.com/xyqkbu/61120196/Buy-Sell_Agreement_61120196_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354075/","spamhaus"
 "354074","2020-04-29 15:53:02","http://104.244.79.235/xb.sh","offline","malware_download","script","https://urlhaus.abuse.ch/url/354074/","geenensp"
 "354073","2020-04-29 15:52:10","http://bolescy.com/otue/Buy-Sell_Agreement_50990_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354073/","spamhaus"
 "354072","2020-04-29 15:51:37","http://104.244.79.235/ap/ad.x86","offline","malware_download","32-bit,elf,x86-32","https://urlhaus.abuse.ch/url/354072/","geenensp"
@@ -640,83 +1027,83 @@
 "354070","2020-04-29 15:49:03","https://pastebin.com/raw/srdmMBmH","offline","malware_download","None","https://urlhaus.abuse.ch/url/354070/","JayTHL"
 "354069","2020-04-29 15:46:18","https://pastebin.com/raw/2QygLNc6","offline","malware_download","PowerShellEmpire","https://urlhaus.abuse.ch/url/354069/","viql"
 "354068","2020-04-29 15:46:13","https://vip.recommendedtoyoo.com/bdhycmsxctp/9086/Buy-Sell_Agreement_9086_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354068/","spamhaus"
-"354067","2020-04-29 15:45:43","http://Muanha.xyz/cfewahhzze/477754/Buy-Sell_Agreement_477754_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354067/","spamhaus"
+"354067","2020-04-29 15:45:43","http://Muanha.xyz/cfewahhzze/477754/Buy-Sell_Agreement_477754_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354067/","spamhaus"
 "354066","2020-04-29 15:45:16","http://denunciesoftwareilegal.org.br/wp-content/plugins/apikey/bfgvnffqfo/781385/Buy-Sell_Agreement_781385_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354066/","spamhaus"
-"354065","2020-04-29 15:45:14","http://dzapasigroup.usapglobal.org/pbnxnmc/Buy-Sell_Agreement_08808_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354065/","spamhaus"
-"354064","2020-04-29 15:42:10","https://vip.recommendedtoyoo.com/bdhycmsxctp/86207/Buy-Sell_Agreement_86207_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354064/","spamhaus"
+"354065","2020-04-29 15:45:14","http://dzapasigroup.usapglobal.org/pbnxnmc/Buy-Sell_Agreement_08808_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354065/","spamhaus"
+"354064","2020-04-29 15:42:10","https://vip.recommendedtoyoo.com/bdhycmsxctp/86207/Buy-Sell_Agreement_86207_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354064/","spamhaus"
 "354063","2020-04-29 15:41:34","http://silverstargalaxy.com.silverstartv.website/cmea/849715/Buy-Sell_Agreement_849715_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354063/","spamhaus"
-"354062","2020-04-29 15:41:30","http://jessymart.flexyhub.com/ssuzzix/Buy-Sell_Agreement_038711_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354062/","spamhaus"
+"354062","2020-04-29 15:41:30","http://jessymart.flexyhub.com/ssuzzix/Buy-Sell_Agreement_038711_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354062/","spamhaus"
 "354061","2020-04-29 15:41:21","http://sunboom-gift.com/zwbaxf/Buy-Sell_Agreement_2743_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354061/","spamhaus"
 "354060","2020-04-29 15:41:15","https://vip.recommendedtoyoo.com/bdhycmsxctp/52854184/Buy-Sell_Agreement_52854184_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354060/","spamhaus"
 "354059","2020-04-29 15:40:10","http://morruko.antesos.com/fqtylehpb/25242/Buy-Sell_Agreement_25242_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354059/","spamhaus"
-"354058","2020-04-29 15:40:05","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/41357844/Buy-Sell_Agreement_41357844_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354058/","spamhaus"
+"354058","2020-04-29 15:40:05","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/41357844/Buy-Sell_Agreement_41357844_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354058/","spamhaus"
 "354057","2020-04-29 15:39:59","http://denunciesoftwareilegal.org.br/wp-content/plugins/apikey/bfgvnffqfo/77655/Buy-Sell_Agreement_77655_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354057/","spamhaus"
 "354056","2020-04-29 15:39:56","http://bolescy.com/otue/108897/Buy-Sell_Agreement_108897_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354056/","spamhaus"
 "354055","2020-04-29 15:39:53","https://aelogica.com/zznohyxa/Buy-Sell_Agreement_5514688_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354055/","spamhaus"
-"354054","2020-04-29 15:39:49","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/4194555/Buy-Sell_Agreement_4194555_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354054/","spamhaus"
+"354054","2020-04-29 15:39:49","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/4194555/Buy-Sell_Agreement_4194555_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354054/","spamhaus"
 "354053","2020-04-29 15:39:43","http://jaservicioscontables.casteviajes.com/xekqbxkehlx/Buy-Sell_Agreement_9764_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354053/","spamhaus"
 "354052","2020-04-29 15:39:29","https://aelogica.com/zznohyxa/Buy-Sell_Agreement_346856_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354052/","spamhaus"
-"354051","2020-04-29 15:39:27","http://ade.topepics.com/pkthdrgdb/4779/Buy-Sell_Agreement_4779_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354051/","spamhaus"
-"354050","2020-04-29 15:39:09","https://aelogica.com/zznohyxa/Buy-Sell_Agreement_3880170_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354050/","spamhaus"
+"354051","2020-04-29 15:39:27","http://ade.topepics.com/pkthdrgdb/4779/Buy-Sell_Agreement_4779_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354051/","spamhaus"
+"354050","2020-04-29 15:39:09","https://aelogica.com/zznohyxa/Buy-Sell_Agreement_3880170_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354050/","spamhaus"
 "354049","2020-04-29 15:39:04","https://kamagra.in.rs/bqcbhf/Buy-Sell_Agreement_85540671_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354049/","spamhaus"
 "354048","2020-04-29 15:35:07","http://187.63.19.112:14930/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/354048/","zbetcheckin"
 "354047","2020-04-29 15:23:18","http://promassager.ga/yltkoe/Buy-Sell_Agreement_6338_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354047/","spamhaus"
 "354046","2020-04-29 15:23:15","https://www.francois-champion.com/lqkb/Buy-Sell_Agreement_2699724_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354046/","spamhaus"
 "354045","2020-04-29 15:23:12","https://bluecollarfinancial.net/gfmixt/65655/Buy-Sell_Agreement_65655_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354045/","spamhaus"
-"354044","2020-04-29 15:23:07","http://dzapasigroup.usapglobal.org/pbnxnmc/Buy-Sell_Agreement_81231200_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354044/","spamhaus"
+"354044","2020-04-29 15:23:07","http://dzapasigroup.usapglobal.org/pbnxnmc/Buy-Sell_Agreement_81231200_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354044/","spamhaus"
 "354043","2020-04-29 15:23:03","http://sunboom-gift.com/zwbaxf/Buy-Sell_Agreement_879481_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354043/","spamhaus"
 "354042","2020-04-29 15:22:55","http://morruko.antesos.com/fqtylehpb/Buy-Sell_Agreement_48424_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354042/","spamhaus"
-"354041","2020-04-29 15:22:52","http://oskarnews.gazashare.com/pelsq/00582/Buy-Sell_Agreement_00582_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354041/","spamhaus"
+"354041","2020-04-29 15:22:52","http://oskarnews.gazashare.com/pelsq/00582/Buy-Sell_Agreement_00582_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354041/","spamhaus"
 "354040","2020-04-29 15:22:47","https://bluecollarfinancial.net/gfmixt/Buy-Sell_Agreement_0010_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354040/","spamhaus"
 "354039","2020-04-29 15:22:43","http://dzapasigroup.usapglobal.org/pbnxnmc/3054/Buy-Sell_Agreement_3054_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354039/","spamhaus"
 "354038","2020-04-29 15:22:40","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/Buy-Sell_Agreement_647741_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354038/","spamhaus"
-"354037","2020-04-29 15:22:37","http://duongfpt.ga/lxgqgox/Buy-Sell_Agreement_4191_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354037/","spamhaus"
-"354036","2020-04-29 15:22:29","http://virustreatments.empeeevents.com/eyyudu/6941/Buy-Sell_Agreement_6941_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354036/","spamhaus"
-"354035","2020-04-29 15:22:24","http://jessymart.flexyhub.com/ssuzzix/8889210/Buy-Sell_Agreement_8889210_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354035/","spamhaus"
+"354037","2020-04-29 15:22:37","http://duongfpt.ga/lxgqgox/Buy-Sell_Agreement_4191_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354037/","spamhaus"
+"354036","2020-04-29 15:22:29","http://virustreatments.empeeevents.com/eyyudu/6941/Buy-Sell_Agreement_6941_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354036/","spamhaus"
+"354035","2020-04-29 15:22:24","http://jessymart.flexyhub.com/ssuzzix/8889210/Buy-Sell_Agreement_8889210_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354035/","spamhaus"
 "354034","2020-04-29 15:22:20","http://www.cheriyilbuilders.com/herevryxugc/Buy-Sell_Agreement_80209884_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354034/","spamhaus"
 "354033","2020-04-29 15:22:16","http://alexandredekerchove.com/ylwhbcphyy/Buy-Sell_Agreement_6091790_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354033/","spamhaus"
 "354032","2020-04-29 15:22:13","http://promassager.ga/yltkoe/Buy-Sell_Agreement_207769_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354032/","spamhaus"
 "354031","2020-04-29 15:22:10","http://denunciesoftwareilegal.org.br/wp-content/plugins/apikey/bfgvnffqfo/19041295/Buy-Sell_Agreement_19041295_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354031/","spamhaus"
 "354030","2020-04-29 15:22:08","https://kamagra.in.rs/bqcbhf/Buy-Sell_Agreement_8082_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354030/","spamhaus"
-"354029","2020-04-29 15:22:03","http://jessymart.flexyhub.com/ssuzzix/0314864/Buy-Sell_Agreement_0314864_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354029/","spamhaus"
+"354029","2020-04-29 15:22:03","http://jessymart.flexyhub.com/ssuzzix/0314864/Buy-Sell_Agreement_0314864_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354029/","spamhaus"
 "354028","2020-04-29 15:21:15","http://NCERTSOLUTIONACADEMY.COM/yghks/Buy-Sell_Agreement_329681_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354028/","spamhaus"
 "354027","2020-04-29 15:21:13","http://denunciesoftwareilegal.org.br/wp-content/plugins/apikey/bfgvnffqfo/Buy-Sell_Agreement_4038071_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354027/","spamhaus"
-"354026","2020-04-29 15:21:10","http://dzapasigroup.usapglobal.org/pbnxnmc/80499641/Buy-Sell_Agreement_80499641_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354026/","spamhaus"
+"354026","2020-04-29 15:21:10","http://dzapasigroup.usapglobal.org/pbnxnmc/80499641/Buy-Sell_Agreement_80499641_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354026/","spamhaus"
 "354025","2020-04-29 15:17:04","http://104.168.198.194/mipsel","online","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/354025/","Gandylyan1"
 "354024","2020-04-29 15:15:06","https://taxukrebates.com/","offline","malware_download","phishing","https://urlhaus.abuse.ch/url/354024/","anonymous"
-"354023","2020-04-29 15:08:07","https://vip.recommendedtoyoo.com/bdhycmsxctp/Buy-Sell_Agreement_1571_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354023/","spamhaus"
+"354023","2020-04-29 15:08:07","https://vip.recommendedtoyoo.com/bdhycmsxctp/Buy-Sell_Agreement_1571_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354023/","spamhaus"
 "354022","2020-04-29 15:07:35","http://alexandredekerchove.com/ylwhbcphyy/71191/Buy-Sell_Agreement_71191_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354022/","spamhaus"
 "354021","2020-04-29 15:07:33","http://silverstargalaxy.com.silverstartv.website/cmea/2003/Buy-Sell_Agreement_2003_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354021/","spamhaus"
-"354020","2020-04-29 15:07:31","http://Muanha.xyz/cfewahhzze/Buy-Sell_Agreement_3250669_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354020/","spamhaus"
+"354020","2020-04-29 15:07:31","http://Muanha.xyz/cfewahhzze/Buy-Sell_Agreement_3250669_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354020/","spamhaus"
 "354019","2020-04-29 15:07:29","http://promassager.ga/yltkoe/Buy-Sell_Agreement_54318729_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354019/","spamhaus"
 "354018","2020-04-29 15:07:26","http://cheriyilbuilders.com/ixwqumcq/Buy-Sell_Agreement_319226_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354018/","spamhaus"
 "354017","2020-04-29 15:07:23","https://cryptoomarket.com/fhws/3204949/Buy-Sell_Agreement_3204949_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354017/","spamhaus"
-"354016","2020-04-29 15:07:20","http://oralloy.com/xyqkbu/49290/Buy-Sell_Agreement_49290_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354016/","spamhaus"
+"354016","2020-04-29 15:07:20","http://oralloy.com/xyqkbu/49290/Buy-Sell_Agreement_49290_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354016/","spamhaus"
 "354015","2020-04-29 15:07:17","http://jaservicioscontables.casteviajes.com/xekqbxkehlx/Buy-Sell_Agreement_38489451_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354015/","spamhaus"
 "354014","2020-04-29 15:07:13","https://rangebroadcasting.com/vfbc/130632/Buy-Sell_Agreement_130632_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354014/","spamhaus"
 "354013","2020-04-29 15:07:05","http://koravit.zaeteaw.net/okmqhrfdsvj/Buy-Sell_Agreement_50369_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354013/","spamhaus"
-"354012","2020-04-29 15:06:16","http://222.138.181.140:52260/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354012/","Gandylyan1"
+"354012","2020-04-29 15:06:16","http://222.138.181.140:52260/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354012/","Gandylyan1"
 "354011","2020-04-29 15:06:11","http://112.122.61.250:35738/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354011/","Gandylyan1"
-"354010","2020-04-29 15:06:07","http://49.89.228.167:53241/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354010/","Gandylyan1"
+"354010","2020-04-29 15:06:07","http://49.89.228.167:53241/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354010/","Gandylyan1"
 "354009","2020-04-29 15:05:59","http://111.43.223.59:49442/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354009/","Gandylyan1"
 "354008","2020-04-29 15:05:56","http://115.56.119.6:43509/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354008/","Gandylyan1"
 "354007","2020-04-29 15:05:24","http://92.41.46.206:2742/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354007/","Gandylyan1"
 "354006","2020-04-29 15:05:19","http://80.92.189.70:33394/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354006/","Gandylyan1"
 "354005","2020-04-29 15:04:47","http://110.155.51.173:55647/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354005/","Gandylyan1"
 "354004","2020-04-29 15:04:34","http://199.83.207.230:43122/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354004/","Gandylyan1"
-"354003","2020-04-29 15:04:28","http://176.113.161.66:54004/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354003/","Gandylyan1"
+"354003","2020-04-29 15:04:28","http://176.113.161.66:54004/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354003/","Gandylyan1"
 "354002","2020-04-29 15:04:26","http://199.83.203.174:55619/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354002/","Gandylyan1"
 "354001","2020-04-29 15:04:22","http://182.126.101.85:37433/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354001/","Gandylyan1"
 "354000","2020-04-29 15:04:19","http://123.10.20.166:36895/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354000/","Gandylyan1"
 "353999","2020-04-29 15:04:15","http://125.113.66.85:33978/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/353999/","Gandylyan1"
 "353998","2020-04-29 15:04:10","http://42.239.168.235:55153/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/353998/","Gandylyan1"
-"353997","2020-04-29 15:03:08","https://vip.recommendedtoyoo.com/bdhycmsxctp/Buy-Sell_Agreement_952550_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353997/","spamhaus"
-"353996","2020-04-29 15:03:03","https://vip.recommendedtoyoo.com/bdhycmsxctp/Buy-Sell_Agreement_130494_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353996/","spamhaus"
+"353997","2020-04-29 15:03:08","https://vip.recommendedtoyoo.com/bdhycmsxctp/Buy-Sell_Agreement_952550_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353997/","spamhaus"
+"353996","2020-04-29 15:03:03","https://vip.recommendedtoyoo.com/bdhycmsxctp/Buy-Sell_Agreement_130494_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353996/","spamhaus"
 "353995","2020-04-29 15:02:51","http://drinkopolykopen.nl/wp-content/uploads/2020/04/nnpebk/Buy-Sell_Agreement_831344_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353995/","spamhaus"
 "353994","2020-04-29 15:02:49","http://cheriyilbuilders.com/ixwqumcq/5765074/Buy-Sell_Agreement_5765074_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353994/","spamhaus"
 "353993","2020-04-29 15:02:46","http://www.cheriyilbuilders.com/herevryxugc/Buy-Sell_Agreement_232663_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353993/","spamhaus"
 "353992","2020-04-29 15:02:33","http://koravit.zaeteaw.net/okmqhrfdsvj/Buy-Sell_Agreement_0150293_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353992/","spamhaus"
-"353991","2020-04-29 15:02:29","http://oralloy.com/xyqkbu/Buy-Sell_Agreement_86031_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353991/","spamhaus"
+"353991","2020-04-29 15:02:29","http://oralloy.com/xyqkbu/Buy-Sell_Agreement_86031_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353991/","spamhaus"
 "353990","2020-04-29 15:02:10","http://alexandredekerchove.com/ylwhbcphyy/54335544/Buy-Sell_Agreement_54335544_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353990/","spamhaus"
 "353989","2020-04-29 15:02:06","https://rangebroadcasting.com/vfbc/Buy-Sell_Agreement_9106293_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353989/","spamhaus"
 "353988","2020-04-29 15:01:53","http://dev.apshaps.se/sdub/3757/Buy-Sell_Agreement_3757_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353988/","spamhaus"
@@ -726,28 +1113,28 @@
 "353984","2020-04-29 14:54:23","https://www.francois-champion.com/lqkb/Buy-Sell_Agreement_560194_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353984/","spamhaus"
 "353983","2020-04-29 14:54:17","http://NCERTSOLUTIONACADEMY.COM/yghks/2597807/Buy-Sell_Agreement_2597807_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353983/","spamhaus"
 "353982","2020-04-29 14:54:15","http://sunboom-gift.com/zwbaxf/14663643/Buy-Sell_Agreement_14663643_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353982/","spamhaus"
-"353981","2020-04-29 14:54:09","http://Muanha.xyz/cfewahhzze/3497/Buy-Sell_Agreement_3497_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353981/","spamhaus"
+"353981","2020-04-29 14:54:09","http://Muanha.xyz/cfewahhzze/3497/Buy-Sell_Agreement_3497_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353981/","spamhaus"
 "353980","2020-04-29 14:54:07","https://rangebroadcasting.com/vfbc/Buy-Sell_Agreement_47414_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353980/","spamhaus"
 "353979","2020-04-29 14:50:49","http://arianegerkens.com/ujfnohl/22222.png","offline","malware_download","Qakbot,qbot,Quakbot","https://urlhaus.abuse.ch/url/353979/","notwhickey"
 "353978","2020-04-29 14:50:37","http://sunboom-gift.com/zwbaxf/08853/Buy-Sell_Agreement_08853_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353978/","spamhaus"
-"353977","2020-04-29 14:50:31","http://dzapasigroup.usapglobal.org/pbnxnmc/Buy-Sell_Agreement_5316_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353977/","spamhaus"
+"353977","2020-04-29 14:50:31","http://dzapasigroup.usapglobal.org/pbnxnmc/Buy-Sell_Agreement_5316_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353977/","spamhaus"
 "353976","2020-04-29 14:50:29","http://morruko.antesos.com/fqtylehpb/Buy-Sell_Agreement_7626737_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353976/","spamhaus"
-"353975","2020-04-29 14:50:16","http://demo13.dsdemosite.com/alugzfn/Buy-Sell_Agreement_5465012_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353975/","spamhaus"
+"353975","2020-04-29 14:50:16","http://demo13.dsdemosite.com/alugzfn/Buy-Sell_Agreement_5465012_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353975/","spamhaus"
 "353974","2020-04-29 14:50:09","https://bluecollarfinancial.net/gfmixt/Buy-Sell_Agreement_8000484_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353974/","spamhaus"
 "353973","2020-04-29 14:50:04","https://aelogica.com/zznohyxa/8295/Buy-Sell_Agreement_8295_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353973/","spamhaus"
-"353972","2020-04-29 14:46:25","http://staging.popclusive.asia/okppdsnq/00827/Buy-Sell_Agreement_00827_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353972/","spamhaus"
-"353971","2020-04-29 14:46:18","http://jessymart.flexyhub.com/ssuzzix/Buy-Sell_Agreement_4896_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353971/","spamhaus"
+"353972","2020-04-29 14:46:25","http://staging.popclusive.asia/okppdsnq/00827/Buy-Sell_Agreement_00827_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353972/","spamhaus"
+"353971","2020-04-29 14:46:18","http://jessymart.flexyhub.com/ssuzzix/Buy-Sell_Agreement_4896_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353971/","spamhaus"
 "353970","2020-04-29 14:46:13","http://dev.apshaps.se/sdub/Buy-Sell_Agreement_443872_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353970/","spamhaus"
-"353969","2020-04-29 14:46:11","https://vip.recommendedtoyoo.com/bdhycmsxctp/70840/Buy-Sell_Agreement_70840_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353969/","spamhaus"
-"353968","2020-04-29 14:45:43","http://virustreatments.empeeevents.com/eyyudu/Buy-Sell_Agreement_7595546_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353968/","spamhaus"
-"353967","2020-04-29 14:45:37","http://jessymart.flexyhub.com/ssuzzix/5876060/Buy-Sell_Agreement_5876060_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353967/","spamhaus"
+"353969","2020-04-29 14:46:11","https://vip.recommendedtoyoo.com/bdhycmsxctp/70840/Buy-Sell_Agreement_70840_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353969/","spamhaus"
+"353968","2020-04-29 14:45:43","http://virustreatments.empeeevents.com/eyyudu/Buy-Sell_Agreement_7595546_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353968/","spamhaus"
+"353967","2020-04-29 14:45:37","http://jessymart.flexyhub.com/ssuzzix/5876060/Buy-Sell_Agreement_5876060_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353967/","spamhaus"
 "353966","2020-04-29 14:45:34","https://aelogica.com/zznohyxa/94346/Buy-Sell_Agreement_94346_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353966/","spamhaus"
 "353965","2020-04-29 14:45:23","http://cheriyilbuilders.com/ixwqumcq/99014435/Buy-Sell_Agreement_99014435_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353965/","spamhaus"
 "353964","2020-04-29 14:45:19","http://promassager.ga/yltkoe/7587410/Buy-Sell_Agreement_7587410_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353964/","spamhaus"
 "353963","2020-04-29 14:45:07","http://daricci.de/wp-content/uploads/2020/04/owkf/22222.png","offline","malware_download","exe,Qakbot,spx108","https://urlhaus.abuse.ch/url/353963/","lazyactivist192"
 "353962","2020-04-29 14:43:50","http://cerisiers.be/fczjua/22222.png","offline","malware_download","exe,Qakbot,spx108","https://urlhaus.abuse.ch/url/353962/","lazyactivist192"
 "353961","2020-04-29 14:43:39","http://silverstargalaxy.com.silverstartv.website/cmea/Buy-Sell_Agreement_1028_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353961/","spamhaus"
-"353960","2020-04-29 14:43:37","http://jaservicioscontables.casteviajes.com/xekqbxkehlx/Buy-Sell_Agreement_191700_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353960/","spamhaus"
+"353960","2020-04-29 14:43:37","http://jaservicioscontables.casteviajes.com/xekqbxkehlx/Buy-Sell_Agreement_191700_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353960/","spamhaus"
 "353959","2020-04-29 14:43:35","http://capath.vn/yxrw/22222.png","offline","malware_download","exe,Qakbot,Quakbot,spx108","https://urlhaus.abuse.ch/url/353959/","lazyactivist192"
 "353958","2020-04-29 14:43:32","http://betopceo.com/ivbglae/22222.png","offline","malware_download","exe,Qakbot,spx108","https://urlhaus.abuse.ch/url/353958/","lazyactivist192"
 "353957","2020-04-29 14:43:27","http://NCERTSOLUTIONACADEMY.COM/yghks/Buy-Sell_Agreement_0083_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353957/","spamhaus"
@@ -755,7 +1142,7 @@
 "353955","2020-04-29 14:43:09","http://batdongsanbentre.com.vn/vbtbnvxnrl/22222.png","offline","malware_download","exe,Qakbot,spx108","https://urlhaus.abuse.ch/url/353955/","lazyactivist192"
 "353954","2020-04-29 14:42:04","http://104.168.198.194/mips","online","malware_download","None","https://urlhaus.abuse.ch/url/353954/","Gandylyan1"
 "353953","2020-04-29 14:41:03","http://dev.apshaps.se/sdub/Buy-Sell_Agreement_8224562_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353953/","spamhaus"
-"353952","2020-04-29 14:40:57","https://cryptoomarket.com/fhws/Buy-Sell_Agreement_12213852_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353952/","spamhaus"
+"353952","2020-04-29 14:40:57","https://cryptoomarket.com/fhws/Buy-Sell_Agreement_12213852_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353952/","spamhaus"
 "353951","2020-04-29 14:40:52","http://Muanha.xyz/cfewahhzze/Buy-Sell_Agreement_29566362_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353951/","spamhaus"
 "353950","2020-04-29 14:40:48","http://morruko.antesos.com/fqtylehpb/Buy-Sell_Agreement_241373_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353950/","spamhaus"
 "353949","2020-04-29 14:40:41","http://drinkopolykopen.nl/wp-content/uploads/2020/04/nnpebk/Buy-Sell_Agreement_0720947_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353949/","spamhaus"
@@ -764,24 +1151,24 @@
 "353946","2020-04-29 14:39:58","https://www.francois-champion.com/lqkb/Buy-Sell_Agreement_58277492_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353946/","spamhaus"
 "353945","2020-04-29 14:39:54","http://koravit.zaeteaw.net/okmqhrfdsvj/Buy-Sell_Agreement_4615_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353945/","spamhaus"
 "353944","2020-04-29 14:39:46","http://dev.apshaps.se/sdub/Buy-Sell_Agreement_4072_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353944/","spamhaus"
-"353943","2020-04-29 14:39:44","http://oskarnews.gazashare.com/pelsq/70994/Buy-Sell_Agreement_70994_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353943/","spamhaus"
+"353943","2020-04-29 14:39:44","http://oskarnews.gazashare.com/pelsq/70994/Buy-Sell_Agreement_70994_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353943/","spamhaus"
 "353942","2020-04-29 14:39:42","https://www.francois-champion.com/lqkb/Buy-Sell_Agreement_82072_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353942/","spamhaus"
-"353941","2020-04-29 14:39:38","http://oskarnews.gazashare.com/pelsq/563390/Buy-Sell_Agreement_563390_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353941/","spamhaus"
-"353940","2020-04-29 14:39:36","http://jessymart.flexyhub.com/ssuzzix/515892/Buy-Sell_Agreement_515892_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353940/","spamhaus"
-"353939","2020-04-29 14:39:31","http://oskarnews.gazashare.com/pelsq/Buy-Sell_Agreement_31209_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353939/","spamhaus"
+"353941","2020-04-29 14:39:38","http://oskarnews.gazashare.com/pelsq/563390/Buy-Sell_Agreement_563390_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353941/","spamhaus"
+"353940","2020-04-29 14:39:36","http://jessymart.flexyhub.com/ssuzzix/515892/Buy-Sell_Agreement_515892_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353940/","spamhaus"
+"353939","2020-04-29 14:39:31","http://oskarnews.gazashare.com/pelsq/Buy-Sell_Agreement_31209_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353939/","spamhaus"
 "353938","2020-04-29 14:39:29","http://denunciesoftwareilegal.org.br/wp-content/plugins/apikey/bfgvnffqfo/5433950/Buy-Sell_Agreement_5433950_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353938/","spamhaus"
-"353937","2020-04-29 14:39:17","http://dzapasigroup.usapglobal.org/pbnxnmc/35459684/Buy-Sell_Agreement_35459684_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353937/","spamhaus"
-"353936","2020-04-29 14:39:13","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/Buy-Sell_Agreement_41088_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353936/","spamhaus"
+"353937","2020-04-29 14:39:17","http://dzapasigroup.usapglobal.org/pbnxnmc/35459684/Buy-Sell_Agreement_35459684_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353937/","spamhaus"
+"353936","2020-04-29 14:39:13","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/Buy-Sell_Agreement_41088_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353936/","spamhaus"
 "353935","2020-04-29 14:39:09","http://bolescy.com/otue/Buy-Sell_Agreement_5472_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353935/","spamhaus"
 "353934","2020-04-29 14:39:05","http://duongfpt.ga/lxgqgox/50076/Buy-Sell_Agreement_50076_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353934/","spamhaus"
-"353933","2020-04-29 14:39:02","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/Buy-Sell_Agreement_8485512_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353933/","spamhaus"
+"353933","2020-04-29 14:39:02","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/Buy-Sell_Agreement_8485512_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353933/","spamhaus"
 "353932","2020-04-29 14:38:57","http://cerradocredito.com.br/wp-content/uploads/2020/04/beazvgceu/Buy-Sell_Agreement_93912574_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353932/","spamhaus"
 "353931","2020-04-29 14:38:53","http://NCERTSOLUTIONACADEMY.COM/yghks/95004421/Buy-Sell_Agreement_95004421_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353931/","spamhaus"
 "353930","2020-04-29 14:38:49","http://duongfpt.ga/lxgqgox/69614610/Buy-Sell_Agreement_69614610_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353930/","spamhaus"
-"353929","2020-04-29 14:38:46","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/Buy-Sell_Agreement_4425983_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353929/","spamhaus"
+"353929","2020-04-29 14:38:46","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/Buy-Sell_Agreement_4425983_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353929/","spamhaus"
 "353928","2020-04-29 14:38:38","https://www.francois-champion.com/lqkb/Buy-Sell_Agreement_12556414_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353928/","spamhaus"
 "353927","2020-04-29 14:38:33","https://cryptoomarket.com/fhws/Buy-Sell_Agreement_785445_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353927/","spamhaus"
-"353926","2020-04-29 14:38:24","http://dzapasigroup.usapglobal.org/pbnxnmc/Buy-Sell_Agreement_15886_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353926/","spamhaus"
+"353926","2020-04-29 14:38:24","http://dzapasigroup.usapglobal.org/pbnxnmc/Buy-Sell_Agreement_15886_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353926/","spamhaus"
 "353925","2020-04-29 14:38:18","http://Muanha.xyz/cfewahhzze/Buy-Sell_Agreement_73790_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353925/","spamhaus"
 "353924","2020-04-29 14:38:10","http://cheriyilbuilders.com/ixwqumcq/Buy-Sell_Agreement_35883362_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353924/","spamhaus"
 "353923","2020-04-29 14:38:08","http://bolescy.com/otue/0413732/Buy-Sell_Agreement_0413732_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353923/","spamhaus"
@@ -798,36 +1185,36 @@
 "353912","2020-04-29 14:37:07","http://51.89.119.154/bins/arm5","offline","malware_download","None","https://urlhaus.abuse.ch/url/353912/","JayTHL"
 "353911","2020-04-29 14:37:05","http://51.89.119.154/bins/arm","offline","malware_download","None","https://urlhaus.abuse.ch/url/353911/","JayTHL"
 "353910","2020-04-29 14:37:03","http://51.89.119.154/bins/KKK.sh","offline","malware_download","None","https://urlhaus.abuse.ch/url/353910/","JayTHL"
-"353909","2020-04-29 14:31:21","https://cryptoomarket.com/fhws/963978/Buy-Sell_Agreement_963978_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353909/","spamhaus"
+"353909","2020-04-29 14:31:21","https://cryptoomarket.com/fhws/963978/Buy-Sell_Agreement_963978_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353909/","spamhaus"
 "353908","2020-04-29 14:31:16","http://demo13.dsdemosite.com/alugzfn/Buy-Sell_Agreement_0090_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353908/","spamhaus"
 "353907","2020-04-29 14:31:13","http://Muanha.xyz/cfewahhzze/Buy-Sell_Agreement_6709320_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353907/","spamhaus"
 "353906","2020-04-29 14:31:09","https://rangebroadcasting.com/vfbc/504577/Buy-Sell_Agreement_504577_04282020.zip","online","malware_download","ESP,Quakbot","https://urlhaus.abuse.ch/url/353906/","spamhaus"
-"353905","2020-04-29 14:31:03","http://virustreatments.empeeevents.com/eyyudu/Buy-Sell_Agreement_2788_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353905/","spamhaus"
+"353905","2020-04-29 14:31:03","http://virustreatments.empeeevents.com/eyyudu/Buy-Sell_Agreement_2788_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353905/","spamhaus"
 "353904","2020-04-29 14:30:58","https://aelogica.com/zznohyxa/Buy-Sell_Agreement_25066542_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353904/","spamhaus"
-"353903","2020-04-29 14:30:23","http://staging.popclusive.asia/okppdsnq/Buy-Sell_Agreement_22473650_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353903/","spamhaus"
+"353903","2020-04-29 14:30:23","http://staging.popclusive.asia/okppdsnq/Buy-Sell_Agreement_22473650_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353903/","spamhaus"
 "353902","2020-04-29 14:30:13","https://vip.recommendedtoyoo.com/bdhycmsxctp/Buy-Sell_Agreement_57552714_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353902/","spamhaus"
-"353901","2020-04-29 14:30:08","https://vip.recommendedtoyoo.com/bdhycmsxctp/Buy-Sell_Agreement_35096983_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353901/","spamhaus"
+"353901","2020-04-29 14:30:08","https://vip.recommendedtoyoo.com/bdhycmsxctp/Buy-Sell_Agreement_35096983_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353901/","spamhaus"
 "353900","2020-04-29 14:29:32","http://stelamedien.de/wp/parcel.php","offline","malware_download","Trickbot","https://urlhaus.abuse.ch/url/353900/","anonymous"
 "353899","2020-04-29 14:29:29","http://alexandredekerchove.com/ylwhbcphyy/Buy-Sell_Agreement_021354_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353899/","spamhaus"
 "353898","2020-04-29 14:29:25","https://rangebroadcasting.com/vfbc/21146543/Buy-Sell_Agreement_21146543_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353898/","spamhaus"
 "353897","2020-04-29 14:29:22","http://drinkopolykopen.nl/wp-content/uploads/2020/04/nnpebk/610227/Buy-Sell_Agreement_610227_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353897/","spamhaus"
 "353896","2020-04-29 14:29:20","http://silverstargalaxy.com.silverstartv.website/cmea/Buy-Sell_Agreement_4586594_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353896/","spamhaus"
 "353895","2020-04-29 14:29:14","http://www.cheriyilbuilders.com/herevryxugc/80423486/Buy-Sell_Agreement_80423486_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353895/","spamhaus"
-"353894","2020-04-29 14:29:12","http://virustreatments.empeeevents.com/eyyudu/Buy-Sell_Agreement_5812432_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353894/","spamhaus"
-"353893","2020-04-29 14:29:07","http://staging.popclusive.asia/okppdsnq/96671/Buy-Sell_Agreement_96671_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353893/","spamhaus"
+"353894","2020-04-29 14:29:12","http://virustreatments.empeeevents.com/eyyudu/Buy-Sell_Agreement_5812432_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353894/","spamhaus"
+"353893","2020-04-29 14:29:07","http://staging.popclusive.asia/okppdsnq/96671/Buy-Sell_Agreement_96671_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353893/","spamhaus"
 "353892","2020-04-29 14:29:03","https://bluecollarfinancial.net/gfmixt/Buy-Sell_Agreement_856388_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353892/","spamhaus"
 "353891","2020-04-29 14:28:58","http://britica.vn/dqsfv/Buy-Sell_Agreement_52744_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353891/","spamhaus"
 "353890","2020-04-29 14:28:52","http://drinkopolykopen.nl/wp-content/uploads/2020/04/nnpebk/442375/Buy-Sell_Agreement_442375_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353890/","spamhaus"
-"353889","2020-04-29 14:28:21","http://oskarnews.gazashare.com/pelsq/22488219/Buy-Sell_Agreement_22488219_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353889/","spamhaus"
+"353889","2020-04-29 14:28:21","http://oskarnews.gazashare.com/pelsq/22488219/Buy-Sell_Agreement_22488219_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353889/","spamhaus"
 "353888","2020-04-29 14:28:17","http://dev.apshaps.se/sdub/Buy-Sell_Agreement_2457_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353888/","spamhaus"
 "353887","2020-04-29 14:28:14","http://NCERTSOLUTIONACADEMY.COM/yghks/Buy-Sell_Agreement_5833942_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353887/","spamhaus"
 "353886","2020-04-29 14:28:12","http://promassager.ga/yltkoe/7604/Buy-Sell_Agreement_7604_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353886/","spamhaus"
-"353885","2020-04-29 14:28:07","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/Buy-Sell_Agreement_578727_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353885/","spamhaus"
+"353885","2020-04-29 14:28:07","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/Buy-Sell_Agreement_578727_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353885/","spamhaus"
 "353884","2020-04-29 14:28:02","http://silverstargalaxy.com.silverstartv.website/cmea/95147/Buy-Sell_Agreement_95147_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353884/","spamhaus"
 "353883","2020-04-29 14:27:59","http://bolescy.com/otue/Buy-Sell_Agreement_14503_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353883/","spamhaus"
 "353882","2020-04-29 14:27:56","http://bolescy.com/otue/8739403/Buy-Sell_Agreement_8739403_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353882/","spamhaus"
-"353881","2020-04-29 14:27:53","http://oskarnews.gazashare.com/pelsq/Buy-Sell_Agreement_14165_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353881/","spamhaus"
-"353880","2020-04-29 14:27:48","http://jessymart.flexyhub.com/ssuzzix/3866/Buy-Sell_Agreement_3866_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353880/","spamhaus"
+"353881","2020-04-29 14:27:53","http://oskarnews.gazashare.com/pelsq/Buy-Sell_Agreement_14165_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353881/","spamhaus"
+"353880","2020-04-29 14:27:48","http://jessymart.flexyhub.com/ssuzzix/3866/Buy-Sell_Agreement_3866_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353880/","spamhaus"
 "353879","2020-04-29 14:27:46","http://www.cheriyilbuilders.com/herevryxugc/Buy-Sell_Agreement_1328_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353879/","spamhaus"
 "353878","2020-04-29 14:27:40","http://morruko.antesos.com/fqtylehpb/Buy-Sell_Agreement_6586635_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353878/","spamhaus"
 "353877","2020-04-29 14:27:37","http://sunboom-gift.com/zwbaxf/Buy-Sell_Agreement_828327_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353877/","spamhaus"
@@ -837,11 +1224,11 @@
 "353873","2020-04-29 14:27:22","https://rangebroadcasting.com/vfbc/0305/Buy-Sell_Agreement_0305_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353873/","spamhaus"
 "353872","2020-04-29 14:27:18","http://cerradocredito.com.br/wp-content/uploads/2020/04/beazvgceu/Buy-Sell_Agreement_16907797_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353872/","spamhaus"
 "353871","2020-04-29 14:27:16","http://NCERTSOLUTIONACADEMY.COM/yghks/87700391/Buy-Sell_Agreement_87700391_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353871/","spamhaus"
-"353870","2020-04-29 14:27:11","http://jessymart.flexyhub.com/ssuzzix/0257123/Buy-Sell_Agreement_0257123_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353870/","spamhaus"
+"353870","2020-04-29 14:27:11","http://jessymart.flexyhub.com/ssuzzix/0257123/Buy-Sell_Agreement_0257123_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353870/","spamhaus"
 "353869","2020-04-29 14:27:08","http://cerradocredito.com.br/wp-content/uploads/2020/04/beazvgceu/626389/Buy-Sell_Agreement_626389_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353869/","spamhaus"
-"353868","2020-04-29 14:27:03","http://ade.topepics.com/pkthdrgdb/27224/Buy-Sell_Agreement_27224_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353868/","spamhaus"
+"353868","2020-04-29 14:27:03","http://ade.topepics.com/pkthdrgdb/27224/Buy-Sell_Agreement_27224_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353868/","spamhaus"
 "353867","2020-04-29 14:26:57","http://NCERTSOLUTIONACADEMY.COM/yghks/25607548/Buy-Sell_Agreement_25607548_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353867/","spamhaus"
-"353866","2020-04-29 14:26:55","http://staging.popclusive.asia/okppdsnq/94144607/Buy-Sell_Agreement_94144607_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353866/","spamhaus"
+"353866","2020-04-29 14:26:55","http://staging.popclusive.asia/okppdsnq/94144607/Buy-Sell_Agreement_94144607_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353866/","spamhaus"
 "353865","2020-04-29 14:26:49","http://dev.apshaps.se/sdub/Buy-Sell_Agreement_555260_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353865/","spamhaus"
 "353864","2020-04-29 14:26:44","https://kamagra.in.rs/bqcbhf/8599/Buy-Sell_Agreement_8599_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353864/","spamhaus"
 "353863","2020-04-29 14:26:41","http://NCERTSOLUTIONACADEMY.COM/yghks/Buy-Sell_Agreement_4693_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353863/","spamhaus"
@@ -849,9 +1236,9 @@
 "353861","2020-04-29 14:26:31","http://sunboom-gift.com/zwbaxf/246727/Buy-Sell_Agreement_246727_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353861/","spamhaus"
 "353860","2020-04-29 14:26:22","http://silverstargalaxy.com.silverstartv.website/cmea/5985352/Buy-Sell_Agreement_5985352_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353860/","spamhaus"
 "353859","2020-04-29 14:26:20","http://morruko.antesos.com/fqtylehpb/9510131/Buy-Sell_Agreement_9510131_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353859/","spamhaus"
-"353858","2020-04-29 14:26:15","http://duongfpt.ga/lxgqgox/Buy-Sell_Agreement_4460233_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353858/","spamhaus"
-"353857","2020-04-29 14:26:10","http://dzapasigroup.usapglobal.org/pbnxnmc/Buy-Sell_Agreement_94794_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353857/","spamhaus"
-"353856","2020-04-29 14:26:05","https://vip.recommendedtoyoo.com/bdhycmsxctp/Buy-Sell_Agreement_06414491_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353856/","spamhaus"
+"353858","2020-04-29 14:26:15","http://duongfpt.ga/lxgqgox/Buy-Sell_Agreement_4460233_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353858/","spamhaus"
+"353857","2020-04-29 14:26:10","http://dzapasigroup.usapglobal.org/pbnxnmc/Buy-Sell_Agreement_94794_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353857/","spamhaus"
+"353856","2020-04-29 14:26:05","https://vip.recommendedtoyoo.com/bdhycmsxctp/Buy-Sell_Agreement_06414491_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353856/","spamhaus"
 "353855","2020-04-29 14:25:23","http://silverstargalaxy.com.silverstartv.website/cmea/Buy-Sell_Agreement_731464_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353855/","spamhaus"
 "353854","2020-04-29 14:25:09","https://bluecollarfinancial.net/gfmixt/5884/Buy-Sell_Agreement_5884_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353854/","spamhaus"
 "353853","2020-04-29 14:25:04","http://104.168.198.194/x86_64","online","malware_download","64-bit,elf,x86-64","https://urlhaus.abuse.ch/url/353853/","geenensp"
@@ -904,7 +1291,7 @@
 "353806","2020-04-29 12:04:14","http://116.114.95.108:49954/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353806/","Gandylyan1"
 "353805","2020-04-29 12:04:10","http://36.105.62.139:35535/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353805/","Gandylyan1"
 "353804","2020-04-29 12:04:06","http://180.124.151.219:39738/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353804/","Gandylyan1"
-"353803","2020-04-29 12:03:32","http://175.11.193.122:38689/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353803/","Gandylyan1"
+"353803","2020-04-29 12:03:32","http://175.11.193.122:38689/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353803/","Gandylyan1"
 "353802","2020-04-29 12:03:27","http://211.137.225.57:41554/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353802/","Gandylyan1"
 "353801","2020-04-29 12:03:23","http://61.168.50.156:38970/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353801/","Gandylyan1"
 "353800","2020-04-29 12:03:19","http://222.185.73.210:36749/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353800/","Gandylyan1"
@@ -919,7 +1306,7 @@
 "353791","2020-04-29 10:39:06","http://121.154.43.105:53192/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/353791/","zbetcheckin"
 "353790","2020-04-29 10:33:49","http://147.75.67.253/bins/x86","offline","malware_download",",DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/353790/","Gandylyan1"
 "353789","2020-04-29 10:33:29","http://147.75.67.253/bins/x86_64","offline","malware_download",",DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/353789/","Gandylyan1"
-"353788","2020-04-29 10:01:10","https://kazanturkiye20gb.com/kazan20gbturkiye.apk","online","malware_download","None","https://urlhaus.abuse.ch/url/353788/","GodOfTh75431522"
+"353788","2020-04-29 10:01:10","https://kazanturkiye20gb.com/kazan20gbturkiye.apk","offline","malware_download","None","https://urlhaus.abuse.ch/url/353788/","GodOfTh75431522"
 "353787","2020-04-29 10:00:06","http://176.178.184.124:32217/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353787/","geenensp"
 "353786","2020-04-29 09:44:06","https://chinatyres.net/IuNbOpen/5osndo411.exe","offline","malware_download","exe,Trickbot","https://urlhaus.abuse.ch/url/353786/","zbetcheckin"
 "353785","2020-04-29 09:42:04","https://pyxalis.com/wp-content/plugins/os/dss.exe","online","malware_download","Formbook","https://urlhaus.abuse.ch/url/353785/","Racco42"
@@ -942,38 +1329,38 @@
 "353768","2020-04-29 09:05:06","http://115.50.229.168:59597/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353768/","Gandylyan1"
 "353767","2020-04-29 09:05:01","http://223.154.40.213:60779/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353767/","Gandylyan1"
 "353766","2020-04-29 09:04:57","http://49.116.214.38:56794/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353766/","Gandylyan1"
-"353765","2020-04-29 09:04:52","http://42.239.77.201:37766/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353765/","Gandylyan1"
+"353765","2020-04-29 09:04:52","http://42.239.77.201:37766/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353765/","Gandylyan1"
 "353764","2020-04-29 09:04:47","http://114.239.79.212:56499/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353764/","Gandylyan1"
-"353763","2020-04-29 09:04:42","http://113.218.234.32:41628/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353763/","Gandylyan1"
+"353763","2020-04-29 09:04:42","http://113.218.234.32:41628/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353763/","Gandylyan1"
 "353762","2020-04-29 09:04:35","http://220.168.239.247:57324/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353762/","Gandylyan1"
 "353761","2020-04-29 09:04:29","http://111.38.26.243:48427/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353761/","Gandylyan1"
 "353760","2020-04-29 09:04:24","http://125.121.152.251:39071/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353760/","Gandylyan1"
-"353759","2020-04-29 09:04:20","http://123.10.155.32:59198/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353759/","Gandylyan1"
+"353759","2020-04-29 09:04:20","http://123.10.155.32:59198/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353759/","Gandylyan1"
 "353758","2020-04-29 09:04:12","http://211.137.225.120:55900/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353758/","Gandylyan1"
 "353757","2020-04-29 09:03:58","http://194.48.152.10/Pipe/sh4","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353757/","zbetcheckin"
 "353756","2020-04-29 09:03:55","http://123.194.60.238:52754/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/353756/","zbetcheckin"
 "353755","2020-04-29 09:03:50","http://118.46.7.246:34817/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353755/","geenensp"
 "353754","2020-04-29 09:03:45","http://118.232.208.215:45195/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353754/","geenensp"
-"353753","2020-04-29 09:03:40","http://xn--transfgran-mgbbb600b.ro/UPS/ShippingInfo.jar","offline","malware_download","Adwind,ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353753/","spamhaus"
+"353753","2020-04-29 09:03:40","http://xn--transfgran-mgbbb600b.ro/UPS/ShippingInfo.jar","online","malware_download","Adwind,ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353753/","spamhaus"
 "353752","2020-04-29 09:03:37","http://coderived.in/zlseg/Buy-Sell_Agreement_34704566_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353752/","spamhaus"
-"353751","2020-04-29 09:03:33","http://anadolutatili.com/xtfdux/17055888/Buy-Sell_Agreement_17055888_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353751/","spamhaus"
-"353750","2020-04-29 09:03:28","http://healtina.com/xcaspvi/5392047/Buy-Sell_Agreement_5392047_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353750/","spamhaus"
+"353751","2020-04-29 09:03:33","http://anadolutatili.com/xtfdux/17055888/Buy-Sell_Agreement_17055888_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353751/","spamhaus"
+"353750","2020-04-29 09:03:28","http://healtina.com/xcaspvi/5392047/Buy-Sell_Agreement_5392047_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353750/","spamhaus"
 "353749","2020-04-29 09:03:26","https://rangebroadcasting.com/obrmn/93586244/Buy-Sell_Agreement_93586244_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353749/","spamhaus"
 "353748","2020-04-29 09:03:13","https://nmal.info/ntsphsl/9082650/Buy-Sell_Agreement_9082650_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353748/","spamhaus"
 "353747","2020-04-29 09:03:12","https://www.loodgieterjoost.be/wp-content/uploads/2020/04/osiwprp/Buy-Sell_Agreement_470336_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353747/","spamhaus"
 "353746","2020-04-29 09:03:07","http://bookmytripping.com/tgxmxcm/30307798/Buy-Sell_Agreement_30307798_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353746/","spamhaus"
 "353745","2020-04-29 09:03:00","http://kandiandcolor.codeworkscanada.com/v/Buy-Sell_Agreement_59624925_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353745/","spamhaus"
 "353744","2020-04-29 09:02:57","http://cyberemprende.cl/wjoh/38575/Buy-Sell_Agreement_38575_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353744/","spamhaus"
-"353743","2020-04-29 09:02:53","http://ufabet168168.329263.com/tmpf/Buy-Sell_Agreement_658957_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353743/","spamhaus"
+"353743","2020-04-29 09:02:53","http://ufabet168168.329263.com/tmpf/Buy-Sell_Agreement_658957_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353743/","spamhaus"
 "353742","2020-04-29 09:02:46","https://how.ph/mrb/706759/Buy-Sell_Agreement_706759_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353742/","spamhaus"
-"353741","2020-04-29 09:02:37","http://myexpertca.in/fomi/63279611/Buy-Sell_Agreement_63279611_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353741/","spamhaus"
-"353740","2020-04-29 09:02:21","http://vaeqpu.329263.com/al/Buy-Sell_Agreement_23601612_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353740/","spamhaus"
+"353741","2020-04-29 09:02:37","http://myexpertca.in/fomi/63279611/Buy-Sell_Agreement_63279611_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353741/","spamhaus"
+"353740","2020-04-29 09:02:21","http://vaeqpu.329263.com/al/Buy-Sell_Agreement_23601612_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353740/","spamhaus"
 "353739","2020-04-29 09:02:18","https://www.loodgieterjoost.be/wp-content/uploads/2020/04/osiwprp/Buy-Sell_Agreement_3544_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353739/","spamhaus"
 "353738","2020-04-29 09:02:15","http://yucatanentiemporeal.com/wp-content/uploads/2020/04/nwl/3096/Buy-Sell_Agreement_3096_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353738/","spamhaus"
 "353737","2020-04-29 09:02:03","https://miraab.ir/wp-content/uploads/2020/04/tk/4080595/Buy-Sell_Agreement_4080595_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353737/","spamhaus"
 "353736","2020-04-29 09:01:56","http://www.amodoutours.com/rretwxj/Buy-Sell_Agreement_75358549_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353736/","spamhaus"
 "353735","2020-04-29 09:01:52","https://www.dzyzz.cn/wp-content/plugins/apikey/zwj/Buy-Sell_Agreement_81785720_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353735/","spamhaus"
-"353734","2020-04-29 09:01:40","http://www.gainsdirectory.com/imtlt/Buy-Sell_Agreement_80540_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353734/","spamhaus"
+"353734","2020-04-29 09:01:40","http://www.gainsdirectory.com/imtlt/Buy-Sell_Agreement_80540_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353734/","spamhaus"
 "353733","2020-04-29 09:01:35","https://rugab.se/c/68691/Buy-Sell_Agreement_68691_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353733/","spamhaus"
 "353732","2020-04-29 09:01:32","http://tulmix-beton.ru/hpoakm/Buy-Sell_Agreement_6239939_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353732/","spamhaus"
 "353731","2020-04-29 08:57:27","http://194.48.152.10/Pipe/i586","offline","malware_download","elf","https://urlhaus.abuse.ch/url/353731/","zbetcheckin"
@@ -994,48 +1381,48 @@
 "353716","2020-04-29 08:41:32","http://yucatanentiemporeal.com/wp-content/uploads/2020/04/nwl/4457/Buy-Sell_Agreement_4457_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353716/","spamhaus"
 "353715","2020-04-29 08:41:16","http://alnajimaa.website.bahaoption.website/uktvs/Buy-Sell_Agreement_5473_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353715/","spamhaus"
 "353714","2020-04-29 08:41:11","https://www.mfpburundi.bi/wp-content/uploads/2020/04/pb/Buy-Sell_Agreement_170999_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353714/","spamhaus"
-"353713","2020-04-29 08:41:10","http://earningtipsbd.com/pn/280019/Buy-Sell_Agreement_280019_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353713/","spamhaus"
-"353712","2020-04-29 08:41:08","http://www.gainsdirectory.com/imtlt/11119/Buy-Sell_Agreement_11119_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353712/","spamhaus"
+"353713","2020-04-29 08:41:10","http://earningtipsbd.com/pn/280019/Buy-Sell_Agreement_280019_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353713/","spamhaus"
+"353712","2020-04-29 08:41:08","http://www.gainsdirectory.com/imtlt/11119/Buy-Sell_Agreement_11119_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353712/","spamhaus"
 "353711","2020-04-29 08:41:05","http://delmaestro.espacioeterno.com/e/Buy-Sell_Agreement_23577525_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353711/","spamhaus"
 "353710","2020-04-29 08:41:03","http://yucatanentiemporeal.com/wp-content/uploads/2020/04/nwl/Buy-Sell_Agreement_50658585_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353710/","spamhaus"
 "353709","2020-04-29 08:40:55","http://cyberemprende.cl/wjoh/8373/Buy-Sell_Agreement_8373_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353709/","spamhaus"
 "353708","2020-04-29 08:40:48","http://ufabet168168.329263.com/tmpf/Buy-Sell_Agreement_6108_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353708/","spamhaus"
 "353707","2020-04-29 08:40:43","https://aliyousefpoor.com/urcu/Buy-Sell_Agreement_24920_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353707/","spamhaus"
-"353706","2020-04-29 08:40:41","http://healtina.com/xcaspvi/2017128/Buy-Sell_Agreement_2017128_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353706/","spamhaus"
+"353706","2020-04-29 08:40:41","http://healtina.com/xcaspvi/2017128/Buy-Sell_Agreement_2017128_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353706/","spamhaus"
 "353705","2020-04-29 08:40:39","https://kingdomcarecan.com/nbdvaba/Buy-Sell_Agreement_04521_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353705/","spamhaus"
-"353704","2020-04-29 08:40:30","https://dienmaycu.vn/rcckjv/Buy-Sell_Agreement_762354_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353704/","spamhaus"
+"353704","2020-04-29 08:40:30","https://dienmaycu.vn/rcckjv/Buy-Sell_Agreement_762354_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353704/","spamhaus"
 "353703","2020-04-29 08:40:26","http://alnajimaa.website.bahaoption.website/uktvs/978968/Buy-Sell_Agreement_978968_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353703/","spamhaus"
 "353702","2020-04-29 08:40:22","https://kingdomcarecan.com/nbdvaba/Buy-Sell_Agreement_08047_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353702/","spamhaus"
 "353701","2020-04-29 08:40:16","http://www.amodoutours.com/rretwxj/83870466/Buy-Sell_Agreement_83870466_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353701/","spamhaus"
-"353700","2020-04-29 08:40:14","http://jjjexx.329263.com/vi/Buy-Sell_Agreement_181721_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353700/","spamhaus"
+"353700","2020-04-29 08:40:14","http://jjjexx.329263.com/vi/Buy-Sell_Agreement_181721_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353700/","spamhaus"
 "353699","2020-04-29 08:40:09","https://alucard.online/yarx/20711/Buy-Sell_Agreement_20711_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353699/","spamhaus"
 "353698","2020-04-29 08:40:05","http://www.energyplusjuice.ir/wp-content/uploads/2020/04/m/Buy-Sell_Agreement_14391_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353698/","spamhaus"
 "353697","2020-04-29 08:38:03","https://pastebin.com/raw/iVtywrUz","offline","malware_download","None","https://urlhaus.abuse.ch/url/353697/","JayTHL"
 "353696","2020-04-29 08:22:06","http://192.236.147.100:1950/Zflipbgi.iso","offline","malware_download","None","https://urlhaus.abuse.ch/url/353696/","JAMESWT_MHT"
-"353695","2020-04-29 08:14:50","http://lagalaxy88easy.329263.com/lbrnxxd/03531/Buy-Sell_Agreement_03531_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353695/","spamhaus"
+"353695","2020-04-29 08:14:50","http://lagalaxy88easy.329263.com/lbrnxxd/03531/Buy-Sell_Agreement_03531_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353695/","spamhaus"
 "353694","2020-04-29 08:14:45","https://nmal.info/ntsphsl/42806083/Buy-Sell_Agreement_42806083_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353694/","spamhaus"
 "353693","2020-04-29 08:14:40","http://escarateeventos.ladevi.cl/yworbn/414713/Buy-Sell_Agreement_414713_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353693/","spamhaus"
-"353692","2020-04-29 08:14:09","http://bonyamin.com/wyupb/4989/Buy-Sell_Agreement_4989_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353692/","spamhaus"
-"353691","2020-04-29 08:14:06","http://mlbfreestream.ml/q/51548833/Buy-Sell_Agreement_51548833_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353691/","spamhaus"
+"353692","2020-04-29 08:14:09","http://bonyamin.com/wyupb/4989/Buy-Sell_Agreement_4989_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353692/","spamhaus"
+"353691","2020-04-29 08:14:06","http://mlbfreestream.ml/q/51548833/Buy-Sell_Agreement_51548833_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353691/","spamhaus"
 "353690","2020-04-29 08:14:01","http://cpagrace.cl/k/8312/Buy-Sell_Agreement_8312_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353690/","spamhaus"
 "353689","2020-04-29 08:13:28","http://elabugablog.ru/zzj/Buy-Sell_Agreement_6905408_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353689/","spamhaus"
-"353688","2020-04-29 08:13:25","http://arowanafishforsale.com/dbmwl/1922788/Buy-Sell_Agreement_1922788_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353688/","spamhaus"
-"353687","2020-04-29 08:13:20","http://earningtipsbd.com/pn/Buy-Sell_Agreement_481073_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353687/","spamhaus"
+"353688","2020-04-29 08:13:25","http://arowanafishforsale.com/dbmwl/1922788/Buy-Sell_Agreement_1922788_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353688/","spamhaus"
+"353687","2020-04-29 08:13:20","http://earningtipsbd.com/pn/Buy-Sell_Agreement_481073_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353687/","spamhaus"
 "353686","2020-04-29 08:11:40","http://alnajimaa.website.bahaoption.website/uktvs/89732/Buy-Sell_Agreement_89732_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353686/","spamhaus"
-"353685","2020-04-29 08:11:35","http://myexpertca.in/fomi/89079745/Buy-Sell_Agreement_89079745_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353685/","spamhaus"
-"353684","2020-04-29 08:11:32","http://mlbfreestream.gq/n/Buy-Sell_Agreement_35749554_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353684/","spamhaus"
-"353683","2020-04-29 08:11:26","http://healtina.com/xcaspvi/16772926/Buy-Sell_Agreement_16772926_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353683/","spamhaus"
+"353685","2020-04-29 08:11:35","http://myexpertca.in/fomi/89079745/Buy-Sell_Agreement_89079745_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353685/","spamhaus"
+"353684","2020-04-29 08:11:32","http://mlbfreestream.gq/n/Buy-Sell_Agreement_35749554_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353684/","spamhaus"
+"353683","2020-04-29 08:11:26","http://healtina.com/xcaspvi/16772926/Buy-Sell_Agreement_16772926_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353683/","spamhaus"
 "353682","2020-04-29 08:11:20","http://www.energyplusjuice.ir/wp-content/uploads/2020/04/m/002783/Buy-Sell_Agreement_002783_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353682/","spamhaus"
 "353681","2020-04-29 08:11:15","http://www.amodoutours.com/rretwxj/8052388/Buy-Sell_Agreement_8052388_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353681/","spamhaus"
 "353680","2020-04-29 08:11:13","http://hdlive-espntv.live-sportshd.website/bpg/23066489/Buy-Sell_Agreement_23066489_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353680/","spamhaus"
 "353679","2020-04-29 08:11:10","http://coderived.in/zlseg/Buy-Sell_Agreement_5772_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353679/","spamhaus"
-"353678","2020-04-29 08:08:09","http://mlbfreestream.ml/q/Buy-Sell_Agreement_8401425_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353678/","spamhaus"
+"353678","2020-04-29 08:08:09","http://mlbfreestream.ml/q/Buy-Sell_Agreement_8401425_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353678/","spamhaus"
 "353677","2020-04-29 08:08:03","https://www.mfpburundi.bi/wp-content/uploads/2020/04/pb/664693/Buy-Sell_Agreement_664693_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353677/","spamhaus"
 "353676","2020-04-29 08:07:04","http://192.236.147.100:1950/ybxdraewe.iso","offline","malware_download","None","https://urlhaus.abuse.ch/url/353676/","JAMESWT_MHT"
-"353675","2020-04-29 08:04:04","https://fast.rentaroom.ml/euzxp/Buy-Sell_Agreement_04762346_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353675/","spamhaus"
+"353675","2020-04-29 08:04:04","https://fast.rentaroom.ml/euzxp/Buy-Sell_Agreement_04762346_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353675/","spamhaus"
 "353674","2020-04-29 08:03:46","http://hdlive-espntv.live-sportshd.website/bpg/Buy-Sell_Agreement_1709877_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353674/","spamhaus"
 "353673","2020-04-29 08:03:44","http://www.gbf.com/my/Buy-Sell_Agreement_4823_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353673/","spamhaus"
-"353672","2020-04-29 08:03:42","http://rentaroom.ml/oqqthv/25262/Buy-Sell_Agreement_25262_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353672/","spamhaus"
+"353672","2020-04-29 08:03:42","http://rentaroom.ml/oqqthv/25262/Buy-Sell_Agreement_25262_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353672/","spamhaus"
 "353671","2020-04-29 08:03:38","https://miraab.ir/wp-content/uploads/2020/04/tk/Buy-Sell_Agreement_063400_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353671/","spamhaus"
 "353670","2020-04-29 08:03:35","http://djonur24.de/hdc/2165/Buy-Sell_Agreement_2165_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353670/","spamhaus"
 "353669","2020-04-29 08:03:33","http://veniceshop.ru/wp-content/uploads/2020/04/xwrxtgh/60233233/Buy-Sell_Agreement_60233233_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353669/","spamhaus"
@@ -1047,58 +1434,58 @@
 "353663","2020-04-29 08:02:32","https://alucard.online/yarx/Buy-Sell_Agreement_5821_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353663/","spamhaus"
 "353662","2020-04-29 08:02:28","http://anadolutatili.com/xtfdux/12602/Buy-Sell_Agreement_12602_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353662/","spamhaus"
 "353661","2020-04-29 08:02:22","https://aliyousefpoor.com/urcu/Buy-Sell_Agreement_907724_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353661/","spamhaus"
-"353660","2020-04-29 08:02:18","https://wwealthllc.com/sjokmsq/Buy-Sell_Agreement_594068_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353660/","spamhaus"
+"353660","2020-04-29 08:02:18","https://wwealthllc.com/sjokmsq/Buy-Sell_Agreement_594068_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353660/","spamhaus"
 "353659","2020-04-29 08:02:12","https://aliyousefpoor.com/urcu/Buy-Sell_Agreement_87065224_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353659/","spamhaus"
-"353658","2020-04-29 08:02:08","http://bonyamin.com/wyupb/36769/Buy-Sell_Agreement_36769_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353658/","spamhaus"
+"353658","2020-04-29 08:02:08","http://bonyamin.com/wyupb/36769/Buy-Sell_Agreement_36769_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353658/","spamhaus"
 "353657","2020-04-29 08:02:02","https://drwendyellis.com/laqrip/Buy-Sell_Agreement_9435083_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353657/","spamhaus"
-"353656","2020-04-29 08:01:55","http://sexybaccarat.329263.com/k/021803/Buy-Sell_Agreement_021803_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353656/","spamhaus"
-"353655","2020-04-29 08:01:48","http://kgfs3.329263.com/cvsf/94279544/Buy-Sell_Agreement_94279544_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353655/","spamhaus"
-"353654","2020-04-29 08:01:44","http://earningtipsbd.com/pn/16352769/Buy-Sell_Agreement_16352769_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353654/","spamhaus"
-"353653","2020-04-29 08:01:40","https://drwendyellis.com/laqrip/262184/Buy-Sell_Agreement_262184_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353653/","spamhaus"
-"353652","2020-04-29 08:01:28","http://rentaroom.ml/oqqthv/33859/Buy-Sell_Agreement_33859_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353652/","spamhaus"
+"353656","2020-04-29 08:01:55","http://sexybaccarat.329263.com/k/021803/Buy-Sell_Agreement_021803_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353656/","spamhaus"
+"353655","2020-04-29 08:01:48","http://kgfs3.329263.com/cvsf/94279544/Buy-Sell_Agreement_94279544_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353655/","spamhaus"
+"353654","2020-04-29 08:01:44","http://earningtipsbd.com/pn/16352769/Buy-Sell_Agreement_16352769_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353654/","spamhaus"
+"353653","2020-04-29 08:01:40","https://drwendyellis.com/laqrip/262184/Buy-Sell_Agreement_262184_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353653/","spamhaus"
+"353652","2020-04-29 08:01:28","http://rentaroom.ml/oqqthv/33859/Buy-Sell_Agreement_33859_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353652/","spamhaus"
 "353651","2020-04-29 08:00:16","http://37.34.228.1:30592/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353651/","geenensp"
-"353650","2020-04-29 08:00:12","http://kgfs3.329263.com/cvsf/63768/Buy-Sell_Agreement_63768_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353650/","spamhaus"
+"353650","2020-04-29 08:00:12","http://kgfs3.329263.com/cvsf/63768/Buy-Sell_Agreement_63768_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353650/","spamhaus"
 "353649","2020-04-29 07:59:37","http://62.215.101.230:59574/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353649/","geenensp"
 "353648","2020-04-29 07:58:18","http://avto-pro.hostenko.com/too/50673/Buy-Sell_Agreement_50673_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353648/","spamhaus"
-"353647","2020-04-29 07:57:46","http://sportstrem.gq/imqmxkw/Buy-Sell_Agreement_0493_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353647/","spamhaus"
-"353646","2020-04-29 07:57:10","http://fifa555easy.329263.com/x/57599/Buy-Sell_Agreement_57599_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353646/","spamhaus"
+"353647","2020-04-29 07:57:46","http://sportstrem.gq/imqmxkw/Buy-Sell_Agreement_0493_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353647/","spamhaus"
+"353646","2020-04-29 07:57:10","http://fifa555easy.329263.com/x/57599/Buy-Sell_Agreement_57599_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353646/","spamhaus"
 "353645","2020-04-29 07:56:33","http://djonur24.de/hdc/Buy-Sell_Agreement_5473_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353645/","spamhaus"
 "353644","2020-04-29 07:37:09","https://pastebin.com/raw/1viY3naQ","offline","malware_download","None","https://urlhaus.abuse.ch/url/353644/","JayTHL"
-"353643","2020-04-29 07:24:05","https://fast.rentaroom.ml/euzxp/1854/Buy-Sell_Agreement_1854_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353643/","spamhaus"
+"353643","2020-04-29 07:24:05","https://fast.rentaroom.ml/euzxp/1854/Buy-Sell_Agreement_1854_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353643/","spamhaus"
 "353642","2020-04-29 07:23:09","http://hdlive-espntv.live-sportshd.website/bpg/Buy-Sell_Agreement_7101395_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353642/","spamhaus"
 "353641","2020-04-29 07:23:07","https://langwieser.at/FedEx/ShippingInfo.jar","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353641/","spamhaus"
-"353640","2020-04-29 07:23:02","http://mlbfreestream.ml/q/Buy-Sell_Agreement_7955_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353640/","spamhaus"
+"353640","2020-04-29 07:23:02","http://mlbfreestream.ml/q/Buy-Sell_Agreement_7955_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353640/","spamhaus"
 "353639","2020-04-29 07:22:57","https://siseco.mx/wp-content/uploads/2020/04/beomqxc/Buy-Sell_Agreement_900336_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353639/","spamhaus"
-"353638","2020-04-29 07:22:51","https://royalplusmobile.ir/wp-content/uploads/2020/04/ohzjt/8368/Buy-Sell_Agreement_8368_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353638/","spamhaus"
+"353638","2020-04-29 07:22:51","https://royalplusmobile.ir/wp-content/uploads/2020/04/ohzjt/8368/Buy-Sell_Agreement_8368_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353638/","spamhaus"
 "353637","2020-04-29 07:22:45","http://delmaestro.espacioeterno.com/e/Buy-Sell_Agreement_424391_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353637/","spamhaus"
 "353636","2020-04-29 07:22:43","http://yucatanentiemporeal.com/wp-content/uploads/2020/04/nwl/90695556/Buy-Sell_Agreement_90695556_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353636/","spamhaus"
 "353635","2020-04-29 07:22:37","http://24.115.48.43:37623/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353635/","geenensp"
 "353634","2020-04-29 07:22:33","https://nmal.info/ntsphsl/0952594/Buy-Sell_Agreement_0952594_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353634/","spamhaus"
-"353633","2020-04-29 07:22:31","http://myexpertca.in/fomi/Buy-Sell_Agreement_86091111_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353633/","spamhaus"
+"353633","2020-04-29 07:22:31","http://myexpertca.in/fomi/Buy-Sell_Agreement_86091111_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353633/","spamhaus"
 "353632","2020-04-29 07:22:29","http://hdlive-espntv.live-sportshd.website/bpg/Buy-Sell_Agreement_10294111_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353632/","spamhaus"
-"353631","2020-04-29 07:22:25","http://livetvsports.ml/z/Buy-Sell_Agreement_54596_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353631/","spamhaus"
+"353631","2020-04-29 07:22:25","http://livetvsports.ml/z/Buy-Sell_Agreement_54596_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353631/","spamhaus"
 "353630","2020-04-29 07:22:21","http://coderived.in/zlseg/Buy-Sell_Agreement_1571081_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353630/","spamhaus"
-"353629","2020-04-29 07:22:16","http://sexybaccarat.329263.com/k/Buy-Sell_Agreement_62226978_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353629/","spamhaus"
-"353628","2020-04-29 07:22:08","http://myexpertca.in/fomi/Buy-Sell_Agreement_23325291_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353628/","spamhaus"
+"353629","2020-04-29 07:22:16","http://sexybaccarat.329263.com/k/Buy-Sell_Agreement_62226978_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353629/","spamhaus"
+"353628","2020-04-29 07:22:08","http://myexpertca.in/fomi/Buy-Sell_Agreement_23325291_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353628/","spamhaus"
 "353627","2020-04-29 07:21:57","http://www.alnahrainfilminstitute.com/kuhjz/5389/Buy-Sell_Agreement_5389_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353627/","spamhaus"
 "353626","2020-04-29 07:21:54","http://alnajimaa.website.bahaoption.website/uktvs/3704870/Buy-Sell_Agreement_3704870_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353626/","spamhaus"
 "353625","2020-04-29 07:21:50","https://brenleyquartzgh.com/ga/Buy-Sell_Agreement_60370501_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353625/","spamhaus"
-"353624","2020-04-29 07:21:45","http://sportshlive.xyz/gzld/Buy-Sell_Agreement_5741597_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353624/","spamhaus"
+"353624","2020-04-29 07:21:45","http://sportshlive.xyz/gzld/Buy-Sell_Agreement_5741597_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353624/","spamhaus"
 "353623","2020-04-29 07:21:36","http://www.alnahrainfilminstitute.com/kuhjz/28179863/Buy-Sell_Agreement_28179863_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353623/","spamhaus"
-"353622","2020-04-29 07:21:34","http://arowanafishforsale.com/dbmwl/Buy-Sell_Agreement_698683_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353622/","spamhaus"
+"353622","2020-04-29 07:21:34","http://arowanafishforsale.com/dbmwl/Buy-Sell_Agreement_698683_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353622/","spamhaus"
 "353621","2020-04-29 07:21:29","http://www.amodoutours.com/rretwxj/350310/Buy-Sell_Agreement_350310_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353621/","spamhaus"
-"353620","2020-04-29 07:21:27","http://amedeoscognamiglio.329263.com/i/24827473/Buy-Sell_Agreement_24827473_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353620/","spamhaus"
-"353619","2020-04-29 07:21:17","http://rentaroom.ml/oqqthv/4912/Buy-Sell_Agreement_4912_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353619/","spamhaus"
+"353620","2020-04-29 07:21:27","http://amedeoscognamiglio.329263.com/i/24827473/Buy-Sell_Agreement_24827473_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353620/","spamhaus"
+"353619","2020-04-29 07:21:17","http://rentaroom.ml/oqqthv/4912/Buy-Sell_Agreement_4912_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353619/","spamhaus"
 "353618","2020-04-29 07:21:13","https://siseco.mx/wp-content/uploads/2020/04/beomqxc/14307/Buy-Sell_Agreement_14307_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353618/","spamhaus"
-"353617","2020-04-29 07:21:06","http://fifa555easy.329263.com/x/441957/Buy-Sell_Agreement_441957_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353617/","spamhaus"
-"353616","2020-04-29 07:20:58","https://pcexperts.co.za/wp-content/uploads/2020/04/tmk/6097/Buy-Sell_Agreement_6097_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353616/","spamhaus"
-"353615","2020-04-29 07:20:51","https://wwealthllc.com/sjokmsq/Buy-Sell_Agreement_087485_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353615/","spamhaus"
+"353617","2020-04-29 07:21:06","http://fifa555easy.329263.com/x/441957/Buy-Sell_Agreement_441957_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353617/","spamhaus"
+"353616","2020-04-29 07:20:58","https://pcexperts.co.za/wp-content/uploads/2020/04/tmk/6097/Buy-Sell_Agreement_6097_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353616/","spamhaus"
+"353615","2020-04-29 07:20:51","https://wwealthllc.com/sjokmsq/Buy-Sell_Agreement_087485_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353615/","spamhaus"
 "353614","2020-04-29 07:20:37","http://yucatanentiemporeal.com/wp-content/uploads/2020/04/nwl/60928197/Buy-Sell_Agreement_60928197_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353614/","spamhaus"
 "353613","2020-04-29 07:20:34","http://www.amodoutours.com/rretwxj/Buy-Sell_Agreement_7730054_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353613/","spamhaus"
-"353612","2020-04-29 07:20:32","http://myexpertca.in/fomi/197064/Buy-Sell_Agreement_197064_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353612/","spamhaus"
+"353612","2020-04-29 07:20:32","http://myexpertca.in/fomi/197064/Buy-Sell_Agreement_197064_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353612/","spamhaus"
 "353611","2020-04-29 07:20:24","http://kandiandcolor.codeworkscanada.com/v/05078/Buy-Sell_Agreement_05078_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353611/","spamhaus"
 "353610","2020-04-29 07:20:19","https://miraab.ir/wp-content/uploads/2020/04/tk/5646120/Buy-Sell_Agreement_5646120_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353610/","spamhaus"
-"353609","2020-04-29 07:20:07","https://www.cinnamoncreations.com.au/h/Buy-Sell_Agreement_04836_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353609/","spamhaus"
+"353609","2020-04-29 07:20:07","https://www.cinnamoncreations.com.au/h/Buy-Sell_Agreement_04836_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353609/","spamhaus"
 "353608","2020-04-29 07:00:06","https://pastebin.com/raw/bFRA2q5U","offline","malware_download","None","https://urlhaus.abuse.ch/url/353608/","JayTHL"
 "353607","2020-04-29 06:57:03","http://88.218.16.38/PcKZudZGCtvEohA.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/353607/","abuse_ch"
 "353606","2020-04-29 06:47:16","http://208.68.39.30/armv5l","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353606/","zbetcheckin"
@@ -1111,7 +1498,7 @@
 "353599","2020-04-29 06:43:05","http://208.68.39.30/i586","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353599/","zbetcheckin"
 "353598","2020-04-29 06:43:03","http://208.68.39.30/sparc","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353598/","zbetcheckin"
 "353597","2020-04-29 06:40:24","http://delmaestro.espacioeterno.com/e/3213/Buy-Sell_Agreement_3213_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353597/","spamhaus"
-"353596","2020-04-29 06:40:15","https://fast.rentaroom.ml/euzxp/3987487/Buy-Sell_Agreement_3987487_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353596/","spamhaus"
+"353596","2020-04-29 06:40:15","https://fast.rentaroom.ml/euzxp/3987487/Buy-Sell_Agreement_3987487_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353596/","spamhaus"
 "353595","2020-04-29 06:40:06","http://www.alnahrainfilminstitute.com/kuhjz/51737/Buy-Sell_Agreement_51737_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353595/","spamhaus"
 "353594","2020-04-29 06:40:03","https://rugab.se/c/6033102/Buy-Sell_Agreement_6033102_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353594/","spamhaus"
 "353593","2020-04-29 06:39:11","https://pastebin.com/raw/i1wFXeRQ","offline","malware_download","None","https://urlhaus.abuse.ch/url/353593/","JayTHL"
@@ -1120,23 +1507,23 @@
 "353590","2020-04-29 06:38:59","https://aliyousefpoor.com/urcu/Buy-Sell_Agreement_9315_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353590/","spamhaus"
 "353589","2020-04-29 06:38:52","https://www.mfpburundi.bi/wp-content/uploads/2020/04/pb/3220667/Buy-Sell_Agreement_3220667_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353589/","spamhaus"
 "353588","2020-04-29 06:38:47","https://nmal.info/ntsphsl/1838107/Buy-Sell_Agreement_1838107_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353588/","spamhaus"
-"353587","2020-04-29 06:38:45","http://jjjexx.329263.com/vi/Buy-Sell_Agreement_6004581_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353587/","spamhaus"
+"353587","2020-04-29 06:38:45","http://jjjexx.329263.com/vi/Buy-Sell_Agreement_6004581_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353587/","spamhaus"
 "353586","2020-04-29 06:38:42","http://mlbfreestream.gq/n/Buy-Sell_Agreement_410171_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353586/","spamhaus"
 "353585","2020-04-29 06:38:36","http://cpagrace.cl/k/Buy-Sell_Agreement_3571_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353585/","spamhaus"
 "353584","2020-04-29 06:37:51","http://bookmytripping.com/tgxmxcm/822343/Buy-Sell_Agreement_822343_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353584/","spamhaus"
 "353583","2020-04-29 06:37:42","https://www.mfpburundi.bi/wp-content/uploads/2020/04/pb/Buy-Sell_Agreement_65212722_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353583/","spamhaus"
 "353582","2020-04-29 06:37:39","https://www.loodgieterjoost.be/wp-content/uploads/2020/04/osiwprp/Buy-Sell_Agreement_7556465_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353582/","spamhaus"
 "353581","2020-04-29 06:37:37","http://lakropack.com/s/Buy-Sell_Agreement_03970_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353581/","spamhaus"
-"353580","2020-04-29 06:37:33","https://www.eposar.com.ar/mjpen/664668/Buy-Sell_Agreement_664668_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353580/","spamhaus"
+"353580","2020-04-29 06:37:33","https://www.eposar.com.ar/mjpen/664668/Buy-Sell_Agreement_664668_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353580/","spamhaus"
 "353579","2020-04-29 06:37:27","http://cyberemprende.cl/wjoh/Buy-Sell_Agreement_7460_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353579/","spamhaus"
 "353578","2020-04-29 06:37:24","https://wwealthllc.com/sjokmsq/Buy-Sell_Agreement_115274_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353578/","spamhaus"
 "353577","2020-04-29 06:37:21","https://nmal.info/ntsphsl/Buy-Sell_Agreement_0573515_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353577/","spamhaus"
 "353576","2020-04-29 06:37:18","https://www.loodgieterjoost.be/wp-content/uploads/2020/04/osiwprp/Buy-Sell_Agreement_132341_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353576/","spamhaus"
 "353575","2020-04-29 06:37:12","https://delmaestro.cl/wtdeng/Buy-Sell_Agreement_53907_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353575/","spamhaus"
-"353574","2020-04-29 06:37:09","http://vaeqpu.329263.com/al/Buy-Sell_Agreement_13490_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353574/","spamhaus"
-"353573","2020-04-29 06:36:44","http://livetvsports.ml/z/4244/Buy-Sell_Agreement_4244_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353573/","spamhaus"
-"353572","2020-04-29 06:36:38","https://dienmaycu.vn/rcckjv/Buy-Sell_Agreement_8596071_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353572/","spamhaus"
-"353571","2020-04-29 06:36:35","http://vaeqpu.329263.com/al/56057178/Buy-Sell_Agreement_56057178_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353571/","spamhaus"
+"353574","2020-04-29 06:37:09","http://vaeqpu.329263.com/al/Buy-Sell_Agreement_13490_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353574/","spamhaus"
+"353573","2020-04-29 06:36:44","http://livetvsports.ml/z/4244/Buy-Sell_Agreement_4244_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353573/","spamhaus"
+"353572","2020-04-29 06:36:38","https://dienmaycu.vn/rcckjv/Buy-Sell_Agreement_8596071_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353572/","spamhaus"
+"353571","2020-04-29 06:36:35","http://vaeqpu.329263.com/al/56057178/Buy-Sell_Agreement_56057178_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353571/","spamhaus"
 "353570","2020-04-29 06:36:30","https://www.loodgieterjoost.be/wp-content/uploads/2020/04/osiwprp/82152/Buy-Sell_Agreement_82152_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353570/","spamhaus"
 "353569","2020-04-29 06:36:28","http://85.217.170.105/mips","offline","malware_download","32-bit,elf,mips","https://urlhaus.abuse.ch/url/353569/","geenensp"
 "353568","2020-04-29 06:36:26","http://85.217.170.105/XXX.sh","offline","malware_download","script","https://urlhaus.abuse.ch/url/353568/","geenensp"
@@ -1153,15 +1540,15 @@
 "353557","2020-04-29 06:35:04","http://27.147.40.128:22976/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353557/","geenensp"
 "353556","2020-04-29 06:34:57","http://220.135.8.228:50594/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353556/","geenensp"
 "353555","2020-04-29 06:34:42","http://lakropack.com/s/Buy-Sell_Agreement_94827816_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353555/","spamhaus"
-"353554","2020-04-29 06:34:37","https://www.cinnamoncreations.com.au/h/Buy-Sell_Agreement_46257_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353554/","spamhaus"
-"353553","2020-04-29 06:34:32","https://wwealthllc.com/sjokmsq/Buy-Sell_Agreement_58805622_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353553/","spamhaus"
+"353554","2020-04-29 06:34:37","https://www.cinnamoncreations.com.au/h/Buy-Sell_Agreement_46257_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353554/","spamhaus"
+"353553","2020-04-29 06:34:32","https://wwealthllc.com/sjokmsq/Buy-Sell_Agreement_58805622_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353553/","spamhaus"
 "353552","2020-04-29 06:34:28","http://vaeqpu.329263.com/al/Buy-Sell_Agreement_62844279_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353552/","spamhaus"
 "353551","2020-04-29 06:34:24","http://lakropack.com/s/Buy-Sell_Agreement_723121_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353551/","spamhaus"
 "353550","2020-04-29 06:34:21","http://lakropack.com/s/Buy-Sell_Agreement_3132_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353550/","spamhaus"
 "353549","2020-04-29 06:34:17","http://veniceshop.ru/wp-content/uploads/2020/04/xwrxtgh/Buy-Sell_Agreement_64879608_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353549/","spamhaus"
-"353548","2020-04-29 06:34:15","http://rentaroom.ml/oqqthv/Buy-Sell_Agreement_3534_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353548/","spamhaus"
-"353547","2020-04-29 06:34:09","http://www.upendiveterinariovalencia.es/wp-content/uploads/2020/04/ywa/Buy-Sell_Agreement_1513_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353547/","spamhaus"
-"353546","2020-04-29 06:34:06","http://sportshlive.xyz/gzld/Buy-Sell_Agreement_52106_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353546/","spamhaus"
+"353548","2020-04-29 06:34:15","http://rentaroom.ml/oqqthv/Buy-Sell_Agreement_3534_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353548/","spamhaus"
+"353547","2020-04-29 06:34:09","http://www.upendiveterinariovalencia.es/wp-content/uploads/2020/04/ywa/Buy-Sell_Agreement_1513_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353547/","spamhaus"
+"353546","2020-04-29 06:34:06","http://sportshlive.xyz/gzld/Buy-Sell_Agreement_52106_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353546/","spamhaus"
 "353545","2020-04-29 06:34:01","http://hdlive-espntv.live-sportshd.website/bpg/Buy-Sell_Agreement_5643214_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353545/","spamhaus"
 "353544","2020-04-29 06:33:59","https://aliyousefpoor.com/urcu/Buy-Sell_Agreement_53675293_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353544/","spamhaus"
 "353543","2020-04-29 06:33:56","http://vasylivka.lebrada.gov.ua/wp-content/themes/calliope/mwqpxes/373191/Buy-Sell_Agreement_373191_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353543/","spamhaus"
@@ -1170,31 +1557,31 @@
 "353540","2020-04-29 06:33:15","http://tualarmasincuotas.cl.ipsoluciones.cl/ach/Buy-Sell_Agreement_06389_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353540/","spamhaus"
 "353539","2020-04-29 06:32:32","http://cyberemprende.cl/wjoh/Buy-Sell_Agreement_7762_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353539/","spamhaus"
 "353538","2020-04-29 06:32:29","http://avto-pro.hostenko.com/too/Buy-Sell_Agreement_148815_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353538/","spamhaus"
-"353537","2020-04-29 06:32:28","http://41.64.170.241:38406/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353537/","geenensp"
+"353537","2020-04-29 06:32:28","http://41.64.170.241:38406/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353537/","geenensp"
 "353536","2020-04-29 06:32:23","https://siseco.mx/wp-content/uploads/2020/04/beomqxc/5997272/Buy-Sell_Agreement_5997272_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353536/","spamhaus"
-"353535","2020-04-29 06:32:18","http://arowanafishforsale.com/dbmwl/03134/Buy-Sell_Agreement_03134_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353535/","spamhaus"
+"353535","2020-04-29 06:32:18","http://arowanafishforsale.com/dbmwl/03134/Buy-Sell_Agreement_03134_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353535/","spamhaus"
 "353534","2020-04-29 06:24:17","http://175.212.52.9:65408/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353534/","geenensp"
-"353533","2020-04-29 06:24:13","http://jjjexx.329263.com/vi/79300/Buy-Sell_Agreement_79300_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353533/","spamhaus"
+"353533","2020-04-29 06:24:13","http://jjjexx.329263.com/vi/79300/Buy-Sell_Agreement_79300_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353533/","spamhaus"
 "353532","2020-04-29 06:23:40","http://208.68.39.30/mips","offline","malware_download","32-bit,elf,mips","https://urlhaus.abuse.ch/url/353532/","geenensp"
 "353531","2020-04-29 06:23:37","http://208.68.39.30/EkSgbins.sh","offline","malware_download","script","https://urlhaus.abuse.ch/url/353531/","geenensp"
 "353530","2020-04-29 06:23:34","http://218.32.118.1:13579/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353530/","geenensp"
 "353529","2020-04-29 06:23:29","https://www.eposar.com.ar/mjpen/Buy-Sell_Agreement_1922_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353529/","spamhaus"
 "353528","2020-04-29 06:22:52","http://kandiandcolor.codeworkscanada.com/v/8289188/Buy-Sell_Agreement_8289188_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353528/","spamhaus"
 "353527","2020-04-29 06:22:19","http://myexpertca.in/fomi/0042/Buy-Sell_Agreement_0042_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353527/","spamhaus"
-"353526","2020-04-29 06:21:45","https://brenleyquartzgh.com/ga/3329/Buy-Sell_Agreement_3329_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353526/","spamhaus"
+"353526","2020-04-29 06:21:45","https://brenleyquartzgh.com/ga/3329/Buy-Sell_Agreement_3329_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353526/","spamhaus"
 "353525","2020-04-29 06:21:10","http://escarateeventos.ladevi.cl/yworbn/8064878/Buy-Sell_Agreement_8064878_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353525/","spamhaus"
-"353524","2020-04-29 06:20:07","http://lagalaxy88easy.329263.com/lbrnxxd/27873/Buy-Sell_Agreement_27873_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353524/","spamhaus"
+"353524","2020-04-29 06:20:07","http://lagalaxy88easy.329263.com/lbrnxxd/27873/Buy-Sell_Agreement_27873_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353524/","spamhaus"
 "353523","2020-04-29 06:19:34","https://www.foreveramericabrands.com/xaayvq/7084/Buy-Sell_Agreement_7084_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353523/","spamhaus"
 "353522","2020-04-29 06:10:03","https://pastebin.com/raw/ZpSk6dFU","offline","malware_download","None","https://urlhaus.abuse.ch/url/353522/","JayTHL"
 "353521","2020-04-29 06:07:39","http://199.83.206.58:57977/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353521/","Gandylyan1"
 "353520","2020-04-29 06:07:35","http://120.69.89.50:52503/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353520/","Gandylyan1"
-"353519","2020-04-29 06:07:30","http://125.41.82.28:48743/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353519/","Gandylyan1"
+"353519","2020-04-29 06:07:30","http://125.41.82.28:48743/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353519/","Gandylyan1"
 "353518","2020-04-29 06:07:26","http://42.235.55.173:55956/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353518/","Gandylyan1"
 "353517","2020-04-29 06:07:20","http://59.174.151.114:49181/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353517/","Gandylyan1"
 "353516","2020-04-29 06:06:56","http://221.160.177.226:3082/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353516/","Gandylyan1"
 "353515","2020-04-29 06:06:51","http://125.44.22.227:40734/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353515/","Gandylyan1"
 "353514","2020-04-29 06:06:43","http://117.93.216.98:49424/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353514/","Gandylyan1"
-"353513","2020-04-29 06:06:32","http://219.155.209.74:45121/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353513/","Gandylyan1"
+"353513","2020-04-29 06:06:32","http://219.155.209.74:45121/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353513/","Gandylyan1"
 "353512","2020-04-29 06:06:27","http://183.156.0.180:46599/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353512/","Gandylyan1"
 "353511","2020-04-29 06:06:19","http://115.55.197.69:47053/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353511/","Gandylyan1"
 "353510","2020-04-29 06:06:15","http://115.51.125.66:59405/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353510/","Gandylyan1"
@@ -1206,7 +1593,7 @@
 "353504","2020-04-29 06:05:12","http://116.114.95.232:39599/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353504/","Gandylyan1"
 "353503","2020-04-29 06:04:31","http://211.137.225.76:52437/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353503/","Gandylyan1"
 "353502","2020-04-29 06:04:18","http://183.130.71.167:60908/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353502/","Gandylyan1"
-"353501","2020-04-29 06:04:14","http://27.41.175.86:43919/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353501/","Gandylyan1"
+"353501","2020-04-29 06:04:14","http://27.41.175.86:43919/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353501/","Gandylyan1"
 "353500","2020-04-29 05:39:03","http://45.95.168.254:1691/dvrbot.sparc","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/353500/","zbetcheckin"
 "353499","2020-04-29 05:08:09","https://pastebin.com/raw/m8JBX3eU","offline","malware_download","None","https://urlhaus.abuse.ch/url/353499/","JayTHL"
 "353498","2020-04-29 05:08:04","https://pastebin.com/raw/JCD5St2R","offline","malware_download","None","https://urlhaus.abuse.ch/url/353498/","JayTHL"
@@ -1260,9 +1647,9 @@
 "353450","2020-04-29 03:05:11","http://211.137.225.56:45946/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353450/","Gandylyan1"
 "353449","2020-04-29 03:05:08","http://115.49.46.254:37608/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353449/","Gandylyan1"
 "353448","2020-04-29 03:05:04","http://111.43.223.182:55734/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353448/","Gandylyan1"
-"353447","2020-04-29 03:05:01","http://113.75.14.148:56538/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353447/","Gandylyan1"
+"353447","2020-04-29 03:05:01","http://113.75.14.148:56538/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353447/","Gandylyan1"
 "353446","2020-04-29 03:04:48","http://221.210.211.30:35859/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353446/","Gandylyan1"
-"353445","2020-04-29 03:04:42","http://1.246.223.6:3172/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353445/","Gandylyan1"
+"353445","2020-04-29 03:04:42","http://1.246.223.6:3172/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353445/","Gandylyan1"
 "353444","2020-04-29 03:04:38","http://111.43.223.43:35869/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353444/","Gandylyan1"
 "353443","2020-04-29 03:04:35","http://42.225.210.47:58194/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353443/","Gandylyan1"
 "353442","2020-04-29 03:04:31","http://211.137.225.44:37367/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353442/","Gandylyan1"
@@ -1285,7 +1672,7 @@
 "353425","2020-04-29 00:05:08","http://172.36.36.118:58959/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353425/","Gandylyan1"
 "353424","2020-04-29 00:04:36","http://103.100.222.101:33961/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353424/","Gandylyan1"
 "353423","2020-04-29 00:04:04","http://14.113.228.186:36522/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353423/","Gandylyan1"
-"353422","2020-04-29 00:03:32","http://111.40.79.79:49979/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353422/","Gandylyan1"
+"353422","2020-04-29 00:03:32","http://111.40.79.79:49979/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353422/","Gandylyan1"
 "353421","2020-04-29 00:03:27","http://116.114.95.234:43248/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353421/","Gandylyan1"
 "353420","2020-04-29 00:03:23","http://111.43.223.86:46764/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353420/","Gandylyan1"
 "353419","2020-04-29 00:03:19","http://216.180.117.190:57372/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353419/","Gandylyan1"
@@ -1332,15 +1719,15 @@
 "353378","2020-04-28 19:42:14","https://pastebin.com/raw/pNdajfcr","offline","malware_download","None","https://urlhaus.abuse.ch/url/353378/","JayTHL"
 "353377","2020-04-28 19:42:10","http://bookmytripping.com/tgxmxcm/Buy-Sell_Agreement_0929_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353377/","spamhaus"
 "353376","2020-04-28 19:42:06","http://canvasprint.ru/wp-content/uploads/2020/04/izrz/2285543/Buy-Sell_Agreement_2285543_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353376/","spamhaus"
-"353375","2020-04-28 19:36:31","http://rentaroom.ml/oqqthv/710814/Buy-Sell_Agreement_710814_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353375/","spamhaus"
+"353375","2020-04-28 19:36:31","http://rentaroom.ml/oqqthv/710814/Buy-Sell_Agreement_710814_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353375/","spamhaus"
 "353374","2020-04-28 19:36:26","https://siseco.mx/wp-content/uploads/2020/04/beomqxc/Buy-Sell_Agreement_19253_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353374/","spamhaus"
 "353373","2020-04-28 19:36:20","https://drwendyellis.com/laqrip/89870436/Buy-Sell_Agreement_89870436_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353373/","spamhaus"
-"353372","2020-04-28 19:36:07","http://arowanafishforsale.com/dbmwl/03121/Buy-Sell_Agreement_03121_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353372/","spamhaus"
+"353372","2020-04-28 19:36:07","http://arowanafishforsale.com/dbmwl/03121/Buy-Sell_Agreement_03121_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353372/","spamhaus"
 "353371","2020-04-28 19:32:05","http://kosslouer.com/uu/596088/Buy-Sell_Agreement_596088_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353371/","spamhaus"
-"353370","2020-04-28 19:32:03","http://healtina.com/xcaspvi/Buy-Sell_Agreement_1596675_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353370/","spamhaus"
+"353370","2020-04-28 19:32:03","http://healtina.com/xcaspvi/Buy-Sell_Agreement_1596675_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353370/","spamhaus"
 "353369","2020-04-28 19:27:13","https://rugab.se/c/81176/Buy-Sell_Agreement_81176_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353369/","spamhaus"
 "353368","2020-04-28 19:27:10","http://maharatal3zl.com/xdlycfp/2930651/Buy-Sell_Agreement_2930651_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353368/","spamhaus"
-"353367","2020-04-28 19:27:05","http://earningtipsbd.com/pn/Buy-Sell_Agreement_2344798_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353367/","spamhaus"
+"353367","2020-04-28 19:27:05","http://earningtipsbd.com/pn/Buy-Sell_Agreement_2344798_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353367/","spamhaus"
 "353366","2020-04-28 19:26:03","http://www.amodoutours.com/rretwxj/68562/Buy-Sell_Agreement_68562_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353366/","spamhaus"
 "353365","2020-04-28 19:25:24","http://qlifamily.org/homemap/defense.php","offline","malware_download","Dridex,zip","https://urlhaus.abuse.ch/url/353365/","malware_traffic"
 "353364","2020-04-28 19:25:18","https://wmagri.co.uk/wp-content/plugins/wordfence/modules/login-security/include.php","offline","malware_download","Dridex,zip","https://urlhaus.abuse.ch/url/353364/","malware_traffic"
@@ -1356,8 +1743,8 @@
 "353354","2020-04-28 19:24:22","https://www.dzyzz.cn/wp-content/plugins/apikey/zwj/7778718/Buy-Sell_Agreement_7778718_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353354/","spamhaus"
 "353353","2020-04-28 19:24:14","http://ufabet168168.329263.com/tmpf/Buy-Sell_Agreement_2467273_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353353/","spamhaus"
 "353352","2020-04-28 19:24:09","http://hdlive-espntv.live-sportshd.website/bpg/Buy-Sell_Agreement_7257829_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353352/","spamhaus"
-"353351","2020-04-28 19:24:07","http://kgfs3.329263.com/cvsf/Buy-Sell_Agreement_2272_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353351/","spamhaus"
-"353350","2020-04-28 19:24:03","http://bookmytripping.com/tgxmxcm/49493346/Buy-Sell_Agreement_49493346_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353350/","spamhaus"
+"353351","2020-04-28 19:24:07","http://kgfs3.329263.com/cvsf/Buy-Sell_Agreement_2272_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353351/","spamhaus"
+"353350","2020-04-28 19:24:03","http://bookmytripping.com/tgxmxcm/49493346/Buy-Sell_Agreement_49493346_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353350/","spamhaus"
 "353349","2020-04-28 19:19:17","http://filegotosecureothers.duckdns.org/dmb/vbc.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/353349/","abuse_ch"
 "353348","2020-04-28 19:19:13","http://vasylivka.lebrada.gov.ua/wp-content/themes/calliope/mwqpxes/Buy-Sell_Agreement_85618_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353348/","spamhaus"
 "353347","2020-04-28 19:17:19","http://vaeqpu.329263.com/al/7396/Buy-Sell_Agreement_7396_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353347/","spamhaus"
@@ -1366,20 +1753,20 @@
 "353344","2020-04-28 19:17:04","http://yucatanentiemporeal.com/wp-content/uploads/2020/04/nwl/Buy-Sell_Agreement_80104_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353344/","spamhaus"
 "353343","2020-04-28 19:04:56","https://paste.ee/r/Fb8Wd","offline","malware_download","Encoded","https://urlhaus.abuse.ch/url/353343/","Jouliok"
 "353342","2020-04-28 19:04:48","http://ptsslot.329263.com/royph/8816/Buy-Sell_Agreement_8816_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353342/","spamhaus"
-"353341","2020-04-28 19:04:32","http://rentaroom.ml/oqqthv/6490074/Buy-Sell_Agreement_6490074_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353341/","spamhaus"
-"353340","2020-04-28 19:04:29","https://how.ph/mrb/2579/Buy-Sell_Agreement_2579_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353340/","spamhaus"
+"353341","2020-04-28 19:04:32","http://rentaroom.ml/oqqthv/6490074/Buy-Sell_Agreement_6490074_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353341/","spamhaus"
+"353340","2020-04-28 19:04:29","https://how.ph/mrb/2579/Buy-Sell_Agreement_2579_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353340/","spamhaus"
 "353339","2020-04-28 19:04:21","http://yucatanentiemporeal.com/wp-content/uploads/2020/04/nwl/Buy-Sell_Agreement_46431540_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353339/","spamhaus"
 "353338","2020-04-28 19:04:17","http://hdlive-espntv.live-sportshd.website/bpg/5395355/Buy-Sell_Agreement_5395355_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353338/","spamhaus"
 "353337","2020-04-28 19:04:15","https://delmaestro.cl/wtdeng/82374/Buy-Sell_Agreement_82374_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353337/","spamhaus"
 "353336","2020-04-28 19:04:11","http://maharatal3zl.com/xdlycfp/Buy-Sell_Agreement_0922006_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353336/","spamhaus"
-"353335","2020-04-28 19:04:06","https://brenleyquartzgh.com/ga/Buy-Sell_Agreement_21615_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353335/","spamhaus"
-"353334","2020-04-28 19:03:02","http://fifa555easy.329263.com/x/38011086/Buy-Sell_Agreement_38011086_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353334/","spamhaus"
+"353335","2020-04-28 19:04:06","https://brenleyquartzgh.com/ga/Buy-Sell_Agreement_21615_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353335/","spamhaus"
+"353334","2020-04-28 19:03:02","http://fifa555easy.329263.com/x/38011086/Buy-Sell_Agreement_38011086_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353334/","spamhaus"
 "353333","2020-04-28 19:02:55","http://escarateeventos.ladevi.cl/yworbn/44978/Buy-Sell_Agreement_44978_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353333/","spamhaus"
 "353332","2020-04-28 19:02:52","https://nmal.info/ntsphsl/84675/Buy-Sell_Agreement_84675_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353332/","spamhaus"
-"353331","2020-04-28 19:02:50","http://lagalaxy88easy.329263.com/lbrnxxd/Buy-Sell_Agreement_7744679_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353331/","spamhaus"
+"353331","2020-04-28 19:02:50","http://lagalaxy88easy.329263.com/lbrnxxd/Buy-Sell_Agreement_7744679_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353331/","spamhaus"
 "353330","2020-04-28 19:02:45","http://veniceshop.ru/wp-content/uploads/2020/04/xwrxtgh/Buy-Sell_Agreement_624286_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353330/","spamhaus"
 "353329","2020-04-28 19:02:42","https://delmaestro.cl/wtdeng/Buy-Sell_Agreement_3701_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353329/","spamhaus"
-"353328","2020-04-28 19:02:38","https://brenleyquartzgh.com/ga/91417284/Buy-Sell_Agreement_91417284_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353328/","spamhaus"
+"353328","2020-04-28 19:02:38","https://brenleyquartzgh.com/ga/91417284/Buy-Sell_Agreement_91417284_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353328/","spamhaus"
 "353327","2020-04-28 19:02:33","http://elabugablog.ru/zzj/Buy-Sell_Agreement_10640_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353327/","spamhaus"
 "353326","2020-04-28 19:02:30","https://dienmaycu.vn/rcckjv/4926121/Buy-Sell_Agreement_4926121_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353326/","spamhaus"
 "353325","2020-04-28 19:02:26","http://avto-pro.hostenko.com/too/Buy-Sell_Agreement_738797_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353325/","spamhaus"
@@ -1388,20 +1775,20 @@
 "353322","2020-04-28 19:01:39","http://livetvsports.ml/z/5453506/Buy-Sell_Agreement_5453506_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353322/","spamhaus"
 "353321","2020-04-28 19:01:32","http://88.156.169.98:59344/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353321/","geenensp"
 "353320","2020-04-28 19:01:22","https://aliyousefpoor.com/urcu/Buy-Sell_Agreement_99219_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353320/","spamhaus"
-"353319","2020-04-28 19:01:19","http://www.upendiveterinariovalencia.es/wp-content/uploads/2020/04/ywa/Buy-Sell_Agreement_88438622_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353319/","spamhaus"
-"353318","2020-04-28 19:01:13","http://livetvsports.ml/z/38282630/Buy-Sell_Agreement_38282630_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353318/","spamhaus"
+"353319","2020-04-28 19:01:19","http://www.upendiveterinariovalencia.es/wp-content/uploads/2020/04/ywa/Buy-Sell_Agreement_88438622_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353319/","spamhaus"
+"353318","2020-04-28 19:01:13","http://livetvsports.ml/z/38282630/Buy-Sell_Agreement_38282630_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353318/","spamhaus"
 "353317","2020-04-28 19:00:38","https://nmal.info/ntsphsl/8805/Buy-Sell_Agreement_8805_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353317/","spamhaus"
 "353316","2020-04-28 19:00:05","http://yucatanentiemporeal.com/wp-content/uploads/2020/04/nwl/29202/Buy-Sell_Agreement_29202_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353316/","spamhaus"
 "353315","2020-04-28 18:59:33","http://elabugablog.ru/zzj/Buy-Sell_Agreement_67570_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353315/","spamhaus"
 "353314","2020-04-28 18:27:03","http://88.218.16.37/NAnazCgFwSxQ8sK.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/353314/","zbetcheckin"
 "353313","2020-04-28 18:24:04","http://88.218.16.37/D3nXjwy5EMjHNdM.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/353313/","zbetcheckin"
 "353312","2020-04-28 18:22:08","https://digibookspublishing.com/license.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/353312/","zbetcheckin"
-"353311","2020-04-28 18:21:10","http://modcloudserver.eu/ahihi/rawone.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/353311/","zbetcheckin"
+"353311","2020-04-28 18:21:10","http://modcloudserver.eu/ahihi/rawone.exe","online","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/353311/","zbetcheckin"
 "353310","2020-04-28 18:20:38","http://modcloudserver.eu/stanz/stanz.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/353310/","zbetcheckin"
-"353309","2020-04-28 18:13:17","http://ufabet168168.329263.com/tmpf/9173652/Buy-Sell_Agreement_9173652_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353309/","spamhaus"
+"353309","2020-04-28 18:13:17","http://ufabet168168.329263.com/tmpf/9173652/Buy-Sell_Agreement_9173652_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353309/","spamhaus"
 "353308","2020-04-28 18:13:03","http://bookmytripping.com/tgxmxcm/Buy-Sell_Agreement_04173399_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353308/","spamhaus"
-"353307","2020-04-28 18:08:09","http://mlbfreestream.gq/n/042516/Buy-Sell_Agreement_042516_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353307/","spamhaus"
-"353306","2020-04-28 18:08:05","http://healtina.com/xcaspvi/62858/Buy-Sell_Agreement_62858_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353306/","spamhaus"
+"353307","2020-04-28 18:08:09","http://mlbfreestream.gq/n/042516/Buy-Sell_Agreement_042516_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353307/","spamhaus"
+"353306","2020-04-28 18:08:05","http://healtina.com/xcaspvi/62858/Buy-Sell_Agreement_62858_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353306/","spamhaus"
 "353305","2020-04-28 18:06:48","http://bbfjjf8.com/we20lo85/aio0i32p.php?l=nok12.cab","offline","malware_download","geofenced,us,USA,Valak","https://urlhaus.abuse.ch/url/353305/","JAMESWT_MHT"
 "353304","2020-04-28 18:06:46","http://bbfjjf8.com/we20lo85/aio0i32p.php?l=nok11.cab","offline","malware_download","geofenced,us,USA,Valak","https://urlhaus.abuse.ch/url/353304/","JAMESWT_MHT"
 "353303","2020-04-28 18:06:44","http://bbfjjf8.com/we20lo85/aio0i32p.php?l=nok10.cab","offline","malware_download","geofenced,us,USA,Valak","https://urlhaus.abuse.ch/url/353303/","JAMESWT_MHT"
@@ -1413,15 +1800,15 @@
 "353297","2020-04-28 18:06:33","http://bbfjjf8.com/we20lo85/aio0i32p.php?l=nok3.cab","offline","malware_download","geofenced,us,USA,Valak","https://urlhaus.abuse.ch/url/353297/","JAMESWT_MHT"
 "353296","2020-04-28 18:06:28","http://bbfjjf8.com/we20lo85/aio0i32p.php?l=nok2.cab","offline","malware_download","geofenced,us,USA,Valak","https://urlhaus.abuse.ch/url/353296/","JAMESWT_MHT"
 "353295","2020-04-28 18:06:23","http://bbfjjf8.com/we20lo85/aio0i32p.php?l=nok1.cab","offline","malware_download","geofenced,us,USA,Valak","https://urlhaus.abuse.ch/url/353295/","JAMESWT_MHT"
-"353294","2020-04-28 18:06:19","https://dienmaycu.vn/rcckjv/Buy-Sell_Agreement_4487_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353294/","spamhaus"
+"353294","2020-04-28 18:06:19","https://dienmaycu.vn/rcckjv/Buy-Sell_Agreement_4487_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353294/","spamhaus"
 "353293","2020-04-28 18:06:11","https://www.foreveramericabrands.com/xaayvq/7554389/Buy-Sell_Agreement_7554389_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353293/","spamhaus"
 "353292","2020-04-28 18:06:06","https://www.mfpburundi.bi/wp-content/uploads/2020/04/pb/Buy-Sell_Agreement_36241823_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353292/","spamhaus"
 "353291","2020-04-28 18:05:31","http://182.116.107.161:50650/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353291/","Gandylyan1"
 "353290","2020-04-28 18:05:27","http://112.123.2.207:53970/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353290/","Gandylyan1"
 "353289","2020-04-28 18:05:18","http://77.43.236.254:43288/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353289/","Gandylyan1"
-"353288","2020-04-28 18:04:46","http://122.241.24.146:53809/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353288/","Gandylyan1"
+"353288","2020-04-28 18:04:46","http://122.241.24.146:53809/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353288/","Gandylyan1"
 "353287","2020-04-28 18:04:42","http://31.146.124.61:36542/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353287/","Gandylyan1"
-"353286","2020-04-28 18:04:39","http://1.246.222.41:4743/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353286/","Gandylyan1"
+"353286","2020-04-28 18:04:39","http://1.246.222.41:4743/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353286/","Gandylyan1"
 "353285","2020-04-28 18:04:33","http://182.126.238.159:48829/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353285/","Gandylyan1"
 "353284","2020-04-28 18:04:29","http://111.42.103.45:56813/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353284/","Gandylyan1"
 "353283","2020-04-28 18:04:26","http://42.234.247.85:45291/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353283/","Gandylyan1"
@@ -1433,7 +1820,7 @@
 "353277","2020-04-28 17:57:08","http://avto-pro.hostenko.com/too/4955024/Buy-Sell_Agreement_4955024_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353277/","spamhaus"
 "353276","2020-04-28 17:56:33","http://www.gainsdirectory.com/imtlt/Buy-Sell_Agreement_7954433_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353276/","spamhaus"
 "353275","2020-04-28 17:51:34","http://genqur.com/_flox.exe","offline","malware_download","Dridex,exe","https://urlhaus.abuse.ch/url/353275/","abuse_ch"
-"353274","2020-04-28 17:47:13","https://royalplusmobile.ir/wp-content/uploads/2020/04/ohzjt/22076/Buy-Sell_Agreement_22076_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353274/","spamhaus"
+"353274","2020-04-28 17:47:13","https://royalplusmobile.ir/wp-content/uploads/2020/04/ohzjt/22076/Buy-Sell_Agreement_22076_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353274/","spamhaus"
 "353273","2020-04-28 17:47:07","http://escarateeventos.ladevi.cl/yworbn/1682/Buy-Sell_Agreement_1682_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353273/","spamhaus"
 "353272","2020-04-28 17:46:14","http://yucatanentiemporeal.com/wp-content/uploads/2020/04/nwl/1889533/Buy-Sell_Agreement_1889533_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353272/","spamhaus"
 "353271","2020-04-28 17:46:12","http://maharatal3zl.com/xdlycfp/38973/Buy-Sell_Agreement_38973_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353271/","spamhaus"
@@ -1443,15 +1830,15 @@
 "353267","2020-04-28 17:45:50","http://djonur24.de/hdc/Buy-Sell_Agreement_6780_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353267/","spamhaus"
 "353266","2020-04-28 17:45:41","http://hdlive-espntv.live-sportshd.website/bpg/Buy-Sell_Agreement_43738_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353266/","spamhaus"
 "353265","2020-04-28 17:45:23","https://drwendyellis.com/laqrip/Buy-Sell_Agreement_456989_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353265/","spamhaus"
-"353264","2020-04-28 17:45:18","http://arowanafishforsale.com/dbmwl/Buy-Sell_Agreement_2539_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353264/","spamhaus"
+"353264","2020-04-28 17:45:18","http://arowanafishforsale.com/dbmwl/Buy-Sell_Agreement_2539_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353264/","spamhaus"
 "353263","2020-04-28 17:34:26","http://www.alnahrainfilminstitute.com/kuhjz/Buy-Sell_Agreement_8555_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353263/","spamhaus"
 "353262","2020-04-28 17:34:20","https://nmal.info/ntsphsl/Buy-Sell_Agreement_726528_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353262/","spamhaus"
-"353261","2020-04-28 17:34:15","http://earningtipsbd.com/pn/Buy-Sell_Agreement_10363433_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353261/","spamhaus"
+"353261","2020-04-28 17:34:15","http://earningtipsbd.com/pn/Buy-Sell_Agreement_10363433_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353261/","spamhaus"
 "353260","2020-04-28 17:34:09","http://www.alnahrainfilminstitute.com/kuhjz/Buy-Sell_Agreement_94655_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353260/","spamhaus"
-"353259","2020-04-28 17:34:07","http://rentaroom.ml/oqqthv/9509826/Buy-Sell_Agreement_9509826_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353259/","spamhaus"
-"353258","2020-04-28 17:17:18","http://jjjexx.329263.com/vi/Buy-Sell_Agreement_6069_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353258/","spamhaus"
-"353257","2020-04-28 17:17:11","http://jjjexx.329263.com/vi/786917/Buy-Sell_Agreement_786917_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353257/","spamhaus"
-"353256","2020-04-28 17:17:05","http://mlbfreestream.gq/n/Buy-Sell_Agreement_764238_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353256/","spamhaus"
+"353259","2020-04-28 17:34:07","http://rentaroom.ml/oqqthv/9509826/Buy-Sell_Agreement_9509826_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353259/","spamhaus"
+"353258","2020-04-28 17:17:18","http://jjjexx.329263.com/vi/Buy-Sell_Agreement_6069_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353258/","spamhaus"
+"353257","2020-04-28 17:17:11","http://jjjexx.329263.com/vi/786917/Buy-Sell_Agreement_786917_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353257/","spamhaus"
+"353256","2020-04-28 17:17:05","http://mlbfreestream.gq/n/Buy-Sell_Agreement_764238_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353256/","spamhaus"
 "353255","2020-04-28 17:16:14","https://miraab.ir/wp-content/uploads/2020/04/tk/298413/Buy-Sell_Agreement_298413_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353255/","spamhaus"
 "353254","2020-04-28 17:16:10","http://sportstrem.gq/imqmxkw/0835/Buy-Sell_Agreement_0835_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353254/","spamhaus"
 "353253","2020-04-28 17:14:18","http://www.alnahrainfilminstitute.com/kuhjz/Buy-Sell_Agreement_744702_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353253/","spamhaus"
@@ -1464,12 +1851,12 @@
 "353246","2020-04-28 17:06:04","http://cpagrace.cl/k/Buy-Sell_Agreement_93929_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353246/","spamhaus"
 "353245","2020-04-28 17:04:56","http://79.179.199.159:19730/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353245/","geenensp"
 "353244","2020-04-28 17:04:53","https://alucard.online/yarx/Buy-Sell_Agreement_8227546_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353244/","spamhaus"
-"353243","2020-04-28 17:04:48","https://www.cinnamoncreations.com.au/h/44021075/Buy-Sell_Agreement_44021075_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353243/","spamhaus"
+"353243","2020-04-28 17:04:48","https://www.cinnamoncreations.com.au/h/44021075/Buy-Sell_Agreement_44021075_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353243/","spamhaus"
 "353242","2020-04-28 17:04:36","http://www.amodoutours.com/rretwxj/Buy-Sell_Agreement_76046632_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353242/","spamhaus"
 "353241","2020-04-28 17:04:34","https://drwendyellis.com/laqrip/Buy-Sell_Agreement_548596_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353241/","spamhaus"
 "353240","2020-04-28 17:04:31","https://delmaestro.cl/wtdeng/0829/Buy-Sell_Agreement_0829_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353240/","spamhaus"
-"353239","2020-04-28 17:04:27","http://ufabet168168.329263.com/tmpf/Buy-Sell_Agreement_8854_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353239/","spamhaus"
-"353238","2020-04-28 17:04:20","http://arowanafishforsale.com/dbmwl/Buy-Sell_Agreement_1148_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353238/","spamhaus"
+"353239","2020-04-28 17:04:27","http://ufabet168168.329263.com/tmpf/Buy-Sell_Agreement_8854_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353239/","spamhaus"
+"353238","2020-04-28 17:04:20","http://arowanafishforsale.com/dbmwl/Buy-Sell_Agreement_1148_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353238/","spamhaus"
 "353237","2020-04-28 17:04:09","http://kosslouer.com/uu/29800863/Buy-Sell_Agreement_29800863_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353237/","spamhaus"
 "353236","2020-04-28 17:04:06","http://djonur24.de/hdc/Buy-Sell_Agreement_5964970_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353236/","spamhaus"
 "353235","2020-04-28 17:01:30","http://denverktrade.xyz/css/bin_nSySIpsJT214.bin","offline","malware_download","encrypted,GuLoader,opendir","https://urlhaus.abuse.ch/url/353235/","abuse_ch"
@@ -1479,7 +1866,7 @@
 "353231","2020-04-28 17:01:05","http://denverktrade.xyz/css/bin_BgdIEZ91.bin","offline","malware_download","encrypted,GuLoader,opendir","https://urlhaus.abuse.ch/url/353231/","abuse_ch"
 "353230","2020-04-28 17:00:07","http://denverktrade.xyz/css/bin_KkhYIB85.bin","offline","malware_download","encrypted,Formbook,GuLoader,opendir","https://urlhaus.abuse.ch/url/353230/","abuse_ch"
 "353229","2020-04-28 16:52:25","http://amedeoscognamiglio.329263.com/i/8825/Buy-Sell_Agreement_8825_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353229/","spamhaus"
-"353228","2020-04-28 16:52:22","http://anadolutatili.com/xtfdux/1648/Buy-Sell_Agreement_1648_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353228/","spamhaus"
+"353228","2020-04-28 16:52:22","http://anadolutatili.com/xtfdux/1648/Buy-Sell_Agreement_1648_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353228/","spamhaus"
 "353227","2020-04-28 16:52:19","https://www.foreveramericabrands.com/xaayvq/4629/Buy-Sell_Agreement_4629_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353227/","spamhaus"
 "353226","2020-04-28 16:52:16","http://kosslouer.com/uu/3207/Buy-Sell_Agreement_3207_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353226/","spamhaus"
 "353225","2020-04-28 16:52:13","https://www.dzyzz.cn/wp-content/plugins/apikey/zwj/24506466/Buy-Sell_Agreement_24506466_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353225/","spamhaus"
@@ -1487,7 +1874,7 @@
 "353223","2020-04-28 16:52:02","http://yucatanentiemporeal.com/wp-content/uploads/2020/04/nwl/000923/Buy-Sell_Agreement_000923_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353223/","spamhaus"
 "353222","2020-04-28 16:51:56","http://cyberemprende.cl/wjoh/Buy-Sell_Agreement_01828_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353222/","spamhaus"
 "353221","2020-04-28 16:51:48","https://wwealthllc.com/sjokmsq/Buy-Sell_Agreement_267705_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353221/","spamhaus"
-"353220","2020-04-28 16:51:44","http://ufabet168168.329263.com/tmpf/13339699/Buy-Sell_Agreement_13339699_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353220/","spamhaus"
+"353220","2020-04-28 16:51:44","http://ufabet168168.329263.com/tmpf/13339699/Buy-Sell_Agreement_13339699_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353220/","spamhaus"
 "353219","2020-04-28 16:51:39","https://aliyousefpoor.com/urcu/Buy-Sell_Agreement_173827_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353219/","spamhaus"
 "353218","2020-04-28 16:51:35","https://www.dzyzz.cn/wp-content/plugins/apikey/zwj/Buy-Sell_Agreement_0131373_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353218/","spamhaus"
 "353217","2020-04-28 16:51:20","http://elabugablog.ru/zzj/Buy-Sell_Agreement_956935_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353217/","spamhaus"
@@ -1576,8 +1963,8 @@
 "353134","2020-04-28 14:19:11","http://arcyten.cl/iulbxki/88888.png","offline","malware_download","exe,Qakbot,Quakbot,spx107","https://urlhaus.abuse.ch/url/353134/","lazyactivist192"
 "353133","2020-04-28 14:19:07","http://clair-salon.info/docs_xgy/55555.png","offline","malware_download","exe,Qakbot,Quakbot,spx106","https://urlhaus.abuse.ch/url/353133/","lazyactivist192"
 "353132","2020-04-28 14:18:55","http://svvlive.com/docs_fbz/55555.png","offline","malware_download","exe,Qakbot,Quakbot,spx106","https://urlhaus.abuse.ch/url/353132/","lazyactivist192"
-"353131","2020-04-28 14:18:50","http://tianmaouae.com/docs_9qu/55555.png","offline","malware_download","exe,Qakbot,Quakbot,spx106","https://urlhaus.abuse.ch/url/353131/","lazyactivist192"
-"353130","2020-04-28 14:18:40","http://beforeshithappens.com/docs_2re/55555.png","online","malware_download","exe,Qakbot,Quakbot,spx106","https://urlhaus.abuse.ch/url/353130/","lazyactivist192"
+"353131","2020-04-28 14:18:50","http://tianmaouae.com/docs_9qu/55555.png","online","malware_download","exe,Qakbot,Quakbot,spx106","https://urlhaus.abuse.ch/url/353131/","lazyactivist192"
+"353130","2020-04-28 14:18:40","http://beforeshithappens.com/docs_2re/55555.png","offline","malware_download","exe,Qakbot,Quakbot,spx106","https://urlhaus.abuse.ch/url/353130/","lazyactivist192"
 "353129","2020-04-28 14:18:35","http://themmacoach.com/wp-content/uploads/2020/04/docs_cv0/55555.png","offline","malware_download","exe,Qakbot,Quakbot,spx106","https://urlhaus.abuse.ch/url/353129/","lazyactivist192"
 "353128","2020-04-28 14:18:30","http://y-sani.com/docs_bcx/55555.png","offline","malware_download","exe,Qakbot,Quakbot,spx106","https://urlhaus.abuse.ch/url/353128/","lazyactivist192"
 "353127","2020-04-28 14:05:12","http://1.246.223.15:3221/","online","malware_download","None","https://urlhaus.abuse.ch/url/353127/","JayTHL"
@@ -1697,11 +2084,11 @@
 "353013","2020-04-28 07:36:17","https://altatecnica.com.mx/wp-content/uploads/2020/04/docs_qvi/8452/Buy-Sell%20Agreement_8452_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353013/","spamhaus"
 "353012","2020-04-28 07:36:14","https://www.h2obbs.cn/wp-content/themes/calliope/docs_3kj/7827121/Buy-Sell%20Agreement_7827121_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353012/","spamhaus"
 "353011","2020-04-28 07:36:08","https://darazexpress.pk/wp-content/uploads/2020/04/docs_7tp/471889/Buy-Sell%20Agreement_471889_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353011/","spamhaus"
-"353010","2020-04-28 07:36:06","https://pakdesighee.com/wp-content/uploads/2020/04/docs_l9e/5537011/Buy-Sell%20Agreement_5537011_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353010/","spamhaus"
-"353009","2020-04-28 07:36:03","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/1026888/Buy-Sell%20Agreement_1026888_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353009/","spamhaus"
-"353008","2020-04-28 07:35:59","https://pakdesighee.com/wp-content/uploads/2020/04/docs_l9e/Buy-Sell%20Agreement_5519370_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353008/","spamhaus"
+"353010","2020-04-28 07:36:06","https://pakdesighee.com/wp-content/uploads/2020/04/docs_l9e/5537011/Buy-Sell%20Agreement_5537011_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353010/","spamhaus"
+"353009","2020-04-28 07:36:03","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/1026888/Buy-Sell%20Agreement_1026888_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353009/","spamhaus"
+"353008","2020-04-28 07:35:59","https://pakdesighee.com/wp-content/uploads/2020/04/docs_l9e/Buy-Sell%20Agreement_5519370_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353008/","spamhaus"
 "353007","2020-04-28 07:35:55","http://orujedu.com/wp-content/uploads/2020/04/docs_f8n/02449/Buy-Sell%20Agreement_02449_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353007/","spamhaus"
-"353006","2020-04-28 07:35:51","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/Buy-Sell%20Agreement_7223_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353006/","spamhaus"
+"353006","2020-04-28 07:35:51","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/Buy-Sell%20Agreement_7223_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353006/","spamhaus"
 "353005","2020-04-28 07:35:36","https://www.patrickchan-hk.net/wp-content/uploads/2020/04/docs_csa/Buy-Sell%20Agreement_20133_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353005/","spamhaus"
 "353004","2020-04-28 07:35:28","https://darazexpress.pk/wp-content/uploads/2020/04/docs_7tp/31086224/Buy-Sell%20Agreement_31086224_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353004/","spamhaus"
 "353003","2020-04-28 07:35:25","http://www.running-bike.com/docs_155/7449/Buy-Sell%20Agreement_7449_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353003/","spamhaus"
@@ -1710,30 +2097,30 @@
 "353000","2020-04-28 07:32:28","http://84.54.144.151:29847/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353000/","geenensp"
 "352999","2020-04-28 07:32:23","https://heavenif.co.za/blog/wp-content/themes/calliope/docs_kwc/608349/Buy-Sell%20Agreement_608349_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352999/","spamhaus"
 "352998","2020-04-28 07:32:14","http://www.running-bike.com/docs_155/Buy-Sell%20Agreement_7169205_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352998/","spamhaus"
-"352997","2020-04-28 07:32:10","https://www.patrickchan-hk.net/wp-content/uploads/2020/04/docs_csa/Buy-Sell%20Agreement_6745783_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352997/","spamhaus"
+"352997","2020-04-28 07:32:10","https://www.patrickchan-hk.net/wp-content/uploads/2020/04/docs_csa/Buy-Sell%20Agreement_6745783_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352997/","spamhaus"
 "352996","2020-04-28 07:32:02","https://mindseed.in/blog/wp-content/uploads/2020/04/docs_yfg/698283/Buy-Sell%20Agreement_698283_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352996/","spamhaus"
-"352995","2020-04-28 07:31:59","https://pakdesighee.com/wp-content/uploads/2020/04/docs_l9e/Buy-Sell%20Agreement_563232_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352995/","spamhaus"
+"352995","2020-04-28 07:31:59","https://pakdesighee.com/wp-content/uploads/2020/04/docs_l9e/Buy-Sell%20Agreement_563232_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352995/","spamhaus"
 "352994","2020-04-28 07:31:56","https://darazexpress.pk/wp-content/uploads/2020/04/docs_7tp/Buy-Sell%20Agreement_5299045_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352994/","spamhaus"
 "352993","2020-04-28 07:31:54","https://www.patrickchan-hk.net/wp-content/uploads/2020/04/docs_csa/Buy-Sell%20Agreement_78170227_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352993/","spamhaus"
 "352992","2020-04-28 07:31:46","https://www.leaksfly.com/docs_1tj/71964624/Buy-Sell%20Agreement_71964624_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352992/","spamhaus"
-"352991","2020-04-28 07:31:44","https://heavenif.co.za/blog/wp-content/themes/calliope/docs_kwc/Buy-Sell%20Agreement_730298_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352991/","spamhaus"
+"352991","2020-04-28 07:31:44","https://heavenif.co.za/blog/wp-content/themes/calliope/docs_kwc/Buy-Sell%20Agreement_730298_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352991/","spamhaus"
 "352990","2020-04-28 07:31:41","https://www.teleporterhire.ie/wp-content/uploads/2020/04/docs_1sn/6641/Buy-Sell%20Agreement_6641_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352990/","spamhaus"
 "352989","2020-04-28 07:31:39","https://www.internaut.in/wp-content/uploads/2020/04/docs_kl7/Buy-Sell%20Agreement_4849567_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352989/","spamhaus"
 "352988","2020-04-28 07:31:07","https://parmisco.com/docs_mc0/5349/Buy-Sell%20Agreement_5349_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352988/","spamhaus"
 "352987","2020-04-28 07:31:04","https://youngspiritshop.com/docs_8s0/9072097/Buy-Sell%20Agreement_9072097_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352987/","spamhaus"
 "352986","2020-04-28 07:30:47","https://www.teleporterhire.ie/wp-content/uploads/2020/04/docs_1sn/Buy-Sell%20Agreement_11948_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352986/","spamhaus"
-"352985","2020-04-28 07:30:15","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/114946/Buy-Sell%20Agreement_114946_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352985/","spamhaus"
+"352985","2020-04-28 07:30:15","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/114946/Buy-Sell%20Agreement_114946_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352985/","spamhaus"
 "352984","2020-04-28 07:29:41","https://blog.macwap.com/wp-content/themes/calliope/docs_wdp/52459011/Buy-Sell%20Agreement_52459011_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352984/","spamhaus"
 "352983","2020-04-28 07:29:06","https://www.leaksfly.com/docs_1tj/93939/Buy-Sell%20Agreement_93939_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352983/","spamhaus"
 "352982","2020-04-28 07:28:34","https://heavenif.co.za/blog/wp-content/themes/calliope/docs_kwc/Buy-Sell%20Agreement_15176424_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352982/","spamhaus"
 "352981","2020-04-28 07:18:14","https://formadiksiuij.com/wp-content/uploads/2020/04/docs_25c/63052377/Buy-Sell%20Agreement_63052377_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352981/","spamhaus"
-"352980","2020-04-28 07:17:40","http://175.212.31.241:59527/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/352980/","geenensp"
+"352980","2020-04-28 07:17:40","http://175.212.31.241:59527/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/352980/","geenensp"
 "352979","2020-04-28 07:17:35","http://5.80.68.84:21447/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/352979/","geenensp"
 "352978","2020-04-28 07:17:32","https://minimalisku.com/wp-content/uploads/2020/04/docs_tp8/1447/Buy-Sell%20Agreement_1447_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352978/","spamhaus"
-"352977","2020-04-28 07:16:58","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/Buy-Sell%20Agreement_55619230_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352977/","spamhaus"
+"352977","2020-04-28 07:16:58","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/Buy-Sell%20Agreement_55619230_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352977/","spamhaus"
 "352976","2020-04-28 07:16:23","https://www.h2obbs.cn/wp-content/themes/calliope/docs_3kj/2377504/Buy-Sell%20Agreement_2377504_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352976/","spamhaus"
 "352975","2020-04-28 07:16:17","https://www.netfeed.club/wp-content/themes/calliope/docs_wd2/49560/Buy-Sell%20Agreement_49560_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352975/","spamhaus"
-"352974","2020-04-28 07:16:14","https://www.patrickchan-hk.net/wp-content/uploads/2020/04/docs_csa/37397/Buy-Sell%20Agreement_37397_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352974/","spamhaus"
+"352974","2020-04-28 07:16:14","https://www.patrickchan-hk.net/wp-content/uploads/2020/04/docs_csa/37397/Buy-Sell%20Agreement_37397_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352974/","spamhaus"
 "352973","2020-04-28 07:16:03","https://www.tulsairishpub.com/blog/wp-content/themes/calliope/docs_khi/Buy-Sell%20Agreement_56428125_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352973/","spamhaus"
 "352972","2020-04-28 07:05:05","http://45.249.91.173/AAddropboxusercontent52t2jofjdp8lir61P9A8Ed2an8B0G4YF1LIhiMK156","offline","malware_download","AveMariaRAT,Encoded,rat","https://urlhaus.abuse.ch/url/352972/","abuse_ch"
 "352971","2020-04-28 07:01:47","https://mindseed.in/blog/wp-content/uploads/2020/04/docs_yfg/97263/Buy-Sell%20Agreement_97263_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352971/","spamhaus"
@@ -1743,24 +2130,24 @@
 "352967","2020-04-28 07:01:23","https://parmisco.com/docs_mc0/5530046/Buy-Sell%20Agreement_5530046_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352967/","spamhaus"
 "352966","2020-04-28 07:01:19","https://bestappliances.in/wp-content/uploads/2020/04/docs_0mg/5937/Buy-Sell%20Agreement_5937_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352966/","spamhaus"
 "352965","2020-04-28 07:01:14","https://bestappliances.in/wp-content/uploads/2020/04/docs_0mg/Buy-Sell%20Agreement_6520972_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352965/","spamhaus"
-"352964","2020-04-28 07:01:12","https://pakdesighee.com/wp-content/uploads/2020/04/docs_l9e/0415302/Buy-Sell%20Agreement_0415302_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352964/","spamhaus"
+"352964","2020-04-28 07:01:12","https://pakdesighee.com/wp-content/uploads/2020/04/docs_l9e/0415302/Buy-Sell%20Agreement_0415302_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352964/","spamhaus"
 "352963","2020-04-28 07:01:10","https://www.vagtachobrasil.com/wp-content/uploads/2020/04/docs_w7f/27448/Buy-Sell%20Agreement_27448_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352963/","spamhaus"
 "352962","2020-04-28 07:01:06","https://ftvlicenses.in/wp-content/uploads/2020/04/docs_ypk/Buy-Sell%20Agreement_13192921_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352962/","spamhaus"
 "352961","2020-04-28 07:00:34","https://www.netfeed.club/wp-content/themes/calliope/docs_wd2/Buy-Sell%20Agreement_401858_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352961/","spamhaus"
 "352960","2020-04-28 06:59:59","https://youngspiritshop.com/docs_8s0/7534976/Buy-Sell%20Agreement_7534976_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352960/","spamhaus"
 "352959","2020-04-28 06:59:26","https://blog.macwap.com/wp-content/themes/calliope/docs_wdp/5618/Buy-Sell%20Agreement_5618_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352959/","spamhaus"
-"352958","2020-04-28 06:58:51","https://ticte.in/wp-content/uploads/2020/04/docs_o2i/6894097/Buy-Sell%20Agreement_6894097_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352958/","spamhaus"
-"352957","2020-04-28 06:58:18","https://heavenif.co.za/blog/wp-content/themes/calliope/docs_kwc/34870/Buy-Sell%20Agreement_34870_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352957/","spamhaus"
+"352958","2020-04-28 06:58:51","https://ticte.in/wp-content/uploads/2020/04/docs_o2i/6894097/Buy-Sell%20Agreement_6894097_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352958/","spamhaus"
+"352957","2020-04-28 06:58:18","https://heavenif.co.za/blog/wp-content/themes/calliope/docs_kwc/34870/Buy-Sell%20Agreement_34870_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352957/","spamhaus"
 "352956","2020-04-28 06:57:43","https://altatecnica.com.mx/wp-content/uploads/2020/04/docs_qvi/Buy-Sell%20Agreement_6410_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352956/","spamhaus"
 "352955","2020-04-28 06:57:09","https://mirandaspaintingca.com/wp-content/uploads/2020/04/docs_kjk/8850608/Buy-Sell%20Agreement_8850608_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352955/","spamhaus"
 "352954","2020-04-28 06:56:35","https://www.tulsairishpub.com/blog/wp-content/themes/calliope/docs_khi/Buy-Sell%20Agreement_1249_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352954/","spamhaus"
 "352953","2020-04-28 06:54:36","https://theholistictrainer.com/Mycs.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/352953/","abuse_ch"
-"352952","2020-04-28 06:49:10","http://castmart.ga/~zadmin/xcloud/gold_TtBaWDj152.bin","offline","malware_download","encrypted,GuLoader,Loki","https://urlhaus.abuse.ch/url/352952/","abuse_ch"
+"352952","2020-04-28 06:49:10","http://castmart.ga/~zadmin/xcloud/gold_TtBaWDj152.bin","online","malware_download","encrypted,GuLoader,Loki","https://urlhaus.abuse.ch/url/352952/","abuse_ch"
 "352951","2020-04-28 06:47:07","https://paste.ee/r/bdZnY","offline","malware_download","Encoded","https://urlhaus.abuse.ch/url/352951/","abuse_ch"
 "352950","2020-04-28 06:44:36","https://manamobile.store/wp-content/uploads/2020/04/docs_s1f/Buy-Sell%20Agreement_29969566_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352950/","spamhaus"
 "352949","2020-04-28 06:44:34","https://www.netfeed.club/wp-content/themes/calliope/docs_wd2/Buy-Sell%20Agreement_166451_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352949/","spamhaus"
 "352948","2020-04-28 06:44:29","https://www.teleporterhire.ie/wp-content/uploads/2020/04/docs_1sn/01180/Buy-Sell%20Agreement_01180_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352948/","spamhaus"
-"352947","2020-04-28 06:44:25","https://kiaowadubai.com/docs_qsb/Buy-Sell%20Agreement_8333_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352947/","spamhaus"
+"352947","2020-04-28 06:44:25","https://kiaowadubai.com/docs_qsb/Buy-Sell%20Agreement_8333_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352947/","spamhaus"
 "352946","2020-04-28 06:44:20","https://www.h2obbs.cn/wp-content/themes/calliope/docs_3kj/Buy-Sell%20Agreement_4860_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352946/","spamhaus"
 "352945","2020-04-28 06:43:40","https://www.internaut.in/wp-content/uploads/2020/04/docs_kl7/Buy-Sell%20Agreement_9653057_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352945/","spamhaus"
 "352944","2020-04-28 06:43:08","https://youngspiritshop.com/docs_8s0/Buy-Sell%20Agreement_179673_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352944/","spamhaus"
@@ -1770,9 +2157,9 @@
 "352940","2020-04-28 06:42:51","https://mirandaspaintingca.com/wp-content/uploads/2020/04/docs_kjk/Buy-Sell%20Agreement_38753_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352940/","spamhaus"
 "352939","2020-04-28 06:42:48","http://orujedu.com/wp-content/uploads/2020/04/docs_f8n/416447/Buy-Sell%20Agreement_416447_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352939/","spamhaus"
 "352938","2020-04-28 06:42:45","http://www.running-bike.com/docs_155/Buy-Sell%20Agreement_7032322_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352938/","spamhaus"
-"352937","2020-04-28 06:42:41","https://www.patrickchan-hk.net/wp-content/uploads/2020/04/docs_csa/21733673/Buy-Sell%20Agreement_21733673_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352937/","spamhaus"
+"352937","2020-04-28 06:42:41","https://www.patrickchan-hk.net/wp-content/uploads/2020/04/docs_csa/21733673/Buy-Sell%20Agreement_21733673_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352937/","spamhaus"
 "352936","2020-04-28 06:42:34","https://manamobile.store/wp-content/uploads/2020/04/docs_s1f/Buy-Sell%20Agreement_427779_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352936/","spamhaus"
-"352935","2020-04-28 06:42:32","https://heavenif.co.za/blog/wp-content/themes/calliope/docs_kwc/Buy-Sell%20Agreement_52007906_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352935/","spamhaus"
+"352935","2020-04-28 06:42:32","https://heavenif.co.za/blog/wp-content/themes/calliope/docs_kwc/Buy-Sell%20Agreement_52007906_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352935/","spamhaus"
 "352934","2020-04-28 06:42:28","https://onikstrgovina.com/docs_0nd/13880/Buy-Sell%20Agreement_13880_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352934/","spamhaus"
 "352933","2020-04-28 06:41:57","https://youngspiritshop.com/docs_8s0/571982/Buy-Sell%20Agreement_571982_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352933/","spamhaus"
 "352932","2020-04-28 06:41:54","https://mindseed.in/blog/wp-content/uploads/2020/04/docs_yfg/823296/Buy-Sell%20Agreement_823296_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352932/","spamhaus"
@@ -1788,9 +2175,9 @@
 "352922","2020-04-28 06:36:43","http://www.pacificstarimpex.com/wp-content/themes/calliope/docs_v79/60997/Buy-Sell%20Agreement_60997_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352922/","spamhaus"
 "352921","2020-04-28 06:36:40","https://ftvlicenses.in/wp-content/uploads/2020/04/docs_ypk/Buy-Sell%20Agreement_9002_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352921/","spamhaus"
 "352920","2020-04-28 06:36:32","https://mindseed.in/blog/wp-content/uploads/2020/04/docs_yfg/7991268/Buy-Sell%20Agreement_7991268_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352920/","spamhaus"
-"352919","2020-04-28 06:36:24","https://ticte.in/wp-content/uploads/2020/04/docs_o2i/Buy-Sell%20Agreement_7602_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352919/","spamhaus"
-"352918","2020-04-28 06:36:15","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/Buy-Sell%20Agreement_17881360_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352918/","spamhaus"
-"352917","2020-04-28 06:36:05","https://www.patrickchan-hk.net/wp-content/uploads/2020/04/docs_csa/Buy-Sell%20Agreement_5898_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352917/","spamhaus"
+"352919","2020-04-28 06:36:24","https://ticte.in/wp-content/uploads/2020/04/docs_o2i/Buy-Sell%20Agreement_7602_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352919/","spamhaus"
+"352918","2020-04-28 06:36:15","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/Buy-Sell%20Agreement_17881360_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352918/","spamhaus"
+"352917","2020-04-28 06:36:05","https://www.patrickchan-hk.net/wp-content/uploads/2020/04/docs_csa/Buy-Sell%20Agreement_5898_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352917/","spamhaus"
 "352916","2020-04-28 06:35:58","https://msquare.xyz/wp-content/uploads/2020/04/docs_ymn/Buy-Sell%20Agreement_26624288_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352916/","spamhaus"
 "352915","2020-04-28 06:35:54","https://myheromydadthenurse.com/wp-content/plugins/apikey/docs_tqo/873627/Buy-Sell%20Agreement_873627_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352915/","spamhaus"
 "352914","2020-04-28 06:35:47","https://www.tulsairishpub.com/blog/wp-content/themes/calliope/docs_khi/Buy-Sell%20Agreement_0920_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352914/","spamhaus"
@@ -1824,7 +2211,7 @@
 "352886","2020-04-28 06:25:08","https://parmisco.com/docs_mc0/246669/Buy-Sell%20Agreement_246669_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352886/","spamhaus"
 "352885","2020-04-28 06:24:20","https://manamobile.store/wp-content/uploads/2020/04/docs_s1f/Buy-Sell%20Agreement_75561_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352885/","spamhaus"
 "352884","2020-04-28 06:24:18","https://minimalisku.com/wp-content/uploads/2020/04/docs_tp8/95248/Buy-Sell%20Agreement_95248_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352884/","spamhaus"
-"352883","2020-04-28 06:24:14","https://kiaowadubai.com/docs_qsb/5424294/Buy-Sell%20Agreement_5424294_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352883/","spamhaus"
+"352883","2020-04-28 06:24:14","https://kiaowadubai.com/docs_qsb/5424294/Buy-Sell%20Agreement_5424294_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352883/","spamhaus"
 "352882","2020-04-28 06:24:09","https://darazexpress.pk/wp-content/uploads/2020/04/docs_7tp/9486/Buy-Sell%20Agreement_9486_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352882/","spamhaus"
 "352881","2020-04-28 06:24:07","https://mindseed.in/blog/wp-content/uploads/2020/04/docs_yfg/0401411/Buy-Sell%20Agreement_0401411_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352881/","spamhaus"
 "352880","2020-04-28 06:24:03","https://minimalisku.com/wp-content/uploads/2020/04/docs_tp8/3599/Buy-Sell%20Agreement_3599_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352880/","spamhaus"
@@ -1838,16 +2225,16 @@
 "352872","2020-04-28 06:22:17","http://huniandijual.com/wp-content/uploads/2020/04/docs_x5r/Buy-Sell%20Agreement_5831416_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352872/","spamhaus"
 "352871","2020-04-28 06:22:15","https://mindseed.in/blog/wp-content/uploads/2020/04/docs_yfg/0066/Buy-Sell%20Agreement_0066_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352871/","spamhaus"
 "352870","2020-04-28 06:22:12","http://www.pacificstarimpex.com/wp-content/themes/calliope/docs_v79/Buy-Sell%20Agreement_1758442_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352870/","spamhaus"
-"352869","2020-04-28 06:22:09","https://www.patrickchan-hk.net/wp-content/uploads/2020/04/docs_csa/Buy-Sell%20Agreement_8825_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352869/","spamhaus"
+"352869","2020-04-28 06:22:09","https://www.patrickchan-hk.net/wp-content/uploads/2020/04/docs_csa/Buy-Sell%20Agreement_8825_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352869/","spamhaus"
 "352868","2020-04-28 06:16:23","http://27.76.91.206:9276/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/352868/","geenensp"
 "352867","2020-04-28 06:16:17","http://huniandijual.com/wp-content/uploads/2020/04/docs_x5r/11501951/Buy-Sell%20Agreement_11501951_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352867/","spamhaus"
 "352866","2020-04-28 06:16:13","https://formadiksiuij.com/wp-content/uploads/2020/04/docs_25c/Buy-Sell%20Agreement_52692_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352866/","spamhaus"
 "352865","2020-04-28 06:16:10","https://www.vagtachobrasil.com/wp-content/uploads/2020/04/docs_w7f/5018360/Buy-Sell%20Agreement_5018360_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352865/","spamhaus"
-"352864","2020-04-28 06:16:03","https://ticte.in/wp-content/uploads/2020/04/docs_o2i/77443/Buy-Sell%20Agreement_77443_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352864/","spamhaus"
+"352864","2020-04-28 06:16:03","https://ticte.in/wp-content/uploads/2020/04/docs_o2i/77443/Buy-Sell%20Agreement_77443_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352864/","spamhaus"
 "352863","2020-04-28 06:08:30","http://hediye-internet-saglik.org/20gb_hediye_internet.apk","offline","malware_download","None","https://urlhaus.abuse.ch/url/352863/","JayTHL"
 "352862","2020-04-28 06:08:16","http://orujedu.com/wp-content/uploads/2020/04/docs_f8n/Buy-Sell%20Agreement_2421266_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352862/","spamhaus"
 "352861","2020-04-28 06:08:12","https://www.leaksfly.com/docs_1tj/6503758/Buy-Sell%20Agreement_6503758_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352861/","spamhaus"
-"352860","2020-04-28 06:08:10","https://www.patrickchan-hk.net/wp-content/uploads/2020/04/docs_csa/Buy-Sell%20Agreement_66754080_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352860/","spamhaus"
+"352860","2020-04-28 06:08:10","https://www.patrickchan-hk.net/wp-content/uploads/2020/04/docs_csa/Buy-Sell%20Agreement_66754080_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352860/","spamhaus"
 "352859","2020-04-28 06:07:06","http://162.212.114.150:45928/","offline","malware_download","None","https://urlhaus.abuse.ch/url/352859/","JayTHL"
 "352858","2020-04-28 06:07:02","http://162.212.114.150:45928/i","offline","malware_download","None","https://urlhaus.abuse.ch/url/352858/","JayTHL"
 "352857","2020-04-28 06:06:58","http://113.245.189.4:38557/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352857/","Gandylyan1"
@@ -1865,7 +2252,7 @@
 "352845","2020-04-28 06:04:30","http://111.43.223.136:53549/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352845/","Gandylyan1"
 "352844","2020-04-28 06:04:20","http://125.45.59.107:52130/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352844/","Gandylyan1"
 "352843","2020-04-28 06:04:10","http://183.215.188.45:49767/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352843/","Gandylyan1"
-"352842","2020-04-28 06:01:44","https://kiaowadubai.com/docs_qsb/9131/Buy-Sell%20Agreement_9131_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352842/","spamhaus"
+"352842","2020-04-28 06:01:44","https://kiaowadubai.com/docs_qsb/9131/Buy-Sell%20Agreement_9131_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352842/","spamhaus"
 "352841","2020-04-28 06:01:29","https://premiumshop.id/wp-content/uploads/2020/04/docs_ha7/97601837/Buy-Sell%20Agreement_97601837_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352841/","spamhaus"
 "352840","2020-04-28 06:01:23","https://youngspiritshop.com/docs_8s0/96791/Buy-Sell%20Agreement_96791_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352840/","spamhaus"
 "352839","2020-04-28 06:01:15","http://huniandijual.com/wp-content/uploads/2020/04/docs_x5r/Buy-Sell%20Agreement_440176_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352839/","spamhaus"
@@ -1874,7 +2261,7 @@
 "352836","2020-04-28 05:55:13","http://webxposndytechnologyhardsoftware6buyers.duckdns.org/webdoc/win32.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/352836/","oppimaniac"
 "352835","2020-04-28 05:55:09","https://beeps.my/file/NewNewNew_utZXpBmuG45.bin","offline","malware_download","encrypted","https://urlhaus.abuse.ch/url/352835/","oppimaniac"
 "352834","2020-04-28 05:55:05","http://cassiagumrefined.com/js/file/TH98/SWIFT%20(MTC%20103).xlsx","online","malware_download","encrypted,Formbook,xls","https://urlhaus.abuse.ch/url/352834/","oppimaniac"
-"352833","2020-04-28 05:54:22","http://121.148.122.219:5895/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/352833/","geenensp"
+"352833","2020-04-28 05:54:22","http://121.148.122.219:5895/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/352833/","geenensp"
 "352832","2020-04-28 05:54:17","http://106.248.202.245:45017/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/352832/","geenensp"
 "352831","2020-04-28 05:54:13","http://1.64.98.249:62482/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/352831/","geenensp"
 "352830","2020-04-28 05:54:07","http://dongiln.co/paymentslip/paymentslip.rar","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352830/","spamhaus"
@@ -1882,12 +2269,12 @@
 "352828","2020-04-28 05:53:34","http://5.206.227.18/bot/bot.mipsel","online","malware_download","CoinMiner,elf","https://urlhaus.abuse.ch/url/352828/","hypoweb"
 "352827","2020-04-28 05:53:32","http://5.206.227.18/bot/bot.arm4","online","malware_download","CoinMiner,elf","https://urlhaus.abuse.ch/url/352827/","hypoweb"
 "352826","2020-04-28 05:53:30","http://5.206.227.18/bot/bot.arm","offline","malware_download","CoinMiner,elf","https://urlhaus.abuse.ch/url/352826/","hypoweb"
-"352825","2020-04-28 05:53:28","http://14.41.57.152:22235/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/352825/","geenensp"
+"352825","2020-04-28 05:53:28","http://14.41.57.152:22235/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/352825/","geenensp"
 "352824","2020-04-28 05:53:24","http://79.136.27.40:33750/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/352824/","geenensp"
 "352823","2020-04-28 05:53:19","https://www.teleporterhire.ie/wp-content/uploads/2020/04/docs_1sn/Buy-Sell%20Agreement_8491_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352823/","spamhaus"
 "352822","2020-04-28 05:53:04","https://darazexpress.pk/wp-content/uploads/2020/04/docs_7tp/Buy-Sell%20Agreement_4407969_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352822/","spamhaus"
 "352821","2020-04-28 05:52:22","https://mindseed.in/blog/wp-content/uploads/2020/04/docs_yfg/73181121/Buy-Sell%20Agreement_73181121_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352821/","spamhaus"
-"352820","2020-04-28 05:52:19","https://itohukuk.com/wp-content/uploads/2020/04/docs_u9n/Buy-Sell%20Agreement_461492_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352820/","spamhaus"
+"352820","2020-04-28 05:52:19","https://itohukuk.com/wp-content/uploads/2020/04/docs_u9n/Buy-Sell%20Agreement_461492_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352820/","spamhaus"
 "352819","2020-04-28 05:52:17","http://www.running-bike.com/docs_155/Buy-Sell%20Agreement_29911647_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352819/","spamhaus"
 "352818","2020-04-28 05:52:10","https://minimalisku.com/wp-content/uploads/2020/04/docs_tp8/Buy-Sell%20Agreement_0586_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352818/","spamhaus"
 "352817","2020-04-28 05:52:04","https://www.vagtachobrasil.com/wp-content/uploads/2020/04/docs_w7f/Buy-Sell%20Agreement_566310_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352817/","spamhaus"
@@ -2024,7 +2411,7 @@
 "352686","2020-04-28 03:12:08","http://167.172.167.26/sparc","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/352686/","zbetcheckin"
 "352685","2020-04-28 03:12:06","http://144.202.124.211/d/xd.mips","offline","malware_download","elf","https://urlhaus.abuse.ch/url/352685/","zbetcheckin"
 "352684","2020-04-28 03:12:04","http://144.202.124.211/d/xd.arm","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/352684/","zbetcheckin"
-"352683","2020-04-28 03:09:05","http://gstat.dondyablo.com/fattura.exe","online","malware_download","Dreambot,exe,Gozi,ursnif","https://urlhaus.abuse.ch/url/352683/","p5yb34m"
+"352683","2020-04-28 03:09:05","http://gstat.dondyablo.com/fattura.exe","offline","malware_download","Dreambot,exe,Gozi,ursnif","https://urlhaus.abuse.ch/url/352683/","p5yb34m"
 "352682","2020-04-28 03:08:50","http://zxcet.xyz/sagawa4.6.1.apk","offline","malware_download","Adwind","https://urlhaus.abuse.ch/url/352682/","JayTHL"
 "352681","2020-04-28 03:08:47","http://xxbdr.xyz/sagawa2.7.9.apk","offline","malware_download","Adwind","https://urlhaus.abuse.ch/url/352681/","JayTHL"
 "352680","2020-04-28 03:08:42","http://zwset.xyz/chrome.apk","offline","malware_download","None","https://urlhaus.abuse.ch/url/352680/","JayTHL"
@@ -2107,7 +2494,7 @@
 "352603","2020-04-28 02:38:04","https://pastebin.com/raw/aS1gXPdk","offline","malware_download","None","https://urlhaus.abuse.ch/url/352603/","JayTHL"
 "352602","2020-04-28 02:01:10","https://pastebin.com/raw/ePeSCFcz","offline","malware_download","None","https://urlhaus.abuse.ch/url/352602/","JayTHL"
 "352601","2020-04-28 01:48:05","https://pastebin.com/raw/xEfmMW8J","offline","malware_download","None","https://urlhaus.abuse.ch/url/352601/","JayTHL"
-"352600","2020-04-28 00:45:09","http://aurumboy.com/upd.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/352600/","zbetcheckin"
+"352600","2020-04-28 00:45:09","http://aurumboy.com/upd.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/352600/","zbetcheckin"
 "352599","2020-04-28 00:05:45","http://61.241.170.8:38605/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352599/","Gandylyan1"
 "352598","2020-04-28 00:05:33","http://222.246.20.121:45935/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352598/","Gandylyan1"
 "352597","2020-04-28 00:05:28","http://221.210.211.26:50903/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352597/","Gandylyan1"
@@ -2184,9 +2571,9 @@
 "352526","2020-04-27 20:25:47","https://www.h2obbs.cn/wp-content/themes/calliope/docs_3kj/Buy-Sell%20Agreement_87209_04242020.zip","offline","malware_download","Qakbot,qbot,sxp105,zip","https://urlhaus.abuse.ch/url/352526/","malware_traffic"
 "352525","2020-04-27 20:25:43","https://www.h2obbs.cn/wp-content/themes/calliope/docs_3kj/98674/Buy-Sell%20Agreement_98674_04242020.zip","offline","malware_download","Qakbot,qbot,sxp105,zip","https://urlhaus.abuse.ch/url/352525/","malware_traffic"
 "352524","2020-04-27 20:25:37","https://www.h2obbs.cn/wp-content/themes/calliope/docs_3kj/7380/Buy-Sell%20Agreement_7380_04242020.zip","offline","malware_download","Qakbot,qbot,sxp105,zip","https://urlhaus.abuse.ch/url/352524/","malware_traffic"
-"352523","2020-04-27 20:25:30","https://www.corazondelcielo.mx/docs_5zp/Buy-Sell%20Agreement_4957_04242020.zip","online","malware_download","Qakbot,qbot,sxp105,zip","https://urlhaus.abuse.ch/url/352523/","malware_traffic"
+"352523","2020-04-27 20:25:30","https://www.corazondelcielo.mx/docs_5zp/Buy-Sell%20Agreement_4957_04242020.zip","offline","malware_download","Qakbot,qbot,sxp105,zip","https://urlhaus.abuse.ch/url/352523/","malware_traffic"
 "352522","2020-04-27 20:25:26","https://www.corazondelcielo.mx/docs_5zp/Buy-Sell%20Agreement_2623_04242020.zip","offline","malware_download","Qakbot,qbot,sxp105,zip","https://urlhaus.abuse.ch/url/352522/","malware_traffic"
-"352521","2020-04-27 20:25:23","https://www.corazondelcielo.mx/docs_5zp/12676804/Buy-Sell%20Agreement_12676804_04242020.zip","online","malware_download","Qakbot,qbot,sxp105,zip","https://urlhaus.abuse.ch/url/352521/","malware_traffic"
+"352521","2020-04-27 20:25:23","https://www.corazondelcielo.mx/docs_5zp/12676804/Buy-Sell%20Agreement_12676804_04242020.zip","offline","malware_download","Qakbot,qbot,sxp105,zip","https://urlhaus.abuse.ch/url/352521/","malware_traffic"
 "352520","2020-04-27 20:25:14","https://ticte.in/wp-content/uploads/2020/04/docs_o2i/Buy-Sell%20Agreement_3728606_04242020.zip","online","malware_download","Qakbot,qbot,sxp105,zip","https://urlhaus.abuse.ch/url/352520/","malware_traffic"
 "352519","2020-04-27 20:25:11","https://ticte.in/wp-content/uploads/2020/04/docs_o2i/3113304/Buy-Sell%20Agreement_3113304_04242020.zip","online","malware_download","Qakbot,qbot,sxp105,zip","https://urlhaus.abuse.ch/url/352519/","malware_traffic"
 "352518","2020-04-27 20:24:39","https://premiumshop.id/wp-content/uploads/2020/04/docs_ha7/Buy-Sell%20Agreement_76053_04242020.zip","offline","malware_download","Qakbot,qbot,sxp105,zip","https://urlhaus.abuse.ch/url/352518/","malware_traffic"
@@ -2216,19 +2603,19 @@
 "352494","2020-04-27 20:22:33","http://www.s172.com/wp-content/uploads/2020/04/docs_x1c/Buy-Sell%20Agreement_4720922_04242020.zip","offline","malware_download","Qakbot,qbot,sxp105,zip","https://urlhaus.abuse.ch/url/352494/","malware_traffic"
 "352493","2020-04-27 20:14:14","http://huniandijual.com/wp-content/uploads/2020/04/docs_x5r/Buy-Sell%20Agreement_290361_04242020.zip","offline","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352493/","malware_traffic"
 "352492","2020-04-27 20:14:10","http://huniandijual.com/wp-content/uploads/2020/04/docs_x5r/83556/Buy-Sell%20Agreement_83556_04242020.zip","offline","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352492/","malware_traffic"
-"352491","2020-04-27 20:14:08","http://cecadesayu.corazondelcielo.mx/docs_ytk/Buy-Sell%20Agreement_13386_04242020.zip","online","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352491/","malware_traffic"
+"352491","2020-04-27 20:14:08","http://cecadesayu.corazondelcielo.mx/docs_ytk/Buy-Sell%20Agreement_13386_04242020.zip","offline","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352491/","malware_traffic"
 "352490","2020-04-27 20:14:05","http://cecadesayu.corazondelcielo.mx/docs_ytk/50385871/Buy-Sell%20Agreement_50385871_04242020.zip","offline","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352490/","malware_traffic"
 "352489","2020-04-27 20:14:03","http://cecadesayu.corazondelcielo.mx/docs_ytk/3746/Buy-Sell%20Agreement_3746_04242020.zip","offline","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352489/","malware_traffic"
-"352488","2020-04-27 20:13:58","http://cecadesayu.corazondelcielo.mx/docs_ytk/0191867/Buy-Sell%20Agreement_0191867_04242020.zip","online","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352488/","malware_traffic"
-"352487","2020-04-27 20:13:55","https://kiaowadubai.com/docs_qsb/Buy-Sell%20Agreement_37855099_04242020.zip","online","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352487/","malware_traffic"
+"352488","2020-04-27 20:13:58","http://cecadesayu.corazondelcielo.mx/docs_ytk/0191867/Buy-Sell%20Agreement_0191867_04242020.zip","offline","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352488/","malware_traffic"
+"352487","2020-04-27 20:13:55","https://kiaowadubai.com/docs_qsb/Buy-Sell%20Agreement_37855099_04242020.zip","offline","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352487/","malware_traffic"
 "352486","2020-04-27 20:13:50","https://kiaowadubai.com/docs_qsb/6455/Buy-Sell%20Agreement_6455_04242020.zip","online","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352486/","malware_traffic"
-"352485","2020-04-27 20:13:47","https://itohukuk.com/wp-content/uploads/2020/04/docs_u9n/387824/Buy-Sell%20Agreement_387824_04242020.zip","offline","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352485/","malware_traffic"
-"352484","2020-04-27 20:13:45","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/9116273/Buy-Sell%20Agreement_9116273_04242020.zip","online","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352484/","malware_traffic"
+"352485","2020-04-27 20:13:47","https://itohukuk.com/wp-content/uploads/2020/04/docs_u9n/387824/Buy-Sell%20Agreement_387824_04242020.zip","online","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352485/","malware_traffic"
+"352484","2020-04-27 20:13:45","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/9116273/Buy-Sell%20Agreement_9116273_04242020.zip","offline","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352484/","malware_traffic"
 "352483","2020-04-27 20:13:41","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/0070320/Buy-Sell%20Agreement_0070320_04242020.zip","online","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352483/","malware_traffic"
 "352482","2020-04-27 20:13:36","https://heavenif.co.za/blog/wp-content/themes/calliope/docs_kwc/Buy-Sell%20Agreement_85693132_04242020.zip","online","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352482/","malware_traffic"
 "352481","2020-04-27 20:13:32","https://heavenif.co.za/blog/wp-content/themes/calliope/docs_kwc/Buy-Sell%20Agreement_8473004_04242020.zip","offline","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352481/","malware_traffic"
-"352480","2020-04-27 20:13:27","https://heavenif.co.za/blog/wp-content/themes/calliope/docs_kwc/385661/Buy-Sell%20Agreement_385661_04242020.zip","offline","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352480/","malware_traffic"
-"352479","2020-04-27 20:13:23","https://heavenif.co.za/blog/wp-content/themes/calliope/docs_kwc/20826984/Buy-Sell%20Agreement_20826984_04242020.zip","online","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352479/","malware_traffic"
+"352480","2020-04-27 20:13:27","https://heavenif.co.za/blog/wp-content/themes/calliope/docs_kwc/385661/Buy-Sell%20Agreement_385661_04242020.zip","online","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352480/","malware_traffic"
+"352479","2020-04-27 20:13:23","https://heavenif.co.za/blog/wp-content/themes/calliope/docs_kwc/20826984/Buy-Sell%20Agreement_20826984_04242020.zip","offline","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352479/","malware_traffic"
 "352478","2020-04-27 20:13:19","https://formadiksiuij.com/wp-content/uploads/2020/04/docs_25c/Buy-Sell%20Agreement_305245_04242020.zip","offline","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352478/","malware_traffic"
 "352477","2020-04-27 20:13:15","https://darazexpress.pk/wp-content/uploads/2020/04/docs_7tp/Buy-Sell%20Agreement_4032_04242020.zip","offline","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352477/","malware_traffic"
 "352476","2020-04-27 20:13:12","https://darazexpress.pk/wp-content/uploads/2020/04/docs_7tp/59285157/Buy-Sell%20Agreement_59285157_04242020.zip","offline","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352476/","malware_traffic"
@@ -2287,8 +2674,8 @@
 "352423","2020-04-27 18:51:50","https://myheromydadthenurse.com/wp-content/plugins/apikey/docs_tqo/Buy-Sell%20Agreement_657616_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352423/","spamhaus"
 "352422","2020-04-27 18:51:48","https://mirandaspaintingca.com/wp-content/uploads/2020/04/docs_kjk/Buy-Sell%20Agreement_57220_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352422/","spamhaus"
 "352421","2020-04-27 18:51:43","https://ftvlicenses.in/wp-content/uploads/2020/04/docs_ypk/92640/Buy-Sell%20Agreement_92640_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352421/","spamhaus"
-"352420","2020-04-27 18:51:30","https://pakdesighee.com/wp-content/uploads/2020/04/docs_l9e/803206/Buy-Sell%20Agreement_803206_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352420/","spamhaus"
-"352419","2020-04-27 18:51:11","https://ticte.in/wp-content/uploads/2020/04/docs_o2i/06501/Buy-Sell%20Agreement_06501_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352419/","spamhaus"
+"352420","2020-04-27 18:51:30","https://pakdesighee.com/wp-content/uploads/2020/04/docs_l9e/803206/Buy-Sell%20Agreement_803206_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352420/","spamhaus"
+"352419","2020-04-27 18:51:11","https://ticte.in/wp-content/uploads/2020/04/docs_o2i/06501/Buy-Sell%20Agreement_06501_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352419/","spamhaus"
 "352418","2020-04-27 18:51:08","https://formadiksiuij.com/wp-content/uploads/2020/04/docs_25c/32556444/Buy-Sell%20Agreement_32556444_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352418/","spamhaus"
 "352417","2020-04-27 18:51:05","https://myheromydadthenurse.com/wp-content/plugins/apikey/docs_tqo/9134/Buy-Sell%20Agreement_9134_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352417/","spamhaus"
 "352416","2020-04-27 18:47:32","http://www.s172.com/wp-content/uploads/2020/04/docs_x1c/Buy-Sell%20Agreement_67685568_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352416/","spamhaus"
@@ -2327,14 +2714,14 @@
 "352383","2020-04-27 18:37:09","http://www.pacificstarimpex.com/wp-content/themes/calliope/docs_v79/529767/Buy-Sell%20Agreement_529767_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352383/","spamhaus"
 "352382","2020-04-27 18:37:04","https://mindseed.in/blog/wp-content/uploads/2020/04/docs_yfg/4501/Buy-Sell%20Agreement_4501_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352382/","spamhaus"
 "352381","2020-04-27 18:27:45","https://pastebin.com/raw/9EH2MwwL","offline","malware_download","None","https://urlhaus.abuse.ch/url/352381/","JayTHL"
-"352380","2020-04-27 18:27:13","https://pakdesighee.com/wp-content/uploads/2020/04/docs_l9e/1517405/Buy-Sell%20Agreement_1517405_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352380/","spamhaus"
+"352380","2020-04-27 18:27:13","https://pakdesighee.com/wp-content/uploads/2020/04/docs_l9e/1517405/Buy-Sell%20Agreement_1517405_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352380/","spamhaus"
 "352379","2020-04-27 18:26:11","https://parmisco.com/docs_mc0/Buy-Sell%20Agreement_01206107_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352379/","spamhaus"
 "352378","2020-04-27 18:25:38","https://www.netfeed.club/wp-content/themes/calliope/docs_wd2/718577/Buy-Sell%20Agreement_718577_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352378/","spamhaus"
 "352377","2020-04-27 18:21:03","https://darazexpress.pk/wp-content/uploads/2020/04/docs_7tp/91278/Buy-Sell%20Agreement_91278_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352377/","spamhaus"
 "352376","2020-04-27 18:19:38","http://79.159.207.150:1524/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/352376/","geenensp"
 "352375","2020-04-27 18:19:36","https://onikstrgovina.com/docs_0nd/62718678/Buy-Sell%20Agreement_62718678_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352375/","spamhaus"
-"352374","2020-04-27 18:15:23","https://heavenif.co.za/blog/wp-content/themes/calliope/docs_kwc/Buy-Sell%20Agreement_1197_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352374/","spamhaus"
-"352373","2020-04-27 18:15:13","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/106811/Buy-Sell%20Agreement_106811_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352373/","spamhaus"
+"352374","2020-04-27 18:15:23","https://heavenif.co.za/blog/wp-content/themes/calliope/docs_kwc/Buy-Sell%20Agreement_1197_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352374/","spamhaus"
+"352373","2020-04-27 18:15:13","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/106811/Buy-Sell%20Agreement_106811_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352373/","spamhaus"
 "352372","2020-04-27 18:09:02","https://onikstrgovina.com/docs_0nd/Buy-Sell%20Agreement_433299_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352372/","spamhaus"
 "352371","2020-04-27 18:07:16","http://www.pacificstarimpex.com/wp-content/themes/calliope/docs_v79/Buy-Sell%20Agreement_571385_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352371/","spamhaus"
 "352370","2020-04-27 18:07:09","http://orujedu.com/wp-content/uploads/2020/04/docs_f8n/Buy-Sell%20Agreement_7855_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352370/","spamhaus"
@@ -2359,30 +2746,30 @@
 "352351","2020-04-27 18:03:13","http://117.86.24.209:43284/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352351/","Gandylyan1"
 "352350","2020-04-27 18:03:09","http://123.9.233.170:46389/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352350/","Gandylyan1"
 "352349","2020-04-27 18:03:04","http://219.155.135.6:44227/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352349/","Gandylyan1"
-"352348","2020-04-27 17:58:04","https://ticte.in/wp-content/uploads/2020/04/docs_o2i/Buy-Sell%20Agreement_057093_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352348/","spamhaus"
+"352348","2020-04-27 17:58:04","https://ticte.in/wp-content/uploads/2020/04/docs_o2i/Buy-Sell%20Agreement_057093_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352348/","spamhaus"
 "352347","2020-04-27 17:56:03","http://88.218.16.37/9dudiNwDI5cxFKk.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/352347/","abuse_ch"
 "352346","2020-04-27 17:55:12","https://www.leaksfly.com/docs_1tj/944378/Buy-Sell%20Agreement_944378_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352346/","spamhaus"
 "352345","2020-04-27 17:55:10","http://www.s172.com/wp-content/uploads/2020/04/docs_x1c/Buy-Sell%20Agreement_316191_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352345/","spamhaus"
 "352344","2020-04-27 17:54:38","http://www.s172.com/wp-content/uploads/2020/04/docs_x1c/Buy-Sell%20Agreement_63216730_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352344/","spamhaus"
-"352343","2020-04-27 17:54:06","http://cecadesayu.corazondelcielo.mx/docs_ytk/Buy-Sell%20Agreement_20922_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352343/","spamhaus"
+"352343","2020-04-27 17:54:06","http://cecadesayu.corazondelcielo.mx/docs_ytk/Buy-Sell%20Agreement_20922_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352343/","spamhaus"
 "352342","2020-04-27 17:51:19","http://221.155.68.193:54408/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/352342/","geenensp"
-"352341","2020-04-27 17:51:14","https://pakdesighee.com/wp-content/uploads/2020/04/docs_l9e/0161/Buy-Sell%20Agreement_0161_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352341/","spamhaus"
-"352340","2020-04-27 17:51:11","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/6260776/Buy-Sell%20Agreement_6260776_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352340/","spamhaus"
+"352341","2020-04-27 17:51:14","https://pakdesighee.com/wp-content/uploads/2020/04/docs_l9e/0161/Buy-Sell%20Agreement_0161_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352341/","spamhaus"
+"352340","2020-04-27 17:51:11","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/6260776/Buy-Sell%20Agreement_6260776_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352340/","spamhaus"
 "352339","2020-04-27 17:51:08","https://minimalisku.com/wp-content/uploads/2020/04/docs_tp8/22158/Buy-Sell%20Agreement_22158_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352339/","spamhaus"
 "352338","2020-04-27 17:51:05","https://altatecnica.com.mx/wp-content/uploads/2020/04/docs_qvi/Buy-Sell%20Agreement_104703_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352338/","spamhaus"
 "352337","2020-04-27 17:50:58","https://bestappliances.in/wp-content/uploads/2020/04/docs_0mg/Buy-Sell%20Agreement_2913784_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352337/","spamhaus"
-"352336","2020-04-27 17:50:17","https://www.patrickchan-hk.net/wp-content/uploads/2020/04/docs_csa/17604096/Buy-Sell%20Agreement_17604096_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352336/","spamhaus"
+"352336","2020-04-27 17:50:17","https://www.patrickchan-hk.net/wp-content/uploads/2020/04/docs_csa/17604096/Buy-Sell%20Agreement_17604096_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352336/","spamhaus"
 "352335","2020-04-27 17:43:04","http://outcaste-television.000webhostapp.com/VPN.scr","offline","malware_download","None","https://urlhaus.abuse.ch/url/352335/","vxvault"
 "352334","2020-04-27 17:40:49","https://www.teleporterhire.ie/wp-content/uploads/2020/04/docs_1sn/Buy-Sell%20Agreement_34830887_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352334/","spamhaus"
 "352333","2020-04-27 17:40:47","https://ftvlicenses.in/wp-content/uploads/2020/04/docs_ypk/Buy-Sell%20Agreement_8601_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352333/","spamhaus"
 "352332","2020-04-27 17:40:44","https://bestappliances.in/wp-content/uploads/2020/04/docs_0mg/3889/Buy-Sell%20Agreement_3889_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352332/","spamhaus"
-"352331","2020-04-27 17:40:13","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/07500/Buy-Sell%20Agreement_07500_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352331/","spamhaus"
+"352331","2020-04-27 17:40:13","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/07500/Buy-Sell%20Agreement_07500_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352331/","spamhaus"
 "352330","2020-04-27 17:40:08","https://myheromydadthenurse.com/wp-content/plugins/apikey/docs_tqo/25450/Buy-Sell%20Agreement_25450_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352330/","spamhaus"
 "352329","2020-04-27 17:40:05","https://formadiksiuij.com/wp-content/uploads/2020/04/docs_25c/Buy-Sell%20Agreement_7429247_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352329/","spamhaus"
 "352328","2020-04-27 17:40:00","http://www.running-bike.com/docs_155/5337859/Buy-Sell%20Agreement_5337859_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352328/","spamhaus"
 "352327","2020-04-27 17:39:55","https://www.tulsairishpub.com/blog/wp-content/themes/calliope/docs_khi/0166159/Buy-Sell%20Agreement_0166159_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352327/","spamhaus"
-"352326","2020-04-27 17:39:52","https://itohukuk.com/wp-content/uploads/2020/04/docs_u9n/06893779/Buy-Sell%20Agreement_06893779_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352326/","spamhaus"
-"352325","2020-04-27 17:39:43","https://www.patrickchan-hk.net/wp-content/uploads/2020/04/docs_csa/Buy-Sell%20Agreement_7580_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352325/","spamhaus"
+"352326","2020-04-27 17:39:52","https://itohukuk.com/wp-content/uploads/2020/04/docs_u9n/06893779/Buy-Sell%20Agreement_06893779_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352326/","spamhaus"
+"352325","2020-04-27 17:39:43","https://www.patrickchan-hk.net/wp-content/uploads/2020/04/docs_csa/Buy-Sell%20Agreement_7580_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352325/","spamhaus"
 "352324","2020-04-27 17:39:29","https://kiaowadubai.com/docs_qsb/Buy-Sell%20Agreement_15171881_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352324/","spamhaus"
 "352323","2020-04-27 17:39:24","https://ticte.in/wp-content/uploads/2020/04/docs_o2i/Buy-Sell%20Agreement_57903931_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352323/","spamhaus"
 "352322","2020-04-27 17:39:22","https://www.netfeed.club/wp-content/themes/calliope/docs_wd2/33365/Buy-Sell%20Agreement_33365_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352322/","spamhaus"
@@ -2390,34 +2777,34 @@
 "352320","2020-04-27 17:39:14","https://msquare.xyz/wp-content/uploads/2020/04/docs_ymn/Buy-Sell%20Agreement_027146_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352320/","spamhaus"
 "352319","2020-04-27 17:39:06","https://premiumshop.id/wp-content/uploads/2020/04/docs_ha7/172013/Buy-Sell%20Agreement_172013_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352319/","spamhaus"
 "352318","2020-04-27 17:38:32","https://onikstrgovina.com/docs_0nd/4846917/Buy-Sell%20Agreement_4846917_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352318/","spamhaus"
-"352317","2020-04-27 17:38:29","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/8096673/Buy-Sell%20Agreement_8096673_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352317/","spamhaus"
+"352317","2020-04-27 17:38:29","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/8096673/Buy-Sell%20Agreement_8096673_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352317/","spamhaus"
 "352316","2020-04-27 17:38:20","http://121.123.37.121:5229/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/352316/","geenensp"
 "352315","2020-04-27 17:38:14","http://80.210.20.94:37396/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/352315/","geenensp"
-"352314","2020-04-27 17:38:10","https://heavenif.co.za/blog/wp-content/themes/calliope/docs_kwc/0259743/Buy-Sell%20Agreement_0259743_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352314/","spamhaus"
+"352314","2020-04-27 17:38:10","https://heavenif.co.za/blog/wp-content/themes/calliope/docs_kwc/0259743/Buy-Sell%20Agreement_0259743_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352314/","spamhaus"
 "352313","2020-04-27 17:38:03","https://darazexpress.pk/wp-content/uploads/2020/04/docs_7tp/807898/Buy-Sell%20Agreement_807898_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352313/","spamhaus"
 "352312","2020-04-27 17:38:00","https://minimalisku.com/wp-content/uploads/2020/04/docs_tp8/Buy-Sell%20Agreement_99062_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352312/","spamhaus"
 "352311","2020-04-27 17:37:57","https://manamobile.store/wp-content/uploads/2020/04/docs_s1f/Buy-Sell%20Agreement_74658_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352311/","spamhaus"
 "352310","2020-04-27 17:37:54","https://youngspiritshop.com/docs_8s0/Buy-Sell%20Agreement_97359176_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352310/","spamhaus"
 "352309","2020-04-27 17:37:48","http://huniandijual.com/wp-content/uploads/2020/04/docs_x5r/Buy-Sell%20Agreement_16693439_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352309/","spamhaus"
-"352308","2020-04-27 17:37:42","https://www.patrickchan-hk.net/wp-content/uploads/2020/04/docs_csa/Buy-Sell%20Agreement_804242_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352308/","spamhaus"
+"352308","2020-04-27 17:37:42","https://www.patrickchan-hk.net/wp-content/uploads/2020/04/docs_csa/Buy-Sell%20Agreement_804242_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352308/","spamhaus"
 "352307","2020-04-27 17:37:37","https://premiumshop.id/wp-content/uploads/2020/04/docs_ha7/1638441/Buy-Sell%20Agreement_1638441_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352307/","spamhaus"
 "352306","2020-04-27 17:37:32","https://minimalisku.com/wp-content/uploads/2020/04/docs_tp8/4410/Buy-Sell%20Agreement_4410_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352306/","spamhaus"
 "352305","2020-04-27 17:37:25","http://www.pacificstarimpex.com/wp-content/themes/calliope/docs_v79/Buy-Sell%20Agreement_5593_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352305/","spamhaus"
 "352304","2020-04-27 17:37:19","https://youngspiritshop.com/docs_8s0/Buy-Sell%20Agreement_2708_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352304/","spamhaus"
 "352303","2020-04-27 17:37:15","https://www.leaksfly.com/docs_1tj/Buy-Sell%20Agreement_1825952_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352303/","spamhaus"
 "352302","2020-04-27 17:37:12","https://youngspiritshop.com/docs_8s0/Buy-Sell%20Agreement_4972116_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352302/","spamhaus"
-"352301","2020-04-27 17:37:09","https://itohukuk.com/wp-content/uploads/2020/04/docs_u9n/Buy-Sell%20Agreement_8769895_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352301/","spamhaus"
+"352301","2020-04-27 17:37:09","https://itohukuk.com/wp-content/uploads/2020/04/docs_u9n/Buy-Sell%20Agreement_8769895_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352301/","spamhaus"
 "352300","2020-04-27 17:37:05","https://premiumshop.id/wp-content/uploads/2020/04/docs_ha7/Buy-Sell%20Agreement_5290_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352300/","spamhaus"
-"352299","2020-04-27 17:33:48","https://itohukuk.com/wp-content/uploads/2020/04/docs_u9n/Buy-Sell%20Agreement_0936_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352299/","spamhaus"
+"352299","2020-04-27 17:33:48","https://itohukuk.com/wp-content/uploads/2020/04/docs_u9n/Buy-Sell%20Agreement_0936_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352299/","spamhaus"
 "352298","2020-04-27 17:33:42","https://blog.macwap.com/wp-content/themes/calliope/docs_wdp/37286057/Buy-Sell%20Agreement_37286057_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352298/","spamhaus"
 "352297","2020-04-27 17:33:38","https://ftvlicenses.in/wp-content/uploads/2020/04/docs_ypk/Buy-Sell%20Agreement_167033_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352297/","spamhaus"
 "352296","2020-04-27 17:33:34","https://mindseed.in/blog/wp-content/uploads/2020/04/docs_yfg/Buy-Sell%20Agreement_34622860_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352296/","spamhaus"
 "352295","2020-04-27 17:33:30","https://altatecnica.com.mx/wp-content/uploads/2020/04/docs_qvi/42260377/Buy-Sell%20Agreement_42260377_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352295/","spamhaus"
 "352294","2020-04-27 17:33:27","https://www.netfeed.club/wp-content/themes/calliope/docs_wd2/4344/Buy-Sell%20Agreement_4344_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352294/","spamhaus"
-"352293","2020-04-27 17:33:17","http://cecadesayu.corazondelcielo.mx/docs_ytk/5429/Buy-Sell%20Agreement_5429_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352293/","spamhaus"
+"352293","2020-04-27 17:33:17","http://cecadesayu.corazondelcielo.mx/docs_ytk/5429/Buy-Sell%20Agreement_5429_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352293/","spamhaus"
 "352292","2020-04-27 17:33:14","https://premiumshop.id/wp-content/uploads/2020/04/docs_ha7/Buy-Sell%20Agreement_33302_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352292/","spamhaus"
 "352291","2020-04-27 17:33:02","https://mirandaspaintingca.com/wp-content/uploads/2020/04/docs_kjk/Buy-Sell%20Agreement_49527214_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352291/","spamhaus"
-"352290","2020-04-27 17:32:56","https://kiaowadubai.com/docs_qsb/05879673/Buy-Sell%20Agreement_05879673_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352290/","spamhaus"
+"352290","2020-04-27 17:32:56","https://kiaowadubai.com/docs_qsb/05879673/Buy-Sell%20Agreement_05879673_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352290/","spamhaus"
 "352289","2020-04-27 17:32:50","https://altatecnica.com.mx/wp-content/uploads/2020/04/docs_qvi/Buy-Sell%20Agreement_4391114_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352289/","spamhaus"
 "352288","2020-04-27 17:32:38","https://altatecnica.com.mx/wp-content/uploads/2020/04/docs_qvi/Buy-Sell%20Agreement_27772_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352288/","spamhaus"
 "352287","2020-04-27 17:32:25","https://minimalisku.com/wp-content/uploads/2020/04/docs_tp8/29240443/Buy-Sell%20Agreement_29240443_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352287/","spamhaus"
@@ -2444,8 +2831,8 @@
 "352266","2020-04-27 16:34:20","https://coberturasgenerales.pe/wp-content/uploads/2020/04/docs_2hj/11680/Buy-Sell%20Agreement_11680_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352266/","spamhaus"
 "352265","2020-04-27 16:34:17","https://youngspiritshop.com/docs_8s0/Buy-Sell%20Agreement_55601975_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352265/","spamhaus"
 "352264","2020-04-27 16:34:09","https://ticte.in/wp-content/uploads/2020/04/docs_o2i/293599/Buy-Sell%20Agreement_293599_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352264/","spamhaus"
-"352263","2020-04-27 16:34:06","https://kiaowadubai.com/docs_qsb/Buy-Sell%20Agreement_4632_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352263/","spamhaus"
-"352262","2020-04-27 16:34:01","http://cecadesayu.corazondelcielo.mx/docs_ytk/4272/Buy-Sell%20Agreement_4272_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352262/","spamhaus"
+"352263","2020-04-27 16:34:06","https://kiaowadubai.com/docs_qsb/Buy-Sell%20Agreement_4632_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352263/","spamhaus"
+"352262","2020-04-27 16:34:01","http://cecadesayu.corazondelcielo.mx/docs_ytk/4272/Buy-Sell%20Agreement_4272_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352262/","spamhaus"
 "352261","2020-04-27 16:33:57","https://www.teleporterhire.ie/wp-content/uploads/2020/04/docs_1sn/Buy-Sell%20Agreement_558030_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352261/","spamhaus"
 "352260","2020-04-27 16:33:51","http://www.running-bike.com/docs_155/2522/Buy-Sell%20Agreement_2522_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352260/","spamhaus"
 "352259","2020-04-27 16:33:42","https://paste.ee/r/tBvxw","offline","malware_download","Encoded","https://urlhaus.abuse.ch/url/352259/","abuse_ch"
@@ -2454,7 +2841,7 @@
 "352256","2020-04-27 16:33:26","https://coberturasgenerales.pe/wp-content/uploads/2020/04/docs_2hj/Buy-Sell%20Agreement_0476691_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352256/","spamhaus"
 "352255","2020-04-27 16:33:21","http://huniandijual.com/wp-content/uploads/2020/04/docs_x5r/Buy-Sell%20Agreement_334311_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352255/","spamhaus"
 "352254","2020-04-27 16:33:08","https://www.vagtachobrasil.com/wp-content/uploads/2020/04/docs_w7f/Buy-Sell%20Agreement_2686679_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352254/","spamhaus"
-"352253","2020-04-27 16:33:00","https://pakdesighee.com/wp-content/uploads/2020/04/docs_l9e/6987817/Buy-Sell%20Agreement_6987817_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352253/","spamhaus"
+"352253","2020-04-27 16:33:00","https://pakdesighee.com/wp-content/uploads/2020/04/docs_l9e/6987817/Buy-Sell%20Agreement_6987817_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352253/","spamhaus"
 "352252","2020-04-27 16:32:57","https://ftvlicenses.in/wp-content/uploads/2020/04/docs_ypk/79834712/Buy-Sell%20Agreement_79834712_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352252/","spamhaus"
 "352251","2020-04-27 16:32:54","http://orujedu.com/wp-content/uploads/2020/04/docs_f8n/51439450/Buy-Sell%20Agreement_51439450_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352251/","spamhaus"
 "352250","2020-04-27 16:32:51","http://orujedu.com/wp-content/uploads/2020/04/docs_f8n/Buy-Sell%20Agreement_92646947_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352250/","spamhaus"
@@ -2470,13 +2857,13 @@
 "352240","2020-04-27 16:30:58","http://lehzig.com/trix.exe","offline","malware_download","Dridex","https://urlhaus.abuse.ch/url/352240/","anonymous"
 "352239","2020-04-27 16:30:53","https://altatecnica.com.mx/wp-content/uploads/2020/04/docs_qvi/285752/Buy-Sell%20Agreement_285752_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352239/","spamhaus"
 "352238","2020-04-27 16:30:29","http://cecadesayu.corazondelcielo.mx/docs_ytk/47079/Buy-Sell%20Agreement_47079_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352238/","spamhaus"
-"352237","2020-04-27 16:29:55","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/42458/Buy-Sell%20Agreement_42458_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352237/","spamhaus"
+"352237","2020-04-27 16:29:55","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/42458/Buy-Sell%20Agreement_42458_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352237/","spamhaus"
 "352236","2020-04-27 16:29:19","https://coberturasgenerales.pe/wp-content/uploads/2020/04/docs_2hj/53600169/Buy-Sell%20Agreement_53600169_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352236/","spamhaus"
 "352235","2020-04-27 16:28:45","https://www.internaut.in/wp-content/uploads/2020/04/docs_kl7/83448/Buy-Sell%20Agreement_83448_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352235/","spamhaus"
 "352234","2020-04-27 16:28:08","https://bestappliances.in/wp-content/uploads/2020/04/docs_0mg/5220570/Buy-Sell%20Agreement_5220570_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352234/","spamhaus"
 "352233","2020-04-27 16:27:33","https://minimalisku.com/wp-content/uploads/2020/04/docs_tp8/Buy-Sell%20Agreement_2929_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352233/","spamhaus"
 "352232","2020-04-27 16:26:58","https://www.h2obbs.cn/wp-content/themes/calliope/docs_3kj/00495211/Buy-Sell%20Agreement_00495211_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352232/","spamhaus"
-"352231","2020-04-27 16:26:24","https://pakdesighee.com/wp-content/uploads/2020/04/docs_l9e/5150036/Buy-Sell%20Agreement_5150036_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352231/","spamhaus"
+"352231","2020-04-27 16:26:24","https://pakdesighee.com/wp-content/uploads/2020/04/docs_l9e/5150036/Buy-Sell%20Agreement_5150036_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352231/","spamhaus"
 "352230","2020-04-27 16:25:32","https://www.netfeed.club/wp-content/themes/calliope/docs_wd2/Buy-Sell%20Agreement_07984922_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352230/","spamhaus"
 "352229","2020-04-27 16:24:54","https://parmisco.com/docs_mc0/530449/Buy-Sell%20Agreement_530449_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352229/","spamhaus"
 "352228","2020-04-27 16:24:20","https://parmisco.com/docs_mc0/458204/Buy-Sell%20Agreement_458204_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352228/","spamhaus"
@@ -2486,7 +2873,7 @@
 "352224","2020-04-27 16:21:26","https://www.teleporterhire.ie/wp-content/uploads/2020/04/docs_1sn/29138/Buy-Sell%20Agreement_29138_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352224/","spamhaus"
 "352223","2020-04-27 16:20:53","https://youngspiritshop.com/docs_8s0/Buy-Sell%20Agreement_90665735_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352223/","spamhaus"
 "352222","2020-04-27 16:20:17","https://www.corazondelcielo.mx/docs_5zp/40939/Buy-Sell%20Agreement_40939_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352222/","spamhaus"
-"352221","2020-04-27 16:19:42","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/97898/Buy-Sell%20Agreement_97898_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352221/","spamhaus"
+"352221","2020-04-27 16:19:42","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/97898/Buy-Sell%20Agreement_97898_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352221/","spamhaus"
 "352220","2020-04-27 16:19:07","https://manamobile.store/wp-content/uploads/2020/04/docs_s1f/3100/Buy-Sell%20Agreement_3100_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352220/","spamhaus"
 "352219","2020-04-27 16:18:34","https://youngspiritshop.com/docs_8s0/325802/Buy-Sell%20Agreement_325802_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352219/","spamhaus"
 "352218","2020-04-27 16:17:36","https://bestappliances.in/wp-content/uploads/2020/04/docs_0mg/Buy-Sell%20Agreement_51983362_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352218/","spamhaus"
@@ -2499,7 +2886,7 @@
 "352211","2020-04-27 15:24:04","http://88.218.16.38/5OqHQwTefXdVsgt.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/352211/","abuse_ch"
 "352210","2020-04-27 15:23:03","http://88.218.16.38/EmrzVnkezMkCRUQ.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/352210/","cocaman"
 "352209","2020-04-27 15:08:04","https://pastebin.com/raw/T5E3RE3a","offline","malware_download","None","https://urlhaus.abuse.ch/url/352209/","JayTHL"
-"352208","2020-04-27 15:04:51","http://59.3.94.190:35526/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352208/","Gandylyan1"
+"352208","2020-04-27 15:04:51","http://59.3.94.190:35526/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352208/","Gandylyan1"
 "352207","2020-04-27 15:04:47","http://42.235.38.141:56462/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352207/","Gandylyan1"
 "352206","2020-04-27 15:04:43","http://58.243.121.195:43169/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352206/","Gandylyan1"
 "352205","2020-04-27 15:04:40","http://111.43.223.124:47166/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352205/","Gandylyan1"
@@ -2694,17 +3081,17 @@
 "352016","2020-04-27 14:05:05","http://138.68.10.222/zehir/z3hir.arm6","offline","malware_download","None","https://urlhaus.abuse.ch/url/352016/","JayTHL"
 "352015","2020-04-27 14:05:02","http://138.68.10.222/zehir/z3hir.arm5","offline","malware_download","None","https://urlhaus.abuse.ch/url/352015/","JayTHL"
 "352014","2020-04-27 14:05:00","http://138.68.10.222/zehir/z3hir.arm","offline","malware_download","None","https://urlhaus.abuse.ch/url/352014/","JayTHL"
-"352013","2020-04-27 14:04:57","http://108.174.197.76/bins/LOTMOT.x86","offline","malware_download","None","https://urlhaus.abuse.ch/url/352013/","JayTHL"
-"352012","2020-04-27 14:04:54","http://108.174.197.76/bins/LOTMOT.spc","offline","malware_download","None","https://urlhaus.abuse.ch/url/352012/","JayTHL"
-"352011","2020-04-27 14:04:52","http://108.174.197.76/bins/LOTMOT.sh4","offline","malware_download","None","https://urlhaus.abuse.ch/url/352011/","JayTHL"
-"352010","2020-04-27 14:04:50","http://108.174.197.76/bins/LOTMOT.ppc","offline","malware_download","None","https://urlhaus.abuse.ch/url/352010/","JayTHL"
-"352009","2020-04-27 14:04:47","http://108.174.197.76/bins/LOTMOT.mpsl","offline","malware_download","None","https://urlhaus.abuse.ch/url/352009/","JayTHL"
-"352008","2020-04-27 14:04:45","http://108.174.197.76/bins/LOTMOT.mips","offline","malware_download","None","https://urlhaus.abuse.ch/url/352008/","JayTHL"
-"352007","2020-04-27 14:04:43","http://108.174.197.76/bins/LOTMOT.m68k","offline","malware_download","None","https://urlhaus.abuse.ch/url/352007/","JayTHL"
-"352006","2020-04-27 14:04:41","http://108.174.197.76/bins/LOTMOT.arm7","offline","malware_download","None","https://urlhaus.abuse.ch/url/352006/","JayTHL"
-"352005","2020-04-27 14:04:38","http://108.174.197.76/bins/LOTMOT.arm6","offline","malware_download","None","https://urlhaus.abuse.ch/url/352005/","JayTHL"
-"352004","2020-04-27 14:04:36","http://108.174.197.76/bins/LOTMOT.arm5","offline","malware_download","None","https://urlhaus.abuse.ch/url/352004/","JayTHL"
-"352003","2020-04-27 14:04:34","http://108.174.197.76/bins/LOTMOT.arm","offline","malware_download","None","https://urlhaus.abuse.ch/url/352003/","JayTHL"
+"352013","2020-04-27 14:04:57","http://108.174.197.76/bins/LOTMOT.x86","online","malware_download","None","https://urlhaus.abuse.ch/url/352013/","JayTHL"
+"352012","2020-04-27 14:04:54","http://108.174.197.76/bins/LOTMOT.spc","online","malware_download","None","https://urlhaus.abuse.ch/url/352012/","JayTHL"
+"352011","2020-04-27 14:04:52","http://108.174.197.76/bins/LOTMOT.sh4","online","malware_download","None","https://urlhaus.abuse.ch/url/352011/","JayTHL"
+"352010","2020-04-27 14:04:50","http://108.174.197.76/bins/LOTMOT.ppc","online","malware_download","None","https://urlhaus.abuse.ch/url/352010/","JayTHL"
+"352009","2020-04-27 14:04:47","http://108.174.197.76/bins/LOTMOT.mpsl","online","malware_download","None","https://urlhaus.abuse.ch/url/352009/","JayTHL"
+"352008","2020-04-27 14:04:45","http://108.174.197.76/bins/LOTMOT.mips","online","malware_download","None","https://urlhaus.abuse.ch/url/352008/","JayTHL"
+"352007","2020-04-27 14:04:43","http://108.174.197.76/bins/LOTMOT.m68k","online","malware_download","None","https://urlhaus.abuse.ch/url/352007/","JayTHL"
+"352006","2020-04-27 14:04:41","http://108.174.197.76/bins/LOTMOT.arm7","online","malware_download","None","https://urlhaus.abuse.ch/url/352006/","JayTHL"
+"352005","2020-04-27 14:04:38","http://108.174.197.76/bins/LOTMOT.arm6","online","malware_download","None","https://urlhaus.abuse.ch/url/352005/","JayTHL"
+"352004","2020-04-27 14:04:36","http://108.174.197.76/bins/LOTMOT.arm5","online","malware_download","None","https://urlhaus.abuse.ch/url/352004/","JayTHL"
+"352003","2020-04-27 14:04:34","http://108.174.197.76/bins/LOTMOT.arm","online","malware_download","None","https://urlhaus.abuse.ch/url/352003/","JayTHL"
 "352002","2020-04-27 14:04:30","http://104.168.198.26/nope/daddyscum.x86","offline","malware_download","None","https://urlhaus.abuse.ch/url/352002/","JayTHL"
 "352001","2020-04-27 14:03:59","http://104.168.198.26/nope/daddyscum.spc","offline","malware_download","None","https://urlhaus.abuse.ch/url/352001/","JayTHL"
 "352000","2020-04-27 14:03:56","http://104.168.198.26/nope/daddyscum.sh4","offline","malware_download","None","https://urlhaus.abuse.ch/url/352000/","JayTHL"
@@ -2789,7 +3176,7 @@
 "351921","2020-04-27 11:55:05","http://45.95.168.251/mipsel","offline","malware_download",",elf","https://urlhaus.abuse.ch/url/351921/","Gandylyan1"
 "351920","2020-04-27 11:55:03","http://45.95.168.251/x86","offline","malware_download",",elf","https://urlhaus.abuse.ch/url/351920/","Gandylyan1"
 "351919","2020-04-27 11:47:05","http://45.95.168.251/mips","offline","malware_download","32-bit,elf,mips","https://urlhaus.abuse.ch/url/351919/","geenensp"
-"351918","2020-04-27 11:47:02","http://45.95.168.251/bbins.sh","online","malware_download","script","https://urlhaus.abuse.ch/url/351918/","geenensp"
+"351918","2020-04-27 11:47:02","http://45.95.168.251/bbins.sh","offline","malware_download","script","https://urlhaus.abuse.ch/url/351918/","geenensp"
 "351917","2020-04-27 11:27:16","https://bitbucket.org/destek21/3reklam/downloads/20gbhediyesi.apk","online","malware_download","None","https://urlhaus.abuse.ch/url/351917/","JAMESWT_MHT"
 "351916","2020-04-27 11:23:07","https://20gbverdimgitti.com/hediye20gb.apk","offline","malware_download","None","https://urlhaus.abuse.ch/url/351916/","JAMESWT_MHT"
 "351915","2020-04-27 11:08:18","http://hmbwgroup.com/wp-includes/js/tinymce/skins/wordpress/yu.exe","offline","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/351915/","JAMESWT_MHT"
@@ -2807,7 +3194,7 @@
 "351903","2020-04-27 10:16:05","http://89.34.27.10/fbot.arm","offline","malware_download",",elf","https://urlhaus.abuse.ch/url/351903/","Gandylyan1"
 "351902","2020-04-27 10:16:03","http://89.34.27.10/fbot.x86","offline","malware_download",",elf","https://urlhaus.abuse.ch/url/351902/","Gandylyan1"
 "351901","2020-04-27 10:05:08","http://45.95.168.254:1691/dvrbot.x86","online","malware_download",",elf","https://urlhaus.abuse.ch/url/351901/","Gandylyan1"
-"351900","2020-04-27 10:05:05","http://45.95.168.254:1691/dvrbot.mips","online","malware_download",",elf","https://urlhaus.abuse.ch/url/351900/","Gandylyan1"
+"351900","2020-04-27 10:05:05","http://45.95.168.254:1691/dvrbot.mips","offline","malware_download",",elf","https://urlhaus.abuse.ch/url/351900/","Gandylyan1"
 "351899","2020-04-27 10:05:03","http://45.95.168.254:1691/dvrbot.arm5","online","malware_download",",elf","https://urlhaus.abuse.ch/url/351899/","Gandylyan1"
 "351898","2020-04-27 10:01:33","http://vmi367745.contaboserver.net/bins/mpsl","offline","malware_download",",elf","https://urlhaus.abuse.ch/url/351898/","Gandylyan1"
 "351897","2020-04-27 10:01:31","http://vmi367745.contaboserver.net/bins/arm7","offline","malware_download",",elf","https://urlhaus.abuse.ch/url/351897/","Gandylyan1"
@@ -2835,7 +3222,7 @@
 "351875","2020-04-27 09:05:19","http://218.21.171.45:38598/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351875/","Gandylyan1"
 "351874","2020-04-27 09:05:16","http://42.239.93.155:40076/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351874/","Gandylyan1"
 "351873","2020-04-27 09:05:11","http://123.4.32.19:58861/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351873/","Gandylyan1"
-"351872","2020-04-27 09:05:06","http://222.217.65.112:57728/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351872/","Gandylyan1"
+"351872","2020-04-27 09:05:06","http://222.217.65.112:57728/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351872/","Gandylyan1"
 "351871","2020-04-27 09:04:52","http://111.38.8.71:51412/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351871/","Gandylyan1"
 "351870","2020-04-27 09:04:37","http://116.114.95.86:41825/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351870/","Gandylyan1"
 "351869","2020-04-27 09:04:34","http://77.43.131.238:34278/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351869/","Gandylyan1"
@@ -2877,17 +3264,17 @@
 "351833","2020-04-27 06:17:08","http://78.186.190.222:17012/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351833/","geenensp"
 "351832","2020-04-27 06:16:43","http://106.104.115.213:30358/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351832/","geenensp"
 "351831","2020-04-27 06:16:38","http://59.125.190.210:56936/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351831/","geenensp"
-"351830","2020-04-27 06:16:34","http://221.158.124.81:2063/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351830/","geenensp"
+"351830","2020-04-27 06:16:34","http://221.158.124.81:2063/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351830/","geenensp"
 "351829","2020-04-27 06:16:30","http://107.175.8.75/mips","offline","malware_download","32-bit,elf,mips","https://urlhaus.abuse.ch/url/351829/","geenensp"
 "351828","2020-04-27 06:16:27","http://107.175.8.75/niggabins.sh","offline","malware_download","script","https://urlhaus.abuse.ch/url/351828/","geenensp"
 "351827","2020-04-27 06:16:25","http://1.34.183.212:62109/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351827/","geenensp"
-"351826","2020-04-27 06:16:18","http://221.155.253.61:6651/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351826/","geenensp"
+"351826","2020-04-27 06:16:18","http://221.155.253.61:6651/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351826/","geenensp"
 "351825","2020-04-27 06:16:13","http://89.34.27.10/fbot.x86_64","offline","malware_download","32-bit,elf,x86-32","https://urlhaus.abuse.ch/url/351825/","geenensp"
 "351824","2020-04-27 06:16:10","http://5.29.175.150:59666/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351824/","geenensp"
 "351823","2020-04-27 06:16:06","http://1.34.128.245:62501/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351823/","geenensp"
 "351822","2020-04-27 06:15:21","http://chnesstdywealthandmoduleorganisationap16.duckdns.org/secure/svchost.exe","offline","malware_download","exe,Loki,lokibot","https://urlhaus.abuse.ch/url/351822/","gorimpthon"
 "351821","2020-04-27 06:14:56","http://stdykungeduationaldeveloper15investmenqg.duckdns.org/kungdoc/winlog.exe","offline","malware_download","exe,Loki,lokibot","https://urlhaus.abuse.ch/url/351821/","gorimpthon"
-"351820","2020-04-27 06:14:35","http://42.82.191.105:3898/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351820/","geenensp"
+"351820","2020-04-27 06:14:35","http://42.82.191.105:3898/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351820/","geenensp"
 "351819","2020-04-27 06:14:31","http://122.116.9.14:15816/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351819/","geenensp"
 "351818","2020-04-27 06:14:25","http://69.229.0.133:53066/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351818/","geenensp"
 "351817","2020-04-27 06:14:06","http://14.48.41.82:7762/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351817/","geenensp"
@@ -2936,7 +3323,7 @@
 "351774","2020-04-27 03:04:40","http://123.5.125.10:43656/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351774/","Gandylyan1"
 "351773","2020-04-27 03:04:36","http://182.124.4.130:48494/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351773/","Gandylyan1"
 "351772","2020-04-27 03:04:32","http://172.36.19.98:53923/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351772/","Gandylyan1"
-"351771","2020-04-27 02:41:05","http://45.95.55.58/a-r.m-4.GHOUL","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351771/","zbetcheckin"
+"351771","2020-04-27 02:41:05","http://45.95.55.58/a-r.m-4.GHOUL","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351771/","zbetcheckin"
 "351770","2020-04-27 02:41:03","http://107.174.24.117/orbitclient.mpsl","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351770/","zbetcheckin"
 "351769","2020-04-27 02:37:17","http://107.174.24.117/orbitclient.sh4","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351769/","zbetcheckin"
 "351768","2020-04-27 02:37:14","http://185.247.118.127/armv5l","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351768/","zbetcheckin"
@@ -2945,50 +3332,50 @@
 "351765","2020-04-27 02:37:08","http://107.174.24.117/orbitclient.x86","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351765/","zbetcheckin"
 "351764","2020-04-27 02:37:05","http://91.134.252.221/yakuza.ppc","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351764/","zbetcheckin"
 "351763","2020-04-27 02:37:03","http://23.95.89.78/beastmode/b3astmode.arm6","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351763/","zbetcheckin"
-"351762","2020-04-27 02:36:16","http://45.95.55.58/p-p.c-.GHOUL","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351762/","zbetcheckin"
+"351762","2020-04-27 02:36:16","http://45.95.55.58/p-p.c-.GHOUL","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351762/","zbetcheckin"
 "351761","2020-04-27 02:36:14","http://23.95.89.78/beastmode/b3astmode.ppc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351761/","zbetcheckin"
 "351760","2020-04-27 02:36:10","http://91.134.252.221/yakuza.i586","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351760/","zbetcheckin"
-"351759","2020-04-27 02:36:08","http://45.95.55.58/i-5.8-6.GHOUL","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351759/","zbetcheckin"
+"351759","2020-04-27 02:36:08","http://45.95.55.58/i-5.8-6.GHOUL","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351759/","zbetcheckin"
 "351758","2020-04-27 02:36:06","http://185.247.118.127/powerpc","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351758/","zbetcheckin"
 "351757","2020-04-27 02:36:04","https://pastebin.com/raw/3euxXyD5","offline","malware_download","None","https://urlhaus.abuse.ch/url/351757/","JayTHL"
 "351756","2020-04-27 02:32:26","http://185.247.118.127/i586","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351756/","zbetcheckin"
 "351755","2020-04-27 02:32:24","http://107.174.24.117/orbitclient.x32","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351755/","zbetcheckin"
 "351754","2020-04-27 02:32:22","http://185.247.118.127/armv4l","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351754/","zbetcheckin"
-"351753","2020-04-27 02:32:20","http://45.95.55.58/s-h.4-.GHOUL","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351753/","zbetcheckin"
+"351753","2020-04-27 02:32:20","http://45.95.55.58/s-h.4-.GHOUL","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351753/","zbetcheckin"
 "351752","2020-04-27 02:32:18","http://185.247.118.127/i686","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351752/","zbetcheckin"
 "351751","2020-04-27 02:32:16","http://185.247.118.127/m68k","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351751/","zbetcheckin"
 "351750","2020-04-27 02:32:14","http://91.134.252.221/yakuza.sh4","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351750/","zbetcheckin"
-"351749","2020-04-27 02:32:12","http://45.95.55.58/m-i.p-s.GHOUL","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351749/","zbetcheckin"
+"351749","2020-04-27 02:32:12","http://45.95.55.58/m-i.p-s.GHOUL","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351749/","zbetcheckin"
 "351748","2020-04-27 02:32:10","http://23.95.89.78/beastmode/b3astmode.mpsl","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351748/","zbetcheckin"
-"351747","2020-04-27 02:32:08","http://45.95.55.58/x-8.6-.GHOUL","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351747/","zbetcheckin"
+"351747","2020-04-27 02:32:08","http://45.95.55.58/x-8.6-.GHOUL","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351747/","zbetcheckin"
 "351746","2020-04-27 02:32:06","http://91.134.252.221/yakuza.x32","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351746/","zbetcheckin"
 "351745","2020-04-27 02:32:04","http://107.174.24.117/orbitclient.i586","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351745/","zbetcheckin"
 "351744","2020-04-27 02:28:22","http://23.95.89.78/beastmode/b3astmode.arm7","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351744/","zbetcheckin"
 "351743","2020-04-27 02:28:19","http://91.134.252.221/yakuza.mpsl","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351743/","zbetcheckin"
-"351742","2020-04-27 02:28:17","http://45.95.55.58/a-r.m-6.GHOUL","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351742/","zbetcheckin"
+"351742","2020-04-27 02:28:17","http://45.95.55.58/a-r.m-6.GHOUL","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351742/","zbetcheckin"
 "351741","2020-04-27 02:28:15","http://107.174.24.117/orbitclient.mips","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351741/","zbetcheckin"
 "351740","2020-04-27 02:28:12","http://185.247.118.127/sh4","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351740/","zbetcheckin"
 "351739","2020-04-27 02:28:10","http://23.95.89.78/beastmode/b3astmode.arm5","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351739/","zbetcheckin"
 "351738","2020-04-27 02:28:07","http://91.134.252.221/yakuza.mips","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351738/","zbetcheckin"
-"351737","2020-04-27 02:28:05","http://45.95.55.58/a-r.m-5.GHOUL","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351737/","zbetcheckin"
+"351737","2020-04-27 02:28:05","http://45.95.55.58/a-r.m-5.GHOUL","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351737/","zbetcheckin"
 "351736","2020-04-27 02:28:04","http://107.174.24.117/orbitclient.arm6","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351736/","zbetcheckin"
 "351735","2020-04-27 02:27:03","http://185.247.118.127/mipsel","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351735/","zbetcheckin"
 "351734","2020-04-27 02:25:15","http://185.247.118.127/x86","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351734/","zbetcheckin"
 "351733","2020-04-27 02:25:13","http://23.95.89.78/beastmode/b3astmode.m68k","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351733/","zbetcheckin"
 "351732","2020-04-27 02:25:10","https://pastebin.com/raw/QutJTFjC","offline","malware_download","None","https://urlhaus.abuse.ch/url/351732/","JayTHL"
-"351731","2020-04-27 02:24:38","http://45.95.55.58/m-6.8-k.GHOUL","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351731/","zbetcheckin"
+"351731","2020-04-27 02:24:38","http://45.95.55.58/m-6.8-k.GHOUL","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351731/","zbetcheckin"
 "351730","2020-04-27 02:24:36","https://pastebin.com/raw/JAbsT5ZU","offline","malware_download","None","https://urlhaus.abuse.ch/url/351730/","JayTHL"
 "351729","2020-04-27 02:24:03","http://23.95.89.78/beastmode/b3astmode.mips","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351729/","zbetcheckin"
 "351728","2020-04-27 02:23:18","http://91.134.252.221/yakuza.arm6","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351728/","zbetcheckin"
 "351727","2020-04-27 02:23:15","http://185.247.118.127/sparc","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351727/","zbetcheckin"
 "351726","2020-04-27 02:23:13","http://23.95.89.78/beastmode/b3astmode.arm","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351726/","zbetcheckin"
-"351725","2020-04-27 02:23:10","http://45.95.55.58/m-p.s-l.GHOUL","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351725/","zbetcheckin"
+"351725","2020-04-27 02:23:10","http://45.95.55.58/m-p.s-l.GHOUL","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351725/","zbetcheckin"
 "351724","2020-04-27 02:23:08","http://107.174.24.117/orbitclient.m68k","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351724/","zbetcheckin"
 "351723","2020-04-27 02:23:04","http://91.209.70.22/Corona.x86_64","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351723/","zbetcheckin"
 "351722","2020-04-27 02:23:02","http://185.247.118.127/mips","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351722/","zbetcheckin"
-"351721","2020-04-27 02:19:18","http://45.95.55.58/a-r.m-7.GHOUL","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351721/","zbetcheckin"
+"351721","2020-04-27 02:19:18","http://45.95.55.58/a-r.m-7.GHOUL","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351721/","zbetcheckin"
 "351720","2020-04-27 02:19:16","http://185.247.118.127/armv6l","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351720/","zbetcheckin"
-"351719","2020-04-27 02:19:14","http://45.95.55.58/x-3.2-.GHOUL","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351719/","zbetcheckin"
+"351719","2020-04-27 02:19:14","http://45.95.55.58/x-3.2-.GHOUL","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351719/","zbetcheckin"
 "351718","2020-04-27 02:19:12","http://107.174.24.117/orbitclient.arm4","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351718/","zbetcheckin"
 "351717","2020-04-27 02:19:10","http://23.95.89.78/beastmode/b3astmode.sh4","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351717/","zbetcheckin"
 "351716","2020-04-27 02:19:08","http://91.134.252.221/yakuza.x86","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351716/","zbetcheckin"
@@ -3011,7 +3398,7 @@
 "351699","2020-04-27 01:41:06","http://91.134.252.221/bins.sh","online","malware_download","shellscript","https://urlhaus.abuse.ch/url/351699/","zbetcheckin"
 "351698","2020-04-27 01:41:04","http://185.247.118.127/AXISbins.sh","offline","malware_download","shellscript","https://urlhaus.abuse.ch/url/351698/","zbetcheckin"
 "351697","2020-04-27 01:41:01","http://91.209.70.22/Corona.arm5","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351697/","zbetcheckin"
-"351696","2020-04-27 01:38:06","http://45.95.55.58/GhOul.sh","offline","malware_download","shellscript","https://urlhaus.abuse.ch/url/351696/","zbetcheckin"
+"351696","2020-04-27 01:38:06","http://45.95.55.58/GhOul.sh","online","malware_download","shellscript","https://urlhaus.abuse.ch/url/351696/","zbetcheckin"
 "351695","2020-04-27 01:38:03","http://91.209.70.22/Corona.arm7","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351695/","zbetcheckin"
 "351694","2020-04-27 01:36:14","http://eytbf.xyz/chrome.apk","offline","malware_download","None","https://urlhaus.abuse.ch/url/351694/","JayTHL"
 "351693","2020-04-27 01:36:11","http://exvxa.xyz/chrome.apk","offline","malware_download","None","https://urlhaus.abuse.ch/url/351693/","JayTHL"
@@ -3059,7 +3446,7 @@
 "351651","2020-04-26 23:08:09","http://37.49.226.16/luoqxbocmkxnexy/tbox.m68k","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351651/","zbetcheckin"
 "351650","2020-04-26 23:08:07","http://81.17.16.122:34343/ds8yg8wbaja2/ch1n4.x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351650/","zbetcheckin"
 "351649","2020-04-26 23:08:05","http://37.49.226.16/luoqxbocmkxnexy/tbox.arm5","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351649/","zbetcheckin"
-"351648","2020-04-26 23:08:03","http://51.255.170.237/pandora.mips","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351648/","zbetcheckin"
+"351648","2020-04-26 23:08:03","http://51.255.170.237/pandora.mips","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351648/","zbetcheckin"
 "351647","2020-04-26 23:07:05","https://pastebin.com/raw/qN1aCzmi","offline","malware_download","None","https://urlhaus.abuse.ch/url/351647/","JayTHL"
 "351646","2020-04-26 22:53:06","http://81.17.16.122:42069/wp-admin/php64.x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351646/","zbetcheckin"
 "351645","2020-04-26 22:53:04","http://222.187.191.224:57094/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351645/","zbetcheckin"
@@ -3094,13 +3481,13 @@
 "351616","2020-04-26 19:26:16","http://ettba.xyz/chrome.apk","offline","malware_download","None","https://urlhaus.abuse.ch/url/351616/","JayTHL"
 "351615","2020-04-26 19:26:11","http://etwax.xyz/chrome.apk","offline","malware_download","None","https://urlhaus.abuse.ch/url/351615/","JayTHL"
 "351614","2020-04-26 19:26:06","http://esxzt.xyz/chrome.apk","offline","malware_download","None","https://urlhaus.abuse.ch/url/351614/","JayTHL"
-"351613","2020-04-26 19:24:05","http://73.139.46.234:60322/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351613/","geenensp"
+"351613","2020-04-26 19:24:05","http://73.139.46.234:60322/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351613/","geenensp"
 "351612","2020-04-26 18:59:05","http://218.156.132.7:50562/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351612/","geenensp"
 "351611","2020-04-26 18:57:34","http://i-bss.com/build.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/351611/","zbetcheckin"
 "351610","2020-04-26 18:08:06","http://i-bss.com/COVID-19_Information.Doc","offline","malware_download","RTF","https://urlhaus.abuse.ch/url/351610/","zbetcheckin"
 "351609","2020-04-26 18:07:45","http://115.209.252.115:46234/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351609/","Gandylyan1"
 "351608","2020-04-26 18:07:37","http://61.53.241.64:34531/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351608/","Gandylyan1"
-"351607","2020-04-26 18:07:33","http://199.83.200.194:34858/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351607/","Gandylyan1"
+"351607","2020-04-26 18:07:33","http://199.83.200.194:34858/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351607/","Gandylyan1"
 "351606","2020-04-26 18:07:29","http://172.39.16.204:54480/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351606/","Gandylyan1"
 "351605","2020-04-26 18:06:58","http://182.114.212.7:55150/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351605/","Gandylyan1"
 "351604","2020-04-26 18:06:54","http://172.36.39.166:56614/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351604/","Gandylyan1"
@@ -3237,38 +3624,38 @@
 "351473","2020-04-26 07:17:43","https://onedrive.live.com/download?cid=97B91CC99F8D92A7&resid=97B91CC99F8D92A7%21760&authkey=AH_4UDqQKUnv3Iw","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/351473/","lovemalware"
 "351472","2020-04-26 07:17:40","https://drive.google.com/uc?export=download&id=1hjlddzrmVdlrx9hKQO6HTIrG-NUpNRUB","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/351472/","lovemalware"
 "351471","2020-04-26 07:17:30","https://drive.google.com/uc?export=download&id=1mlGx7wgPzE4ZBxo-LJs6FOkb1G8e1Jsi","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/351471/","lovemalware"
-"351470","2020-04-26 07:17:24","https://onedrive.live.com/download?cid=6CD2E7E257C16E46&resid=6CD2E7E257C16E46%21158&authkey=ACpreL1y7oJkJqY","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/351470/","lovemalware"
+"351470","2020-04-26 07:17:24","https://onedrive.live.com/download?cid=6CD2E7E257C16E46&resid=6CD2E7E257C16E46%21158&authkey=ACpreL1y7oJkJqY","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/351470/","lovemalware"
 "351469","2020-04-26 07:17:20","https://drive.google.com/uc?export=download&id=1mGwOcBkUSpq-u0D_xTOrvkrxfUluQ1yG","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/351469/","lovemalware"
-"351468","2020-04-26 07:17:06","https://onedrive.live.com/download?cid=E4B1E1072DC91F5C&resid=E4B1E1072DC91F5C%21511&authkey=AGfS0Q7DZ7oS1LU","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/351468/","lovemalware"
+"351468","2020-04-26 07:17:06","https://onedrive.live.com/download?cid=E4B1E1072DC91F5C&resid=E4B1E1072DC91F5C%21511&authkey=AGfS0Q7DZ7oS1LU","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/351468/","lovemalware"
 "351467","2020-04-26 07:13:18","http://117.206.159.20/jscoe/pluginfile.php/91322/mod_folder/content/0/NPTEL%20PDF.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/351467/","zbetcheckin"
 "351466","2020-04-26 07:13:10","http://117.206.159.20/jscoe/pluginfile.php/90278/mod_folder/content/0/NPTEL%20PDF.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/351466/","zbetcheckin"
 "351465","2020-04-26 07:13:06","http://117.206.159.20/jscoe/pluginfile.php/90274/mod_folder/content/0/sppu%20q%20paper.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/351465/","zbetcheckin"
 "351464","2020-04-26 07:11:04","http://198.98.59.174/ap/ad.mips","offline","malware_download","elf","https://urlhaus.abuse.ch/url/351464/","zbetcheckin"
 "351463","2020-04-26 07:10:32","http://198.98.59.174/ap/ad.arm4","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351463/","zbetcheckin"
-"351462","2020-04-26 07:09:07","http://213.202.255.4/x0ox0ox0oxDefault/z0r0.arm7","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351462/","zbetcheckin"
-"351461","2020-04-26 07:09:05","http://213.202.255.4/x0ox0ox0oxDefault/z0r0.sh4","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351461/","zbetcheckin"
-"351460","2020-04-26 07:09:02","http://213.202.255.4/x0ox0ox0oxDefault/z0r0.mips","online","malware_download","elf","https://urlhaus.abuse.ch/url/351460/","zbetcheckin"
+"351462","2020-04-26 07:09:07","http://213.202.255.4/x0ox0ox0oxDefault/z0r0.arm7","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351462/","zbetcheckin"
+"351461","2020-04-26 07:09:05","http://213.202.255.4/x0ox0ox0oxDefault/z0r0.sh4","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351461/","zbetcheckin"
+"351460","2020-04-26 07:09:02","http://213.202.255.4/x0ox0ox0oxDefault/z0r0.mips","offline","malware_download","elf","https://urlhaus.abuse.ch/url/351460/","zbetcheckin"
 "351459","2020-04-26 07:08:03","https://pastebin.com/raw/u1M7F3BJ","offline","malware_download","None","https://urlhaus.abuse.ch/url/351459/","JayTHL"
 "351458","2020-04-26 07:07:09","http://198.98.59.174/ap/ad.i686","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351458/","zbetcheckin"
-"351457","2020-04-26 07:06:37","http://213.202.255.4/x0ox0ox0oxDefault/z0r0.spc","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351457/","zbetcheckin"
+"351457","2020-04-26 07:06:37","http://213.202.255.4/x0ox0ox0oxDefault/z0r0.spc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351457/","zbetcheckin"
 "351456","2020-04-26 07:06:35","http://198.98.59.174/ap/ad.mpsl","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351456/","zbetcheckin"
-"351455","2020-04-26 07:06:03","http://213.202.255.4/x0ox0ox0oxDefault/z0r0.mpsl","online","malware_download","elf","https://urlhaus.abuse.ch/url/351455/","zbetcheckin"
+"351455","2020-04-26 07:06:03","http://213.202.255.4/x0ox0ox0oxDefault/z0r0.mpsl","offline","malware_download","elf","https://urlhaus.abuse.ch/url/351455/","zbetcheckin"
 "351454","2020-04-26 07:05:40","http://198.98.59.174/ap/ad.ppc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351454/","zbetcheckin"
-"351453","2020-04-26 07:05:08","http://213.202.255.4/x0ox0ox0oxDefault/z0r0.ppc","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351453/","zbetcheckin"
-"351452","2020-04-26 07:05:06","http://213.202.255.4/x0ox0ox0oxDefault/z0r0.m68k","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351452/","zbetcheckin"
-"351451","2020-04-26 07:05:03","http://213.202.255.4/x0ox0ox0oxDefault/z0r0.arm6","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351451/","zbetcheckin"
+"351453","2020-04-26 07:05:08","http://213.202.255.4/x0ox0ox0oxDefault/z0r0.ppc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351453/","zbetcheckin"
+"351452","2020-04-26 07:05:06","http://213.202.255.4/x0ox0ox0oxDefault/z0r0.m68k","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351452/","zbetcheckin"
+"351451","2020-04-26 07:05:03","http://213.202.255.4/x0ox0ox0oxDefault/z0r0.arm6","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351451/","zbetcheckin"
 "351450","2020-04-26 07:02:42","http://198.98.59.174/ap/ad.arm5","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351450/","zbetcheckin"
-"351449","2020-04-26 07:02:10","http://213.202.255.4/x0ox0ox0oxDefault/z0r0.arm","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351449/","zbetcheckin"
+"351449","2020-04-26 07:02:10","http://213.202.255.4/x0ox0ox0oxDefault/z0r0.arm","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351449/","zbetcheckin"
 "351448","2020-04-26 07:02:08","http://198.98.59.174/ap/ad.arm7","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351448/","zbetcheckin"
 "351447","2020-04-26 07:01:37","http://198.98.59.174/ap/ad.arm6","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351447/","zbetcheckin"
-"351446","2020-04-26 07:01:05","http://213.202.255.4/x0ox0ox0oxDefault/z0r0.i686","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351446/","zbetcheckin"
-"351445","2020-04-26 07:01:03","http://213.202.255.4/x0ox0ox0oxDefault/z0r0.arm5","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351445/","zbetcheckin"
-"351444","2020-04-26 07:00:03","http://213.202.255.4/x0ox0ox0oxDefault/z0r0.arc","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351444/","zbetcheckin"
+"351446","2020-04-26 07:01:05","http://213.202.255.4/x0ox0ox0oxDefault/z0r0.i686","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351446/","zbetcheckin"
+"351445","2020-04-26 07:01:03","http://213.202.255.4/x0ox0ox0oxDefault/z0r0.arm5","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351445/","zbetcheckin"
+"351444","2020-04-26 07:00:03","http://213.202.255.4/x0ox0ox0oxDefault/z0r0.arc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351444/","zbetcheckin"
 "351443","2020-04-26 06:53:05","http://201.75.4.149:17537/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/351443/","zbetcheckin"
 "351442","2020-04-26 06:43:30","http://92.45.198.60:49882/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351442/","geenensp"
 "351441","2020-04-26 06:43:26","http://198.98.59.174/ap/ad.x86","offline","malware_download","32-bit,elf,x86-32","https://urlhaus.abuse.ch/url/351441/","geenensp"
 "351440","2020-04-26 06:43:23","http://198.98.59.174/xb.sh","offline","malware_download","script","https://urlhaus.abuse.ch/url/351440/","geenensp"
-"351439","2020-04-26 06:43:21","http://213.202.255.4/zeros6x.sh","online","malware_download","script","https://urlhaus.abuse.ch/url/351439/","geenensp"
+"351439","2020-04-26 06:43:21","http://213.202.255.4/zeros6x.sh","offline","malware_download","script","https://urlhaus.abuse.ch/url/351439/","geenensp"
 "351438","2020-04-26 06:43:19","http://165.227.184.147/bins/Hilix.mips","offline","malware_download","32-bit,elf,mips","https://urlhaus.abuse.ch/url/351438/","geenensp"
 "351437","2020-04-26 06:43:16","http://165.227.184.147/bins/Hilix.x86","offline","malware_download","32-bit,elf,x86-32","https://urlhaus.abuse.ch/url/351437/","geenensp"
 "351436","2020-04-26 06:43:14","http://200.207.64.90:20663/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351436/","geenensp"
@@ -3277,8 +3664,8 @@
 "351433","2020-04-26 06:42:36","https://pastebin.com/raw/Earh9hGr","offline","malware_download","None","https://urlhaus.abuse.ch/url/351433/","JayTHL"
 "351432","2020-04-26 06:42:33","http://61.222.79.103:11830/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351432/","geenensp"
 "351431","2020-04-26 06:42:29","http://189.47.32.226:54377/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351431/","geenensp"
-"351430","2020-04-26 06:42:25","http://118.127.210.136:22074/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351430/","geenensp"
-"351429","2020-04-26 06:42:21","https://onedrive.live.com/download?cid=01F191D863B4D5A4&resid=1F191D863B4D5A4%21157&authkey=AAGcSM7CHqEZ6UU","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/351429/","lovemalware"
+"351430","2020-04-26 06:42:25","http://118.127.210.136:22074/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351430/","geenensp"
+"351429","2020-04-26 06:42:21","https://onedrive.live.com/download?cid=01F191D863B4D5A4&resid=1F191D863B4D5A4%21157&authkey=AAGcSM7CHqEZ6UU","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/351429/","lovemalware"
 "351428","2020-04-26 06:42:17","https://onedrive.live.com/download?cid=6B3EE3B3B5FB10D3&resid=6B3EE3B3B5FB10D3%21118&authkey=AEPf8f3mfmLSng0","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/351428/","lovemalware"
 "351427","2020-04-26 06:42:14","https://drive.google.com/uc?export=download&id=1tx5GXfF8j-Bukf9tP571ecJz4ZMXlpXX","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/351427/","lovemalware"
 "351426","2020-04-26 06:42:04","https://www.igrejayhwh.com/wo/samnew_encrypted_363A350.bin","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/351426/","lovemalware"
@@ -3609,7 +3996,7 @@
 "351101","2020-04-25 10:28:07","http://45.95.169.232/bins/arm6","offline","malware_download",",elf","https://urlhaus.abuse.ch/url/351101/","Gandylyan1"
 "351100","2020-04-25 10:28:05","http://45.95.169.232/bins/arm5","offline","malware_download",",elf","https://urlhaus.abuse.ch/url/351100/","Gandylyan1"
 "351099","2020-04-25 10:28:03","http://45.95.169.232/bins/arm","offline","malware_download",",elf","https://urlhaus.abuse.ch/url/351099/","Gandylyan1"
-"351098","2020-04-25 10:02:06","http://187.142.7.199:53178/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/351098/","zbetcheckin"
+"351098","2020-04-25 10:02:06","http://187.142.7.199:53178/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/351098/","zbetcheckin"
 "351097","2020-04-25 09:15:05","http://76.108.23.131:24240/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/351097/","zbetcheckin"
 "351096","2020-04-25 09:06:04","https://pastebin.com/raw/1Jtt0mbD","offline","malware_download","None","https://urlhaus.abuse.ch/url/351096/","JayTHL"
 "351095","2020-04-25 09:05:35","http://162.212.115.58:44775/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351095/","Gandylyan1"
@@ -3626,7 +4013,7 @@
 "351084","2020-04-25 09:04:09","http://211.137.225.150:60789/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351084/","Gandylyan1"
 "351083","2020-04-25 09:04:04","http://111.43.223.56:54318/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351083/","Gandylyan1"
 "351082","2020-04-25 08:29:03","http://59.0.224.88:9546/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/351082/","zbetcheckin"
-"351081","2020-04-25 07:41:04","http://89.141.1.115:50656/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/351081/","zbetcheckin"
+"351081","2020-04-25 07:41:04","http://89.141.1.115:50656/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/351081/","zbetcheckin"
 "351080","2020-04-25 07:40:04","https://pastebin.com/raw/LK0YgAFg","offline","malware_download","None","https://urlhaus.abuse.ch/url/351080/","JayTHL"
 "351079","2020-04-25 07:30:32","http://138.197.10.74/bins/Hilix.mpsl","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351079/","zbetcheckin"
 "351078","2020-04-25 07:27:04","http://138.197.10.74/bins/Hilix.arm5","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351078/","zbetcheckin"
@@ -3904,10 +4291,10 @@
 "350806","2020-04-24 21:42:15","https://serviciosinfoware.cl/docs_846/8289510/Buy-Sell%20Agreement_8289510_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350806/","malware_traffic"
 "350805","2020-04-24 21:42:09","https://seibee.biz/docs_3z8/976048239/Buy-Sell%20Agreement_976048239_04232020.zip","online","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350805/","malware_traffic"
 "350804","2020-04-24 21:42:00","https://redeemerssports.com/wp-content/themes/calliope/docs_i4t/6737406/Buy-Sell%20Agreement_6737406_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350804/","malware_traffic"
-"350803","2020-04-24 21:41:57","https://redeemerssports.com/wp-content/themes/calliope/docs_i4t/346947/Buy-Sell%20Agreement_346947_04232020.zip","online","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350803/","malware_traffic"
+"350803","2020-04-24 21:41:57","https://redeemerssports.com/wp-content/themes/calliope/docs_i4t/346947/Buy-Sell%20Agreement_346947_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350803/","malware_traffic"
 "350802","2020-04-24 21:41:51","https://melusinkiwane.com/docs_c95/Buy-Sell%20Agreement_615778_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350802/","malware_traffic"
 "350801","2020-04-24 21:41:49","https://melusinkiwane.com/docs_c95/87464/Buy-Sell%20Agreement_87464_04232020.zip","online","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350801/","malware_traffic"
-"350800","2020-04-24 21:41:46","https://melusinkiwane.com/docs_c95/82941186/Buy-Sell%20Agreement_82941186_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350800/","malware_traffic"
+"350800","2020-04-24 21:41:46","https://melusinkiwane.com/docs_c95/82941186/Buy-Sell%20Agreement_82941186_04232020.zip","online","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350800/","malware_traffic"
 "350799","2020-04-24 21:41:43","https://buyitshop.in/docs_x2a/777494/Buy-Sell%20Agreement_777494_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350799/","malware_traffic"
 "350798","2020-04-24 21:41:39","https://buyitshop.in/docs_x2a/63747893/Buy-Sell%20Agreement_63747893_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350798/","malware_traffic"
 "350797","2020-04-24 21:41:35","https://buyitshop.in/docs_x2a/1784236/Buy-Sell%20Agreement_1784236_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350797/","malware_traffic"
@@ -3916,11 +4303,11 @@
 "350794","2020-04-24 21:41:21","http://www.globalpremiere.org/docs_03j/Buy-Sell%20Agreement_342919423_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350794/","malware_traffic"
 "350793","2020-04-24 21:41:18","http://www.globalpremiere.org/docs_03j/Buy-Sell%20Agreement_137230_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350793/","malware_traffic"
 "350792","2020-04-24 21:41:14","http://www.e24bay.in/docs_6su/Buy-Sell%20Agreement_683710_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350792/","malware_traffic"
-"350791","2020-04-24 21:41:12","http://prepaenunsoloexamen.academiagalileoac.com/docs_l8z/05706/Buy-Sell%20Agreement_05706_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350791/","malware_traffic"
+"350791","2020-04-24 21:41:12","http://prepaenunsoloexamen.academiagalileoac.com/docs_l8z/05706/Buy-Sell%20Agreement_05706_04232020.zip","online","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350791/","malware_traffic"
 "350790","2020-04-24 21:41:06","http://portalouse.com.br/docs_jqk/Buy-Sell%20Agreement_3116575_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350790/","malware_traffic"
 "350789","2020-04-24 21:41:00","http://portalouse.com.br/docs_jqk/Buy-Sell%20Agreement_038095375_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350789/","malware_traffic"
 "350788","2020-04-24 21:40:40","http://portalouse.com.br/docs_jqk/471381/Buy-Sell%20Agreement_471381_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350788/","malware_traffic"
-"350787","2020-04-24 21:40:30","http://pmguide.net/docs_bjg/56939/Buy-Sell%20Agreement_56939_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350787/","malware_traffic"
+"350787","2020-04-24 21:40:30","http://pmguide.net/docs_bjg/56939/Buy-Sell%20Agreement_56939_04232020.zip","online","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350787/","malware_traffic"
 "350786","2020-04-24 21:39:59","http://passali.it/docs_ho3/983978772/Buy-Sell%20Agreement_983978772_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350786/","malware_traffic"
 "350785","2020-04-24 21:39:57","http://passali.it/docs_ho3/20711485/Buy-Sell%20Agreement_20711485_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350785/","malware_traffic"
 "350784","2020-04-24 21:39:52","http://olsenconcreteconstructionmo.com/wp-content/uploads/2020/04/docs_ezz/Buy-Sell%20Agreement_039229601_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350784/","malware_traffic"
@@ -3939,9 +4326,9 @@
 "350771","2020-04-24 21:38:31","http://gestoriagyg.com.mx/wp-content/plugins/apikey/docs_twh/Buy-Sell%20Agreement_6319074_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350771/","malware_traffic"
 "350770","2020-04-24 21:38:27","http://flowesie.fr/wp-content/uploads/2020/04/docs_91y/Buy-Sell%20Agreement_3875935_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350770/","malware_traffic"
 "350769","2020-04-24 21:38:23","http://flowesie.fr/wp-content/uploads/2020/04/docs_91y/47396/Buy-Sell%20Agreement_47396_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350769/","malware_traffic"
-"350768","2020-04-24 21:38:21","http://bxbx28.cn/wp-content/plugins/apikey/docs_1fc/Buy-Sell%20Agreement_341946123_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350768/","malware_traffic"
-"350767","2020-04-24 21:38:12","http://bxbx28.cn/wp-content/plugins/apikey/docs_1fc/Buy-Sell%20Agreement_261264_04232020.zip","online","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350767/","malware_traffic"
-"350766","2020-04-24 21:38:07","http://bxbx28.cn/wp-content/plugins/apikey/docs_1fc/6614881/Buy-Sell%20Agreement_6614881_04232020.zip","online","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350766/","malware_traffic"
+"350768","2020-04-24 21:38:21","http://bxbx28.cn/wp-content/plugins/apikey/docs_1fc/Buy-Sell%20Agreement_341946123_04232020.zip","online","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350768/","malware_traffic"
+"350767","2020-04-24 21:38:12","http://bxbx28.cn/wp-content/plugins/apikey/docs_1fc/Buy-Sell%20Agreement_261264_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350767/","malware_traffic"
+"350766","2020-04-24 21:38:07","http://bxbx28.cn/wp-content/plugins/apikey/docs_1fc/6614881/Buy-Sell%20Agreement_6614881_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350766/","malware_traffic"
 "350765","2020-04-24 21:06:04","http://172.39.76.165:33406/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/350765/","Gandylyan1"
 "350764","2020-04-24 21:05:32","http://111.42.66.146:34789/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/350764/","Gandylyan1"
 "350763","2020-04-24 21:05:29","http://49.68.213.49:46061/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/350763/","Gandylyan1"
@@ -4129,7 +4516,7 @@
 "350580","2020-04-24 12:02:34","http://prepaidgift.co/kpot.exe","offline","malware_download","exe,KPOTStealer","https://urlhaus.abuse.ch/url/350580/","zbetcheckin"
 "350579","2020-04-24 11:59:15","http://prepaidgift.co/$wz$Bluestack.exe","offline","malware_download","AveMariaRAT,exe","https://urlhaus.abuse.ch/url/350579/","zbetcheckin"
 "350578","2020-04-24 11:58:36","https://www.aussiepet.com.au/1KdJvgcHuY8uuSndWThUYk.pdf.jar","offline","malware_download","jSocket","https://urlhaus.abuse.ch/url/350578/","anonymous"
-"350577","2020-04-24 11:51:06","http://175.200.153.48:62149/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/350577/","zbetcheckin"
+"350577","2020-04-24 11:51:06","http://175.200.153.48:62149/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/350577/","zbetcheckin"
 "350576","2020-04-24 11:26:03","http://80.211.110.143:1691/dvrbot.x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/350576/","zbetcheckin"
 "350575","2020-04-24 11:22:05","http://hfye22gy.3b3kb3.com/juuu/ifhwwyy.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/350575/","zbetcheckin"
 "350574","2020-04-24 11:18:10","http://hfye22gy.3b3kb3.com/iuww/jhuimme.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/350574/","zbetcheckin"
@@ -5561,7 +5948,7 @@
 "349140","2020-04-23 21:06:45","http://121.233.68.89:41221/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/349140/","Gandylyan1"
 "349139","2020-04-23 21:06:41","http://42.232.102.242:54102/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/349139/","Gandylyan1"
 "349138","2020-04-23 21:06:37","http://36.33.248.14:43071/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/349138/","Gandylyan1"
-"349137","2020-04-23 21:06:31","http://173.15.162.151:4740/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/349137/","Gandylyan1"
+"349137","2020-04-23 21:06:31","http://173.15.162.151:4740/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/349137/","Gandylyan1"
 "349136","2020-04-23 21:06:27","http://61.53.46.8:57851/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/349136/","Gandylyan1"
 "349135","2020-04-23 21:06:23","http://84.232.53.246:46474/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/349135/","Gandylyan1"
 "349134","2020-04-23 21:05:50","http://115.56.59.123:40538/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/349134/","Gandylyan1"
@@ -5582,7 +5969,7 @@
 "349119","2020-04-23 21:04:10","http://115.58.64.71:50053/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/349119/","Gandylyan1"
 "349118","2020-04-23 21:04:05","http://116.114.95.86:34216/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/349118/","Gandylyan1"
 "349117","2020-04-23 20:58:03","https://onedrive.live.com/download?cid=FF1D187273DFBF73&resid=FF1D187273DFBF73!693&authkey=AGcpKHnEWFTE_Yc","online","malware_download","None","https://urlhaus.abuse.ch/url/349117/","JayTHL"
-"349116","2020-04-23 20:57:30","https://onedrive.live.com/download?cid=F293CEBB54E5EA71&resid=F293CEBB54E5EA71!195&authkey=AB6tMixR6iRg3d0","online","malware_download","None","https://urlhaus.abuse.ch/url/349116/","JayTHL"
+"349116","2020-04-23 20:57:30","https://onedrive.live.com/download?cid=F293CEBB54E5EA71&resid=F293CEBB54E5EA71!195&authkey=AB6tMixR6iRg3d0","offline","malware_download","None","https://urlhaus.abuse.ch/url/349116/","JayTHL"
 "349115","2020-04-23 20:56:58","https://onedrive.live.com/download?cid=EAE9B5435CFAEBAA&resid=EAE9B5435CFAEBAA!232&authkey=AAuY9sGJCcGPZX8","online","malware_download","None","https://urlhaus.abuse.ch/url/349115/","JayTHL"
 "349114","2020-04-23 20:56:25","https://onedrive.live.com/download?cid=E61E5F3F655316FA&resid=E61E5F3F655316FA!124&authkey=ADKlC5yRN_vbmt8","online","malware_download","None","https://urlhaus.abuse.ch/url/349114/","JayTHL"
 "349113","2020-04-23 20:55:51","https://onedrive.live.com/download?cid=D5825CD44FFD03A7&resid=D5825CD44FFD03A7!841&authkey=AJahuq67BKwKerk","offline","malware_download","None","https://urlhaus.abuse.ch/url/349113/","JayTHL"
@@ -5591,7 +5978,7 @@
 "349110","2020-04-23 20:54:12","https://onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E!1347&authkey=AL-ZGe-TTVr921s","online","malware_download","None","https://urlhaus.abuse.ch/url/349110/","JayTHL"
 "349109","2020-04-23 20:53:39","https://onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E!1344&authkey=AOzErPpD6MnoKwY","online","malware_download","None","https://urlhaus.abuse.ch/url/349109/","JayTHL"
 "349108","2020-04-23 20:53:06","https://onedrive.live.com/download?cid=B3B98222C3EF96E0&resid=B3B98222C3EF96E0!166&authkey=AM6Hz6Klyos92OY","online","malware_download","None","https://urlhaus.abuse.ch/url/349108/","JayTHL"
-"349107","2020-04-23 20:52:33","https://onedrive.live.com/download?cid=A32AEA2B4355716B&resid=A32AEA2B4355716B!5047&authkey=ABGpmXhJe7B2pEQ","online","malware_download","None","https://urlhaus.abuse.ch/url/349107/","JayTHL"
+"349107","2020-04-23 20:52:33","https://onedrive.live.com/download?cid=A32AEA2B4355716B&resid=A32AEA2B4355716B!5047&authkey=ABGpmXhJe7B2pEQ","offline","malware_download","None","https://urlhaus.abuse.ch/url/349107/","JayTHL"
 "349106","2020-04-23 20:52:00","https://onedrive.live.com/download?cid=9CE7F7EAB219AAB3&resid=9CE7F7EAB219AAB3!124&authkey=AEWD5JzUV0ZFe0U","offline","malware_download","None","https://urlhaus.abuse.ch/url/349106/","JayTHL"
 "349105","2020-04-23 20:51:26","https://onedrive.live.com/download?cid=7C41DDCFA01AEFF7&resid=7C41DDCFA01AEFF7!5296&authkey=ANk3vz5syaF6BNY","online","malware_download","None","https://urlhaus.abuse.ch/url/349105/","JayTHL"
 "349104","2020-04-23 20:51:23","https://onedrive.live.com/download?cid=7C41DDCFA01AEFF7&resid=7C41DDCFA01AEFF7!5295&authkey=AASCEQJ1MDoDEuo","online","malware_download","None","https://urlhaus.abuse.ch/url/349104/","JayTHL"
@@ -5648,16 +6035,16 @@
 "349053","2020-04-23 17:56:05","http://197.51.235.38:37532/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/349053/","geenensp"
 "349052","2020-04-23 17:49:10","http://139.99.236.237/bins/Hilix.spc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/349052/","zbetcheckin"
 "349051","2020-04-23 17:49:07","http://162.250.126.186/bins/kalon.spc","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/349051/","zbetcheckin"
-"349050","2020-04-23 17:49:05","http://107.158.154.94/beastmode/b3astmode.arm6","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/349050/","zbetcheckin"
+"349050","2020-04-23 17:49:05","http://107.158.154.94/beastmode/b3astmode.arm6","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/349050/","zbetcheckin"
 "349049","2020-04-23 17:49:03","http://192.154.228.190/lmaoWTF/loligang.arm5","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/349049/","zbetcheckin"
 "349048","2020-04-23 17:45:17","http://139.99.236.237/bins/Hilix.ppc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/349048/","zbetcheckin"
 "349047","2020-04-23 17:45:14","http://192.154.228.190/lmaoWTF/loligang.ppc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/349047/","zbetcheckin"
-"349046","2020-04-23 17:45:10","http://107.158.154.94/beastmode/b3astmode.mpsl","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/349046/","zbetcheckin"
+"349046","2020-04-23 17:45:10","http://107.158.154.94/beastmode/b3astmode.mpsl","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/349046/","zbetcheckin"
 "349045","2020-04-23 17:45:08","http://162.250.126.186/bins/kalon.arm7","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/349045/","zbetcheckin"
-"349044","2020-04-23 17:45:06","http://107.158.154.94/beastmode/b3astmode.m68k","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/349044/","zbetcheckin"
+"349044","2020-04-23 17:45:06","http://107.158.154.94/beastmode/b3astmode.m68k","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/349044/","zbetcheckin"
 "349043","2020-04-23 17:45:04","http://139.99.236.237/bins/Hilix.arm5","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/349043/","zbetcheckin"
 "349042","2020-04-23 17:44:04","https://www.nextgenclub.org/sites/default/files/001929789917491/index.php","offline","malware_download","CHL,geofenced,MetaMorfo,zip","https://urlhaus.abuse.ch/url/349042/","abuse_ch"
-"349041","2020-04-23 17:39:54","http://107.158.154.94/beastmode/b3astmode.arm7","online","malware_download","elf","https://urlhaus.abuse.ch/url/349041/","zbetcheckin"
+"349041","2020-04-23 17:39:54","http://107.158.154.94/beastmode/b3astmode.arm7","offline","malware_download","elf","https://urlhaus.abuse.ch/url/349041/","zbetcheckin"
 "349040","2020-04-23 17:39:22","http://139.99.236.237/bins/Hilix.sh4","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/349040/","zbetcheckin"
 "349039","2020-04-23 17:39:19","http://192.154.228.190/lmaoWTF/loligang.spc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/349039/","zbetcheckin"
 "349038","2020-04-23 17:39:15","http://139.99.236.237/bins/Hilix.arm7","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/349038/","zbetcheckin"
@@ -5667,19 +6054,19 @@
 "349034","2020-04-23 17:39:03","http://162.250.126.186/bins/kalon.ppc","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/349034/","zbetcheckin"
 "349033","2020-04-23 17:34:15","http://162.250.126.186/bins/kalon.arm6","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/349033/","zbetcheckin"
 "349032","2020-04-23 17:34:13","http://162.250.126.186/bins/kalon.arm","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/349032/","zbetcheckin"
-"349031","2020-04-23 17:34:11","http://107.158.154.94/beastmode/b3astmode.arm5","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/349031/","zbetcheckin"
-"349030","2020-04-23 17:34:08","http://107.158.154.94/beastmode/b3astmode.spc","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/349030/","zbetcheckin"
+"349031","2020-04-23 17:34:11","http://107.158.154.94/beastmode/b3astmode.arm5","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/349031/","zbetcheckin"
+"349030","2020-04-23 17:34:08","http://107.158.154.94/beastmode/b3astmode.spc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/349030/","zbetcheckin"
 "349029","2020-04-23 17:34:05","http://114.34.185.143:44347/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/349029/","geenensp"
 "349028","2020-04-23 17:32:17","https://drive.google.com/uc?export=download&id=1kADWimT8_VGG4rUaXsE0IrIsHZd1TY57","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/349028/","lovemalware"
 "349027","2020-04-23 17:32:09","https://drive.google.com/uc?export=download&id=1H1UM4TSdrUiqSbXvNU7aEOMEAhi2pnOU","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/349027/","lovemalware"
 "349026","2020-04-23 17:29:12","http://139.99.236.237/bins/Hilix.mpsl","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/349026/","zbetcheckin"
 "349025","2020-04-23 17:29:09","http://192.154.228.190/lmaoWTF/loligang.arm","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/349025/","zbetcheckin"
 "349024","2020-04-23 17:29:06","http://198.12.97.66/bins/Hilix.mips","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/349024/","zbetcheckin"
-"349023","2020-04-23 17:29:03","http://107.158.154.94/beastmode/b3astmode.sh4","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/349023/","zbetcheckin"
+"349023","2020-04-23 17:29:03","http://107.158.154.94/beastmode/b3astmode.sh4","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/349023/","zbetcheckin"
 "349022","2020-04-23 17:27:32","https://uvisionpk.com/wp/wp-content/themes/calliope/docs_4ru/Judgement_04222020_70525.zip","offline","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/349022/","malware_traffic"
 "349021","2020-04-23 17:27:26","https://uvisionpk.com/wp/wp-content/themes/calliope/docs_4ru/6004556/Judgement_04222020_6004556.zip","offline","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/349021/","malware_traffic"
-"349020","2020-04-23 17:27:18","https://tepatitlan.gob.mx/cs/wp-content/themes/calliope/docs_tpm/Judgement_04222020_5460712.zip","offline","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/349020/","malware_traffic"
-"349019","2020-04-23 17:27:13","https://tepatitlan.gob.mx/cs/wp-content/themes/calliope/docs_tpm/250122449/Judgement_04222020_250122449.zip","online","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/349019/","malware_traffic"
+"349020","2020-04-23 17:27:18","https://tepatitlan.gob.mx/cs/wp-content/themes/calliope/docs_tpm/Judgement_04222020_5460712.zip","online","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/349020/","malware_traffic"
+"349019","2020-04-23 17:27:13","https://tepatitlan.gob.mx/cs/wp-content/themes/calliope/docs_tpm/250122449/Judgement_04222020_250122449.zip","offline","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/349019/","malware_traffic"
 "349018","2020-04-23 17:27:08","http://playvideo.site/docs_8kj/Judgement_04222020_0736741.zip","offline","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/349018/","malware_traffic"
 "349017","2020-04-23 17:27:06","http://playvideo.site/docs_8kj/81588387/Judgement_04222020_81588387.zip","offline","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/349017/","malware_traffic"
 "349016","2020-04-23 17:27:03","http://pinangcitygroup.asia/wp-content/uploads/2020/04/docs_cgj/Judgement_04222020_56507748.zip","offline","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/349016/","malware_traffic"
@@ -5695,7 +6082,7 @@
 "349006","2020-04-23 17:26:14","https://jaincakes.xyz/docs_1o2/108393672/Judgement_04222020_108393672.zip","online","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/349006/","malware_traffic"
 "349005","2020-04-23 17:26:08","http://hlb.ae/docs_q22/Judgement_04222020_69120.zip","offline","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/349005/","malware_traffic"
 "349004","2020-04-23 17:26:02","http://hasifria.net/wp-content/uploads/2020/04/docs_jsv/Judgement_04222020_65639.zip","offline","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/349004/","malware_traffic"
-"349003","2020-04-23 17:25:59","https://www.foxfennecs.com/wp-content/themes/calliope/docs_v72/084594017/Judgement_04222020_084594017.zip","offline","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/349003/","malware_traffic"
+"349003","2020-04-23 17:25:59","https://www.foxfennecs.com/wp-content/themes/calliope/docs_v72/084594017/Judgement_04222020_084594017.zip","online","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/349003/","malware_traffic"
 "349002","2020-04-23 17:25:53","http://far-flower.mindsellers.ru/wp-content/plugins/apikey/docs_d64/054309/Judgement_04222020_054309.zip","offline","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/349002/","malware_traffic"
 "349001","2020-04-23 17:25:50","http://dubook.co.in/docs_5et/864422649/Judgement_04222020_864422649.zip","offline","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/349001/","malware_traffic"
 "349000","2020-04-23 17:25:44","http://www.blueleed.com/wp-content/plugins/advanced-ads-genesis/docs_try/2391241/Judgement_04222020_2391241.zip","offline","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/349000/","malware_traffic"
@@ -5707,7 +6094,7 @@
 "348994","2020-04-23 17:25:11","http://beta.vaspotrcko.rs/docs_01g/Judgement_04222020_8695470.zip","offline","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/348994/","malware_traffic"
 "348993","2020-04-23 17:25:09","http://beta.vaspotrcko.rs/docs_01g/21744971/Judgement_04222020_21744971.zip","offline","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/348993/","malware_traffic"
 "348992","2020-04-23 17:24:17","http://198.12.97.66/bins/Hilix.arm7","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/348992/","zbetcheckin"
-"348991","2020-04-23 17:24:14","http://107.158.154.94/beastmode/b3astmode.ppc","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/348991/","zbetcheckin"
+"348991","2020-04-23 17:24:14","http://107.158.154.94/beastmode/b3astmode.ppc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/348991/","zbetcheckin"
 "348990","2020-04-23 17:24:12","http://139.99.236.237/bins/Hilix.arm","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/348990/","zbetcheckin"
 "348989","2020-04-23 17:24:08","http://192.154.228.190/lmaoWTF/loligang.mpsl","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/348989/","zbetcheckin"
 "348988","2020-04-23 17:24:05","http://198.12.97.66/bins/Hilix.ppc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/348988/","zbetcheckin"
@@ -5716,14 +6103,14 @@
 "348985","2020-04-23 17:19:07","http://162.250.126.186/bins/kalon.mips","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/348985/","zbetcheckin"
 "348984","2020-04-23 17:19:03","http://192.154.228.190/lmaoWTF/loligang.sh4","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/348984/","zbetcheckin"
 "348983","2020-04-23 17:14:23","http://198.12.97.66/bins/Hilix.sh4","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/348983/","zbetcheckin"
-"348982","2020-04-23 17:14:17","http://107.158.154.94/beastmode/b3astmode.arm","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/348982/","zbetcheckin"
+"348982","2020-04-23 17:14:17","http://107.158.154.94/beastmode/b3astmode.arm","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/348982/","zbetcheckin"
 "348981","2020-04-23 17:14:13","http://162.250.126.186/bins/kalon.mpsl","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/348981/","zbetcheckin"
 "348980","2020-04-23 17:14:11","http://192.154.228.190/lmaoWTF/loligang.mips","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/348980/","zbetcheckin"
 "348979","2020-04-23 17:14:04","http://192.154.228.190/lmaoWTF/loligang.arm7","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/348979/","zbetcheckin"
 "348978","2020-04-23 17:10:11","http://192.154.228.190/lmaoWTF/loligang.m68k","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/348978/","zbetcheckin"
 "348977","2020-04-23 17:10:08","http://162.250.126.186/bins/kalon.arm5","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/348977/","zbetcheckin"
 "348976","2020-04-23 17:10:06","http://198.12.97.66/bins/Hilix.arm","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/348976/","zbetcheckin"
-"348975","2020-04-23 17:10:04","http://107.158.154.94/beastmode/b3astmode.mips","online","malware_download","elf","https://urlhaus.abuse.ch/url/348975/","zbetcheckin"
+"348975","2020-04-23 17:10:04","http://107.158.154.94/beastmode/b3astmode.mips","offline","malware_download","elf","https://urlhaus.abuse.ch/url/348975/","zbetcheckin"
 "348974","2020-04-23 17:04:05","http://139.99.236.237/bins/Hilix.m68k","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/348974/","zbetcheckin"
 "348973","2020-04-23 16:38:07","http://139.99.236.237/bins/Hilix.mips","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/348973/","zbetcheckin"
 "348972","2020-04-23 16:27:03","http://107.172.157.176/Cipher.sh","offline","malware_download","shellscript","https://urlhaus.abuse.ch/url/348972/","zbetcheckin"
@@ -5732,7 +6119,7 @@
 "348969","2020-04-23 16:25:20","http://70.142.195.165:10388/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348969/","geenensp"
 "348968","2020-04-23 16:25:16","http://67.8.138.101:56444/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348968/","geenensp"
 "348967","2020-04-23 16:25:10","http://181.48.187.146:60877/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348967/","geenensp"
-"348966","2020-04-23 16:25:06","http://2.87.229.142:63659/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348966/","geenensp"
+"348966","2020-04-23 16:25:06","http://2.87.229.142:63659/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348966/","geenensp"
 "348965","2020-04-23 15:33:04","http://1.246.222.174:2004/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/348965/","zbetcheckin"
 "348964","2020-04-23 15:25:11","http://physiodelacomba.ch/userfiles/xing.txt","offline","malware_download","exe","https://urlhaus.abuse.ch/url/348964/","zbetcheckin"
 "348963","2020-04-23 15:09:05","http://siwakotimanpower.com/fontconfig.exe","offline","malware_download","exe,NanoCore","https://urlhaus.abuse.ch/url/348963/","abuse_ch"
@@ -5747,7 +6134,7 @@
 "348954","2020-04-23 15:05:42","http://125.44.20.182:34662/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348954/","Gandylyan1"
 "348953","2020-04-23 15:05:36","http://111.42.102.148:56119/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348953/","Gandylyan1"
 "348952","2020-04-23 15:05:32","http://45.161.255.141:60742/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348952/","Gandylyan1"
-"348951","2020-04-23 15:05:29","http://176.113.161.129:40679/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348951/","Gandylyan1"
+"348951","2020-04-23 15:05:29","http://176.113.161.129:40679/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348951/","Gandylyan1"
 "348950","2020-04-23 15:05:26","http://112.17.78.218:47460/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348950/","Gandylyan1"
 "348949","2020-04-23 15:04:50","http://172.39.54.165:60207/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348949/","Gandylyan1"
 "348948","2020-04-23 15:04:18","http://125.42.195.179:49964/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348948/","Gandylyan1"
@@ -5874,7 +6261,7 @@
 "348827","2020-04-23 12:41:05","http://107.175.8.75/bins/yakuza.x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/348827/","0xrb"
 "348826","2020-04-23 12:40:52","http://198.12.97.66/bins/Hilix.x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/348826/","0xrb"
 "348825","2020-04-23 12:40:49","http://45.95.168.246/AB4g5/kiga.x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/348825/","0xrb"
-"348824","2020-04-23 12:40:46","http://107.158.154.94/beastmode/b3astmode.x86","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/348824/","0xrb"
+"348824","2020-04-23 12:40:46","http://107.158.154.94/beastmode/b3astmode.x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/348824/","0xrb"
 "348823","2020-04-23 12:40:38","http://178.128.44.183/SBIDIOT/x86","offline","malware_download","elf","https://urlhaus.abuse.ch/url/348823/","0xrb"
 "348822","2020-04-23 12:40:35","http://185.132.53.145/beastmode/b3astmode.x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/348822/","0xrb"
 "348821","2020-04-23 12:40:04","http://162.250.126.186/bins/kalon.x86","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/348821/","0xrb"
@@ -6075,7 +6462,7 @@
 "348625","2020-04-23 06:08:14","https://onedrive.live.com/download?cid=FF1D187273DFBF73&resid=FF1D187273DFBF73%21693&authkey=AGcpKHnEWFTE_Yc","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348625/","lovemalware"
 "348624","2020-04-23 06:08:10","https://drive.google.com/uc?export=download&id=1x6FBYtInbqBQdrG3Otk8I_tziDMqmo0K","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348624/","lovemalware"
 "348623","2020-04-23 06:07:30","http://111.42.102.80:60114/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348623/","Gandylyan1"
-"348622","2020-04-23 06:07:25","http://36.35.160.146:39135/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348622/","Gandylyan1"
+"348622","2020-04-23 06:07:25","http://36.35.160.146:39135/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348622/","Gandylyan1"
 "348621","2020-04-23 06:06:53","http://111.42.66.41:58600/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348621/","Gandylyan1"
 "348620","2020-04-23 06:05:53","http://218.21.171.228:52165/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348620/","Gandylyan1"
 "348619","2020-04-23 06:05:50","http://62.16.58.137:44840/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348619/","Gandylyan1"
@@ -6100,8 +6487,8 @@
 "348600","2020-04-23 05:44:47","http://111.185.227.170:14482/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348600/","geenensp"
 "348599","2020-04-23 05:44:42","https://onedrive.live.com/download?cid=72EF66C14DF86B76&resid=72EF66C14DF86B76%21196&authkey=AEIZSuDu2mLHlHU","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348599/","lovemalware"
 "348598","2020-04-23 05:44:38","https://www.podiatristlansdale.com/okl/newbackomo_encrypted_24D9EB0.bin","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348598/","lovemalware"
-"348597","2020-04-23 05:44:34","http://kabiru.ru/R3_encrypted_D502EDF.bin","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348597/","lovemalware"
-"348596","2020-04-23 05:44:30","http://stubbackup.ru/R3_encrypted_D502EDF.bin","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348596/","lovemalware"
+"348597","2020-04-23 05:44:34","http://kabiru.ru/R3_encrypted_D502EDF.bin","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348597/","lovemalware"
+"348596","2020-04-23 05:44:30","http://stubbackup.ru/R3_encrypted_D502EDF.bin","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348596/","lovemalware"
 "348595","2020-04-23 05:44:26","https://drive.google.com/uc?export=download&id=1gmw2SSkN5kHSgoIMIn_5wHyRHYsD3rNc","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348595/","lovemalware"
 "348594","2020-04-23 05:44:18","https://drive.google.com/uc?export=download&id=1IyBsEBMpuylFRRRNqLLJOJcYewc0kIzl","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348594/","lovemalware"
 "348593","2020-04-23 05:43:01","http://185.132.53.58/bins/Hilix.mips","offline","malware_download","32-bit,elf,mips","https://urlhaus.abuse.ch/url/348593/","geenensp"
@@ -6110,7 +6497,7 @@
 "348590","2020-04-23 05:42:53","http://s2chinese2profesionalandhealthwsdyanaly.duckdns.org/chnsfrnd2/winlog.exe","offline","malware_download","exe,Formbook","https://urlhaus.abuse.ch/url/348590/","gorimpthon"
 "348589","2020-04-23 05:42:46","https://drive.google.com/uc?export=download&id=1LbnXOH9LafDFPV4sXd-5xhAziJFuqIQB","offline","malware_download","None","https://urlhaus.abuse.ch/url/348589/","francisco88a"
 "348588","2020-04-23 05:42:38","http://onetwothreefourfivesixseveneightnineten.duckdns.org/vbc.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/348588/","gorimpthon"
-"348587","2020-04-23 05:42:23","http://210.204.50.140:50397/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348587/","geenensp"
+"348587","2020-04-23 05:42:23","http://210.204.50.140:50397/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348587/","geenensp"
 "348586","2020-04-23 05:42:17","http://46.29.166.105/lmaoWTF/loligang.ppc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/348586/","hypoweb"
 "348585","2020-04-23 05:42:14","http://46.29.166.105/lmaoWTF/loligang.arm7","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/348585/","hypoweb"
 "348584","2020-04-23 05:42:12","http://46.29.166.105/lmaoWTF/loligang.arm6","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/348584/","hypoweb"
@@ -6135,9 +6522,9 @@
 "348565","2020-04-23 05:41:26","http://51.178.81.75/sh4","offline","malware_download","elf,gafgyt","https://urlhaus.abuse.ch/url/348565/","hypoweb"
 "348564","2020-04-23 05:41:24","http://51.178.81.75/mipsel","offline","malware_download","elf,gafgyt","https://urlhaus.abuse.ch/url/348564/","hypoweb"
 "348563","2020-04-23 05:41:21","http://51.178.81.75/mips","offline","malware_download","elf,gafgyt","https://urlhaus.abuse.ch/url/348563/","hypoweb"
-"348562","2020-04-23 05:41:19","http://121.136.137.7:19702/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348562/","geenensp"
+"348562","2020-04-23 05:41:19","http://121.136.137.7:19702/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348562/","geenensp"
 "348561","2020-04-23 05:41:14","http://193.56.28.192/microsoft.vbs","offline","malware_download","RevengeRAT,wshrat","https://urlhaus.abuse.ch/url/348561/","0xCARNAGE"
-"348560","2020-04-23 05:41:11","http://5.185.85.122:59374/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348560/","geenensp"
+"348560","2020-04-23 05:41:11","http://5.185.85.122:59374/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348560/","geenensp"
 "348559","2020-04-23 05:40:10","http://175.215.226.31:46507/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348559/","geenensp"
 "348558","2020-04-23 05:40:06","http://187.172.131.1:31783/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348558/","geenensp"
 "348557","2020-04-23 04:54:07","http://179.43.149.178/Bleach.arm4t","offline","malware_download","elf,tsunami","https://urlhaus.abuse.ch/url/348557/","zbetcheckin"
@@ -6235,7 +6622,7 @@
 "348465","2020-04-22 21:04:41","http://125.45.122.62:60492/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348465/","Gandylyan1"
 "348464","2020-04-22 21:04:37","http://221.210.211.16:50436/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348464/","Gandylyan1"
 "348463","2020-04-22 21:04:34","http://182.123.195.110:58449/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348463/","Gandylyan1"
-"348462","2020-04-22 21:04:30","http://180.115.66.239:57055/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348462/","Gandylyan1"
+"348462","2020-04-22 21:04:30","http://180.115.66.239:57055/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348462/","Gandylyan1"
 "348461","2020-04-22 21:04:24","http://39.148.50.71:55559/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348461/","Gandylyan1"
 "348460","2020-04-22 21:04:21","http://123.8.63.163:46427/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348460/","Gandylyan1"
 "348459","2020-04-22 21:04:17","http://112.17.163.139:44455/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348459/","Gandylyan1"
@@ -6326,7 +6713,7 @@
 "348373","2020-04-22 17:15:04","http://82.253.6.50:32275/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348373/","geenensp"
 "348372","2020-04-22 17:11:05","http://50.115.175.110/bins/Snoopy.x86","offline","malware_download","elf","https://urlhaus.abuse.ch/url/348372/","0xrb"
 "348371","2020-04-22 17:10:33","http://138.197.222.65/AvaNiggers/x86","offline","malware_download","elf","https://urlhaus.abuse.ch/url/348371/","0xrb"
-"348370","2020-04-22 17:08:03","http://51.255.170.237/Pandora.sh","online","malware_download","script","https://urlhaus.abuse.ch/url/348370/","geenensp"
+"348370","2020-04-22 17:08:03","http://51.255.170.237/Pandora.sh","offline","malware_download","script","https://urlhaus.abuse.ch/url/348370/","geenensp"
 "348369","2020-04-22 17:04:04","http://162.255.117.11/razor/sync8.x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/348369/","0xrb"
 "348368","2020-04-22 17:03:35","http://62.171.189.167/beastmode/b3astmode.x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/348368/","0xrb"
 "348367","2020-04-22 17:03:33","http://209.97.132.151/SBIDIOT/x86","offline","malware_download","elf","https://urlhaus.abuse.ch/url/348367/","0xrb"
@@ -6335,14 +6722,14 @@
 "348364","2020-04-22 16:34:03","http://78.85.18.163:59180/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348364/","geenensp"
 "348363","2020-04-22 16:24:06","http://sosyaldestekcom.ga/30GB.apk","offline","malware_download","anubis,apk ","https://urlhaus.abuse.ch/url/348363/","mertcangokgoz"
 "348362","2020-04-22 16:20:10","http://toliku.com/qmzo.exe","offline","malware_download","Dridex,exe","https://urlhaus.abuse.ch/url/348362/","abuse_ch"
-"348361","2020-04-22 16:15:11","http://5.238.110.62:15238/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/348361/","zbetcheckin"
+"348361","2020-04-22 16:15:11","http://5.238.110.62:15238/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/348361/","zbetcheckin"
 "348360","2020-04-22 16:15:05","http://23.252.75.251/443","offline","malware_download","elf","https://urlhaus.abuse.ch/url/348360/","zbetcheckin"
 "348359","2020-04-22 16:13:04","http://167.114.85.125/go/Jay_uncrypt_rZmowgNiLH235.bin","online","malware_download","None","https://urlhaus.abuse.ch/url/348359/","srcr"
 "348358","2020-04-22 16:04:07","http://sorgulavtr.net/yukle/30GbKazan.apk","offline","malware_download","apk ,Cerberus","https://urlhaus.abuse.ch/url/348358/","mertcangokgoz"
 "348357","2020-04-22 15:51:04","http://64.225.53.49/x86","offline","malware_download","64-bit,elf,x86-64","https://urlhaus.abuse.ch/url/348357/","geenensp"
 "348356","2020-04-22 15:48:14","https://update-adobe.dsapq.com/UpdAdobePlayer.v11.5.1.apk","offline","malware_download","None","https://urlhaus.abuse.ch/url/348356/","JayTHL"
 "348355","2020-04-22 15:41:37","http://tcdrill-71.cf/ghhg.exe","offline","malware_download","Formbook","https://urlhaus.abuse.ch/url/348355/","JayTHL"
-"348354","2020-04-22 15:30:22","http://petromltd.com/","offline","malware_download","None","https://urlhaus.abuse.ch/url/348354/","JayTHL"
+"348354","2020-04-22 15:30:22","http://petromltd.com/","online","malware_download","None","https://urlhaus.abuse.ch/url/348354/","JayTHL"
 "348353","2020-04-22 15:30:18","http://petromltd.com/Preview.PDF.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/348353/","JayTHL"
 "348352","2020-04-22 15:27:07","http://178.216.110.171:44242/","offline","malware_download","None","https://urlhaus.abuse.ch/url/348352/","JayTHL"
 "348351","2020-04-22 15:27:04","http://178.216.110.171:44242/i","offline","malware_download","None","https://urlhaus.abuse.ch/url/348351/","JayTHL"
@@ -6361,7 +6748,7 @@
 "348338","2020-04-22 15:04:41","http://112.123.61.96:42901/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348338/","Gandylyan1"
 "348337","2020-04-22 15:04:34","http://58.243.127.193:52165/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348337/","Gandylyan1"
 "348336","2020-04-22 15:03:29","http://37.232.98.252:50614/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348336/","Gandylyan1"
-"348335","2020-04-22 15:03:26","http://112.28.98.70:44427/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348335/","Gandylyan1"
+"348335","2020-04-22 15:03:26","http://112.28.98.70:44427/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348335/","Gandylyan1"
 "348334","2020-04-22 15:03:16","http://162.212.114.189:51800/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348334/","Gandylyan1"
 "348333","2020-04-22 15:03:12","http://123.11.14.24:33517/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348333/","Gandylyan1"
 "348332","2020-04-22 15:03:08","http://62.16.60.49:36930/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348332/","Gandylyan1"
@@ -6512,18 +6899,18 @@
 "348187","2020-04-22 14:40:04","http://51.161.68.186/bins/arc","offline","malware_download","elf","https://urlhaus.abuse.ch/url/348187/","Gandylyan1"
 "348186","2020-04-22 14:36:33","http://23.95.89.71/bins/arc","offline","malware_download","elf","https://urlhaus.abuse.ch/url/348186/","Gandylyan1"
 "348185","2020-04-22 14:27:07","http://modcloudserver.eu/jayz/jayz.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/348185/","zbetcheckin"
-"348184","2020-04-22 14:26:57","http://modcloudserver.eu/petercodyz/petercodyz.exe","offline","malware_download","AgentTesla,exe,Loki","https://urlhaus.abuse.ch/url/348184/","zbetcheckin"
-"348183","2020-04-22 14:26:25","http://modcloudserver.eu/billiz/billiz.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/348183/","zbetcheckin"
-"348182","2020-04-22 14:18:07","http://179.156.196.13:31972/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348182/","geenensp"
+"348184","2020-04-22 14:26:57","http://modcloudserver.eu/petercodyz/petercodyz.exe","online","malware_download","AgentTesla,exe,Loki","https://urlhaus.abuse.ch/url/348184/","zbetcheckin"
+"348183","2020-04-22 14:26:25","http://modcloudserver.eu/billiz/billiz.exe","online","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/348183/","zbetcheckin"
+"348182","2020-04-22 14:18:07","http://179.156.196.13:31972/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348182/","geenensp"
 "348181","2020-04-22 14:08:08","http://42.113.104.40:10796/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348181/","geenensp"
 "348180","2020-04-22 14:03:05","http://173.168.197.166:4638/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348180/","geenensp"
 "348179","2020-04-22 13:35:05","http://206.189.142.52/test.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/348179/","zbetcheckin"
-"348178","2020-04-22 13:23:41","http://modcloudserver.eu/anandz/anandz.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/348178/","zbetcheckin"
-"348177","2020-04-22 13:23:09","http://modcloudserver.eu/cafilez/cafilez.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/348177/","zbetcheckin"
+"348178","2020-04-22 13:23:41","http://modcloudserver.eu/anandz/anandz.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/348178/","zbetcheckin"
+"348177","2020-04-22 13:23:09","http://modcloudserver.eu/cafilez/cafilez.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/348177/","zbetcheckin"
 "348176","2020-04-22 13:23:03","https://paste.ee/r/SdssK","offline","malware_download","Encoded","https://urlhaus.abuse.ch/url/348176/","abuse_ch"
 "348175","2020-04-22 13:20:19","http://quecik.com/j1x/1447032.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/348175/","zbetcheckin"
 "348174","2020-04-22 13:20:15","http://modcloudserver.eu/uzmod2/uzmod2.exe","offline","malware_download","exe,Formbook","https://urlhaus.abuse.ch/url/348174/","zbetcheckin"
-"348173","2020-04-22 13:19:39","http://modcloudserver.eu/nwamaz/nwamaz.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/348173/","zbetcheckin"
+"348173","2020-04-22 13:19:39","http://modcloudserver.eu/nwamaz/nwamaz.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/348173/","zbetcheckin"
 "348172","2020-04-22 13:19:07","http://quecik.com/j1x/1856137.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/348172/","zbetcheckin"
 "348171","2020-04-22 13:16:07","http://www.apexsruveyors.com/date/eat.png","offline","malware_download","exe,NanoCore,rat","https://urlhaus.abuse.ch/url/348171/","abuse_ch"
 "348170","2020-04-22 13:15:44","http://modcloudserver.eu/uzmod1/uzmod1.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/348170/","zbetcheckin"
@@ -6531,7 +6918,7 @@
 "348168","2020-04-22 13:06:04","http://russchine2specialstdy7plumbingmaterialmk.duckdns.org/russdoc/regasm.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/348168/","gorimpthon"
 "348167","2020-04-22 13:06:03","http://cheshirecheetah.com/wp-content/themes/mapro/pump/55555.png","offline","malware_download","exe,Qakbot,Quakbot,spx102","https://urlhaus.abuse.ch/url/348167/","lazyactivist192"
 "348166","2020-04-22 13:05:51","http://jeromenetpanel.ml/wp-content/themes/mapro/pump/55555.png","offline","malware_download","exe,Qakbot,Quakbot,spx102","https://urlhaus.abuse.ch/url/348166/","lazyactivist192"
-"348165","2020-04-22 13:05:36","http://cloud.wmsinfo.com.br/wordpress/wp-content/themes/mapro/pump/55555.png","offline","malware_download","exe,Qakbot,Quakbot,spx102","https://urlhaus.abuse.ch/url/348165/","lazyactivist192"
+"348165","2020-04-22 13:05:36","http://cloud.wmsinfo.com.br/wordpress/wp-content/themes/mapro/pump/55555.png","online","malware_download","exe,Qakbot,Quakbot,spx102","https://urlhaus.abuse.ch/url/348165/","lazyactivist192"
 "348164","2020-04-22 13:05:24","http://4mco.com.pk/wp/wp-content/themes/mapro/pump/55555.png","offline","malware_download","exe,Qakbot,spx102","https://urlhaus.abuse.ch/url/348164/","lazyactivist192"
 "348163","2020-04-22 13:05:20","http://hasumvina.nrglobal.top/wp-content/themes/mapro/pump/55555.png","offline","malware_download","exe,Qakbot,Quakbot,spx102","https://urlhaus.abuse.ch/url/348163/","lazyactivist192"
 "348162","2020-04-22 13:00:07","http://121.226.94.109:59214/Mozi.a","offline","malware_download","elf,gafgyt,Mozi","https://urlhaus.abuse.ch/url/348162/","07ac0n"
@@ -6545,7 +6932,7 @@
 "348154","2020-04-22 12:06:06","http://222.74.186.174:50049/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348154/","Gandylyan1"
 "348153","2020-04-22 12:06:02","http://42.228.236.7:36276/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348153/","Gandylyan1"
 "348152","2020-04-22 12:05:56","http://115.213.223.138:46378/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348152/","Gandylyan1"
-"348151","2020-04-22 12:05:50","http://106.110.107.180:59231/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348151/","Gandylyan1"
+"348151","2020-04-22 12:05:50","http://106.110.107.180:59231/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348151/","Gandylyan1"
 "348150","2020-04-22 12:05:44","http://222.87.179.158:57583/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348150/","Gandylyan1"
 "348149","2020-04-22 12:05:12","http://123.12.3.197:54551/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348149/","Gandylyan1"
 "348148","2020-04-22 12:05:06","http://111.43.223.129:44490/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348148/","Gandylyan1"
@@ -6573,7 +6960,7 @@
 "348126","2020-04-22 11:45:04","http://139.99.180.76/bins/arm5","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/348126/","zbetcheckin"
 "348125","2020-04-22 11:10:21","https://drive.google.com/uc?export=download&id=1wsQj0jlPPNRr9E4MJgsHcL4X4jRA1RKY","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/348125/","abuse_ch"
 "348124","2020-04-22 11:04:12","http://cloudcast.best/d5c65ad6c021ab6adcf98a48b62e294c/winboxscan.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/348124/","0xcpu"
-"348123","2020-04-22 10:26:35","http://hediyegapsinternet.com/evdekal.apk","online","malware_download","anubis,apk ","https://urlhaus.abuse.ch/url/348123/","mertcangokgoz"
+"348123","2020-04-22 10:26:35","http://hediyegapsinternet.com/evdekal.apk","offline","malware_download","anubis,apk ","https://urlhaus.abuse.ch/url/348123/","mertcangokgoz"
 "348122","2020-04-22 10:17:02","http://systemintergrafileexchangeserverprotocol.duckdns.org/sys/blk.exe","offline","malware_download","exe,Formbook","https://urlhaus.abuse.ch/url/348122/","zbetcheckin"
 "348121","2020-04-22 10:08:33","http://121.178.241.171:23127/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/348121/","zbetcheckin"
 "348120","2020-04-22 09:39:39","http://small-yoron-8817.namaste.jp/Old/GID.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/348120/","gorimpthon"
@@ -6642,7 +7029,7 @@
 "348057","2020-04-22 07:23:09","http://naturepack.cc/files/ASYNC.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/348057/","abuse_ch"
 "348056","2020-04-22 07:23:05","http://gstat.bluechipstaffing.com/fattura.exe","offline","malware_download","exe,Gozi","https://urlhaus.abuse.ch/url/348056/","abuse_ch"
 "348055","2020-04-22 07:20:17","http://biendaoco.com/wp-content/plugins/revslider/admin/4dvj14xgx7fdizjd.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/348055/","abuse_ch"
-"348054","2020-04-22 07:19:06","http://190.206.35.3:42830/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348054/","geenensp"
+"348054","2020-04-22 07:19:06","http://190.206.35.3:42830/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348054/","geenensp"
 "348053","2020-04-22 07:02:12","http://rollingmill.in/dyk_TKxAzyzA169.bin","online","malware_download","encrypted,GuLoader,Loki","https://urlhaus.abuse.ch/url/348053/","abuse_ch"
 "348052","2020-04-22 07:01:02","http://pastebin.com/raw/nTf21C1y","offline","malware_download","AZORult,Encoded,js","https://urlhaus.abuse.ch/url/348052/","abuse_ch"
 "348051","2020-04-22 06:47:04","http://zeytinyagisabun.com/winx22.exe","online","malware_download","exe,NanoCore,rat","https://urlhaus.abuse.ch/url/348051/","abuse_ch"
@@ -6659,7 +7046,7 @@
 "348040","2020-04-22 06:33:43","http://86.179.186.74:62126/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348040/","geenensp"
 "348039","2020-04-22 06:33:40","http://2.229.41.205:42285/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348039/","geenensp"
 "348038","2020-04-22 06:33:37","http://79.54.115.243:19655/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348038/","geenensp"
-"348037","2020-04-22 06:33:34","http://218.154.126.150:47788/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348037/","geenensp"
+"348037","2020-04-22 06:33:34","http://218.154.126.150:47788/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348037/","geenensp"
 "348036","2020-04-22 06:33:01","http://systemintergrafileexchangeserverprotocol.duckdns.org/sys/xx.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/348036/","gorimpthon"
 "348035","2020-04-22 06:32:29","http://systemintergrafileexchangeserverprotocol.duckdns.org/sys/x.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/348035/","gorimpthon"
 "348034","2020-04-22 06:31:57","http://systemintergrafileexchangeserverprotocol.duckdns.org/sys/py.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/348034/","gorimpthon"
@@ -6745,7 +7132,7 @@
 "347954","2020-04-22 05:42:23","http://194.180.224.113/nr/arm6","online","malware_download","elf","https://urlhaus.abuse.ch/url/347954/","hypoweb"
 "347953","2020-04-22 05:42:20","http://194.180.224.113/nr/arm5","online","malware_download","elf","https://urlhaus.abuse.ch/url/347953/","hypoweb"
 "347952","2020-04-22 05:42:16","http://194.180.224.113/nr/arm","online","malware_download","elf","https://urlhaus.abuse.ch/url/347952/","hypoweb"
-"347951","2020-04-22 05:41:45","http://45.14.150.29/bins/lessie.ppc","offline","malware_download","elf","https://urlhaus.abuse.ch/url/347951/","hypoweb"
+"347951","2020-04-22 05:41:45","http://45.14.150.29/bins/lessie.ppc","online","malware_download","elf","https://urlhaus.abuse.ch/url/347951/","hypoweb"
 "347950","2020-04-22 05:41:43","http://189.222.149.237:53258/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/347950/","geenensp"
 "347949","2020-04-22 05:41:39","https://drive.google.com/uc?export=download&id=1eviL--HbRjyg4FwfaUe_-SkFZjmqbNKm","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/347949/","lovemalware"
 "347948","2020-04-22 05:27:47","http://jppost-to.co/jppost.apk","offline","malware_download","None","https://urlhaus.abuse.ch/url/347948/","JayTHL"
@@ -6841,7 +7228,7 @@
 "347858","2020-04-22 00:05:15","http://173.15.162.146:4217/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347858/","Gandylyan1"
 "347857","2020-04-22 00:05:12","http://219.155.98.182:51850/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347857/","Gandylyan1"
 "347856","2020-04-22 00:05:08","http://180.125.172.181:38410/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347856/","Gandylyan1"
-"347855","2020-04-22 00:05:04","http://49.70.137.78:57384/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347855/","Gandylyan1"
+"347855","2020-04-22 00:05:04","http://49.70.137.78:57384/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347855/","Gandylyan1"
 "347854","2020-04-22 00:04:32","http://27.41.141.116:37266/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347854/","Gandylyan1"
 "347853","2020-04-22 00:04:28","http://42.231.173.223:51925/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347853/","Gandylyan1"
 "347852","2020-04-22 00:04:25","http://115.58.74.77:58082/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347852/","Gandylyan1"
@@ -6919,7 +7306,7 @@
 "347780","2020-04-21 18:47:10","http://music919.com/evolving/708485/708485.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347780/","malware_traffic"
 "347779","2020-04-21 18:47:01","http://mrsphr.ir/wp-content/uploads/2020/04/evolving/1252824/1252824.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347779/","malware_traffic"
 "347778","2020-04-21 18:46:55","http://knowledgetime.co.in/wp-content/uploads/2020/04/evolving/936934838.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347778/","malware_traffic"
-"347777","2020-04-21 18:46:50","http://keckarangdadap.pekalongankab.go.id/wp-content/uploads/2020/04/evolving/809295/809295.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347777/","malware_traffic"
+"347777","2020-04-21 18:46:50","http://keckarangdadap.pekalongankab.go.id/wp-content/uploads/2020/04/evolving/809295/809295.zip","online","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347777/","malware_traffic"
 "347776","2020-04-21 18:46:17","http://Bretmartinconstructioninc.com/evolving/613862/613862.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347776/","malware_traffic"
 "347775","2020-04-21 18:46:15","http://Bretmartinconstructioninc.com/evolving/082557.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347775/","malware_traffic"
 "347774","2020-04-21 18:46:03","http://artgennesis.com/wp-content/uploads/2020/04/evolving/81653036/81653036.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347774/","malware_traffic"
@@ -7030,7 +7417,7 @@
 "347669","2020-04-21 14:25:52","https://zoodbaz.com/wp-content/uploads/2020/04/evolving/0901086/0901086.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347669/","malware_traffic"
 "347668","2020-04-21 14:25:45","https://villette45.com/wp-content/uploads/2020/04/evolving/5329347/5329347.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347668/","malware_traffic"
 "347667","2020-04-21 14:25:42","https://tianzi8.cn/wp-content/plugins/apikey/evolving/8525382.zip","online","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347667/","malware_traffic"
-"347666","2020-04-21 14:25:34","https://tianzi8.cn/wp-content/plugins/apikey/evolving/17951100.zip","online","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347666/","malware_traffic"
+"347666","2020-04-21 14:25:34","https://tianzi8.cn/wp-content/plugins/apikey/evolving/17951100.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347666/","malware_traffic"
 "347665","2020-04-21 14:25:17","https://themenuz.com/wp-content/uploads/2020/04/evolving/992093.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347665/","malware_traffic"
 "347664","2020-04-21 14:25:12","https://themenuz.com/wp-content/uploads/2020/04/evolving/9073043/9073043.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347664/","malware_traffic"
 "347663","2020-04-21 14:25:08","https://themenuz.com/wp-content/uploads/2020/04/evolving/810211749.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347663/","malware_traffic"
@@ -7052,9 +7439,9 @@
 "347647","2020-04-21 14:23:52","https://male.profertil.ro/wp-content/uploads/2020/04/evolving/522812015/522812015.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347647/","malware_traffic"
 "347646","2020-04-21 14:23:47","https://lamaisongourmande.live/wp-content/uploads/2020/04/evolving/241093858.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347646/","malware_traffic"
 "347645","2020-04-21 14:23:43","https://lamaisongourmande.live/wp-content/uploads/2020/04/evolving/23128159.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347645/","malware_traffic"
-"347644","2020-04-21 14:23:40","https://ileolaherbalcare.com.ng/wp-content/uploads/2020/04/evolving/301543/301543.zip","online","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347644/","malware_traffic"
-"347643","2020-04-21 14:23:34","https://ileolaherbalcare.com.ng/wp-content/uploads/2020/04/evolving/11044836/11044836.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347643/","malware_traffic"
-"347642","2020-04-21 14:23:30","https://ileolaherbalcare.com.ng/wp-content/uploads/2020/04/evolving/10326.zip","online","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347642/","malware_traffic"
+"347644","2020-04-21 14:23:40","https://ileolaherbalcare.com.ng/wp-content/uploads/2020/04/evolving/301543/301543.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347644/","malware_traffic"
+"347643","2020-04-21 14:23:34","https://ileolaherbalcare.com.ng/wp-content/uploads/2020/04/evolving/11044836/11044836.zip","online","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347643/","malware_traffic"
+"347642","2020-04-21 14:23:30","https://ileolaherbalcare.com.ng/wp-content/uploads/2020/04/evolving/10326.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347642/","malware_traffic"
 "347641","2020-04-21 14:23:24","https://icshongkong.com/wp-content/uploads/2020/04/evolving/712611496.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347641/","malware_traffic"
 "347640","2020-04-21 14:23:16","https://icshongkong.com/wp-content/uploads/2020/04/evolving/31084/31084.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347640/","malware_traffic"
 "347639","2020-04-21 14:23:07","https://icshongkong.com/wp-content/uploads/2020/04/evolving/1034048/1034048.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347639/","malware_traffic"
@@ -7114,7 +7501,7 @@
 "347585","2020-04-21 14:16:20","http://knowledgetime.co.in/wp-content/uploads/2020/04/evolving/8234130/8234130.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347585/","malware_traffic"
 "347584","2020-04-21 14:16:15","http://knowledgetime.co.in/wp-content/uploads/2020/04/evolving/801311.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347584/","malware_traffic"
 "347583","2020-04-21 14:16:10","http://knowledgetime.co.in/wp-content/uploads/2020/04/evolving/42895/42895.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347583/","malware_traffic"
-"347582","2020-04-21 14:16:04","http://keckarangdadap.pekalongankab.go.id/wp-content/uploads/2020/04/evolving/98110.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347582/","malware_traffic"
+"347582","2020-04-21 14:16:04","http://keckarangdadap.pekalongankab.go.id/wp-content/uploads/2020/04/evolving/98110.zip","online","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347582/","malware_traffic"
 "347581","2020-04-21 14:15:54","http://Bretmartinconstructioninc.com/evolving/85171077/85171077.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347581/","malware_traffic"
 "347580","2020-04-21 14:15:46","http://Bretmartinconstructioninc.com/evolving/237784083.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347580/","malware_traffic"
 "347579","2020-04-21 14:15:36","http://Bretmartinconstructioninc.com/evolving/0996134.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347579/","malware_traffic"
@@ -7123,23 +7510,23 @@
 "347576","2020-04-21 14:15:06","http://artgennesis.com/wp-content/uploads/2020/04/evolving/742328894.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347576/","malware_traffic"
 "347575","2020-04-21 14:15:04","http://artgennesis.com/wp-content/uploads/2020/04/evolving/67614295.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347575/","malware_traffic"
 "347574","2020-04-21 14:11:10","https://prosperworkshops.com/vendor/fting/KOROWOLE.exe","offline","malware_download","exe,RemcosRAT","https://urlhaus.abuse.ch/url/347574/","zbetcheckin"
-"347573","2020-04-21 13:57:02","http://45.14.150.29/bins/lessie.spc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/347573/","zbetcheckin"
+"347573","2020-04-21 13:57:02","http://45.14.150.29/bins/lessie.spc","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/347573/","zbetcheckin"
 "347572","2020-04-21 13:56:30","http://kslanrung.com/evolving/888888.png","offline","malware_download","exe,Qakbot,Quakbot,spx101","https://urlhaus.abuse.ch/url/347572/","lazyactivist192"
 "347571","2020-04-21 13:55:59","http://enlightened-education.com/wp-content/uploads/2020/04/evolving/888888.png","offline","malware_download","exe,Qakbot,Quakbot,spx101","https://urlhaus.abuse.ch/url/347571/","lazyactivist192"
 "347570","2020-04-21 13:55:54","http://econspiracy.se/evolving/888888.png","offline","malware_download","exe,Qakbot,spx101","https://urlhaus.abuse.ch/url/347570/","lazyactivist192"
 "347569","2020-04-21 13:55:50","http://decons.vn/wp-content/uploads/2020/04/evolving/888888.png","offline","malware_download","exe,Qakbot,Quakbot,spx101","https://urlhaus.abuse.ch/url/347569/","lazyactivist192"
 "347568","2020-04-21 13:55:08","http://pickap.io/wp-content/uploads/2020/04/evolving/888888.png","offline","malware_download","exe,Qakbot,spx101","https://urlhaus.abuse.ch/url/347568/","lazyactivist192"
 "347567","2020-04-21 13:52:11","http://promacsolutions.mx/templates/atomic/option.php","offline","malware_download","None","https://urlhaus.abuse.ch/url/347567/","cocaman"
-"347566","2020-04-21 13:52:07","http://45.14.150.29/bins/lessie.arm7","offline","malware_download","elf","https://urlhaus.abuse.ch/url/347566/","zbetcheckin"
-"347565","2020-04-21 13:52:05","http://45.14.150.29/bins/lessie.arm","offline","malware_download","elf","https://urlhaus.abuse.ch/url/347565/","zbetcheckin"
+"347566","2020-04-21 13:52:07","http://45.14.150.29/bins/lessie.arm7","online","malware_download","elf","https://urlhaus.abuse.ch/url/347566/","zbetcheckin"
+"347565","2020-04-21 13:52:05","http://45.14.150.29/bins/lessie.arm","online","malware_download","elf","https://urlhaus.abuse.ch/url/347565/","zbetcheckin"
 "347564","2020-04-21 13:52:03","http://taxifeusisberg.ch/wp-includes/ID3/class.api.php","offline","malware_download","None","https://urlhaus.abuse.ch/url/347564/","cocaman"
 "347563","2020-04-21 13:51:04","http://nederlandslinguistischinstituut.nl/termijninschrijven/PHPMailer/defense.php","offline","malware_download","None","https://urlhaus.abuse.ch/url/347563/","cocaman"
-"347562","2020-04-21 13:47:09","http://45.14.150.29/bins/lessie.arm6","offline","malware_download","elf","https://urlhaus.abuse.ch/url/347562/","zbetcheckin"
-"347561","2020-04-21 13:47:07","http://45.14.150.29/bins/lessie.m68k","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/347561/","zbetcheckin"
-"347560","2020-04-21 13:47:05","http://45.14.150.29/bins/lessie.arm5","offline","malware_download","elf","https://urlhaus.abuse.ch/url/347560/","zbetcheckin"
-"347559","2020-04-21 13:47:03","http://45.14.150.29/bins/lessie.mpsl","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/347559/","zbetcheckin"
-"347558","2020-04-21 13:43:05","http://45.14.150.29/bins/lessie.mips","offline","malware_download","elf","https://urlhaus.abuse.ch/url/347558/","zbetcheckin"
-"347557","2020-04-21 13:43:03","http://45.14.150.29/bins/lessie.sh4","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/347557/","zbetcheckin"
+"347562","2020-04-21 13:47:09","http://45.14.150.29/bins/lessie.arm6","online","malware_download","elf","https://urlhaus.abuse.ch/url/347562/","zbetcheckin"
+"347561","2020-04-21 13:47:07","http://45.14.150.29/bins/lessie.m68k","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/347561/","zbetcheckin"
+"347560","2020-04-21 13:47:05","http://45.14.150.29/bins/lessie.arm5","online","malware_download","elf","https://urlhaus.abuse.ch/url/347560/","zbetcheckin"
+"347559","2020-04-21 13:47:03","http://45.14.150.29/bins/lessie.mpsl","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/347559/","zbetcheckin"
+"347558","2020-04-21 13:43:05","http://45.14.150.29/bins/lessie.mips","online","malware_download","elf","https://urlhaus.abuse.ch/url/347558/","zbetcheckin"
+"347557","2020-04-21 13:43:03","http://45.14.150.29/bins/lessie.sh4","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/347557/","zbetcheckin"
 "347556","2020-04-21 13:39:03","http://80.211.230.27:1691/dvrbot.arm7","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/347556/","zbetcheckin"
 "347555","2020-04-21 13:33:04","http://taxieinsiedeln.ch/wp-admin/css/lib.php","offline","malware_download","unknown","https://urlhaus.abuse.ch/url/347555/","cocaman"
 "347554","2020-04-21 13:24:03","http://84.38.130.153/JONFIL.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/347554/","abuse_ch"
@@ -7147,7 +7534,7 @@
 "347552","2020-04-21 13:23:04","http://quecik.com/j1x/7840100.exe","offline","malware_download","exe,Quakbot","https://urlhaus.abuse.ch/url/347552/","abuse_ch"
 "347551","2020-04-21 13:19:15","http://187.72.59.113:11732/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/347551/","zbetcheckin"
 "347550","2020-04-21 13:19:10","http://27.147.29.52:1302/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/347550/","zbetcheckin"
-"347549","2020-04-21 13:19:05","http://www.theelectronics4u.com/b/build%20(1)_AovcNLF72.bin","online","malware_download","encrypted,GuLoader,Loki","https://urlhaus.abuse.ch/url/347549/","abuse_ch"
+"347549","2020-04-21 13:19:05","http://www.theelectronics4u.com/b/build%20(1)_AovcNLF72.bin","offline","malware_download","encrypted,GuLoader,Loki","https://urlhaus.abuse.ch/url/347549/","abuse_ch"
 "347548","2020-04-21 12:51:08","http://89.116.174.223:1182/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/347548/","geenensp"
 "347547","2020-04-21 12:51:05","http://77.27.54.214:59074/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/347547/","geenensp"
 "347546","2020-04-21 12:31:06","http://1.34.247.36:35473/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/347546/","geenensp"
@@ -7190,7 +7577,7 @@
 "347509","2020-04-21 11:58:05","http://45.84.196.148/bins/Slsmodsd.sh4","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/347509/","zbetcheckin"
 "347508","2020-04-21 11:58:03","http://23.254.226.60/ABCDEFGHIJKLMNOPQRSTUVWXYZ/whoareyou.mpsl","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/347508/","zbetcheckin"
 "347507","2020-04-21 11:39:02","http://80.211.230.27:1691/dvrbot.arm","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/347507/","zbetcheckin"
-"347506","2020-04-21 11:31:03","http://45.14.150.29/bins/lessie.x86","offline","malware_download","32-bit,elf,x86-32","https://urlhaus.abuse.ch/url/347506/","geenensp"
+"347506","2020-04-21 11:31:03","http://45.14.150.29/bins/lessie.x86","online","malware_download","32-bit,elf,x86-32","https://urlhaus.abuse.ch/url/347506/","geenensp"
 "347505","2020-04-21 11:28:33","https://nephemp.com/neplod/02581650393.jpg","offline","malware_download","None","https://urlhaus.abuse.ch/url/347505/","JAMESWT_MHT"
 "347504","2020-04-21 11:26:33","http://104.238.134.16/SBIDIOT/x86","offline","malware_download","elf","https://urlhaus.abuse.ch/url/347504/","0xrb"
 "347503","2020-04-21 11:25:10","http://23.254.226.60/ABCDEFGHIJKLMNOPQRSTUVWXYZ/whoareyou.x86","online","malware_download","elf","https://urlhaus.abuse.ch/url/347503/","0xrb"
@@ -7346,7 +7733,7 @@
 "347353","2020-04-21 06:00:16","http://kung13eduationalstdydeveloperinvestmenty.duckdns.org/kungdoc/winlog.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/347353/","gorimpthon"
 "347352","2020-04-21 06:00:05","http://62.38.149.66:6633/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/347352/","geenensp"
 "347351","2020-04-21 05:51:06","http://sazxs.xyz/chrome.apk","offline","malware_download","None","https://urlhaus.abuse.ch/url/347351/","JayTHL"
-"347350","2020-04-21 05:39:02","https://onedrive.live.com/download?cid=57C0958DB500FE0B&resid=57C0958DB500FE0B%2168197&authkey=AOWPm7Ocl_21-oc","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/347350/","lovemalware"
+"347350","2020-04-21 05:39:02","https://onedrive.live.com/download?cid=57C0958DB500FE0B&resid=57C0958DB500FE0B%2168197&authkey=AOWPm7Ocl_21-oc","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/347350/","lovemalware"
 "347349","2020-04-21 05:38:59","https://drive.google.com/uc?export=download&id=17AYzHJbqoE_VzkxIitC94iuWVQTLoDW4","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/347349/","lovemalware"
 "347348","2020-04-21 05:38:42","https://drive.google.com/uc?export=download&id=1Wxb6ok7ocKu6Dx_4ZBu3nLCSq7gNtkP6","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/347348/","lovemalware"
 "347347","2020-04-21 05:38:34","https://drive.google.com/uc?export=download&id=1yX8sfO_iDM0oZa0kLU03Z1wE1JllI57k","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/347347/","lovemalware"
@@ -7357,7 +7744,7 @@
 "347342","2020-04-21 05:34:33","https://onedrive.live.com/download?cid=E61E5F3F655316FA&resid=E61E5F3F655316FA%21124&authkey=ADKlC5yRN_vbmt8","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/347342/","lovemalware"
 "347341","2020-04-21 05:34:29","https://drive.google.com/uc?export=download&id=1yooFvDBcvTE7OAPxhPs_i6iPmilpmZ7x","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/347341/","lovemalware"
 "347340","2020-04-21 05:34:23","https://drive.google.com/uc?export=download&id=1UadIbg7RqsYJcL14h9f3JE5a342wOefi","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/347340/","lovemalware"
-"347339","2020-04-21 05:34:13","https://onedrive.live.com/download?cid=A32AEA2B4355716B&resid=A32AEA2B4355716B%215047&authkey=ABGpmXhJe7B2pEQ","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/347339/","lovemalware"
+"347339","2020-04-21 05:34:13","https://onedrive.live.com/download?cid=A32AEA2B4355716B&resid=A32AEA2B4355716B%215047&authkey=ABGpmXhJe7B2pEQ","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/347339/","lovemalware"
 "347338","2020-04-21 05:34:10","https://onedrive.live.com/download?cid=6CD2E7E257C16E46&resid=6CD2E7E257C16E46%21144&authkey=ACWoeUasuRL8m3M","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/347338/","lovemalware"
 "347337","2020-04-21 05:34:07","https://drive.google.com/uc?export=download&id=18T_IOpg8K_3kgLMP5JulRUUveXGyqhVR","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/347337/","lovemalware"
 "347336","2020-04-21 05:33:59","https://drive.google.com/uc?export=download&id=1_SnHd9j5BwQrU5BfqQ6it5j29wzmSpP-","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/347336/","lovemalware"
@@ -7369,7 +7756,7 @@
 "347330","2020-04-21 05:33:15","https://drive.google.com/uc?export=download&id=1L17M0sD_uqYGue10qs3ovoqnLiDCC0WA","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/347330/","lovemalware"
 "347329","2020-04-21 05:33:05","https://onedrive.live.com/download?cid=F5533CD060D35070&resid=F5533CD060D35070%21146&authkey=ANwRWtbbV_oISVI","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/347329/","lovemalware"
 "347328","2020-04-21 05:32:08","https://drive.google.com/uc?export=download&id=1crHrv2FYDepxV4YTm2E3d_xKBVaU5JfP","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/347328/","lovemalware"
-"347327","2020-04-21 05:29:06","http://188.170.243.195:64238/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/347327/","zbetcheckin"
+"347327","2020-04-21 05:29:06","http://188.170.243.195:64238/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/347327/","zbetcheckin"
 "347326","2020-04-21 05:20:42","https://onedrive.live.com/download?cid=0153C2A7092EE91C&resid=153C2A7092EE91C%21111&authkey=AEmrWamaAAIYyjc","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/347326/","lovemalware"
 "347325","2020-04-21 05:20:26","https://drive.google.com/uc?export=download&id=1tlaISNHA9iIifF5GgEHGmOjGc_7rYk78","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/347325/","lovemalware"
 "347324","2020-04-21 05:20:18","http://73.233.67.25:50388/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/347324/","geenensp"
@@ -7433,26 +7820,26 @@
 "347266","2020-04-21 03:03:03","https://cdn.discordapp.com/attachments/684910742486384707/701932809408741588/Request_Quotennadropzet_CZ28440_Request-_Deacon_Medicalspdf.gz","offline","malware_download","None","https://urlhaus.abuse.ch/url/347266/","JayTHL"
 "347265","2020-04-21 02:26:04","http://37.49.226.184/SBIDIOT/m68k","offline","malware_download","elf","https://urlhaus.abuse.ch/url/347265/","zbetcheckin"
 "347264","2020-04-21 02:26:02","http://37.49.226.184/SBIDIOT/x86","offline","malware_download","elf","https://urlhaus.abuse.ch/url/347264/","zbetcheckin"
-"347263","2020-04-21 02:22:15","http://107.158.154.99/sh4","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/347263/","zbetcheckin"
-"347262","2020-04-21 02:22:13","http://107.158.154.99/i586","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/347262/","zbetcheckin"
-"347261","2020-04-21 02:22:10","http://107.158.154.99/x86","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/347261/","zbetcheckin"
-"347260","2020-04-21 02:22:08","http://107.158.154.99/mipsel","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/347260/","zbetcheckin"
+"347263","2020-04-21 02:22:15","http://107.158.154.99/sh4","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/347263/","zbetcheckin"
+"347262","2020-04-21 02:22:13","http://107.158.154.99/i586","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/347262/","zbetcheckin"
+"347261","2020-04-21 02:22:10","http://107.158.154.99/x86","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/347261/","zbetcheckin"
+"347260","2020-04-21 02:22:08","http://107.158.154.99/mipsel","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/347260/","zbetcheckin"
 "347259","2020-04-21 02:22:05","http://37.49.226.184/SBIDIOT/ppc","offline","malware_download","elf","https://urlhaus.abuse.ch/url/347259/","zbetcheckin"
-"347258","2020-04-21 02:22:03","http://107.158.154.99/armv4l","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/347258/","zbetcheckin"
+"347258","2020-04-21 02:22:03","http://107.158.154.99/armv4l","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/347258/","zbetcheckin"
 "347257","2020-04-21 02:18:09","http://37.49.226.184/SBIDIOT/arm6","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/347257/","zbetcheckin"
-"347256","2020-04-21 02:18:06","http://107.158.154.99/armv6l","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/347256/","zbetcheckin"
+"347256","2020-04-21 02:18:06","http://107.158.154.99/armv6l","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/347256/","zbetcheckin"
 "347255","2020-04-21 02:18:03","http://37.49.226.184/SBIDIOT/arm7","offline","malware_download","elf","https://urlhaus.abuse.ch/url/347255/","zbetcheckin"
 "347254","2020-04-21 02:14:18","http://37.49.226.184/SBIDIOT/mips","offline","malware_download","elf","https://urlhaus.abuse.ch/url/347254/","zbetcheckin"
-"347253","2020-04-21 02:14:16","http://107.158.154.99/armv5l","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/347253/","zbetcheckin"
+"347253","2020-04-21 02:14:16","http://107.158.154.99/armv5l","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/347253/","zbetcheckin"
 "347252","2020-04-21 02:14:14","http://37.49.226.184/SBIDIOT/mpsl","offline","malware_download","elf","https://urlhaus.abuse.ch/url/347252/","zbetcheckin"
-"347251","2020-04-21 02:14:12","http://107.158.154.99/powerpc","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/347251/","zbetcheckin"
-"347250","2020-04-21 02:14:09","http://107.158.154.99/mips","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/347250/","zbetcheckin"
-"347249","2020-04-21 02:14:06","http://107.158.154.99/sparc","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/347249/","zbetcheckin"
-"347248","2020-04-21 02:14:03","http://107.158.154.99/m68k","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/347248/","zbetcheckin"
+"347251","2020-04-21 02:14:12","http://107.158.154.99/powerpc","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/347251/","zbetcheckin"
+"347250","2020-04-21 02:14:09","http://107.158.154.99/mips","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/347250/","zbetcheckin"
+"347249","2020-04-21 02:14:06","http://107.158.154.99/sparc","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/347249/","zbetcheckin"
+"347248","2020-04-21 02:14:03","http://107.158.154.99/m68k","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/347248/","zbetcheckin"
 "347247","2020-04-21 02:13:04","http://37.49.226.184/SBIDIOT/sh4","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/347247/","zbetcheckin"
-"347246","2020-04-21 02:10:03","http://107.158.154.99/i686","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/347246/","zbetcheckin"
+"347246","2020-04-21 02:10:03","http://107.158.154.99/i686","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/347246/","zbetcheckin"
 "347245","2020-04-21 02:09:11","http://157.230.17.28/bomba.arm7","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/347245/","zbetcheckin"
-"347244","2020-04-21 02:08:39","http://107.158.154.99/axisbins.sh","online","malware_download","shellscript","https://urlhaus.abuse.ch/url/347244/","zbetcheckin"
+"347244","2020-04-21 02:08:39","http://107.158.154.99/axisbins.sh","offline","malware_download","shellscript","https://urlhaus.abuse.ch/url/347244/","zbetcheckin"
 "347243","2020-04-21 02:08:32","http://157.230.17.28/bomba.arm6","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/347243/","zbetcheckin"
 "347242","2020-04-21 02:07:41","http://157.230.17.28/bomba.x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/347242/","zbetcheckin"
 "347241","2020-04-21 02:07:10","http://157.230.17.28/bomba.arm","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/347241/","zbetcheckin"
@@ -7522,7 +7909,7 @@
 "347177","2020-04-20 23:51:38","http://jualankaos.id/wp-content/plugins/apikey/vary/16644707/16644707.zip","offline","malware_download","Qakbot,qbot,spx100,zip","https://urlhaus.abuse.ch/url/347177/","malware_traffic"
 "347176","2020-04-20 23:51:34","http://test.wax.duzzling.com.tw/vary/00964587.zip","offline","malware_download","Qakbot,qbot,spx100,zip","https://urlhaus.abuse.ch/url/347176/","malware_traffic"
 "347175","2020-04-20 23:51:26","https://bhawnacraft.com/wp-content/plugins/apikey/vary/22032053.zip","offline","malware_download","Qakbot,qbot,spx100,zip","https://urlhaus.abuse.ch/url/347175/","malware_traffic"
-"347174","2020-04-20 23:51:20","https://salvation24.com/wp-admin/vary/09483.zip","online","malware_download","Qakbot,qbot,spx100,zip","https://urlhaus.abuse.ch/url/347174/","malware_traffic"
+"347174","2020-04-20 23:51:20","https://salvation24.com/wp-admin/vary/09483.zip","offline","malware_download","Qakbot,qbot,spx100,zip","https://urlhaus.abuse.ch/url/347174/","malware_traffic"
 "347173","2020-04-20 23:51:14","http://mehtapublicity.in/vary/8788539/8788539.zip","offline","malware_download","Qakbot,qbot,spx100,zip","https://urlhaus.abuse.ch/url/347173/","malware_traffic"
 "347172","2020-04-20 23:51:07","https://doballsod.net/wp-content/vary/323518.zip","offline","malware_download","Qakbot,qbot,spx100,zip","https://urlhaus.abuse.ch/url/347172/","malware_traffic"
 "347171","2020-04-20 23:49:03","http://37.49.226.127/luoqxbocmkxnexy/tbox.mips","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/347171/","zbetcheckin"
@@ -7533,7 +7920,7 @@
 "347166","2020-04-20 23:45:46","https://gnxpublishers.ca/wp-content/uploads/2020/04/vary/152364.zip","offline","malware_download","Qakbot,qbot,spx100,zip","https://urlhaus.abuse.ch/url/347166/","malware_traffic"
 "347165","2020-04-20 23:45:42","https://51youqun.com/wp-content/plugins/apikey/vary/6141845/6141845.zip","offline","malware_download","Qakbot,qbot,spx100,zip","https://urlhaus.abuse.ch/url/347165/","malware_traffic"
 "347164","2020-04-20 23:45:30","https://51youqun.com/wp-content/plugins/apikey/vary/468549922/468549922.zip","offline","malware_download","Qakbot,qbot,spx100,zip","https://urlhaus.abuse.ch/url/347164/","malware_traffic"
-"347163","2020-04-20 23:45:19","http://salvation24.com/wp-admin/vary/324437/324437.zip","offline","malware_download","Qakbot,qbot,spx100,zip","https://urlhaus.abuse.ch/url/347163/","malware_traffic"
+"347163","2020-04-20 23:45:19","http://salvation24.com/wp-admin/vary/324437/324437.zip","online","malware_download","Qakbot,qbot,spx100,zip","https://urlhaus.abuse.ch/url/347163/","malware_traffic"
 "347162","2020-04-20 23:45:15","http://ns-hd.co.jp/wp-content/uploads/2020/04/vary/23082.zip","offline","malware_download","Qakbot,qbot,spx100,zip","https://urlhaus.abuse.ch/url/347162/","malware_traffic"
 "347161","2020-04-20 23:45:10","http://jualankaos.id/wp-content/plugins/apikey/vary/668055.zip","offline","malware_download","Qakbot,qbot,spx100,zip","https://urlhaus.abuse.ch/url/347161/","malware_traffic"
 "347160","2020-04-20 23:45:05","http://jualankaos.id/wp-content/plugins/apikey/vary/0052410.zip","offline","malware_download","Qakbot,qbot,spx100,zip","https://urlhaus.abuse.ch/url/347160/","malware_traffic"
@@ -7751,7 +8138,7 @@
 "346944","2020-04-20 16:20:42","http://biendaoco.com/wp-content/plugins/revslider/admin/uLNRIJn7GLwuCYw.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/346944/","abuse_ch"
 "346943","2020-04-20 16:19:40","http://194.183.5.242/wp-content/uploads/2020/04/vary/835554765.zip","offline","malware_download","Qakbot,qbot,spx100,zip","https://urlhaus.abuse.ch/url/346943/","malware_traffic"
 "346942","2020-04-20 16:19:37","https://51youqun.com/wp-content/plugins/apikey/vary/0292708/0292708.zip","offline","malware_download","Qakbot,qbot,spx100,zip","https://urlhaus.abuse.ch/url/346942/","malware_traffic"
-"346941","2020-04-20 16:19:18","https://salvation24.com/wp-admin/vary/324437/324437.zip","online","malware_download","Qakbot,qbot,spx100,zip","https://urlhaus.abuse.ch/url/346941/","malware_traffic"
+"346941","2020-04-20 16:19:18","https://salvation24.com/wp-admin/vary/324437/324437.zip","offline","malware_download","Qakbot,qbot,spx100,zip","https://urlhaus.abuse.ch/url/346941/","malware_traffic"
 "346940","2020-04-20 16:19:10","https://6686faka.com/wp-content/plugins/apikey/vary/12379.zip","offline","malware_download","Qakbot,qbot,spx100,zip","https://urlhaus.abuse.ch/url/346940/","malware_traffic"
 "346939","2020-04-20 16:17:21","http://218.187.103.198/nhbank.apk","offline","malware_download","None","https://urlhaus.abuse.ch/url/346939/","JayTHL"
 "346938","2020-04-20 16:10:09","http://217.8.117.60/mh/files/1587395026_vccubiv.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/346938/","abuse_ch"
@@ -7812,7 +8199,7 @@
 "346883","2020-04-20 14:28:42","http://www.gsearch.com.de/E5DB0E07C3D7BE80/networkservice.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/346883/","zbetcheckin"
 "346882","2020-04-20 14:27:34","https://megabitco.in/redy.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/346882/","zbetcheckin"
 "346881","2020-04-20 14:26:21","https://megabitco.in/BTMaster.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/346881/","zbetcheckin"
-"346880","2020-04-20 14:25:17","http://peterssandmay.com/eng/uploads/josh.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/346880/","zbetcheckin"
+"346880","2020-04-20 14:25:17","http://peterssandmay.com/eng/uploads/josh.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/346880/","zbetcheckin"
 "346879","2020-04-20 14:24:41","https://megabitco.in/InvestBot.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/346879/","zbetcheckin"
 "346878","2020-04-20 14:13:09","https://megabitco.in/MoneyBot.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/346878/","zbetcheckin"
 "346877","2020-04-20 14:08:11","http://92.222.70.178/SBIDIOT/yarn","offline","malware_download","None","https://urlhaus.abuse.ch/url/346877/","JayTHL"
@@ -7914,7 +8301,7 @@
 "346781","2020-04-20 14:03:07","http://92.222.70.178/SBIDIOT/mips","offline","malware_download","None","https://urlhaus.abuse.ch/url/346781/","JayTHL"
 "346780","2020-04-20 14:03:05","http://92.222.70.178/SBIDIOT/x86","offline","malware_download","None","https://urlhaus.abuse.ch/url/346780/","JayTHL"
 "346779","2020-04-20 14:03:03","http://92.222.70.178/sh","offline","malware_download","None","https://urlhaus.abuse.ch/url/346779/","JayTHL"
-"346778","2020-04-20 13:29:34","http://www.theelectronics4u.com/b/build%20(1)_rvLvTClqg153.bin","online","malware_download","encrypted,GuLoader,Loki","https://urlhaus.abuse.ch/url/346778/","abuse_ch"
+"346778","2020-04-20 13:29:34","http://www.theelectronics4u.com/b/build%20(1)_rvLvTClqg153.bin","offline","malware_download","encrypted,GuLoader,Loki","https://urlhaus.abuse.ch/url/346778/","abuse_ch"
 "346777","2020-04-20 13:24:04","http://62.171.183.29/bins/Kira.x86","offline","malware_download","32-bit,elf,x86-32","https://urlhaus.abuse.ch/url/346777/","geenensp"
 "346776","2020-04-20 13:24:03","http://62.171.183.29/huh.sh","offline","malware_download","ascii","https://urlhaus.abuse.ch/url/346776/","geenensp"
 "346775","2020-04-20 12:51:13","http://37.49.226.19/luoqxbocmkxnexy/tbox.x86","offline","malware_download","elf","https://urlhaus.abuse.ch/url/346775/","Gandylyan1"
@@ -7926,7 +8313,7 @@
 "346769","2020-04-20 12:47:04","http://37.49.226.19/leon.mpsl","offline","malware_download","elf","https://urlhaus.abuse.ch/url/346769/","Gandylyan1"
 "346768","2020-04-20 12:47:02","http://37.49.226.19/leon.mips","offline","malware_download","elf","https://urlhaus.abuse.ch/url/346768/","Gandylyan1"
 "346767","2020-04-20 12:46:03","http://64.227.6.95//Bleach.x86","offline","malware_download","elf","https://urlhaus.abuse.ch/url/346767/","Gandylyan1"
-"346766","2020-04-20 12:10:08","http://peterssandmay.com/eng/uploads/quakes.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/346766/","abuse_ch"
+"346766","2020-04-20 12:10:08","http://peterssandmay.com/eng/uploads/quakes.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/346766/","abuse_ch"
 "346765","2020-04-20 12:09:00","http://27.41.147.212:41802/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/346765/","Gandylyan1"
 "346764","2020-04-20 12:08:50","http://159.255.187.110:57687/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/346764/","Gandylyan1"
 "346763","2020-04-20 12:08:47","http://219.154.139.82:47016/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/346763/","Gandylyan1"
@@ -8045,13 +8432,13 @@
 "346650","2020-04-20 07:25:03","http://37.49.226.204/beastmode/b3astmode.mpsl","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/346650/","zbetcheckin"
 "346649","2020-04-20 07:11:33","http://alsiniora.com/MASQ-20200420.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/346649/","zbetcheckin"
 "346648","2020-04-20 07:09:05","https://newsha.jsonland.ir/wp-includes/css/DHLPaket.jar","offline","malware_download","Adwind,jar","https://urlhaus.abuse.ch/url/346648/","neoxmorpheus1"
-"346647","2020-04-20 07:00:08","https://onedrive.live.com/download?cid=5696478ACB744989&resid=5696478ACB744989%21383&authkey=ADLDpuAYA7Kj1Dk","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/346647/","lovemalware"
-"346646","2020-04-20 06:59:34","https://onedrive.live.com/download?cid=6CD2E7E257C16E46&resid=6CD2E7E257C16E46%21149&authkey=AGadAevvS4bE6-E","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/346646/","lovemalware"
+"346647","2020-04-20 07:00:08","https://onedrive.live.com/download?cid=5696478ACB744989&resid=5696478ACB744989%21383&authkey=ADLDpuAYA7Kj1Dk","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/346647/","lovemalware"
+"346646","2020-04-20 06:59:34","https://onedrive.live.com/download?cid=6CD2E7E257C16E46&resid=6CD2E7E257C16E46%21149&authkey=AGadAevvS4bE6-E","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/346646/","lovemalware"
 "346645","2020-04-20 06:59:01","https://onedrive.live.com/download?cid=A6DD95780C6C7E21&resid=A6DD95780C6C7E21%216053&authkey=AGFh0AHsTJ7rRkI","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/346645/","lovemalware"
 "346644","2020-04-20 06:58:28","https://drive.google.com/uc?export=download&id=1aWO0ZlBZu5iTlyVnyojR_tBPqAK6GvfC","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/346644/","lovemalware"
 "346643","2020-04-20 06:57:49","https://drive.google.com/uc?export=download&id=1e9c0rudF_POcl1s3QusqZirFt8id1DPC","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/346643/","lovemalware"
 "346642","2020-04-20 06:57:11","https://www.dropbox.com/s/syj7svobfi2p1kv/FREYMONEY_encrypted_51F09F0.bin?dl=1","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/346642/","lovemalware"
-"346641","2020-04-20 06:56:38","https://onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E%211345&authkey=AEVvyhOnxHtcDh0","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/346641/","lovemalware"
+"346641","2020-04-20 06:56:38","https://onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E%211345&authkey=AEVvyhOnxHtcDh0","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/346641/","lovemalware"
 "346640","2020-04-20 06:40:13","http://201.82.10.56:9940/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/346640/","geenensp"
 "346639","2020-04-20 06:40:07","http://114.32.79.203:51256/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/346639/","geenensp"
 "346638","2020-04-20 06:36:05","http://114.168.158.117:61519/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/346638/","geenensp"
@@ -8092,36 +8479,36 @@
 "346542","2020-04-20 06:03:11","http://111.42.66.6:44119/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/346542/","Gandylyan1"
 "346541","2020-04-20 06:03:05","http://116.114.95.24:49464/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/346541/","Gandylyan1"
 "346540","2020-04-20 06:00:30","https://onedrive.live.com/download?cid=FEDBE7305E742A3E&resid=FEDBE7305E742A3E!149&authkey=AHdtniVa1oS_iBw","online","malware_download","None","https://urlhaus.abuse.ch/url/346540/","JayTHL"
-"346539","2020-04-20 06:00:18","https://onedrive.live.com/download?cid=FB607A99940C799A&resid=FB607A99940C799A!183&authkey=ABKHbsYu4lG_blg","offline","malware_download","None","https://urlhaus.abuse.ch/url/346539/","JayTHL"
-"346538","2020-04-20 05:59:42","https://onedrive.live.com/download?cid=FA03A599CBD174CA&resid=FA03A599CBD174CA!32086&authkey=ADDWE3SRWq8Az9Y","offline","malware_download","None","https://urlhaus.abuse.ch/url/346538/","JayTHL"
-"346537","2020-04-20 05:59:09","https://onedrive.live.com/download?cid=E859DA0F2C81D5F2&resid=E859DA0F2C81D5F2!142&authkey=AIS88UaD5AOm6qU","offline","malware_download","None","https://urlhaus.abuse.ch/url/346537/","JayTHL"
+"346539","2020-04-20 06:00:18","https://onedrive.live.com/download?cid=FB607A99940C799A&resid=FB607A99940C799A!183&authkey=ABKHbsYu4lG_blg","online","malware_download","None","https://urlhaus.abuse.ch/url/346539/","JayTHL"
+"346538","2020-04-20 05:59:42","https://onedrive.live.com/download?cid=FA03A599CBD174CA&resid=FA03A599CBD174CA!32086&authkey=ADDWE3SRWq8Az9Y","online","malware_download","None","https://urlhaus.abuse.ch/url/346538/","JayTHL"
+"346537","2020-04-20 05:59:09","https://onedrive.live.com/download?cid=E859DA0F2C81D5F2&resid=E859DA0F2C81D5F2!142&authkey=AIS88UaD5AOm6qU","online","malware_download","None","https://urlhaus.abuse.ch/url/346537/","JayTHL"
 "346536","2020-04-20 05:58:34","https://onedrive.live.com/download?cid=E4B1E1072DC91F5C&resid=E4B1E1072DC91F5C!509&authkey=AKmDyQKzcsUf_Gg","online","malware_download","None","https://urlhaus.abuse.ch/url/346536/","JayTHL"
 "346535","2020-04-20 05:57:48","https://onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E!1346&authkey=AChrNF5VLoV1GF4","online","malware_download","None","https://urlhaus.abuse.ch/url/346535/","JayTHL"
-"346534","2020-04-20 05:57:15","https://onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E!1342&authkey=ACPr_HTn2jtAXfU","offline","malware_download","None","https://urlhaus.abuse.ch/url/346534/","JayTHL"
-"346533","2020-04-20 05:56:43","https://onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E!1340&authkey=AL1Ay3FbTUde6D8","offline","malware_download","None","https://urlhaus.abuse.ch/url/346533/","JayTHL"
-"346532","2020-04-20 05:56:09","https://onedrive.live.com/download?cid=B3B98222C3EF96E0&resid=B3B98222C3EF96E0!167&authkey=AIHUj_YRTDivvYU","offline","malware_download","None","https://urlhaus.abuse.ch/url/346532/","JayTHL"
+"346534","2020-04-20 05:57:15","https://onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E!1342&authkey=ACPr_HTn2jtAXfU","online","malware_download","None","https://urlhaus.abuse.ch/url/346534/","JayTHL"
+"346533","2020-04-20 05:56:43","https://onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E!1340&authkey=AL1Ay3FbTUde6D8","online","malware_download","None","https://urlhaus.abuse.ch/url/346533/","JayTHL"
+"346532","2020-04-20 05:56:09","https://onedrive.live.com/download?cid=B3B98222C3EF96E0&resid=B3B98222C3EF96E0!167&authkey=AIHUj_YRTDivvYU","online","malware_download","None","https://urlhaus.abuse.ch/url/346532/","JayTHL"
 "346531","2020-04-20 05:55:36","https://onedrive.live.com/download?cid=A32AEA2B4355716B&resid=A32AEA2B4355716B!5043&authkey=AL47wfT9IIirTIM","offline","malware_download","None","https://urlhaus.abuse.ch/url/346531/","JayTHL"
-"346530","2020-04-20 05:54:46","https://onedrive.live.com/download?cid=A32AEA2B4355716B&resid=A32AEA2B4355716B!5044&authkey=ACIto9T1ngdHUsw","online","malware_download","None","https://urlhaus.abuse.ch/url/346530/","JayTHL"
+"346530","2020-04-20 05:54:46","https://onedrive.live.com/download?cid=A32AEA2B4355716B&resid=A32AEA2B4355716B!5044&authkey=ACIto9T1ngdHUsw","offline","malware_download","None","https://urlhaus.abuse.ch/url/346530/","JayTHL"
 "346529","2020-04-20 05:54:13","https://onedrive.live.com/download?cid=8191351450372B91&resid=8191351450372B91!276&authkey=AIMzS249x6XJ_Hc","offline","malware_download","None","https://urlhaus.abuse.ch/url/346529/","JayTHL"
 "346528","2020-04-20 05:53:40","https://onedrive.live.com/download?cid=7D109F249B512466&resid=7D109F249B512466!543&authkey=ACQc4XjGhclmwbs","online","malware_download","None","https://urlhaus.abuse.ch/url/346528/","JayTHL"
 "346527","2020-04-20 05:53:07","https://onedrive.live.com/download?cid=72EF66C14DF86B76&resid=72EF66C14DF86B76!188&authkey=AJY07OLs2lCFJ_o","online","malware_download","None","https://urlhaus.abuse.ch/url/346527/","JayTHL"
 "346526","2020-04-20 05:52:33","https://onedrive.live.com/download?cid=6F5470AD540C86C8&resid=6F5470AD540C86C8!111&authkey=AOUy4UoQ0R3reTs","online","malware_download","None","https://urlhaus.abuse.ch/url/346526/","JayTHL"
-"346525","2020-04-20 05:51:34","https://onedrive.live.com/download?cid=6CD2E7E257C16E46&resid=6CD2E7E257C16E46!126&authkey=AFsQz25GZRFlidA","offline","malware_download","None","https://urlhaus.abuse.ch/url/346525/","JayTHL"
+"346525","2020-04-20 05:51:34","https://onedrive.live.com/download?cid=6CD2E7E257C16E46&resid=6CD2E7E257C16E46!126&authkey=AFsQz25GZRFlidA","online","malware_download","None","https://urlhaus.abuse.ch/url/346525/","JayTHL"
 "346524","2020-04-20 05:48:14","https://onedrive.live.com/download?cid=6A1602E410531072&resid=6A1602E410531072!113&authkey=AK3TZU1Lg4uuh5M","online","malware_download","None","https://urlhaus.abuse.ch/url/346524/","JayTHL"
-"346523","2020-04-20 05:48:11","https://onedrive.live.com/download?cid=505BE76830F4DC4C&resid=505BE76830F4DC4C!440&authkey=AI7-dpR11WNzyQ8","offline","malware_download","None","https://urlhaus.abuse.ch/url/346523/","JayTHL"
+"346523","2020-04-20 05:48:11","https://onedrive.live.com/download?cid=505BE76830F4DC4C&resid=505BE76830F4DC4C!440&authkey=AI7-dpR11WNzyQ8","online","malware_download","None","https://urlhaus.abuse.ch/url/346523/","JayTHL"
 "346522","2020-04-20 05:48:08","https://onedrive.live.com/download?cid=48ED7695F8804D66&resid=48ED7695F8804D66!13805&authkey=AE-zbfo2uwln_Gg","online","malware_download","None","https://urlhaus.abuse.ch/url/346522/","JayTHL"
 "346521","2020-04-20 05:48:06","https://onedrive.live.com/download?cid=3F2905EFA1C7AC3F&resid=3F2905EFA1C7AC3F!154&authkey=AAsJ15d0G_p2pOg","online","malware_download","None","https://urlhaus.abuse.ch/url/346521/","JayTHL"
-"346520","2020-04-20 05:48:03","https://onedrive.live.com/download?cid=2F947402293C14C1&resid=2F947402293C14C1!119&authkey=APMAkX2CQB9rImU","offline","malware_download","None","https://urlhaus.abuse.ch/url/346520/","JayTHL"
+"346520","2020-04-20 05:48:03","https://onedrive.live.com/download?cid=2F947402293C14C1&resid=2F947402293C14C1!119&authkey=APMAkX2CQB9rImU","online","malware_download","None","https://urlhaus.abuse.ch/url/346520/","JayTHL"
 "346519","2020-04-20 05:46:50","https://onedrive.live.com/download?cid=2F38368D4BD88C0E&resid=2F38368D4BD88C0E!228&authkey=AKl5Ag0G85EYXB4","offline","malware_download","None","https://urlhaus.abuse.ch/url/346519/","JayTHL"
 "346518","2020-04-20 05:46:48","https://onedrive.live.com/download?cid=2D6A6389F3FC6C0F&resid=2D6A6389F3FC6C0F!14365&authkey=AGD5hOhB01WJKHM","offline","malware_download","None","https://urlhaus.abuse.ch/url/346518/","JayTHL"
 "346517","2020-04-20 05:46:45","https://onedrive.live.com/download?cid=18418ADACEFED6E2&resid=18418ADACEFED6E2!126&authkey=AD4yflRiSq6d82g","online","malware_download","None","https://urlhaus.abuse.ch/url/346517/","JayTHL"
-"346516","2020-04-20 05:46:43","https://onedrive.live.com/download?cid=0D59C202E35694C2&resid=D59C202E35694C2!274&authkey=ACQg0aKuTOXdpgo","offline","malware_download","None","https://urlhaus.abuse.ch/url/346516/","JayTHL"
-"346515","2020-04-20 05:46:39","https://onedrive.live.com/download?cid=0489C74DE4FACB30&resid=489C74DE4FACB30!109&authkey=AJo32arrzl_VWDQ","offline","malware_download","None","https://urlhaus.abuse.ch/url/346515/","JayTHL"
+"346516","2020-04-20 05:46:43","https://onedrive.live.com/download?cid=0D59C202E35694C2&resid=D59C202E35694C2!274&authkey=ACQg0aKuTOXdpgo","online","malware_download","None","https://urlhaus.abuse.ch/url/346516/","JayTHL"
+"346515","2020-04-20 05:46:39","https://onedrive.live.com/download?cid=0489C74DE4FACB30&resid=489C74DE4FACB30!109&authkey=AJo32arrzl_VWDQ","online","malware_download","None","https://urlhaus.abuse.ch/url/346515/","JayTHL"
 "346514","2020-04-20 05:46:36","https://onedrive.live.com/download?authkey=!AOMvnEMlpGWFUIE&cid=4DF11EDA676A355F&resid=4DF11EDA676A355F!135","online","malware_download","None","https://urlhaus.abuse.ch/url/346514/","JayTHL"
-"346513","2020-04-20 05:46:33","https://onedrive.live.com/download?authkey=!ANHBzyBkG3MeKig&cid=21757E11F03B2792&resid=21757E11F03B2792!109","offline","malware_download","None","https://urlhaus.abuse.ch/url/346513/","JayTHL"
-"346512","2020-04-20 05:46:20","https://onedrive.live.com/download?authkey=!AKd6uxvLjTLVpxU&cid=4DF11EDA676A355F&resid=4DF11EDA676A355F!130","offline","malware_download","None","https://urlhaus.abuse.ch/url/346512/","JayTHL"
+"346513","2020-04-20 05:46:33","https://onedrive.live.com/download?authkey=!ANHBzyBkG3MeKig&cid=21757E11F03B2792&resid=21757E11F03B2792!109","online","malware_download","None","https://urlhaus.abuse.ch/url/346513/","JayTHL"
+"346512","2020-04-20 05:46:20","https://onedrive.live.com/download?authkey=!AKd6uxvLjTLVpxU&cid=4DF11EDA676A355F&resid=4DF11EDA676A355F!130","online","malware_download","None","https://urlhaus.abuse.ch/url/346512/","JayTHL"
 "346511","2020-04-20 05:46:15","https://onedrive.live.com/download?authkey=!AGZmMCN0fitqqSg&cid=B49DE58B11F93798&resid=B49DE58B11F93798!107","online","malware_download","None","https://urlhaus.abuse.ch/url/346511/","JayTHL"
-"346510","2020-04-20 05:46:09","https://onedrive.live.com/download?authkey=!AAsE4MA0-vo_CLs&cid=4DF11EDA676A355F&resid=4DF11EDA676A355F!140","offline","malware_download","None","https://urlhaus.abuse.ch/url/346510/","JayTHL"
+"346510","2020-04-20 05:46:09","https://onedrive.live.com/download?authkey=!AAsE4MA0-vo_CLs&cid=4DF11EDA676A355F&resid=4DF11EDA676A355F!140","online","malware_download","None","https://urlhaus.abuse.ch/url/346510/","JayTHL"
 "346509","2020-04-20 05:36:27","http://jppost-amo.com/jppost.apk","offline","malware_download","None","https://urlhaus.abuse.ch/url/346509/","JayTHL"
 "346508","2020-04-20 05:36:20","http://jppost-ame.com/jppost.apk","offline","malware_download","None","https://urlhaus.abuse.ch/url/346508/","JayTHL"
 "346507","2020-04-20 05:12:03","https://pastebin.com/raw/HxMR6Nus","offline","malware_download","None","https://urlhaus.abuse.ch/url/346507/","JayTHL"
@@ -8269,7 +8656,7 @@
 "346365","2020-04-19 21:05:56","http://112.17.136.83:47016/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/346365/","Gandylyan1"
 "346364","2020-04-19 21:05:52","http://123.11.194.85:53146/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/346364/","Gandylyan1"
 "346363","2020-04-19 21:05:49","http://59.120.251.152:45299/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/346363/","Gandylyan1"
-"346362","2020-04-19 21:04:13","http://112.27.91.205:45898/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/346362/","Gandylyan1"
+"346362","2020-04-19 21:04:13","http://112.27.91.205:45898/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/346362/","Gandylyan1"
 "346361","2020-04-19 21:04:08","http://42.231.232.205:36989/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/346361/","Gandylyan1"
 "346360","2020-04-19 21:04:04","http://111.38.26.152:38186/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/346360/","Gandylyan1"
 "346359","2020-04-19 21:04:00","http://119.125.129.70:52606/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/346359/","Gandylyan1"
@@ -8372,7 +8759,7 @@
 "346262","2020-04-19 14:48:04","http://109.230.238.68/Senpai-Squad.x86_core2","offline","malware_download","elf","https://urlhaus.abuse.ch/url/346262/","zbetcheckin"
 "346261","2020-04-19 14:41:04","https://pastebin.com/raw/BvU2QkYB","offline","malware_download","None","https://urlhaus.abuse.ch/url/346261/","JayTHL"
 "346260","2020-04-19 13:59:10","http://87.241.175.89:12130/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/346260/","geenensp"
-"346259","2020-04-19 13:59:06","http://61.83.40.183:55102/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/346259/","geenensp"
+"346259","2020-04-19 13:59:06","http://61.83.40.183:55102/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/346259/","geenensp"
 "346258","2020-04-19 13:51:03","https://pastebin.com/raw/SCx24umw","offline","malware_download","None","https://urlhaus.abuse.ch/url/346258/","JayTHL"
 "346257","2020-04-19 13:39:04","https://pastebin.com/raw/uGiszFT6","offline","malware_download","None","https://urlhaus.abuse.ch/url/346257/","JayTHL"
 "346256","2020-04-19 13:13:10","https://pastebin.com/raw/4unLDhB1","offline","malware_download","None","https://urlhaus.abuse.ch/url/346256/","JayTHL"
@@ -8615,7 +9002,7 @@
 "346019","2020-04-19 03:05:08","http://123.10.150.95:46444/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/346019/","Gandylyan1"
 "346018","2020-04-19 03:04:57","http://42.227.224.213:43147/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/346018/","Gandylyan1"
 "346017","2020-04-19 03:04:49","http://114.234.104.158:57493/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/346017/","Gandylyan1"
-"346016","2020-04-19 03:04:45","http://176.113.161.120:42166/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/346016/","Gandylyan1"
+"346016","2020-04-19 03:04:45","http://176.113.161.120:42166/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/346016/","Gandylyan1"
 "346015","2020-04-19 03:04:42","http://115.58.96.103:46831/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/346015/","Gandylyan1"
 "346014","2020-04-19 03:04:24","http://199.83.206.38:37870/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/346014/","Gandylyan1"
 "346013","2020-04-19 03:04:20","http://162.212.114.137:38615/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/346013/","Gandylyan1"
@@ -8660,7 +9047,7 @@
 "345974","2020-04-19 02:32:33","http://185.216.140.87/bins/blxntz.x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/345974/","zbetcheckin"
 "345973","2020-04-19 02:32:31","http://185.216.140.87/bins/blxntz.ppc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/345973/","zbetcheckin"
 "345972","2020-04-19 02:32:29","http://111.42.66.144:38837/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/345972/","Gandylyan1"
-"345971","2020-04-19 02:32:27","http://49.68.54.141:46176/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/345971/","Gandylyan1"
+"345971","2020-04-19 02:32:27","http://49.68.54.141:46176/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/345971/","Gandylyan1"
 "345970","2020-04-19 02:32:23","http://124.230.173.193:37209/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/345970/","Gandylyan1"
 "345969","2020-04-19 02:32:19","http://182.127.4.240:33132/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/345969/","Gandylyan1"
 "345968","2020-04-19 02:32:04","http://117.87.131.228:44635/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/345968/","Gandylyan1"
@@ -11786,7 +12173,7 @@
 "342848","2020-04-18 06:44:20","http://187.37.152.10:56005/.i","offline","malware_download","None","https://urlhaus.abuse.ch/url/342848/","geenensp"
 "342847","2020-04-18 06:44:15","http://37.49.226.142/bins/asdfghjkl.mips","offline","malware_download","None","https://urlhaus.abuse.ch/url/342847/","geenensp"
 "342846","2020-04-18 06:44:12","http://72.186.129.13:54593/.i","online","malware_download","None","https://urlhaus.abuse.ch/url/342846/","geenensp"
-"342845","2020-04-18 06:44:08","http://121.180.181.177:30422/.i","offline","malware_download","None","https://urlhaus.abuse.ch/url/342845/","geenensp"
+"342845","2020-04-18 06:44:08","http://121.180.181.177:30422/.i","online","malware_download","None","https://urlhaus.abuse.ch/url/342845/","geenensp"
 "342844","2020-04-18 06:44:04","http://79.11.228.219:43443/.i","online","malware_download","None","https://urlhaus.abuse.ch/url/342844/","geenensp"
 "342843","2020-04-18 06:43:16","http://121.140.141.73:14261/.i","online","malware_download","None","https://urlhaus.abuse.ch/url/342843/","geenensp"
 "342842","2020-04-18 06:43:11","http://alluringuk.com/images/file/frank/Purchase.exe","offline","malware_download","AZORult,exe","https://urlhaus.abuse.ch/url/342842/","jstrosch"
@@ -11809,7 +12196,7 @@
 "342825","2020-04-18 06:04:13","http://111.42.66.179:50966/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/342825/","Gandylyan1"
 "342824","2020-04-18 06:04:10","http://123.12.236.67:44873/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/342824/","Gandylyan1"
 "342823","2020-04-18 06:04:06","http://111.43.223.126:52742/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/342823/","Gandylyan1"
-"342822","2020-04-18 05:49:35","https://onedrive.live.com/download?cid=A32AEA2B4355716B&resid=A32AEA2B4355716B%215044&authkey=ACIto9T1ngdHUsw","online","malware_download","ace","https://urlhaus.abuse.ch/url/342822/","cocaman"
+"342822","2020-04-18 05:49:35","https://onedrive.live.com/download?cid=A32AEA2B4355716B&resid=A32AEA2B4355716B%215044&authkey=ACIto9T1ngdHUsw","offline","malware_download","ace","https://urlhaus.abuse.ch/url/342822/","cocaman"
 "342821","2020-04-18 03:18:19","http://104.248.127.161/a-r.m-7.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/342821/","zbetcheckin"
 "342820","2020-04-18 03:18:17","http://185.44.107.143/vvahia","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/342820/","zbetcheckin"
 "342819","2020-04-18 03:18:15","http://104.248.127.161/i-5.8-6.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/342819/","zbetcheckin"
@@ -12154,7 +12541,7 @@
 "342480","2020-04-17 16:09:50","https://digivisor.website/differ/628212971/628212971.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342480/","malware_traffic"
 "342479","2020-04-17 16:09:40","https://sayiteducation.com/differ/99978717/99978717.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342479/","malware_traffic"
 "342478","2020-04-17 16:09:37","https://quoteslevel.com/differ/73053607/73053607.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342478/","malware_traffic"
-"342477","2020-04-17 16:09:32","https://besthack.co/differ/6053744/6053744.zip","online","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342477/","malware_traffic"
+"342477","2020-04-17 16:09:32","https://besthack.co/differ/6053744/6053744.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342477/","malware_traffic"
 "342476","2020-04-17 16:09:27","https://globaloilsupply.co/differ/46570680.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342476/","malware_traffic"
 "342475","2020-04-17 16:09:22","https://quoteslevel.com/differ/773147837.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342475/","malware_traffic"
 "342474","2020-04-17 16:09:17","https://film4k.ga/differ/046130044/046130044.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342474/","malware_traffic"
@@ -12179,7 +12566,7 @@
 "342455","2020-04-17 16:07:26","https://besthack.co/differ/557687/557687.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342455/","malware_traffic"
 "342454","2020-04-17 16:07:20","https://thepyramids.nl/differ/61456.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342454/","malware_traffic"
 "342453","2020-04-17 16:07:15","https://onyourmarkmindsetgo.com/differ/1313258/1313258.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342453/","malware_traffic"
-"342452","2020-04-17 16:07:09","https://420hempizone.co/differ/18188/18188.zip","online","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342452/","malware_traffic"
+"342452","2020-04-17 16:07:09","https://420hempizone.co/differ/18188/18188.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342452/","malware_traffic"
 "342451","2020-04-17 16:07:04","https://clario.biz/differ/47796/47796.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342451/","malware_traffic"
 "342450","2020-04-17 16:06:19","https://wahat-apps.com/differ/2934245.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342450/","malware_traffic"
 "342449","2020-04-17 16:06:13","https://suhailikasmat.com/differ/57026627/57026627.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342449/","malware_traffic"
@@ -12188,10 +12575,10 @@
 "342446","2020-04-17 16:05:57","https://thepyramids.nl/differ/60636/60636.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342446/","malware_traffic"
 "342445","2020-04-17 16:05:52","https://sayiteducation.com/differ/354318294/354318294.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342445/","malware_traffic"
 "342444","2020-04-17 16:05:48","https://halotelco.vip/differ/70955.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342444/","malware_traffic"
-"342443","2020-04-17 16:05:33","https://compesat.com/differ/106172/106172.zip","online","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342443/","malware_traffic"
+"342443","2020-04-17 16:05:33","https://compesat.com/differ/106172/106172.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342443/","malware_traffic"
 "342442","2020-04-17 16:05:19","https://fine.black/differ/49363504/49363504.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342442/","malware_traffic"
 "342441","2020-04-17 16:05:12","https://musearttherapy.com/differ/645441.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342441/","malware_traffic"
-"342440","2020-04-17 16:05:06","https://420hempizone.co/differ/82386.zip","online","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342440/","malware_traffic"
+"342440","2020-04-17 16:05:06","https://420hempizone.co/differ/82386.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342440/","malware_traffic"
 "342439","2020-04-17 16:04:49","http://heartofvegasfans.club/differ/4001095/4001095.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342439/","malware_traffic"
 "342438","2020-04-17 16:04:44","https://digivisor.website/differ/16692/16692.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342438/","malware_traffic"
 "342437","2020-04-17 16:04:39","https://iphonewin.website/differ/665206.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342437/","malware_traffic"
@@ -12200,9 +12587,9 @@
 "342434","2020-04-17 16:04:23","https://420hempizone.co/differ/129091/129091.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342434/","malware_traffic"
 "342433","2020-04-17 16:04:18","https://digiovanniconsultants.com/differ/62499748/62499748.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342433/","malware_traffic"
 "342432","2020-04-17 16:04:11","https://kukumbara.com/differ/5570258/5570258.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342432/","malware_traffic"
-"342431","2020-04-17 16:04:06","https://crudenergyllc.com/differ/925333/925333.zip","online","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342431/","malware_traffic"
+"342431","2020-04-17 16:04:06","https://crudenergyllc.com/differ/925333/925333.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342431/","malware_traffic"
 "342430","2020-04-17 16:03:08","http://hamda.alimarket24.website/differ/078178/078178.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342430/","malware_traffic"
-"342429","2020-04-17 16:03:01","https://onyourmarkmindsetgo.com/differ/84214241.zip","online","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342429/","malware_traffic"
+"342429","2020-04-17 16:03:01","https://onyourmarkmindsetgo.com/differ/84214241.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342429/","malware_traffic"
 "342428","2020-04-17 16:02:55","https://sayiteducation.com/differ/666217.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342428/","malware_traffic"
 "342427","2020-04-17 16:02:49","https://sayiteducation.com/differ/6924025.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342427/","malware_traffic"
 "342426","2020-04-17 16:02:46","https://film4k.ga/differ/20586.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342426/","malware_traffic"
@@ -12221,7 +12608,7 @@
 "342413","2020-04-17 16:00:12","https://glitchexotika.com/differ/93094/93094.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342413/","malware_traffic"
 "342412","2020-04-17 15:59:37","http://hamda.alimarket24.website/differ/03377/03377.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342412/","malware_traffic"
 "342411","2020-04-17 15:52:03","http://194.180.224.113/nr/mips","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/342411/","zbetcheckin"
-"342410","2020-04-17 15:15:04","http://andreabo1.myftp.biz/z1r7_7_8_0_2_4dmWmx/z1r7_7_8_0_2_4dmW/z1r7_7_8_0_2_4dmWkk/z1r7_7_8_0_2_4dmW","online","malware_download","powershell","https://urlhaus.abuse.ch/url/342410/","cocaman"
+"342410","2020-04-17 15:15:04","http://andreabo1.myftp.biz/z1r7_7_8_0_2_4dmWmx/z1r7_7_8_0_2_4dmW/z1r7_7_8_0_2_4dmWkk/z1r7_7_8_0_2_4dmW","offline","malware_download","powershell","https://urlhaus.abuse.ch/url/342410/","cocaman"
 "342409","2020-04-17 15:12:14","https://codeload.github.com/conta02/Folio02158/zip/master","offline","malware_download","zip","https://urlhaus.abuse.ch/url/342409/","cocaman"
 "342408","2020-04-17 15:06:46","http://199.83.206.38:38049/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/342408/","Gandylyan1"
 "342407","2020-04-17 15:06:41","http://218.21.171.246:39063/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/342407/","Gandylyan1"
@@ -12247,14 +12634,14 @@
 "342387","2020-04-17 14:54:18","https://sn-technologies.com/feature/2362120/2362120.zip","offline","malware_download","Qakbot,qbot,spx98,zip","https://urlhaus.abuse.ch/url/342387/","malware_traffic"
 "342386","2020-04-17 14:54:09","https://greenlandlion.com/extend/3601775.zip","offline","malware_download","Qakbot,qbot,spx98,zip","https://urlhaus.abuse.ch/url/342386/","malware_traffic"
 "342385","2020-04-17 14:54:03","http://spirtualcenteruk.com/feature/192776271.zip","offline","malware_download","Qakbot,qbot,spx98,zip","https://urlhaus.abuse.ch/url/342385/","malware_traffic"
-"342384","2020-04-17 14:53:41","https://thornadops.com/differ/0528300/0528300.zip","online","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342384/","malware_traffic"
+"342384","2020-04-17 14:53:41","https://thornadops.com/differ/0528300/0528300.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342384/","malware_traffic"
 "342383","2020-04-17 14:53:35","https://thornadops.com/differ/473793/473793.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342383/","malware_traffic"
 "342382","2020-04-17 14:53:27","https://theneews.us/differ/021906/021906.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342382/","malware_traffic"
 "342381","2020-04-17 14:53:18","https://sayiteducation.com/differ/293127445.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342381/","malware_traffic"
 "342380","2020-04-17 14:53:13","https://qualitygolfbags.com/differ/45335.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342380/","malware_traffic"
 "342379","2020-04-17 14:53:02","https://musearttherapy.com/differ/327336/327336.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342379/","malware_traffic"
 "342378","2020-04-17 14:52:50","https://glitchexotika.com/differ/947908.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342378/","malware_traffic"
-"342377","2020-04-17 14:52:43","https://fairyqueenstore.com/differ/2164939.zip","online","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342377/","malware_traffic"
+"342377","2020-04-17 14:52:43","https://fairyqueenstore.com/differ/2164939.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342377/","malware_traffic"
 "342376","2020-04-17 14:52:31","https://compesat.com/differ/21962/21962.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342376/","malware_traffic"
 "342375","2020-04-17 14:52:21","https://bybysunday.com/differ/09997/09997.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342375/","malware_traffic"
 "342374","2020-04-17 14:52:14","https://besthack.co/differ/9710336/9710336.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342374/","malware_traffic"
@@ -12276,7 +12663,7 @@
 "342358","2020-04-17 14:24:48","http://bigssearch.com/differ/999999.png","offline","malware_download","exe,Qakbot,Quakbot,spx99","https://urlhaus.abuse.ch/url/342358/","lazyactivist192"
 "342357","2020-04-17 14:24:10","http://testing.web-x.io/differ/999999.png","offline","malware_download","exe,Qakbot,Quakbot,spx99","https://urlhaus.abuse.ch/url/342357/","lazyactivist192"
 "342356","2020-04-17 14:23:28","http://newsfee.info/differ/999999.png","offline","malware_download","exe,Qakbot,Quakbot,spx99","https://urlhaus.abuse.ch/url/342356/","lazyactivist192"
-"342355","2020-04-17 14:22:49","http://greindustry.com/differ/999999.png","online","malware_download","exe,Qakbot,Quakbot,spx99","https://urlhaus.abuse.ch/url/342355/","lazyactivist192"
+"342355","2020-04-17 14:22:49","http://greindustry.com/differ/999999.png","offline","malware_download","exe,Qakbot,Quakbot,spx99","https://urlhaus.abuse.ch/url/342355/","lazyactivist192"
 "342354","2020-04-17 14:22:03","http://104.168.44.166/bins.sh","offline","malware_download","None","https://urlhaus.abuse.ch/url/342354/","geenensp"
 "342353","2020-04-17 14:09:03","http://wmwifbajxxbcxmucxmlc.com/files/april17.dll","offline","malware_download","zloader","https://urlhaus.abuse.ch/url/342353/","anonymous"
 "342352","2020-04-17 14:05:27","http://192.236.147.189/bins/blxntz.x86","online","malware_download","None","https://urlhaus.abuse.ch/url/342352/","JayTHL"
@@ -12645,7 +13032,7 @@
 "341989","2020-04-17 06:18:43","http://37.49.226.187/axisbins.sh","offline","malware_download","None","https://urlhaus.abuse.ch/url/341989/","geenensp"
 "341988","2020-04-17 06:18:42","https://drive.google.com/uc?export=download&id=1z57WYvajL2kcGrihELC-1zVd03ZGZUfN","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/341988/","lovemalware"
 "341987","2020-04-17 06:17:17","https://onedrive.live.com/download?cid=72EF66C14DF86B76&resid=72EF66C14DF86B76%21188&authkey=AJY07OLs2lCFJ_o","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/341987/","lovemalware"
-"341986","2020-04-17 06:17:14","https://onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E%211342&authkey=ACPr_HTn2jtAXfU","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/341986/","lovemalware"
+"341986","2020-04-17 06:17:14","https://onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E%211342&authkey=ACPr_HTn2jtAXfU","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/341986/","lovemalware"
 "341985","2020-04-17 06:17:09","https://onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E%211337&authkey=AFNVu1FsUCZHT5E","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/341985/","lovemalware"
 "341984","2020-04-17 06:17:04","https://onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E%211340&authkey=AL1Ay3FbTUde6D8","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/341984/","lovemalware"
 "341983","2020-04-17 06:15:09","http://119.201.4.249:20628/.i","offline","malware_download","None","https://urlhaus.abuse.ch/url/341983/","geenensp"
@@ -12975,7 +13362,7 @@
 "341660","2020-04-16 18:32:03","http://162.213.255.176/pl/next.jpg","offline","malware_download","opendir,powershell","https://urlhaus.abuse.ch/url/341660/","abuse_ch"
 "341658","2020-04-16 18:31:04","http://162.213.255.176/pl/a.png","offline","malware_download","opendir,powershell","https://urlhaus.abuse.ch/url/341658/","abuse_ch"
 "341657","2020-04-16 18:31:03","http://162.213.255.176/pl/netflix.jpg","offline","malware_download","opendir,powershell","https://urlhaus.abuse.ch/url/341657/","abuse_ch"
-"341656","2020-04-16 18:17:09","http://118.35.65.115:45190/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/341656/","zbetcheckin"
+"341656","2020-04-16 18:17:09","http://118.35.65.115:45190/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/341656/","zbetcheckin"
 "341655","2020-04-16 18:17:04","http://2.237.76.141:42905/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/341655/","zbetcheckin"
 "341654","2020-04-16 18:15:06","http://chidieberedanielegbukasingaporemonni.duckdns.org/win32.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/341654/","p5yb34m"
 "341653","2020-04-16 18:06:25","http://111.43.223.101:50347/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/341653/","Gandylyan1"
@@ -13139,16 +13526,16 @@
 "341495","2020-04-16 15:07:42","https://supera.com.br/wp-content/themes/calliope/beads/4339212.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341495/","malware_traffic"
 "341494","2020-04-16 15:07:40","https://supera.com.br/wp-content/themes/calliope/beads/2321302/2321302.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341494/","malware_traffic"
 "341493","2020-04-16 15:07:38","https://supera.com.br/wp-content/themes/calliope/beads/1952334.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341493/","malware_traffic"
-"341492","2020-04-16 15:07:35","https://stationaryhome.com/wp-content/themes/calliope/beads/86397.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341492/","malware_traffic"
-"341491","2020-04-16 15:07:27","https://stationaryhome.com/wp-content/themes/calliope/beads/8308538.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341491/","malware_traffic"
+"341492","2020-04-16 15:07:35","https://stationaryhome.com/wp-content/themes/calliope/beads/86397.zip","online","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341492/","malware_traffic"
+"341491","2020-04-16 15:07:27","https://stationaryhome.com/wp-content/themes/calliope/beads/8308538.zip","online","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341491/","malware_traffic"
 "341490","2020-04-16 15:07:17","https://stationaryhome.com/wp-content/themes/calliope/beads/20161415/20161415.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341490/","malware_traffic"
-"341489","2020-04-16 15:06:47","https://stationaryhome.com/wp-content/themes/calliope/beads/12698.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341489/","malware_traffic"
+"341489","2020-04-16 15:06:47","https://stationaryhome.com/wp-content/themes/calliope/beads/12698.zip","online","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341489/","malware_traffic"
 "341488","2020-04-16 15:06:32","http://sportwin.com.ua/wp-content/themes/calliope/beads/82612240/82612240.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341488/","malware_traffic"
 "341487","2020-04-16 15:06:28","http://sportwin.com.ua/wp-content/themes/calliope/beads/534397705/534397705.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341487/","malware_traffic"
 "341486","2020-04-16 15:06:24","http://shaoxiaofei.cn/beads/80858358/80858358.zip","online","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341486/","malware_traffic"
 "341485","2020-04-16 15:05:52","http://shaoxiaofei.cn/beads/53170/53170.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341485/","malware_traffic"
 "341484","2020-04-16 15:05:19","http://shaoxiaofei.cn/beads/4487627/4487627.zip","online","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341484/","malware_traffic"
-"341483","2020-04-16 15:04:02","http://shaoxiaofei.cn/beads/11763.zip","online","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341483/","malware_traffic"
+"341483","2020-04-16 15:04:02","http://shaoxiaofei.cn/beads/11763.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341483/","malware_traffic"
 "341482","2020-04-16 15:03:54","http://shaoxiaofei.cn/beads/07058857/07058857.zip","online","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341482/","malware_traffic"
 "341481","2020-04-16 15:03:24","http://s1r.com/wp-content/themes/calliope/beads/44033/44033.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341481/","malware_traffic"
 "341480","2020-04-16 15:02:51","https://reclodtech.com/wp-content/themes/calliope/beads/87894159.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341480/","malware_traffic"
@@ -13186,7 +13573,7 @@
 "341448","2020-04-16 14:49:41","http://blog.iwebnext.com/wp-content/themes/calliope/beads/27917092/27917092.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341448/","malware_traffic"
 "341447","2020-04-16 14:49:07","http://blog.iwebnext.com/wp-content/themes/calliope/beads/012435.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341447/","malware_traffic"
 "341446","2020-04-16 14:48:32","https://asadairtravel.com/wp-content/themes/calliope/beads/268431328.zip","online","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341446/","malware_traffic"
-"341445","2020-04-16 14:48:24","https://asadairtravel.com/wp-content/themes/calliope/beads/063102/063102.zip","online","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341445/","malware_traffic"
+"341445","2020-04-16 14:48:24","https://asadairtravel.com/wp-content/themes/calliope/beads/063102/063102.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341445/","malware_traffic"
 "341444","2020-04-16 14:48:16","http://aryon.ihu.edu.tr/wp-content/themes/calliope/beads/63425667.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341444/","malware_traffic"
 "341443","2020-04-16 14:48:14","http://aryon.ihu.edu.tr/wp-content/themes/calliope/beads/174806.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341443/","malware_traffic"
 "341442","2020-04-16 14:48:07","http://aryon.ihu.edu.tr/wp-content/themes/calliope/beads/1268346/1268346.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341442/","malware_traffic"
@@ -13384,7 +13771,7 @@
 "341250","2020-04-16 06:19:09","http://178.128.245.174/Binarys/nuclear.x86","offline","malware_download","None","https://urlhaus.abuse.ch/url/341250/","geenensp"
 "341249","2020-04-16 06:19:07","http://185.132.53.59/dark_bins/dark.x86","offline","malware_download","None","https://urlhaus.abuse.ch/url/341249/","geenensp"
 "341248","2020-04-16 06:19:05","http://a.coolbreeze.uk/213/312d/6748.png","offline","malware_download","exe,Qakbot,spx97","https://urlhaus.abuse.ch/url/341248/","lazyactivist192"
-"341247","2020-04-16 06:18:14","http://chattosport.com/wp-content/themes/calliope/beads/444444.png","online","malware_download","exe,Qakbot,spx97","https://urlhaus.abuse.ch/url/341247/","lazyactivist192"
+"341247","2020-04-16 06:18:14","http://chattosport.com/wp-content/themes/calliope/beads/444444.png","offline","malware_download","exe,Qakbot,spx97","https://urlhaus.abuse.ch/url/341247/","lazyactivist192"
 "341246","2020-04-16 06:17:43","http://marinerevetement.com/wp-content/themes/calliope/beads/444444.png","offline","malware_download","exe,Qakbot,spx97","https://urlhaus.abuse.ch/url/341246/","lazyactivist192"
 "341245","2020-04-16 06:17:40","http://pakgt.com/wp-content/themes/calliope/beads/444444.png","offline","malware_download","exe,Qakbot,spx97","https://urlhaus.abuse.ch/url/341245/","lazyactivist192"
 "341244","2020-04-16 06:17:32","http://198.98.61.142/axisbins.sh","offline","malware_download","None","https://urlhaus.abuse.ch/url/341244/","geenensp"
@@ -13681,7 +14068,7 @@
 "340953","2020-04-15 22:02:41","https://www.macassar900.com/wp-content/themes/calliope/beads/15424902/15424902.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/340953/","malware_traffic"
 "340952","2020-04-15 22:02:37","http://yeknam.com/blog/wp-content/themes/calliope/beads/593489/593489.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/340952/","malware_traffic"
 "340951","2020-04-15 22:02:31","http://surecake.com/wp-content/themes/calliope/beads/5401407.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/340951/","malware_traffic"
-"340950","2020-04-15 22:02:28","http://shaoxiaofei.cn/beads/643205.zip","online","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/340950/","malware_traffic"
+"340950","2020-04-15 22:02:28","http://shaoxiaofei.cn/beads/643205.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/340950/","malware_traffic"
 "340949","2020-04-15 22:02:15","http://pawmarker.com/wp-content/themes/calliope/beads/452967/452967.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/340949/","malware_traffic"
 "340948","2020-04-15 22:02:08","https://blog.macwap.com/wp-content/themes/calliope/beads/9436868/9436868.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/340948/","malware_traffic"
 "340947","2020-04-15 21:22:15","http://45.148.10.83/fadsfads/xd.x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/340947/","zbetcheckin"
@@ -13758,7 +14145,7 @@
 "340876","2020-04-15 18:58:05","http://89.32.41.62/x0ox0ox0oxDefault/z0r0.arm5","offline","malware_download","None","https://urlhaus.abuse.ch/url/340876/","JayTHL"
 "340875","2020-04-15 18:58:02","http://89.32.41.62/x0ox0ox0oxDefault/z0r0.arm","offline","malware_download","None","https://urlhaus.abuse.ch/url/340875/","JayTHL"
 "340874","2020-04-15 18:08:10","http://www.sardardhambhavnagar.org/00.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/340874/","abuse_ch"
-"340873","2020-04-15 18:05:47","http://112.123.109.200:56661/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/340873/","Gandylyan1"
+"340873","2020-04-15 18:05:47","http://112.123.109.200:56661/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/340873/","Gandylyan1"
 "340872","2020-04-15 18:05:38","http://218.21.171.228:33572/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/340872/","Gandylyan1"
 "340871","2020-04-15 18:05:35","http://115.61.25.174:45148/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/340871/","Gandylyan1"
 "340870","2020-04-15 18:05:30","http://219.155.173.40:46212/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/340870/","Gandylyan1"
@@ -14194,9 +14581,9 @@
 "340440","2020-04-14 21:04:04","http://49.116.196.72:58048/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/340440/","Gandylyan1"
 "340439","2020-04-14 20:29:03","https://www.hotel-sangiorgio.com/string/974483/974483.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340439/","malware_traffic"
 "340438","2020-04-14 20:28:31","https://www.devgroup.club/string/151531856.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340438/","malware_traffic"
-"340437","2020-04-14 20:28:23","https://waterosmo.com/string/72745.zip","online","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340437/","malware_traffic"
-"340436","2020-04-14 20:28:10","https://waterosmo.com/string/606793.zip","online","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340436/","malware_traffic"
-"340435","2020-04-14 20:28:03","https://waterosmo.com/string/07879.zip","online","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340435/","malware_traffic"
+"340437","2020-04-14 20:28:23","https://waterosmo.com/string/72745.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340437/","malware_traffic"
+"340436","2020-04-14 20:28:10","https://waterosmo.com/string/606793.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340436/","malware_traffic"
+"340435","2020-04-14 20:28:03","https://waterosmo.com/string/07879.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340435/","malware_traffic"
 "340434","2020-04-14 20:27:58","https://viradoc.com/string/6653052/6653052.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340434/","malware_traffic"
 "340433","2020-04-14 20:27:42","https://suka365bet.xyz/string/78043/78043.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340433/","malware_traffic"
 "340432","2020-04-14 20:27:37","https://suka365bet.xyz/string/61820319.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340432/","malware_traffic"
@@ -14228,10 +14615,10 @@
 "340406","2020-04-14 20:24:41","http://nowkh.com/string/22076/22076.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340406/","malware_traffic"
 "340405","2020-04-14 20:24:37","http://nowkh.com/string/11865/11865.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340405/","malware_traffic"
 "340404","2020-04-14 20:24:11","http://nowkh.com/string/00631353.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340404/","malware_traffic"
-"340403","2020-04-14 20:24:06","https://mochandmade.us/string/92098/92098.zip","online","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340403/","malware_traffic"
+"340403","2020-04-14 20:24:06","https://mochandmade.us/string/92098/92098.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340403/","malware_traffic"
 "340402","2020-04-14 20:24:02","https://mochandmade.us/string/65869.zip","online","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340402/","malware_traffic"
-"340401","2020-04-14 20:23:55","https://mochandmade.us/string/543110348/543110348.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340401/","malware_traffic"
-"340400","2020-04-14 20:23:50","https://mochandmade.us/string/443327271/443327271.zip","online","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340400/","malware_traffic"
+"340401","2020-04-14 20:23:55","https://mochandmade.us/string/543110348/543110348.zip","online","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340401/","malware_traffic"
+"340400","2020-04-14 20:23:50","https://mochandmade.us/string/443327271/443327271.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340400/","malware_traffic"
 "340399","2020-04-14 20:23:42","https://microvpn.info/string/530345404/530345404.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340399/","malware_traffic"
 "340398","2020-04-14 20:23:38","http://melias.se/string/64928487.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340398/","malware_traffic"
 "340397","2020-04-14 20:23:30","https://marocaji.com/string/92174460/92174460.zip","online","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340397/","malware_traffic"
@@ -14245,9 +14632,9 @@
 "340389","2020-04-14 20:22:06","http://ipbg.org.br/string/9016172.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340389/","malware_traffic"
 "340388","2020-04-14 20:21:51","http://ipbg.org.br/string/637148407/637148407.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340388/","malware_traffic"
 "340387","2020-04-14 20:21:40","https://hotel-sangiorgio.com/string/974483/974483.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340387/","malware_traffic"
-"340386","2020-04-14 20:21:35","https://hellomessager.com/string/9336248.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340386/","malware_traffic"
+"340386","2020-04-14 20:21:35","https://hellomessager.com/string/9336248.zip","online","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340386/","malware_traffic"
 "340385","2020-04-14 20:21:33","https://hellomessager.com/string/67893798.zip","online","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340385/","malware_traffic"
-"340384","2020-04-14 20:21:30","https://hellomessager.com/string/487434/487434.zip","online","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340384/","malware_traffic"
+"340384","2020-04-14 20:21:30","https://hellomessager.com/string/487434/487434.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340384/","malware_traffic"
 "340383","2020-04-14 20:21:23","https://gsm-laboratory.com/string/2259983.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340383/","malware_traffic"
 "340382","2020-04-14 20:21:18","https://gsm-laboratory.com/string/05907/05907.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340382/","malware_traffic"
 "340381","2020-04-14 20:21:13","https://gsm-laboratory.com/string/009540421.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340381/","malware_traffic"
@@ -14269,8 +14656,8 @@
 "340365","2020-04-14 20:19:19","http://carabettaechifari.tk/string/711668642.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340365/","malware_traffic"
 "340364","2020-04-14 20:19:15","http://carabettaechifari.tk/string/614616978/614616978.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340364/","malware_traffic"
 "340363","2020-04-14 20:19:12","http://carabettaechifari.tk/string/08358054/08358054.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340363/","malware_traffic"
-"340362","2020-04-14 20:19:06","https://blankki.com/string/1024674/1024674.zip","online","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340362/","malware_traffic"
-"340361","2020-04-14 20:19:03","https://blankki.com/string/256476.zip","online","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340361/","malware_traffic"
+"340362","2020-04-14 20:19:06","https://blankki.com/string/1024674/1024674.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340362/","malware_traffic"
+"340361","2020-04-14 20:19:03","https://blankki.com/string/256476.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340361/","malware_traffic"
 "340360","2020-04-14 20:18:32","http://auxiliarypower.in/string/561199214/561199214.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340360/","malware_traffic"
 "340359","2020-04-14 20:18:18","http://auxiliarypower.in/string/5745781/5745781.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340359/","malware_traffic"
 "340358","2020-04-14 20:18:14","http://auxiliarypower.in/string/73005.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340358/","malware_traffic"
@@ -14284,8 +14671,8 @@
 "340350","2020-04-14 20:17:28","http://ahurasolutions.com/string/50928/50928.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340350/","malware_traffic"
 "340349","2020-04-14 20:17:24","http://ahurasolutions.com/string/28939.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340349/","malware_traffic"
 "340348","2020-04-14 20:17:18","https://accentlandscapes.com/string/08809662/08809662.zip","online","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340348/","malware_traffic"
-"340347","2020-04-14 20:17:16","https://accentlandscapes.com/string/7666799/7666799.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340347/","malware_traffic"
-"340346","2020-04-14 20:17:13","https://accentlandscapes.com/string/13365/13365.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340346/","malware_traffic"
+"340347","2020-04-14 20:17:16","https://accentlandscapes.com/string/7666799/7666799.zip","online","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340347/","malware_traffic"
+"340346","2020-04-14 20:17:13","https://accentlandscapes.com/string/13365/13365.zip","online","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340346/","malware_traffic"
 "340345","2020-04-14 19:46:04","http://ruisgood.ru/ups.dat","online","malware_download","None","https://urlhaus.abuse.ch/url/340345/","p5yb34m"
 "340344","2020-04-14 19:43:09","http://ruisgood.ru/1201.rar","online","malware_download","CoinMiner","https://urlhaus.abuse.ch/url/340344/","p5yb34m"
 "340343","2020-04-14 19:43:04","http://ruisgood.ru/max.rar","online","malware_download","None","https://urlhaus.abuse.ch/url/340343/","p5yb34m"
@@ -14405,7 +14792,7 @@
 "340229","2020-04-14 14:37:13","http://leukkado.be/string/444444.png","offline","malware_download","exe,Qakbot,Quakbot,spx96","https://urlhaus.abuse.ch/url/340229/","lazyactivist192"
 "340228","2020-04-14 14:37:11","http://millionsawesomeproducts.com/string/444444.png","offline","malware_download","exe,Qakbot,spx96","https://urlhaus.abuse.ch/url/340228/","lazyactivist192"
 "340227","2020-04-14 14:37:08","http://funpartyrent.com/string/444444.png","online","malware_download","exe,Qakbot,Quakbot,spx96","https://urlhaus.abuse.ch/url/340227/","lazyactivist192"
-"340226","2020-04-14 14:37:04","http://common-factor.nl/string/444444.png","offline","malware_download","exe,Qakbot,Quakbot,spx96","https://urlhaus.abuse.ch/url/340226/","lazyactivist192"
+"340226","2020-04-14 14:37:04","http://common-factor.nl/string/444444.png","online","malware_download","exe,Qakbot,Quakbot,spx96","https://urlhaus.abuse.ch/url/340226/","lazyactivist192"
 "340224","2020-04-14 14:33:35","https://emamdouh1949.me/temp/JBPOWNH.txt","offline","malware_download","AZORult,exe","https://urlhaus.abuse.ch/url/340224/","abuse_ch"
 "340223","2020-04-14 14:23:39","http://otanityre.in/dj/dj.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/340223/","abuse_ch"
 "340222","2020-04-14 14:17:19","http://167.71.159.97/SBIDIOT/zte","offline","malware_download","None","https://urlhaus.abuse.ch/url/340222/","JayTHL"
@@ -14467,7 +14854,7 @@
 "340166","2020-04-14 12:07:21","http://42.115.10.67:45087/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/340166/","Gandylyan1"
 "340165","2020-04-14 12:07:06","http://182.113.35.115:44179/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/340165/","Gandylyan1"
 "340164","2020-04-14 12:07:02","http://159.255.187.160:36466/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/340164/","Gandylyan1"
-"340163","2020-04-14 12:06:30","http://222.242.182.26:53058/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/340163/","Gandylyan1"
+"340163","2020-04-14 12:06:30","http://222.242.182.26:53058/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/340163/","Gandylyan1"
 "340162","2020-04-14 12:06:26","http://123.8.53.64:38970/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/340162/","Gandylyan1"
 "340161","2020-04-14 12:06:22","http://60.184.98.213:58341/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/340161/","Gandylyan1"
 "340160","2020-04-14 12:06:15","http://222.246.243.55:56886/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/340160/","Gandylyan1"
@@ -15142,7 +15529,7 @@
 "339490","2020-04-13 14:56:09","http://157.245.185.193/SBIDIOT/arm6","offline","malware_download","None","https://urlhaus.abuse.ch/url/339490/","JayTHL"
 "339489","2020-04-13 14:56:07","http://157.245.185.193/SBIDIOT/arm","offline","malware_download","None","https://urlhaus.abuse.ch/url/339489/","JayTHL"
 "339488","2020-04-13 14:56:03","http://140.82.8.73/update.sh","offline","malware_download","None","https://urlhaus.abuse.ch/url/339488/","JayTHL"
-"339487","2020-04-13 13:49:06","http://121.176.31.174:36606/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/339487/","zbetcheckin"
+"339487","2020-04-13 13:49:06","http://121.176.31.174:36606/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/339487/","zbetcheckin"
 "339486","2020-04-13 13:33:10","http://mobile-fueldrain.co.uk/sport/rockstar.php","offline","malware_download","exe,Trickbot","https://urlhaus.abuse.ch/url/339486/","abuse_ch"
 "339485","2020-04-13 12:10:08","http://218.144.252.19:1801/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/339485/","zbetcheckin"
 "339484","2020-04-13 12:09:47","http://42.235.44.249:45431/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/339484/","Gandylyan1"
@@ -15898,7 +16285,7 @@
 "338733","2020-04-12 17:12:37","https://pastebin.com/raw/3NaLAurp","offline","malware_download","None","https://urlhaus.abuse.ch/url/338733/","JayTHL"
 "338732","2020-04-12 17:12:32","https://pastebin.com/raw/PfUj3cgY","offline","malware_download","None","https://urlhaus.abuse.ch/url/338732/","JayTHL"
 "338731","2020-04-12 17:12:29","https://pastebin.com/raw/PAKuwpgV","offline","malware_download","None","https://urlhaus.abuse.ch/url/338731/","JayTHL"
-"338730","2020-04-12 17:12:25","http://119.206.2.248:35335/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/338730/","zbetcheckin"
+"338730","2020-04-12 17:12:25","http://119.206.2.248:35335/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/338730/","zbetcheckin"
 "338729","2020-04-12 17:12:22","https://pastebin.com/raw/gcr4wqQ9","offline","malware_download","None","https://urlhaus.abuse.ch/url/338729/","JayTHL"
 "338728","2020-04-12 17:12:19","https://pastebin.com/raw/C3U88DRR","offline","malware_download","None","https://urlhaus.abuse.ch/url/338728/","JayTHL"
 "338727","2020-04-12 17:12:14","https://pastebin.com/raw/3PqeeV5H","offline","malware_download","None","https://urlhaus.abuse.ch/url/338727/","JayTHL"
@@ -16376,7 +16763,7 @@
 "338255","2020-04-11 06:54:32","http://194.180.224.113/telnet/arm6","online","malware_download","elf","https://urlhaus.abuse.ch/url/338255/","hypoweb"
 "338254","2020-04-11 06:54:29","http://194.180.224.113/telnet/arm5","online","malware_download","elf","https://urlhaus.abuse.ch/url/338254/","hypoweb"
 "338253","2020-04-11 06:54:27","http://194.180.224.113/telnet/arm","online","malware_download","elf","https://urlhaus.abuse.ch/url/338253/","hypoweb"
-"338252","2020-04-11 06:54:25","http://194.180.224.113/telnet/mpsl","offline","malware_download","elf","https://urlhaus.abuse.ch/url/338252/","hypoweb"
+"338252","2020-04-11 06:54:25","http://194.180.224.113/telnet/mpsl","online","malware_download","elf","https://urlhaus.abuse.ch/url/338252/","hypoweb"
 "338251","2020-04-11 06:54:22","http://188.212.100.2/d/xd.sh4","offline","malware_download","elf","https://urlhaus.abuse.ch/url/338251/","hypoweb"
 "338250","2020-04-11 06:54:19","http://188.212.100.2/d/xd.ppc","offline","malware_download","elf","https://urlhaus.abuse.ch/url/338250/","hypoweb"
 "338249","2020-04-11 06:54:17","http://188.212.100.2/d/xd.mpsl","offline","malware_download","elf","https://urlhaus.abuse.ch/url/338249/","hypoweb"
@@ -16602,9 +16989,9 @@
 "338029","2020-04-10 20:51:24","http://sylvaclouds.eu/billisolo/billisolo.exe","offline","malware_download","Loki","https://urlhaus.abuse.ch/url/338029/","JayTHL"
 "338028","2020-04-10 20:51:02","http://sylvaclouds.eu/uzmod3/uzmod3.exe","offline","malware_download","Formbook","https://urlhaus.abuse.ch/url/338028/","JayTHL"
 "338027","2020-04-10 19:57:05","http://185.172.110.241/x0ox0ox0oxDefault/z0r0.arc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/338027/","zbetcheckin"
-"338026","2020-04-10 19:57:03","http://185.172.110.241/x0ox0ox0oxDefault/z0r0.arm5","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/338026/","zbetcheckin"
+"338026","2020-04-10 19:57:03","http://185.172.110.241/x0ox0ox0oxDefault/z0r0.arm5","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/338026/","zbetcheckin"
 "338025","2020-04-10 19:54:03","http://185.172.110.241/x0ox0ox0oxDefault/z0r0.i686","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/338025/","zbetcheckin"
-"338024","2020-04-10 19:46:05","http://185.172.110.241/jaws","offline","malware_download","shellscript","https://urlhaus.abuse.ch/url/338024/","zbetcheckin"
+"338024","2020-04-10 19:46:05","http://185.172.110.241/jaws","online","malware_download","shellscript","https://urlhaus.abuse.ch/url/338024/","zbetcheckin"
 "338023","2020-04-10 19:10:22","http://107.173.222.153/i686","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/338023/","zbetcheckin"
 "338022","2020-04-10 19:10:20","http://107.173.222.153/FkSgbins.sh","offline","malware_download","shellscript","https://urlhaus.abuse.ch/url/338022/","zbetcheckin"
 "338021","2020-04-10 19:10:18","http://107.173.222.153/sh4","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/338021/","zbetcheckin"
@@ -16690,10 +17077,10 @@
 "337941","2020-04-10 14:04:16","http://shawigroup.com/dmndfkle.exe","offline","malware_download","exe,Trickbot","https://urlhaus.abuse.ch/url/337941/","abuse_ch"
 "337940","2020-04-10 14:01:33","http://194.87.238.60/MASAD/BUILDE.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/337940/","abuse_ch"
 "337939","2020-04-10 14:01:16","https://metalacerogroup.xyz/putty/GHCGGH.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/337939/","abuse_ch"
-"337938","2020-04-10 14:00:10","http://aurumboy.com/file1.exe","offline","malware_download","AveMariaRAT,exe","https://urlhaus.abuse.ch/url/337938/","abuse_ch"
-"337937","2020-04-10 14:00:04","http://aurumboy.com/file2.exe","offline","malware_download","AZORult,exe","https://urlhaus.abuse.ch/url/337937/","abuse_ch"
+"337938","2020-04-10 14:00:10","http://aurumboy.com/file1.exe","online","malware_download","AveMariaRAT,exe","https://urlhaus.abuse.ch/url/337938/","abuse_ch"
+"337937","2020-04-10 14:00:04","http://aurumboy.com/file2.exe","online","malware_download","AZORult,exe","https://urlhaus.abuse.ch/url/337937/","abuse_ch"
 "337936","2020-04-10 13:59:57","http://aurumboy.com/file3.exe","offline","malware_download","AZORult,exe","https://urlhaus.abuse.ch/url/337936/","abuse_ch"
-"337935","2020-04-10 13:56:09","http://aurumboy.com/file4.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/337935/","abuse_ch"
+"337935","2020-04-10 13:56:09","http://aurumboy.com/file4.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/337935/","abuse_ch"
 "337934","2020-04-10 13:52:32","https://drive.google.com/uc?export=download&id=1lIsY1gd_dpCgLGFezFY1-KSuwimKO2vb","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/337934/","abuse_ch"
 "337933","2020-04-10 13:52:27","https://drive.google.com/uc?export=download&id=1IeK_60LjcKne4QP43bVtRZ0e01ibyQm-","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/337933/","abuse_ch"
 "337932","2020-04-10 13:52:22","https://drive.google.com/uc?export=download&id=1qzs3Lsl8KcSkw35e9Zc8ZMLwzzoTUNAM","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/337932/","abuse_ch"
@@ -16729,7 +17116,7 @@
 "337902","2020-04-10 12:04:18","http://180.118.76.108:52538/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/337902/","Gandylyan1"
 "337901","2020-04-10 12:04:13","http://221.210.211.4:56620/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/337901/","Gandylyan1"
 "337900","2020-04-10 12:04:10","http://199.83.203.225:40076/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/337900/","Gandylyan1"
-"337899","2020-04-10 12:04:06","http://117.95.194.127:58398/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/337899/","Gandylyan1"
+"337899","2020-04-10 12:04:06","http://117.95.194.127:58398/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/337899/","Gandylyan1"
 "337898","2020-04-10 11:46:04","http://1.68.242.28:41685/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/337898/","zbetcheckin"
 "337897","2020-04-10 11:34:33","https://drive.google.com/uc?export=download&id=1tBN0T3qCF4R96CkALK663VSU6GvM_ZAE","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/337897/","abuse_ch"
 "337896","2020-04-10 11:34:21","https://drive.google.com/uc?export=download&id=122Kkww0vL-2V_7Sz268MlJ9MV4AMHcKR","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/337896/","abuse_ch"
@@ -16824,7 +17211,7 @@
 "337807","2020-04-10 09:03:29","http://49.89.190.130:48282/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/337807/","Gandylyan1"
 "337806","2020-04-10 09:03:24","http://45.161.254.200:50679/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/337806/","Gandylyan1"
 "337805","2020-04-10 09:03:21","http://116.114.95.64:58462/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/337805/","Gandylyan1"
-"337804","2020-04-10 09:03:18","http://108.95.162.21:48579/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/337804/","Gandylyan1"
+"337804","2020-04-10 09:03:18","http://108.95.162.21:48579/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/337804/","Gandylyan1"
 "337803","2020-04-10 09:03:15","http://115.61.5.50:40651/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/337803/","Gandylyan1"
 "337802","2020-04-10 09:03:11","http://172.245.21.222/bins/FearLess.arm6","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/337802/","zbetcheckin"
 "337801","2020-04-10 09:03:09","http://88.218.17.223/bins/qwertyuiop.sh4","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/337801/","zbetcheckin"
@@ -17184,16 +17571,16 @@
 "337447","2020-04-09 17:06:05","https://nextime.online/wp-content/uploads/2020/04/extend/17379/17379.zip","offline","malware_download","doc,qbot","https://urlhaus.abuse.ch/url/337447/","p5yb34m"
 "337446","2020-04-09 16:56:09","https://onedrive.live.com/download?cid=2F947402293C14C1&resid=2F947402293C14C1%21115&authkey=AHqD1dMQjmGKDuM","offline","malware_download","encrypted,Formbook,GuLoader","https://urlhaus.abuse.ch/url/337446/","abuse_ch"
 "337445","2020-04-09 16:56:07","https://drive.google.com/uc?export=download&id=1N-1AGKYL3EQU3bTgirFjLQIZ2LLCafd0","offline","malware_download","encrypted,GuLoader,Loki","https://urlhaus.abuse.ch/url/337445/","abuse_ch"
-"337444","2020-04-09 16:55:32","http://185.172.110.241/x0ox0ox0oxDefault/z0r0.arm","offline","malware_download","None","https://urlhaus.abuse.ch/url/337444/","JayTHL"
+"337444","2020-04-09 16:55:32","http://185.172.110.241/x0ox0ox0oxDefault/z0r0.arm","online","malware_download","None","https://urlhaus.abuse.ch/url/337444/","JayTHL"
 "337443","2020-04-09 16:55:30","http://185.172.110.241/x0ox0ox0oxDefault/z0r0.arm6","offline","malware_download","None","https://urlhaus.abuse.ch/url/337443/","JayTHL"
-"337442","2020-04-09 16:55:28","http://185.172.110.241/x0ox0ox0oxDefault/z0r0.arm7","offline","malware_download","None","https://urlhaus.abuse.ch/url/337442/","JayTHL"
+"337442","2020-04-09 16:55:28","http://185.172.110.241/x0ox0ox0oxDefault/z0r0.arm7","online","malware_download","None","https://urlhaus.abuse.ch/url/337442/","JayTHL"
 "337441","2020-04-09 16:55:27","http://185.172.110.241/x0ox0ox0oxDefault/z0r0.m68k","offline","malware_download","None","https://urlhaus.abuse.ch/url/337441/","JayTHL"
 "337440","2020-04-09 16:55:25","http://185.172.110.241/x0ox0ox0oxDefault/z0r0.mips","offline","malware_download","None","https://urlhaus.abuse.ch/url/337440/","JayTHL"
-"337439","2020-04-09 16:55:23","http://185.172.110.241/x0ox0ox0oxDefault/z0r0.mpsl","offline","malware_download","None","https://urlhaus.abuse.ch/url/337439/","JayTHL"
+"337439","2020-04-09 16:55:23","http://185.172.110.241/x0ox0ox0oxDefault/z0r0.mpsl","online","malware_download","None","https://urlhaus.abuse.ch/url/337439/","JayTHL"
 "337438","2020-04-09 16:55:21","http://185.172.110.241/x0ox0ox0oxDefault/z0r0.ppc","offline","malware_download","None","https://urlhaus.abuse.ch/url/337438/","JayTHL"
-"337437","2020-04-09 16:55:19","http://185.172.110.241/x0ox0ox0oxDefault/z0r0.sh4","offline","malware_download","None","https://urlhaus.abuse.ch/url/337437/","JayTHL"
-"337436","2020-04-09 16:55:17","http://185.172.110.241/x0ox0ox0oxDefault/z0r0.spc","offline","malware_download","None","https://urlhaus.abuse.ch/url/337436/","JayTHL"
-"337435","2020-04-09 16:55:15","http://185.172.110.241/x0ox0ox0oxDefault/z0r0.x86","offline","malware_download","None","https://urlhaus.abuse.ch/url/337435/","JayTHL"
+"337437","2020-04-09 16:55:19","http://185.172.110.241/x0ox0ox0oxDefault/z0r0.sh4","online","malware_download","None","https://urlhaus.abuse.ch/url/337437/","JayTHL"
+"337436","2020-04-09 16:55:17","http://185.172.110.241/x0ox0ox0oxDefault/z0r0.spc","online","malware_download","None","https://urlhaus.abuse.ch/url/337436/","JayTHL"
+"337435","2020-04-09 16:55:15","http://185.172.110.241/x0ox0ox0oxDefault/z0r0.x86","online","malware_download","None","https://urlhaus.abuse.ch/url/337435/","JayTHL"
 "337434","2020-04-09 16:55:07","https://greentec-automation.com/wp-cran.php","offline","malware_download","exe","https://urlhaus.abuse.ch/url/337434/","p5yb34m"
 "337433","2020-04-09 16:55:03","https://narensyndicate.com/wp-cran.php","offline","malware_download","exe","https://urlhaus.abuse.ch/url/337433/","p5yb34m"
 "337432","2020-04-09 16:41:09","http://kacper-formela.pl/wp-smart.php","offline","malware_download","exe","https://urlhaus.abuse.ch/url/337432/","p5yb34m"
@@ -17299,7 +17686,7 @@
 "337332","2020-04-09 15:41:09","https://retustan.com/tan?S-1-5-21-1693682860-607145093-2874071422-1001","offline","malware_download","Dridex","https://urlhaus.abuse.ch/url/337332/","James_inthe_box"
 "337331","2020-04-09 15:34:21","https://drive.google.com/uc?export=download&id=1Qu2IY4Hq60OluThV17p22lRQMNGEMrkv","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/337331/","abuse_ch"
 "337330","2020-04-09 15:34:12","http://a.teamworx.ph/aushdnduvf/dbasufue/nxa/519.png","offline","malware_download","exe,Qakbot","https://urlhaus.abuse.ch/url/337330/","lazyactivist192"
-"337329","2020-04-09 15:32:24","https://ceirecrear.com.br/wp-content/plugins/apikey/extend/444444.png","online","malware_download","exe,Qakbot,Quakbot","https://urlhaus.abuse.ch/url/337329/","lazyactivist192"
+"337329","2020-04-09 15:32:24","https://ceirecrear.com.br/wp-content/plugins/apikey/extend/444444.png","offline","malware_download","exe,Qakbot,Quakbot","https://urlhaus.abuse.ch/url/337329/","lazyactivist192"
 "337328","2020-04-09 15:31:18","http://compliancewing.com/wp-content/uploads/2020/04/extend/444444.png","offline","malware_download","exe,Qakbot,Quakbot","https://urlhaus.abuse.ch/url/337328/","lazyactivist192"
 "337327","2020-04-09 15:31:12","http://fovarosiingatlan.rocksztar.com/extend/444444.png","offline","malware_download","exe,Qakbot,Quakbot","https://urlhaus.abuse.ch/url/337327/","lazyactivist192"
 "337326","2020-04-09 15:31:09","http://pelokazi-spiritualcoach.co.za/extend/444444.png","offline","malware_download","exe,Qakbot,Quakbot","https://urlhaus.abuse.ch/url/337326/","lazyactivist192"
@@ -17639,7 +18026,7 @@
 "336990","2020-04-08 19:31:07","http://178.128.225.245/armv6l","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/336990/","zbetcheckin"
 "336989","2020-04-08 19:31:04","http://178.128.225.245/armv4l","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/336989/","zbetcheckin"
 "336988","2020-04-08 19:22:03","http://boutimslea.com/AdQAS.xlsm","offline","malware_download","None","https://urlhaus.abuse.ch/url/336988/","JayTHL"
-"336987","2020-04-08 19:12:05","http://112.27.88.116:45642/Mozi.m+-O+-","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/336987/","zbetcheckin"
+"336987","2020-04-08 19:12:05","http://112.27.88.116:45642/Mozi.m+-O+-","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/336987/","zbetcheckin"
 "336986","2020-04-08 19:04:05","http://162.212.114.3:45087/Mozi.m","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/336986/","zbetcheckin"
 "336985","2020-04-08 18:55:31","http://51.38.93.190/SBIDIOT/zte","offline","malware_download","None","https://urlhaus.abuse.ch/url/336985/","JayTHL"
 "336984","2020-04-08 18:55:29","http://51.38.93.190/SBIDIOT/yarn","offline","malware_download","None","https://urlhaus.abuse.ch/url/336984/","JayTHL"
@@ -17997,7 +18384,7 @@
 "336632","2020-04-08 06:06:08","http://162.212.113.99:43200/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/336632/","Gandylyan1"
 "336631","2020-04-08 06:06:04","http://masson.prodigyprinting.com/datacollectionservice.php3","offline","malware_download","exe,Qakbot","https://urlhaus.abuse.ch/url/336631/","lazyactivist192"
 "336630","2020-04-08 06:05:53","http://unistore.heatherling.com/datacollectionservice.php3","offline","malware_download","exe,Qakbot","https://urlhaus.abuse.ch/url/336630/","lazyactivist192"
-"336629","2020-04-08 06:05:30","http://ebook.w3wvg.com/datacollectionservice.php3","online","malware_download","exe,Qakbot","https://urlhaus.abuse.ch/url/336629/","lazyactivist192"
+"336629","2020-04-08 06:05:30","http://ebook.w3wvg.com/datacollectionservice.php3","offline","malware_download","exe,Qakbot","https://urlhaus.abuse.ch/url/336629/","lazyactivist192"
 "336628","2020-04-08 06:05:13","http://www.clinicamariademolina.com/SWIFT_ES21430042283_27032020.jar","online","malware_download","Adwind","https://urlhaus.abuse.ch/url/336628/","j00dan"
 "336627","2020-04-08 06:05:09","http://45.139.236.86/kremlin.vbs","offline","malware_download","None","https://urlhaus.abuse.ch/url/336627/","benkow_"
 "336626","2020-04-08 06:05:07","http://182.115.215.108:57294/Mozi.m","offline","malware_download","elf,gafgyt,Mozi","https://urlhaus.abuse.ch/url/336626/","07ac0n"
@@ -18237,7 +18624,7 @@
 "336392","2020-04-08 03:06:18","http://182.126.197.198:56138/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/336392/","Gandylyan1"
 "336391","2020-04-08 03:06:15","http://111.43.223.79:59320/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/336391/","Gandylyan1"
 "336390","2020-04-08 03:06:12","http://172.36.27.99:53944/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/336390/","Gandylyan1"
-"336389","2020-04-08 03:05:40","http://176.113.161.112:45791/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/336389/","Gandylyan1"
+"336389","2020-04-08 03:05:40","http://176.113.161.112:45791/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/336389/","Gandylyan1"
 "336388","2020-04-08 03:05:38","http://61.52.144.189:60548/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/336388/","Gandylyan1"
 "336387","2020-04-08 03:05:35","http://61.241.170.35:54400/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/336387/","Gandylyan1"
 "336386","2020-04-08 03:05:25","http://42.237.15.167:49240/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/336386/","Gandylyan1"
@@ -18253,7 +18640,7 @@
 "336376","2020-04-08 03:03:08","http://66.45.248.245/mipsel","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/336376/","zbetcheckin"
 "336375","2020-04-08 03:03:05","http://199.247.18.42/i686","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/336375/","zbetcheckin"
 "336374","2020-04-08 03:03:03","http://194.15.36.240/x0ox0ox0oxDefault/z0r0.arc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/336374/","zbetcheckin"
-"336373","2020-04-08 02:59:15","http://194.180.224.124/a.arm","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/336373/","zbetcheckin"
+"336373","2020-04-08 02:59:15","http://194.180.224.124/a.arm","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/336373/","zbetcheckin"
 "336372","2020-04-08 02:59:12","http://194.15.36.43/vtyhat","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/336372/","zbetcheckin"
 "336371","2020-04-08 02:59:10","http://194.15.36.240/x0ox0ox0oxDefault/z0r0.mips","offline","malware_download","elf","https://urlhaus.abuse.ch/url/336371/","zbetcheckin"
 "336370","2020-04-08 02:59:08","http://104.206.252.71/m-6.8-k.GHOUL","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/336370/","zbetcheckin"
@@ -18277,7 +18664,7 @@
 "336352","2020-04-08 02:50:05","http://209.141.52.28/bins.sh","offline","malware_download","shellscript","https://urlhaus.abuse.ch/url/336352/","zbetcheckin"
 "336351","2020-04-08 01:34:12","http://155.138.217.118/sh4","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/336351/","zbetcheckin"
 "336350","2020-04-08 01:34:08","http://155.138.217.118/armv6l","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/336350/","zbetcheckin"
-"336349","2020-04-08 01:34:06","http://46.39.247.65:7361/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/336349/","zbetcheckin"
+"336349","2020-04-08 01:34:06","http://46.39.247.65:7361/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/336349/","zbetcheckin"
 "336348","2020-04-08 01:30:28","http://155.138.217.118/sparc","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/336348/","zbetcheckin"
 "336347","2020-04-08 01:30:25","http://37.49.226.176/fbot.arm7","offline","malware_download","elf","https://urlhaus.abuse.ch/url/336347/","zbetcheckin"
 "336346","2020-04-08 01:30:23","http://104.40.17.31/Demon.arm4","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/336346/","zbetcheckin"
@@ -18409,7 +18796,7 @@
 "336220","2020-04-07 18:04:40","http://36.107.42.43:52544/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/336220/","Gandylyan1"
 "336219","2020-04-07 18:04:36","http://42.226.66.123:47950/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/336219/","Gandylyan1"
 "336218","2020-04-07 18:04:32","http://222.139.254.73:56475/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/336218/","Gandylyan1"
-"336217","2020-04-07 18:04:27","http://176.113.161.52:45399/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/336217/","Gandylyan1"
+"336217","2020-04-07 18:04:27","http://176.113.161.52:45399/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/336217/","Gandylyan1"
 "336216","2020-04-07 18:04:24","http://162.212.113.225:43454/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/336216/","Gandylyan1"
 "336215","2020-04-07 18:04:20","http://117.87.22.215:55471/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/336215/","Gandylyan1"
 "336214","2020-04-07 18:04:16","http://114.239.55.88:55132/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/336214/","Gandylyan1"
@@ -18459,7 +18846,7 @@
 "336170","2020-04-07 14:16:00","http://robotrade.com.vn/wp-content/images/views/YtOA46S5guGQy9L.exe","offline","malware_download","HawkEye","https://urlhaus.abuse.ch/url/336170/","RobbieWhite98"
 "336169","2020-04-07 14:15:53","http://robotrade.com.vn/wp-content/images/views/itsRL2XbtQKrNnQ.exe","offline","malware_download","HawkEye","https://urlhaus.abuse.ch/url/336169/","RobbieWhite98"
 "336168","2020-04-07 14:15:47","http://modcloudserver.eu/arinze/arinze.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/336168/","0xFrost"
-"336167","2020-04-07 14:15:43","http://modcloudserver.eu/donstan/stanz.exe","offline","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/336167/","RobbieWhite98"
+"336167","2020-04-07 14:15:43","http://modcloudserver.eu/donstan/stanz.exe","online","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/336167/","RobbieWhite98"
 "336166","2020-04-07 14:15:19","http://renovanorte.com/Preview.exe","online","malware_download","None","https://urlhaus.abuse.ch/url/336166/","anonymous"
 "336165","2020-04-07 14:15:15","http://eroblog.best/1.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/336165/","RobbieWhite98"
 "336164","2020-04-07 14:15:11","http://posqit.net/0/80177.exe","offline","malware_download","exe,Loki,lokibot","https://urlhaus.abuse.ch/url/336164/","RobbieWhite98"
@@ -18598,7 +18985,7 @@
 "336031","2020-04-07 06:03:11","http://110.179.13.146:53044/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/336031/","Gandylyan1"
 "336030","2020-04-07 06:03:06","http://111.43.223.112:48012/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/336030/","Gandylyan1"
 "336029","2020-04-07 06:03:03","http://113.65.7.140:38755/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/336029/","Gandylyan1"
-"336028","2020-04-07 05:54:10","http://modcloudserver.eu/djfilez/djfilez.exe","offline","malware_download","AgentTesla,exe,GuLoader","https://urlhaus.abuse.ch/url/336028/","Jouliok"
+"336028","2020-04-07 05:54:10","http://modcloudserver.eu/djfilez/djfilez.exe","online","malware_download","AgentTesla,exe,GuLoader","https://urlhaus.abuse.ch/url/336028/","Jouliok"
 "336027","2020-04-07 05:54:04","http://barrielajueste.duckdns.org/projeto?W334KLMAT0BB1X98VCK3C8DZIL56M/Security_WhatsAppWe","offline","malware_download","MetaMorfo","https://urlhaus.abuse.ch/url/336027/","1ZRR4H"
 "336026","2020-04-07 05:53:25","http://19ce033f.ngrok.io/sh4","offline","malware_download","elf","https://urlhaus.abuse.ch/url/336026/","hypoweb"
 "336025","2020-04-07 05:53:23","http://19ce033f.ngrok.io/i686","offline","malware_download","elf","https://urlhaus.abuse.ch/url/336025/","hypoweb"
@@ -18733,7 +19120,7 @@
 "335896","2020-04-06 18:26:05","https://www.mediafire.com/file/4ychkep9ucdrz74/Payment_Plan.7z/file","offline","malware_download","None","https://urlhaus.abuse.ch/url/335896/","cocaman"
 "335895","2020-04-06 18:13:10","http://posqit.net/0/5911097.exe","offline","malware_download","Loki,lokibot","https://urlhaus.abuse.ch/url/335895/","RobbieWhite98"
 "335894","2020-04-06 18:13:05","http://posqit.net/0/56021017.exe","offline","malware_download","Loki,lokibot","https://urlhaus.abuse.ch/url/335894/","RobbieWhite98"
-"335893","2020-04-06 18:05:16","http://176.113.161.65:42166/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/335893/","Gandylyan1"
+"335893","2020-04-06 18:05:16","http://176.113.161.65:42166/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/335893/","Gandylyan1"
 "335892","2020-04-06 18:05:13","http://61.241.171.188:44921/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/335892/","Gandylyan1"
 "335891","2020-04-06 18:04:57","http://115.59.255.29:53294/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/335891/","Gandylyan1"
 "335890","2020-04-06 18:04:53","http://221.160.177.112:1099/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/335890/","Gandylyan1"
@@ -18844,7 +19231,7 @@
 "335784","2020-04-06 15:05:33","http://118.121.170.181:41664/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/335784/","Gandylyan1"
 "335783","2020-04-06 15:04:38","http://216.180.117.59:36401/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/335783/","Gandylyan1"
 "335782","2020-04-06 14:57:04","https://tehranfish.ir/bin_encrypted_6E8BBC0.bin","offline","malware_download","None","https://urlhaus.abuse.ch/url/335782/","JayTHL"
-"335781","2020-04-06 14:54:05","http://modcloudserver.eu/uzmod3/uzmod3.exe","offline","malware_download","GuLoader","https://urlhaus.abuse.ch/url/335781/","JayTHL"
+"335781","2020-04-06 14:54:05","http://modcloudserver.eu/uzmod3/uzmod3.exe","online","malware_download","GuLoader","https://urlhaus.abuse.ch/url/335781/","JayTHL"
 "335780","2020-04-06 14:36:04","https://doc-08-8k-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/37a7b7qire1dge1s9fskcahnvovmukck/1586183625000/00928859234918370098/*/1oLDfi-ddoSd-I0T530zVY5xyqA58vk8g?e=download","offline","malware_download","AgentTesla,encrypted","https://urlhaus.abuse.ch/url/335780/","ps66uk"
 "335779","2020-04-06 14:12:05","http://92.222.121.156/mac2139r209ru120934r123jhr908213jh4r09213/lmfao293reuj239jrf234rft34jt.arm","offline","malware_download","elf","https://urlhaus.abuse.ch/url/335779/","Gandylyan1"
 "335778","2020-04-06 14:12:02","http://92.222.121.156/mac2139r209ru120934r123jhr908213jh4r09213/lmfao293reuj239jrf234rft34jt.mpsl","offline","malware_download","elf","https://urlhaus.abuse.ch/url/335778/","Gandylyan1"
@@ -20245,7 +20632,7 @@
 "334383","2020-04-03 13:13:14","http://castmart.ga/~zadmin/icloud/em_encrypted_8B5BEAF.bin","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/334383/","abuse_ch"
 "334382","2020-04-03 13:13:11","https://www.bullionexperts.com/60days_encrypted_C1D4B4F.bin","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/334382/","abuse_ch"
 "334381","2020-04-03 13:13:08","https://drive.google.com/u/0/uc?id=1J2uULKdAUtafKrTH6VlS05iuPX3SRcVP&export=download","offline","malware_download","encrypted,GuLoader,RemcosRAT","https://urlhaus.abuse.ch/url/334381/","abuse_ch"
-"334380","2020-04-03 13:11:03","http://ucto-id.cz/binr.image","offline","malware_download","exe,Formbook","https://urlhaus.abuse.ch/url/334380/","zbetcheckin"
+"334380","2020-04-03 13:11:03","http://ucto-id.cz/binr.image","online","malware_download","exe,Formbook","https://urlhaus.abuse.ch/url/334380/","zbetcheckin"
 "334379","2020-04-03 12:51:35","https://onedrive.live.com/download?cid=FB607A99940C799A&resid=FB607A99940C799A%21167&authkey=ADU96AfwHMgRXi4","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/334379/","abuse_ch"
 "334378","2020-04-03 12:51:32","http://dakrimcmdk.ch/omarch_encrypted_1FCAFA0.bin","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/334378/","abuse_ch"
 "334377","2020-04-03 12:51:29","https://drive.google.com/uc?export=download&id=11SLRJiP9Zs-e4a9ePUzNJeM9JDaLXeMR","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/334377/","abuse_ch"
@@ -23579,7 +23966,7 @@
 "331036","2020-03-27 15:55:11","http://45.95.168.207/bins/arm","offline","malware_download","None","https://urlhaus.abuse.ch/url/331036/","anonymous"
 "331035","2020-03-27 15:55:08","http://114.32.103.219:59537/.i","offline","malware_download","elf","https://urlhaus.abuse.ch/url/331035/","hypoweb"
 "331034","2020-03-27 15:54:04","https://drive.google.com/uc?export=download&id=1mPtxUFw-8OgW42lx5NpwH7aS5bt7V6MO","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/331034/","abuse_ch"
-"331033","2020-03-27 15:37:06","http://125.136.182.124:7616/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/331033/","zbetcheckin"
+"331033","2020-03-27 15:37:06","http://125.136.182.124:7616/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/331033/","zbetcheckin"
 "331032","2020-03-27 15:26:03","http://esiglass.it/glassclass/glass.php","offline","malware_download","exe","https://urlhaus.abuse.ch/url/331032/","zbetcheckin"
 "331031","2020-03-27 15:10:05","http://www.esiglass.it/glassclass/glass.php","offline","malware_download","exe,Gozi","https://urlhaus.abuse.ch/url/331031/","zbetcheckin"
 "331030","2020-03-27 15:06:11","http://123.12.32.229:58876/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/331030/","Gandylyan1"
@@ -23824,7 +24211,7 @@
 "330791","2020-03-27 07:14:05","http://161.35.0.71/SBIDIOT/x86","offline","malware_download","elf","https://urlhaus.abuse.ch/url/330791/","0xrb"
 "330790","2020-03-27 07:14:03","http://167.99.234.199/bins/sora.x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/330790/","0xrb"
 "330789","2020-03-27 07:13:07","http://192.129.188.98/bins/blxntz.x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/330789/","0xrb"
-"330788","2020-03-27 07:13:05","http://185.172.110.208/bins/UnHAnaAW.x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/330788/","0xrb"
+"330788","2020-03-27 07:13:05","http://185.172.110.208/bins/UnHAnaAW.x86","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/330788/","0xrb"
 "330787","2020-03-27 07:13:03","http://134.122.87.117/mac2139r209ru120934r123jhr908213jh4r09213/lmfao293reuj239jrf234rft34jt.x86","offline","malware_download","elf","https://urlhaus.abuse.ch/url/330787/","0xrb"
 "330786","2020-03-27 07:12:03","http://176.123.6.155/Y91/x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/330786/","0xrb"
 "330785","2020-03-27 07:07:03","http://212.237.0.244/bins/spc.kbot","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/330785/","0xrb"
@@ -24207,7 +24594,7 @@
 "330407","2020-03-26 15:04:10","http://111.43.223.133:55279/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/330407/","Gandylyan1"
 "330406","2020-03-26 15:04:00","http://42.224.124.149:37253/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/330406/","Gandylyan1"
 "330405","2020-03-26 15:03:55","http://111.42.66.180:59816/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/330405/","Gandylyan1"
-"330404","2020-03-26 15:03:14","http://112.27.88.116:45642/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/330404/","Gandylyan1"
+"330404","2020-03-26 15:03:14","http://112.27.88.116:45642/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/330404/","Gandylyan1"
 "330403","2020-03-26 15:03:11","http://111.43.223.169:60635/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/330403/","Gandylyan1"
 "330402","2020-03-26 15:03:07","http://182.120.218.21:58301/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/330402/","Gandylyan1"
 "330401","2020-03-26 14:59:04","http://fibercemper.com/name.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/330401/","JayTHL"
@@ -28510,7 +28897,7 @@
 "326093","2020-03-17 18:03:04","http://45.79.110.132/admin201506/uploadApkFile/rt/20161125/lookupalldata2.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/326093/","zbetcheckin"
 "326092","2020-03-17 17:58:05","http://211.105.171.108:8097/.i","offline","malware_download","elf","https://urlhaus.abuse.ch/url/326092/","zbetcheckin"
 "326091","2020-03-17 17:43:34","http://typrer.com/qrpt.exe","offline","malware_download","Dridex,exe","https://urlhaus.abuse.ch/url/326091/","anonymous"
-"326090","2020-03-17 16:53:21","http://175.211.16.150:42907/.i","offline","malware_download","elf","https://urlhaus.abuse.ch/url/326090/","zbetcheckin"
+"326090","2020-03-17 16:53:21","http://175.211.16.150:42907/.i","online","malware_download","elf","https://urlhaus.abuse.ch/url/326090/","zbetcheckin"
 "326089","2020-03-17 16:39:13","https://pastebin.com/raw/av0gsDC5","offline","malware_download","meterpreter","https://urlhaus.abuse.ch/url/326089/","viql"
 "326088","2020-03-17 16:09:34","https://pastebin.com/raw/j5q8b6w8","offline","malware_download","meterpreter","https://urlhaus.abuse.ch/url/326088/","viql"
 "326087","2020-03-17 15:50:52","http://125.65.46.241:8080/chongfu.sh","offline","malware_download","None","https://urlhaus.abuse.ch/url/326087/","anonymous"
@@ -29008,7 +29395,7 @@
 "325594","2020-03-16 11:38:08","https://drive.google.com/uc?export=download&id=10nAXipyS351C7mC-hS7sn9JheZ6RzGhG","offline","malware_download","encrypted,Formbook,GuLoader","https://urlhaus.abuse.ch/url/325594/","abuse_ch"
 "325593","2020-03-16 10:52:05","https://pastebin.com/raw/i39ByD6y","offline","malware_download","meterpreter","https://urlhaus.abuse.ch/url/325593/","viql"
 "325592","2020-03-16 10:43:12","http://5.45.164.142:13507/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/325592/","zbetcheckin"
-"325591","2020-03-16 10:43:07","http://211.216.116.40:6702/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/325591/","zbetcheckin"
+"325591","2020-03-16 10:43:07","http://211.216.116.40:6702/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/325591/","zbetcheckin"
 "325590","2020-03-16 10:00:15","http://bakery365sawamura.website/soul.exe","offline","malware_download","exe,Gozi,ursnif","https://urlhaus.abuse.ch/url/325590/","abuse_ch"
 "325589","2020-03-16 09:55:16","https://drive.google.com/uc?id=1eRTPmoUTpVVU19aONDr-yo0-RNkG5l07&export=download","offline","malware_download","Gozi,js,password:7777,ursnif,zip","https://urlhaus.abuse.ch/url/325589/","abuse_ch"
 "325588","2020-03-16 09:41:03","http://185.163.45.101/bins/blxntz.arm5","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/325588/","zbetcheckin"
@@ -31021,7 +31408,7 @@
 "323572","2020-03-10 20:43:07","http://uzoclouds.eu/kelly/Kellly.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/323572/","zbetcheckin"
 "323571","2020-03-10 20:38:13","http://soft.114lk.com/down/dwgseepr@2345_7493.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/323571/","zbetcheckin"
 "323570","2020-03-10 20:27:16","http://24.165.41.55:55749/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/323570/","zbetcheckin"
-"323569","2020-03-10 20:27:11","http://222.113.138.43:27366/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/323569/","zbetcheckin"
+"323569","2020-03-10 20:27:11","http://222.113.138.43:27366/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/323569/","zbetcheckin"
 "323568","2020-03-10 20:27:06","http://213.14.150.36:59976/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/323568/","zbetcheckin"
 "323567","2020-03-10 20:14:03","https://pastebin.com/raw/tRKYLaw3","offline","malware_download","meterpreter","https://urlhaus.abuse.ch/url/323567/","viql"
 "323566","2020-03-10 19:55:41","https://drive.google.com/uc?id=1Fh2KjhZXoWpNdpebRj6wE_gTMIJSMQrs&export=download","offline","malware_download","Gozi,ursnif","https://urlhaus.abuse.ch/url/323566/","p5yb34m"
@@ -32540,7 +32927,7 @@
 "322049","2020-03-06 07:49:11","http://2.56.8.13/i586","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/322049/","zbetcheckin"
 "322048","2020-03-06 07:49:08","http://2.56.8.13/armv5l","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/322048/","zbetcheckin"
 "322047","2020-03-06 07:49:06","http://2.56.8.13/m68k","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/322047/","zbetcheckin"
-"322046","2020-03-06 07:49:04","http://91.226.253.227:13679/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/322046/","zbetcheckin"
+"322046","2020-03-06 07:49:04","http://91.226.253.227:13679/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/322046/","zbetcheckin"
 "322045","2020-03-06 07:33:05","https://pastebin.com/raw/LiRTncpa","offline","malware_download","meterpreter","https://urlhaus.abuse.ch/url/322045/","viql"
 "322044","2020-03-06 07:31:12","https://pastebin.com/raw/2acHNH97","offline","malware_download","meterpreter","https://urlhaus.abuse.ch/url/322044/","viql"
 "322043","2020-03-06 06:06:09","http://2.56.8.13/x86","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/322043/","zbetcheckin"
@@ -34158,7 +34545,7 @@
 "320424","2020-03-02 00:03:13","http://116.114.95.24:51460/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/320424/","Gandylyan1"
 "320423","2020-03-02 00:03:09","http://182.114.214.33:47653/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/320423/","Gandylyan1"
 "320422","2020-03-02 00:03:06","http://116.114.95.180:49066/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/320422/","Gandylyan1"
-"320421","2020-03-01 23:07:03","http://112.187.86.179:43651/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/320421/","zbetcheckin"
+"320421","2020-03-01 23:07:03","http://112.187.86.179:43651/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/320421/","zbetcheckin"
 "320420","2020-03-01 21:08:09","http://197.202.85.199:49574/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/320420/","Gandylyan1"
 "320419","2020-03-01 21:07:36","http://111.42.103.19:48358/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/320419/","Gandylyan1"
 "320418","2020-03-01 21:07:26","http://219.155.169.194:37411/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/320418/","Gandylyan1"
@@ -35315,7 +35702,7 @@
 "319256","2020-02-27 01:09:03","http://107.160.244.5/bins/c0r0n4x.ppc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/319256/","zbetcheckin"
 "319255","2020-02-27 01:03:02","http://107.160.244.5/bins/c0r0n4x.sh4","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/319255/","zbetcheckin"
 "319254","2020-02-27 00:41:04","https://www.ebeautytrade.com/yas15.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/319254/","zbetcheckin"
-"319253","2020-02-27 00:25:07","http://111.185.192.249:11838/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/319253/","zbetcheckin"
+"319253","2020-02-27 00:25:07","http://111.185.192.249:11838/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/319253/","zbetcheckin"
 "319252","2020-02-27 00:06:33","http://111.42.66.183:40400/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/319252/","Gandylyan1"
 "319251","2020-02-27 00:06:29","http://123.10.232.109:51676/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/319251/","Gandylyan1"
 "319250","2020-02-27 00:06:26","http://49.85.205.16:49749/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/319250/","Gandylyan1"
@@ -35355,7 +35742,7 @@
 "319215","2020-02-26 23:26:02","http://107.160.244.5/bins/c0r0n4x.arm","offline","malware_download","elf","https://urlhaus.abuse.ch/url/319215/","Gandylyan1"
 "319214","2020-02-26 23:12:04","https://pastebin.com/raw/ubttCLxY","offline","malware_download","PowerShellEmpire","https://urlhaus.abuse.ch/url/319214/","viql"
 "319213","2020-02-26 23:01:09","http://81.215.228.13:45677/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/319213/","zbetcheckin"
-"319212","2020-02-26 23:01:03","http://213.109.235.169:4226/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/319212/","zbetcheckin"
+"319212","2020-02-26 23:01:03","http://213.109.235.169:4226/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/319212/","zbetcheckin"
 "319211","2020-02-26 22:48:17","https://mebo.com.vn/wp-content/uploads/2020/02/fire/678335/678335.zip","offline","malware_download","vbs","https://urlhaus.abuse.ch/url/319211/","p5yb34m"
 "319210","2020-02-26 22:04:52","http://172.39.84.34:43251/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/319210/","Gandylyan1"
 "319209","2020-02-26 22:04:20","http://211.137.225.130:35359/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/319209/","Gandylyan1"
@@ -36455,7 +36842,7 @@
 "318113","2020-02-24 06:04:17","http://222.140.159.142:54437/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/318113/","Gandylyan1"
 "318112","2020-02-24 06:04:14","http://180.104.228.39:39198/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/318112/","Gandylyan1"
 "318111","2020-02-24 06:04:08","http://112.26.160.67:47151/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/318111/","Gandylyan1"
-"318110","2020-02-24 05:13:04","http://69.139.2.66:34152/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/318110/","zbetcheckin"
+"318110","2020-02-24 05:13:04","http://69.139.2.66:34152/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/318110/","zbetcheckin"
 "318109","2020-02-24 04:55:09","https://pastebin.com/raw/R5mfmMui","offline","malware_download","Encoded,exe,njRAT","https://urlhaus.abuse.ch/url/318109/","viql"
 "318108","2020-02-24 04:42:35","http://www.74.yhlg.com/uploadFile/2017/winrar.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/318108/","zbetcheckin"
 "318107","2020-02-24 04:04:45","http://121.224.240.138:54476/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/318107/","Gandylyan1"
@@ -39424,7 +39811,7 @@
 "315109","2020-02-17 00:04:15","http://106.87.82.10:60377/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/315109/","Gandylyan1"
 "315108","2020-02-17 00:04:10","http://49.89.233.77:42162/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/315108/","Gandylyan1"
 "315107","2020-02-17 00:04:06","http://218.21.171.236:51621/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/315107/","Gandylyan1"
-"315106","2020-02-16 23:06:06","http://1.11.132.252:34758/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/315106/","zbetcheckin"
+"315106","2020-02-16 23:06:06","http://1.11.132.252:34758/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/315106/","zbetcheckin"
 "315105","2020-02-16 22:38:06","http://116.241.94.251:31498/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/315105/","zbetcheckin"
 "315104","2020-02-16 22:33:05","http://209.141.53.115:8080/windows/svcout.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/315104/","zbetcheckin"
 "315103","2020-02-16 22:11:27","http://59.126.218.79:18454/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/315103/","zbetcheckin"
@@ -42095,8 +42482,8 @@
 "312436","2020-02-10 07:08:04","http://23.254.244.135/jig6","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/312436/","zbetcheckin"
 "312435","2020-02-10 06:51:03","http://107.189.10.150/E/oxxx.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/312435/","abuse_ch"
 "312434","2020-02-10 06:44:12","https://doc-08-3c-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/orvcbll3q84q5j4kiok62thuhjf92bci/1581316200000/16557134225519759104/*/1o02grE_79xzDCfbqVbJgMkIo6ZEl6BMA?e=download","offline","malware_download","encrypted","https://urlhaus.abuse.ch/url/312434/","abuse_ch"
-"312433","2020-02-10 06:44:09","http://1.246.222.69:2197/","offline","malware_download","None","https://urlhaus.abuse.ch/url/312433/","JayTHL"
-"312432","2020-02-10 06:44:05","http://1.246.222.69:2197/i","offline","malware_download","None","https://urlhaus.abuse.ch/url/312432/","JayTHL"
+"312433","2020-02-10 06:44:09","http://1.246.222.69:2197/","online","malware_download","None","https://urlhaus.abuse.ch/url/312433/","JayTHL"
+"312432","2020-02-10 06:44:05","http://1.246.222.69:2197/i","online","malware_download","None","https://urlhaus.abuse.ch/url/312432/","JayTHL"
 "312431","2020-02-10 06:43:05","https://bitbucket.org/rakabey761/cloud/downloads/setup_c.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/312431/","abuse_ch"
 "312430","2020-02-10 06:42:05","https://doc-00-50-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/5a2b9vah2e3pmotmqdqbtlnsk404fcpb/1581316200000/14316384358903770674/*/1ZRagEf6ACduls6roySQ2Jsh95HDw3E-Y?e=download","offline","malware_download","encrypted,Loki","https://urlhaus.abuse.ch/url/312430/","abuse_ch"
 "312429","2020-02-10 06:40:04","http://107.189.10.150/E/10327789.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/312429/","abuse_ch"
@@ -43894,7 +44281,7 @@
 "310631","2020-02-07 03:00:05","http://college-doc.ir/wp-admin/LLC/y94co7760477184947dqekjpua7xpz/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/310631/","Cryptolaemus1"
 "310630","2020-02-07 02:56:54","http://cp.zgkw.cn/calendar/attachments/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/310630/","spamhaus"
 "310629","2020-02-07 02:51:05","http://creationsbyannmarie.com/attachments/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/310629/","Cryptolaemus1"
-"310628","2020-02-07 02:47:08","http://cuacuonsieure.com/wp-content/LLC/r3zpuxa/zr8ru43550195958703319ix4o4vhvrohkkkx/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/310628/","spamhaus"
+"310628","2020-02-07 02:47:08","http://cuacuonsieure.com/wp-content/LLC/r3zpuxa/zr8ru43550195958703319ix4o4vhvrohkkkx/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/310628/","spamhaus"
 "310627","2020-02-07 02:42:04","http://daclim.ro/generator/LLC/s9mats2/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/310627/","spamhaus"
 "310626","2020-02-07 02:36:34","http://davidestates.in/wp-admin/paclm/okbagz5/0868530018558rk1jpjt8l13m06ew/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/310626/","Cryptolaemus1"
 "310625","2020-02-07 02:31:35","http://dayananda.sigma.websitestore.in/wp-includes/paclm/tvg36611/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/310625/","Cryptolaemus1"
@@ -44141,7 +44528,7 @@
 "310382","2020-02-06 20:48:08","http://palashpharrna.co.in/grace.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/310382/","zbetcheckin"
 "310381","2020-02-06 20:48:04","https://jadeyoga.ru/wp-includes/balance/o2r8k0zb/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/310381/","Cryptolaemus1"
 "310380","2020-02-06 20:45:06","http://rozstroy.uz/alyukobond/Reporting/c7024556103392088mvqkjgclwrnqjgaj/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/310380/","spamhaus"
-"310379","2020-02-06 20:44:32","http://futurodelasciudades.org/wp-content/uploads/yWN81/","online","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/310379/","Cryptolaemus1"
+"310379","2020-02-06 20:44:32","http://futurodelasciudades.org/wp-content/uploads/yWN81/","offline","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/310379/","Cryptolaemus1"
 "310378","2020-02-06 20:44:26","http://excellenceintegration.com/glpi_test/9Zn453/","offline","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/310378/","Cryptolaemus1"
 "310377","2020-02-06 20:44:13","http://futket.com/pokjbg746ihrtr/h3xPM8093/","offline","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/310377/","Cryptolaemus1"
 "310376","2020-02-06 20:43:57","http://geopinfactory.com/wp-includes/1SVLl9M4e/","offline","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/310376/","Cryptolaemus1"
@@ -44634,7 +45021,7 @@
 "309887","2020-02-06 09:04:51","http://182.127.184.218:37989/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/309887/","Gandylyan1"
 "309886","2020-02-06 09:04:48","http://113.25.43.71:47216/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/309886/","Gandylyan1"
 "309885","2020-02-06 09:04:44","http://123.10.25.39:52851/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/309885/","Gandylyan1"
-"309884","2020-02-06 09:04:39","http://186.73.188.132:59038/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/309884/","Gandylyan1"
+"309884","2020-02-06 09:04:39","http://186.73.188.132:59038/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/309884/","Gandylyan1"
 "309883","2020-02-06 09:04:16","http://49.70.10.213:53701/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/309883/","Gandylyan1"
 "309882","2020-02-06 09:04:12","http://111.42.66.151:51987/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/309882/","Gandylyan1"
 "309881","2020-02-06 09:04:08","http://111.43.223.97:58420/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/309881/","Gandylyan1"
@@ -44870,7 +45257,7 @@
 "309651","2020-02-06 04:02:47","http://189.159.148.128:1055/4","offline","malware_download","None","https://urlhaus.abuse.ch/url/309651/","JayTHL"
 "309650","2020-02-06 04:02:40","http://78.179.99.33:53967/4","offline","malware_download","None","https://urlhaus.abuse.ch/url/309650/","JayTHL"
 "309649","2020-02-06 04:02:34","http://27.113.39.60:20654/4","online","malware_download","None","https://urlhaus.abuse.ch/url/309649/","JayTHL"
-"309648","2020-02-06 04:02:28","http://93.119.205.159:10480/4","online","malware_download","None","https://urlhaus.abuse.ch/url/309648/","JayTHL"
+"309648","2020-02-06 04:02:28","http://93.119.205.159:10480/4","offline","malware_download","None","https://urlhaus.abuse.ch/url/309648/","JayTHL"
 "309647","2020-02-06 04:02:22","http://89.153.13.85:27863/4","offline","malware_download","None","https://urlhaus.abuse.ch/url/309647/","JayTHL"
 "309646","2020-02-06 04:02:19","http://92.114.165.35:52464/4","offline","malware_download","None","https://urlhaus.abuse.ch/url/309646/","JayTHL"
 "309645","2020-02-06 04:02:10","http://92.115.3.71:47188/4","offline","malware_download","None","https://urlhaus.abuse.ch/url/309645/","JayTHL"
@@ -46660,7 +47047,7 @@
 "307855","2020-02-04 11:00:38","https://drive.google.com/uc?id=1nAmpLZotYqyFBUcLOlyv5GGKQYzHXZ04&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307855/","anonymous"
 "307854","2020-02-04 11:00:27","https://drive.google.com/uc?id=1mpnu5Zu-pTE9-FgO-rTAX-dKBG7FSUUI&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307854/","anonymous"
 "307853","2020-02-04 11:00:19","https://drive.google.com/uc?id=1mnvfHotXsNHiHQmKAZD1FjGaRCBL5Ywz&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307853/","anonymous"
-"307852","2020-02-04 11:00:06","https://drive.google.com/uc?id=1mkGI8ClTDbpAXPeKvfUeBxBFZZqTEve1&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307852/","anonymous"
+"307852","2020-02-04 11:00:06","https://drive.google.com/uc?id=1mkGI8ClTDbpAXPeKvfUeBxBFZZqTEve1&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307852/","anonymous"
 "307851","2020-02-04 10:59:53","https://drive.google.com/uc?id=1mdKCZivvLCe9mFlfxNtulEAwIaAbc8o8&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307851/","anonymous"
 "307850","2020-02-04 10:59:42","https://drive.google.com/uc?id=1mMGQjEnqPbMcdfKJNyx_SZlSaVRDFbZ_&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307850/","anonymous"
 "307849","2020-02-04 10:59:33","https://drive.google.com/uc?id=1m7OgYIhNyG6wBlnCwwRHG9HohpscZX93&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307849/","anonymous"
@@ -46683,7 +47070,7 @@
 "307832","2020-02-04 10:56:41","https://drive.google.com/uc?id=1f1d3rde5hbGpubc2ovPffFUpgVfegqj9&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307832/","anonymous"
 "307831","2020-02-04 10:56:24","https://drive.google.com/uc?id=1eyNck6XwoLip0-T0le6EzjpojzTUPUXt&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307831/","anonymous"
 "307830","2020-02-04 10:56:13","https://drive.google.com/uc?id=1ex5iX5N7LQTfOrFz78eDdbopJMX7GUNU&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307830/","anonymous"
-"307829","2020-02-04 10:55:55","https://drive.google.com/uc?id=1er-HsVxQERfsHnK-TYAQWzE6_TO55yj-&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307829/","anonymous"
+"307829","2020-02-04 10:55:55","https://drive.google.com/uc?id=1er-HsVxQERfsHnK-TYAQWzE6_TO55yj-&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307829/","anonymous"
 "307828","2020-02-04 10:55:45","https://drive.google.com/uc?id=1emlap-VVjPLvplwk1BlUfZPCZmwDnIcR&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307828/","anonymous"
 "307827","2020-02-04 10:55:35","https://drive.google.com/uc?id=1eOzacxbxvlB9F9nInX3fdP8sjjlthi3W&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307827/","anonymous"
 "307826","2020-02-04 10:55:23","https://drive.google.com/uc?id=1e6XvEdBo9a1915xv4b5DQ8wWZZrLsCNc&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307826/","anonymous"
@@ -50228,7 +50615,7 @@
 "304272","2020-01-31 19:18:05","http://barreirofreddy.tv/bsms/LLC/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/304272/","Cryptolaemus1"
 "304271","2020-01-31 19:17:05","https://rendaprevi.com.br/wp-content/available-array/close-profile/H7BpTUOO-5aGrrNHvi8/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/304271/","Cryptolaemus1"
 "304270","2020-01-31 19:14:06","https://pastebin.com/raw/DYYxwYHC","offline","malware_download","None","https://urlhaus.abuse.ch/url/304270/","JayTHL"
-"304269","2020-01-31 19:14:04","http://ashoakacharya.com/wp-content/available-module/verifiable-e39tbx5u-gadx7z/l9of3-950uyx69t7z/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/304269/","spamhaus"
+"304269","2020-01-31 19:14:04","http://ashoakacharya.com/wp-content/available-module/verifiable-e39tbx5u-gadx7z/l9of3-950uyx69t7z/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/304269/","spamhaus"
 "304268","2020-01-31 19:08:06","http://rcsic.technocloudtech.com/jnzor/lm/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/304268/","spamhaus"
 "304267","2020-01-31 19:08:04","http://algomatreeservices.com/wp-includes/protected-module/interior-area/t5yiafe7uxhxi4-uuy27t734zzt9/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/304267/","Cryptolaemus1"
 "304266","2020-01-31 19:07:05","http://66.38.88.162:38607/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/304266/","Gandylyan1"
@@ -56136,7 +56523,7 @@
 "298339","2020-01-26 18:04:11","http://139.170.181.175:39530/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/298339/","Gandylyan1"
 "298338","2020-01-26 18:04:04","http://182.124.202.211:60015/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/298338/","Gandylyan1"
 "298337","2020-01-26 17:42:05","http://2.138.100.128:58879/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/298337/","zbetcheckin"
-"298336","2020-01-26 17:38:06","http://220.122.180.53:42695/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/298336/","zbetcheckin"
+"298336","2020-01-26 17:38:06","http://220.122.180.53:42695/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/298336/","zbetcheckin"
 "298335","2020-01-26 17:07:10","http://49.89.195.244:37900/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/298335/","Gandylyan1"
 "298334","2020-01-26 17:06:58","http://117.33.8.137:48372/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/298334/","Gandylyan1"
 "298333","2020-01-26 17:06:15","http://49.119.79.202:60995/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/298333/","Gandylyan1"
@@ -57459,7 +57846,7 @@
 "297012","2020-01-24 10:55:07","http://shafiu.mv/wp-admin/parts_service/8l0wtl1mury/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/297012/","Cryptolaemus1"
 "297011","2020-01-24 10:51:03","https://eliasevangelista.com.br/wp-content/attachments/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/297011/","spamhaus"
 "297010","2020-01-24 10:50:08","http://211.194.29.174:64104/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/297010/","zbetcheckin"
-"297009","2020-01-24 10:50:03","http://90.63.176.144:65202/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/297009/","zbetcheckin"
+"297009","2020-01-24 10:50:03","http://90.63.176.144:65202/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/297009/","zbetcheckin"
 "297008","2020-01-24 10:46:19","http://getmeinfo.online/ieqp/statement/y9bm3r9cjd/4hnsy-5842452114-2116-rqswk6xdtal-ofbhlepum/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/297008/","spamhaus"
 "297007","2020-01-24 10:45:35","http://urbandesigns.org/wp-admin/qu2acdk-6r4f2-1017/","offline","malware_download","doc,emotet,epoch3,heodo","https://urlhaus.abuse.ch/url/297007/","spamhaus"
 "297006","2020-01-24 10:43:36","http://klfolder.ml:1750/rechnung.exe","offline","malware_download","AZORult","https://urlhaus.abuse.ch/url/297006/","JAMESWT_MHT"
@@ -57877,7 +58264,7 @@
 "296594","2020-01-24 02:33:33","http://holidayhotel.com.vn/logs/Scan/21ot3u-80054-189897557-v86eiubncj5-15fwyy5e9/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/296594/","Cryptolaemus1"
 "296593","2020-01-24 02:32:03","https://pastebin.com/raw/vqm845tp","offline","malware_download","None","https://urlhaus.abuse.ch/url/296593/","JayTHL"
 "296592","2020-01-24 02:29:03","http://king-master.ir/wp-admin/docs/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/296592/","spamhaus"
-"296591","2020-01-24 02:27:05","https://blog.anytimeneeds.com/wp-content/d9-w7h-104509/","online","malware_download","doc,emotet,epoch3,heodo","https://urlhaus.abuse.ch/url/296591/","spamhaus"
+"296591","2020-01-24 02:27:05","https://blog.anytimeneeds.com/wp-content/d9-w7h-104509/","offline","malware_download","doc,emotet,epoch3,heodo","https://urlhaus.abuse.ch/url/296591/","spamhaus"
 "296590","2020-01-24 02:24:11","http://gk725.com/6dn/balance/x3p04af9p/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/296590/","spamhaus"
 "296589","2020-01-24 02:18:03","http://oceans-news.com/wp-admin/Reporting/0-0284026-83-aw6s1f-ph9niag6vl/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/296589/","Cryptolaemus1"
 "296588","2020-01-24 02:16:10","http://veghcaravan.hu/templates/PcF/","offline","malware_download","doc,emotet,epoch3,heodo","https://urlhaus.abuse.ch/url/296588/","Cryptolaemus1"
@@ -58932,7 +59319,7 @@
 "295536","2020-01-23 06:53:11","http://iqww.cn/calendar/DOC/18gsyd0-260-7194-vnldg1y8ki-mql22criy0n/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/295536/","spamhaus"
 "295535","2020-01-23 06:53:06","https://luatdongnamhai.vn/vendor/RSNeYBn/","offline","malware_download","doc,emotet,epoch3,heodo","https://urlhaus.abuse.ch/url/295535/","spamhaus"
 "295534","2020-01-23 06:48:07","http://emeraldbintaroapartement.com/wp-content/eTrac/4ly-791-258201-wotjrh8q-dajzv6ctx/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/295534/","spamhaus"
-"295533","2020-01-23 06:45:07","http://185.153.196.209/V2zZ","offline","malware_download","None","https://urlhaus.abuse.ch/url/295533/","abuse_ch"
+"295533","2020-01-23 06:45:07","http://185.153.196.209/V2zZ","online","malware_download","None","https://urlhaus.abuse.ch/url/295533/","abuse_ch"
 "295532","2020-01-23 06:44:08","https://baharanchap.ir/wp-content/statement/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/295532/","spamhaus"
 "295531","2020-01-23 06:43:08","http://209.141.59.245/gif/20138833.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/295531/","abuse_ch"
 "295530","2020-01-23 06:43:05","http://www.zingicg.com/fewigq/iZsxF/","offline","malware_download","doc,emotet,epoch3,heodo","https://urlhaus.abuse.ch/url/295530/","spamhaus"
@@ -60639,7 +61026,7 @@
 "293825","2020-01-21 17:21:08","http://learningroadmap.co.za/cli/protected_section/corporate_space/KEIg5_76cM73r89bG/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/293825/","Cryptolaemus1"
 "293824","2020-01-21 17:20:04","http://gella-2000.ru/tmp/td/","offline","malware_download","doc,emotet,epoch3,heodo","https://urlhaus.abuse.ch/url/293824/","spamhaus"
 "293823","2020-01-21 17:19:04","https://kitnalta-pharma.de/backup/balance/jt6tf-058160-62-e0cb86m8-3fy03qjw/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/293823/","spamhaus"
-"293822","2020-01-21 17:18:47","https://blog.anytimeneeds.com/wp-content/kc/","online","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/293822/","Cryptolaemus1"
+"293822","2020-01-21 17:18:47","https://blog.anytimeneeds.com/wp-content/kc/","offline","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/293822/","Cryptolaemus1"
 "293821","2020-01-21 17:18:42","https://behfarmer.com/wp-admin/yxFB5/","offline","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/293821/","Cryptolaemus1"
 "293820","2020-01-21 17:18:37","http://gk725.com/6dn/ekeh/","offline","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/293820/","Cryptolaemus1"
 "293819","2020-01-21 17:18:13","http://sewaseminar.djamscakes.com/wp/VwmLttEtdN/","offline","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/293819/","Cryptolaemus1"
@@ -63282,7 +63669,7 @@
 "291169","2020-01-17 19:04:08","http://117.207.36.76:45858/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/291169/","Gandylyan1"
 "291168","2020-01-17 19:04:05","https://sharevission.com/wp-content/statement/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/291168/","spamhaus"
 "291167","2020-01-17 19:02:03","http://masputra.site/wp-admin/PDLZLrcy/","offline","malware_download","doc,emotet,epoch3,heodo","https://urlhaus.abuse.ch/url/291167/","Cryptolaemus1"
-"291166","2020-01-17 18:58:10","http://141.226.94.115:29501/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/291166/","zbetcheckin"
+"291166","2020-01-17 18:58:10","http://141.226.94.115:29501/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/291166/","zbetcheckin"
 "291165","2020-01-17 18:58:08","http://109.66.108.57:36684/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/291165/","zbetcheckin"
 "291164","2020-01-17 18:58:05","https://edufoxconsultancy.000webhostapp.com/wp-admin/Document/r49led0454/cuey5jm-7404-9065188-webo1huom7v-1cle3l/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/291164/","spamhaus"
 "291163","2020-01-17 18:54:06","https://jack8.tk/test/Documentation/r-237407240-33542594-2yn1kereb-5264jl7jzu/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/291163/","spamhaus"
@@ -63925,7 +64312,7 @@
 "290526","2020-01-17 01:42:10","https://elntechnology.co.za/wordpress/closed-disk/corporate-area/j2po4sz-634t8-27241/","offline","malware_download","doc,emotet,epoch3,heodo","https://urlhaus.abuse.ch/url/290526/","Cryptolaemus1"
 "290525","2020-01-17 01:42:06","http://www.ftpftpftp.com/calendar/public/p4hsvhcrub/kg-9474-112895-st1aoi9cmy-seuhu6j66niv/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/290525/","Cryptolaemus1"
 "290524","2020-01-17 01:38:03","http://farsmix.com/wp-content/Overview/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/290524/","spamhaus"
-"290523","2020-01-17 01:33:21","http://thuong.bidiworks.com/wp-content/qq2-9q0-64671/","offline","malware_download","doc,emotet,epoch3,heodo","https://urlhaus.abuse.ch/url/290523/","spamhaus"
+"290523","2020-01-17 01:33:21","http://thuong.bidiworks.com/wp-content/qq2-9q0-64671/","online","malware_download","doc,emotet,epoch3,heodo","https://urlhaus.abuse.ch/url/290523/","spamhaus"
 "290522","2020-01-17 01:33:05","http://test-explorelanka.sensefeelit.com/calendar/esp/wrhaexov2wa/b7j-3592-26334-fmhwbnksz-lysinum8qsj/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/290522/","spamhaus"
 "290521","2020-01-17 01:28:10","http://ziyinshedege.com/wp-content/8QB14B5/liu6hn6sn8/mvvlms-54431-436519-amdxv-a1ueqrkkc/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/290521/","spamhaus"
 "290520","2020-01-17 01:23:08","http://am-concepts.ca/edithluc/wR/","offline","malware_download","doc,emotet,epoch3,heodo","https://urlhaus.abuse.ch/url/290520/","spamhaus"
@@ -65126,7 +65513,7 @@
 "289318","2020-01-15 19:06:04","http://roprostory.ru/wp-includes/payment/sm4-2492497420-13090938-1twsk8nobbu-vtjk4j3l/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/289318/","spamhaus"
 "289317","2020-01-15 19:04:55","http://124.67.89.76:35616/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/289317/","Gandylyan1"
 "289316","2020-01-15 19:04:51","http://216.57.119.17:50011/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/289316/","Gandylyan1"
-"289315","2020-01-15 19:04:18","http://176.113.161.67:48259/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/289315/","Gandylyan1"
+"289315","2020-01-15 19:04:18","http://176.113.161.67:48259/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/289315/","Gandylyan1"
 "289314","2020-01-15 19:04:16","http://182.112.34.167:42118/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/289314/","Gandylyan1"
 "289313","2020-01-15 19:04:12","http://123.10.144.188:43120/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/289313/","Gandylyan1"
 "289312","2020-01-15 19:04:09","http://115.209.244.1:37803/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/289312/","Gandylyan1"
@@ -65854,7 +66241,7 @@
 "288566","2020-01-14 22:19:46","http://luilao.com/yakattack/EmXdYs3Rf/","offline","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/288566/","Cryptolaemus1"
 "288565","2020-01-14 22:19:42","http://ziyinshedege.com/wp-content/TIGc/","offline","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/288565/","Cryptolaemus1"
 "288564","2020-01-14 22:19:33","https://securiteordi.com/wofk253jeksed/QO485/","offline","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/288564/","Cryptolaemus1"
-"288563","2020-01-14 22:19:28","http://thuong.bidiworks.com/wp-content/q2TO1988/","offline","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/288563/","Cryptolaemus1"
+"288563","2020-01-14 22:19:28","http://thuong.bidiworks.com/wp-content/q2TO1988/","online","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/288563/","Cryptolaemus1"
 "288562","2020-01-14 22:19:03","http://farsmix.com/wp-admin/xpk881/","offline","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/288562/","Cryptolaemus1"
 "288561","2020-01-14 22:17:05","https://faisal.mydimi.com/wordpress/open_043364_SQplRA/81481387405_osef2KHkyR1KT4D_forum/WxzGkjjvO_d7ufHk5qKss/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/288561/","Cryptolaemus1"
 "288559","2020-01-14 22:12:05","http://elevateducation.agreatidea.studio/wp-admin/open-array/0450114048-fk6bW5saxX0g2-77ffgdz-g17/acjtgnw5uf8uz-y07t/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/288559/","Cryptolaemus1"
@@ -70204,7 +70591,7 @@
 "284153","2020-01-08 13:03:16","http://117.93.95.113:47250/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/284153/","Gandylyan1"
 "284152","2020-01-08 13:03:12","http://119.1.80.134:58496/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/284152/","Gandylyan1"
 "284151","2020-01-08 13:03:09","http://203.189.75.181:49267/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/284151/","Gandylyan1"
-"284150","2020-01-08 13:03:06","http://176.113.161.45:45399/Mozi.m","online","malware_download","elf","https://urlhaus.abuse.ch/url/284150/","Gandylyan1"
+"284150","2020-01-08 13:03:06","http://176.113.161.45:45399/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/284150/","Gandylyan1"
 "284149","2020-01-08 13:03:04","http://111.42.102.83:53569/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/284149/","Gandylyan1"
 "284148","2020-01-08 12:45:33","https://pastebin.com/raw/XfLCaG2h","offline","malware_download","None","https://urlhaus.abuse.ch/url/284148/","JayTHL"
 "284147","2020-01-08 12:32:14","http://lineaoutlet.com/app/Http/Sec/ema.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/284147/","zbetcheckin"
@@ -70568,7 +70955,7 @@
 "283789","2020-01-07 14:04:06","http://180.118.255.125:37372/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/283789/","Gandylyan1"
 "283788","2020-01-07 13:42:35","https://pastebin.com/raw/FUmPxLse","offline","malware_download","None","https://urlhaus.abuse.ch/url/283788/","JayTHL"
 "283787","2020-01-07 13:29:09","https://bitbucket.org/discovercircle/2020/downloads/setup_c.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/283787/","abuse_ch"
-"283786","2020-01-07 13:23:42","http://www.87du.vip/svchast.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/283786/","Marco_Ramilli"
+"283786","2020-01-07 13:23:42","http://www.87du.vip/svchast.exe","online","malware_download","None","https://urlhaus.abuse.ch/url/283786/","Marco_Ramilli"
 "283785","2020-01-07 13:03:21","http://59.95.39.36:44856/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/283785/","Gandylyan1"
 "283784","2020-01-07 13:03:19","http://111.42.66.42:40159/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/283784/","Gandylyan1"
 "283783","2020-01-07 13:03:15","http://175.214.73.136:58263/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/283783/","Gandylyan1"
@@ -70826,7 +71213,7 @@
 "283526","2020-01-06 19:23:04","https://storage.googleapis.com/portalnfeletronica/NFeletronica03012020.zip","offline","malware_download","Banload,zip","https://urlhaus.abuse.ch/url/283526/","abuse_ch"
 "283525","2020-01-06 19:05:43","http://116.114.95.52:34143/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/283525/","Gandylyan1"
 "283524","2020-01-06 19:05:40","http://121.233.0.200:48493/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/283524/","Gandylyan1"
-"283523","2020-01-06 19:05:37","http://176.113.161.87:45399/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/283523/","Gandylyan1"
+"283523","2020-01-06 19:05:37","http://176.113.161.87:45399/Mozi.m","online","malware_download","elf","https://urlhaus.abuse.ch/url/283523/","Gandylyan1"
 "283522","2020-01-06 19:05:35","http://222.74.186.176:44479/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/283522/","Gandylyan1"
 "283521","2020-01-06 19:05:31","http://171.95.23.229:38602/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/283521/","Gandylyan1"
 "283520","2020-01-06 19:05:28","http://177.67.163.176:41394/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/283520/","Gandylyan1"
@@ -72398,7 +72785,7 @@
 "281946","2020-01-02 11:29:42","http://115.62.24.103:54215/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/281946/","Gandylyan1"
 "281945","2020-01-02 11:29:38","http://221.210.211.130:56581/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/281945/","Gandylyan1"
 "281944","2020-01-02 11:29:34","http://106.110.149.44:34246/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/281944/","Gandylyan1"
-"281943","2020-01-02 11:29:02","http://176.113.161.111:44031/Mozi.m","online","malware_download","elf","https://urlhaus.abuse.ch/url/281943/","Gandylyan1"
+"281943","2020-01-02 11:29:02","http://176.113.161.111:44031/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/281943/","Gandylyan1"
 "281942","2020-01-02 11:29:00","http://175.214.73.132:40631/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/281942/","Gandylyan1"
 "281941","2020-01-02 11:28:58","http://111.43.223.131:49820/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/281941/","Gandylyan1"
 "281940","2020-01-02 11:28:50","http://111.42.66.145:57697/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/281940/","Gandylyan1"
@@ -72717,10 +73104,10 @@
 "281624","2019-12-31 23:33:06","http://luckytriumph.com/file.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/281624/","zbetcheckin"
 "281623","2019-12-31 23:29:02","https://pastebin.com/raw/asWe7Bj7","offline","malware_download","None","https://urlhaus.abuse.ch/url/281623/","JayTHL"
 "281622","2019-12-31 23:25:11","http://luckytriumph.com/major.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/281622/","zbetcheckin"
-"281621","2019-12-31 23:25:07","http://luckytriumph.com/pato.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/281621/","zbetcheckin"
+"281621","2019-12-31 23:25:07","http://luckytriumph.com/pato.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/281621/","zbetcheckin"
 "281620","2019-12-31 22:06:04","https://pastebin.com/raw/asgx33Ly","offline","malware_download","None","https://urlhaus.abuse.ch/url/281620/","JayTHL"
 "281619","2019-12-31 21:02:12","https://www.luckytriumph.com/file.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/281619/","zbetcheckin"
-"281618","2019-12-31 21:02:06","https://www.luckytriumph.com/pato.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/281618/","zbetcheckin"
+"281618","2019-12-31 21:02:06","https://www.luckytriumph.com/pato.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/281618/","zbetcheckin"
 "281617","2019-12-31 20:42:03","https://pastebin.com/raw/70jFTt5H","offline","malware_download","None","https://urlhaus.abuse.ch/url/281617/","JayTHL"
 "281616","2019-12-31 18:17:12","http://radiotvappp.online/radiotvap.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/281616/","abuse_ch"
 "281615","2019-12-31 17:53:12","https://bitbucket.org/thanhighway/go/downloads/setup_c.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/281615/","abuse_ch"
@@ -73073,7 +73460,7 @@
 "281268","2019-12-30 16:05:10","http://111.42.102.68:49473/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/281268/","Gandylyan1"
 "281267","2019-12-30 16:05:07","http://31.146.124.109:39825/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/281267/","Gandylyan1"
 "281266","2019-12-30 16:05:04","http://49.70.78.4:39255/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/281266/","Gandylyan1"
-"281265","2019-12-30 16:04:32","http://1.246.223.6:1064/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/281265/","Gandylyan1"
+"281265","2019-12-30 16:04:32","http://1.246.223.6:1064/Mozi.m","online","malware_download","elf","https://urlhaus.abuse.ch/url/281265/","Gandylyan1"
 "281264","2019-12-30 16:04:28","http://114.226.64.246:60434/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/281264/","Gandylyan1"
 "281263","2019-12-30 16:04:24","http://176.113.161.41:55702/Mozi.m","online","malware_download","elf","https://urlhaus.abuse.ch/url/281263/","Gandylyan1"
 "281262","2019-12-30 16:04:22","http://120.68.217.132:40380/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/281262/","Gandylyan1"
@@ -73086,7 +73473,7 @@
 "281255","2019-12-30 15:07:24","http://177.125.37.156:55738/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/281255/","Gandylyan1"
 "281254","2019-12-30 15:07:20","http://172.36.14.110:40347/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/281254/","Gandylyan1"
 "281253","2019-12-30 15:06:49","http://222.187.165.245:45162/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/281253/","Gandylyan1"
-"281252","2019-12-30 15:06:14","http://1.246.223.127:1893/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/281252/","Gandylyan1"
+"281252","2019-12-30 15:06:14","http://1.246.223.127:1893/Mozi.m","online","malware_download","elf","https://urlhaus.abuse.ch/url/281252/","Gandylyan1"
 "281251","2019-12-30 15:06:06","http://180.124.26.83:57590/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/281251/","Gandylyan1"
 "281250","2019-12-30 14:40:42","http://117.207.214.77:41816/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/281250/","Gandylyan1"
 "281249","2019-12-30 14:40:39","http://117.195.55.160:33778/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/281249/","Gandylyan1"
@@ -74126,7 +74513,7 @@
 "280214","2019-12-27 16:32:37","https://pastebin.com/raw/vV7sFQWP","offline","malware_download","None","https://urlhaus.abuse.ch/url/280214/","JayTHL"
 "280213","2019-12-27 16:31:56","https://pastebin.com/raw/hDBga4sM","offline","malware_download","None","https://urlhaus.abuse.ch/url/280213/","JayTHL"
 "280212","2019-12-27 16:15:20","https://pastebin.com/raw/fKD6JMxr","offline","malware_download","CobaltStrike,powershell","https://urlhaus.abuse.ch/url/280212/","abuse_ch"
-"280211","2019-12-27 15:14:06","http://myonlinepokiesblog.com/license.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/280211/","abuse_ch"
+"280211","2019-12-27 15:14:06","http://myonlinepokiesblog.com/license.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/280211/","abuse_ch"
 "280210","2019-12-27 15:13:03","http://centre-de-conduite-roannais.com/wp-content/uploads/2019/12/last/444444.png","offline","malware_download","exe,geofenced,qbot,Quakbot,USA","https://urlhaus.abuse.ch/url/280210/","anonymous"
 "280209","2019-12-27 15:12:15","https://re365.com/wp-content/uploads/2019/12/last/85944289/85944289.zip","offline","malware_download","geofenced,qbot,USA,vbs,zip","https://urlhaus.abuse.ch/url/280209/","anonymous"
 "280208","2019-12-27 15:12:07","https://re365.com/wp-content/uploads/2019/12/last/00021920.zip","offline","malware_download","geofenced,qbot,USA,vbs,zip","https://urlhaus.abuse.ch/url/280208/","anonymous"
@@ -74273,7 +74660,7 @@
 "280067","2019-12-27 11:04:50","http://115.204.210.115:57529/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/280067/","Gandylyan1"
 "280066","2019-12-27 11:04:44","http://49.82.242.29:40524/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/280066/","Gandylyan1"
 "280065","2019-12-27 11:04:16","http://111.42.66.30:42056/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/280065/","Gandylyan1"
-"280064","2019-12-27 11:04:12","http://176.113.161.67:55702/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/280064/","Gandylyan1"
+"280064","2019-12-27 11:04:12","http://176.113.161.67:55702/Mozi.m","online","malware_download","elf","https://urlhaus.abuse.ch/url/280064/","Gandylyan1"
 "280063","2019-12-27 11:04:11","http://211.137.225.130:37675/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/280063/","Gandylyan1"
 "280062","2019-12-27 11:04:07","http://45.175.173.221:57822/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/280062/","Gandylyan1"
 "280061","2019-12-27 11:04:04","http://182.113.68.61:50040/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/280061/","Gandylyan1"
@@ -75076,26 +75463,26 @@
 "279263","2019-12-26 23:33:53","https://dev.sebpo.net/aiim/Scan79064.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279263/","anonymous"
 "279262","2019-12-26 23:33:50","https://dev.sebpo.net/aiim/Scan794626.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279262/","anonymous"
 "279261","2019-12-26 23:33:47","https://dev.sebpo.net/aiim/Scan787778.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279261/","anonymous"
-"279260","2019-12-26 23:33:44","http://visagepk.com/Scan620141.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279260/","anonymous"
-"279259","2019-12-26 23:33:41","http://ultimatelamborghiniexperience.com/Scan519714.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279259/","anonymous"
+"279260","2019-12-26 23:33:44","http://visagepk.com/Scan620141.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279260/","anonymous"
+"279259","2019-12-26 23:33:41","http://ultimatelamborghiniexperience.com/Scan519714.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279259/","anonymous"
 "279258","2019-12-26 23:33:39","http://ultimatelamborghiniexperience.com/Scan516977.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279258/","anonymous"
 "279257","2019-12-26 23:33:38","http://ultimatelamborghiniexperience.com/Scan514529.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279257/","anonymous"
 "279256","2019-12-26 23:33:35","http://www.zoeydeutchweb.com/Scan719307.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279256/","anonymous"
 "279255","2019-12-26 23:33:33","http://www.zoeydeutchweb.com/Scan693492.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279255/","anonymous"
-"279254","2019-12-26 23:33:32","http://www.zoeydeutchweb.com/Scan681933.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279254/","anonymous"
+"279254","2019-12-26 23:33:32","http://www.zoeydeutchweb.com/Scan681933.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279254/","anonymous"
 "279253","2019-12-26 23:33:30","http://www.wbkmt.com/Scan568515.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279253/","anonymous"
 "279252","2019-12-26 23:33:28","http://www.wbkmt.com/Scan567495.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279252/","anonymous"
 "279251","2019-12-26 23:33:26","http://www.wbkmt.com/Scan544303.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279251/","anonymous"
 "279250","2019-12-26 23:33:24","http://www.voyantvision.net/Scan674251.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279250/","anonymous"
 "279249","2019-12-26 23:33:21","http://www.voyantvision.net/Scan647166.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279249/","anonymous"
 "279248","2019-12-26 23:33:18","http://www.vasoccernews.com/Scan53937.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279248/","anonymous"
-"279247","2019-12-26 23:33:17","http://www.vasoccernews.com/Scan538882.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279247/","anonymous"
-"279246","2019-12-26 23:33:15","http://www.vasoccernews.com/Scan537263.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279246/","anonymous"
+"279247","2019-12-26 23:33:17","http://www.vasoccernews.com/Scan538882.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279247/","anonymous"
+"279246","2019-12-26 23:33:15","http://www.vasoccernews.com/Scan537263.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279246/","anonymous"
 "279245","2019-12-26 23:33:13","http://www.urgentmessage.org/Scan618358.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279245/","anonymous"
 "279244","2019-12-26 23:33:11","http://www.urgentmessage.org/Scan592993.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279244/","anonymous"
-"279243","2019-12-26 23:33:08","http://www.ultimatepointsstore.com/Scan582389.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279243/","anonymous"
+"279243","2019-12-26 23:33:08","http://www.ultimatepointsstore.com/Scan582389.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279243/","anonymous"
 "279242","2019-12-26 23:33:06","http://www.ultimatepointsstore.com/Scan580348.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279242/","anonymous"
-"279241","2019-12-26 23:33:05","http://www.ultimatepointsstore.com/Scan570071.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279241/","anonymous"
+"279241","2019-12-26 23:33:05","http://www.ultimatepointsstore.com/Scan570071.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279241/","anonymous"
 "279240","2019-12-26 23:33:02","http://www.louisbenton.com/Scan178377.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279240/","anonymous"
 "279239","2019-12-26 23:33:00","http://www.louisbenton.com/Scan175069.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279239/","anonymous"
 "279238","2019-12-26 23:32:58","http://www.lincolnaward.org/Scan358362.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279238/","anonymous"
@@ -75104,7 +75491,7 @@
 "279235","2019-12-26 23:32:43","http://www.lebedyn.info/Scan422674.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279235/","anonymous"
 "279234","2019-12-26 23:32:41","http://www.lebedyn.info/Scan425768.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279234/","anonymous"
 "279233","2019-12-26 23:32:39","http://www.lebedyn.info/Scan425026.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279233/","anonymous"
-"279232","2019-12-26 23:32:37","http://www.intoxicated-twilight.com/Scan272806.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279232/","anonymous"
+"279232","2019-12-26 23:32:37","http://www.intoxicated-twilight.com/Scan272806.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279232/","anonymous"
 "279231","2019-12-26 23:32:35","http://www.intoxicated-twilight.com/Scan253297.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279231/","anonymous"
 "279230","2019-12-26 23:32:33","http://www.ibr-mag.com/Scan343596.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279230/","anonymous"
 "279229","2019-12-26 23:32:31","http://www.ibr-mag.com/Scan341615.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279229/","anonymous"
@@ -75112,9 +75499,9 @@
 "279227","2019-12-26 23:32:25","http://www.hdxa.net/Scan151567.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279227/","anonymous"
 "279226","2019-12-26 23:32:14","http://www.hatcityblues.com/Scan304154.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279226/","anonymous"
 "279225","2019-12-26 23:32:11","http://www.hatcityblues.com/Scan296093.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279225/","anonymous"
-"279224","2019-12-26 23:32:07","http://www.halcat.com/Scan186323.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279224/","anonymous"
+"279224","2019-12-26 23:32:07","http://www.halcat.com/Scan186323.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279224/","anonymous"
 "279223","2019-12-26 23:32:05","http://www.halcat.com/Scan181058.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279223/","anonymous"
-"279222","2019-12-26 23:32:03","http://www.hyvat-olutravintolat.fi/Scan243857.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279222/","anonymous"
+"279222","2019-12-26 23:32:03","http://www.hyvat-olutravintolat.fi/Scan243857.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279222/","anonymous"
 "279221","2019-12-26 23:31:45","http://www.hyvat-olutravintolat.fi/Scan235829.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279221/","anonymous"
 "279220","2019-12-26 23:31:43","http://www.hyvat-olutravintolat.fi/Scan214369.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279220/","anonymous"
 "279219","2019-12-26 23:31:41","http://www.cftamiami.com/Scan86489.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279219/","anonymous"
@@ -75142,12 +75529,12 @@
 "279197","2019-12-26 23:30:40","http://myhood.cl/Scan495082.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279197/","anonymous"
 "279196","2019-12-26 23:30:37","http://mediamatkat.fi/Scan470798.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279196/","anonymous"
 "279195","2019-12-26 23:30:32","http://mediamatkat.fi/Scan468654.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279195/","anonymous"
-"279194","2019-12-26 23:30:29","http://mediamatkat.fi/Scan457405.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279194/","anonymous"
+"279194","2019-12-26 23:30:29","http://mediamatkat.fi/Scan457405.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279194/","anonymous"
 "279193","2019-12-26 23:30:26","http://lobstermentours.com/Scan37712.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279193/","anonymous"
 "279192","2019-12-26 23:30:23","http://lobstermentours.com/Scan363358.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279192/","anonymous"
-"279191","2019-12-26 23:30:19","http://jyv.fi/Scan320062.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279191/","anonymous"
+"279191","2019-12-26 23:30:19","http://jyv.fi/Scan320062.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279191/","anonymous"
 "279190","2019-12-26 23:30:16","http://jyv.fi/Scan315318.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279190/","anonymous"
-"279189","2019-12-26 23:30:13","http://jyv.fi/Scan312111.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279189/","anonymous"
+"279189","2019-12-26 23:30:13","http://jyv.fi/Scan312111.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279189/","anonymous"
 "279188","2019-12-26 23:30:10","http://jarilindholm.com/Scan340839.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279188/","anonymous"
 "279187","2019-12-26 23:30:01","http://jarilindholm.com/Scan326716.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279187/","anonymous"
 "279186","2019-12-26 23:29:57","http://in-sect.com/Scan287519.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279186/","anonymous"
@@ -75221,7 +75608,7 @@
 "279118","2019-12-26 20:43:36","http://124.118.236.249:34163/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/279118/","Gandylyan1"
 "279117","2019-12-26 20:43:32","http://36.96.204.44:60231/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/279117/","Gandylyan1"
 "279116","2019-12-26 20:43:27","http://218.93.56.49:39546/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/279116/","Gandylyan1"
-"279115","2019-12-26 20:43:08","http://176.113.161.91:44031/Mozi.m","online","malware_download","elf","https://urlhaus.abuse.ch/url/279115/","Gandylyan1"
+"279115","2019-12-26 20:43:08","http://176.113.161.91:44031/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/279115/","Gandylyan1"
 "279114","2019-12-26 20:43:06","http://117.207.44.19:42586/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/279114/","Gandylyan1"
 "279113","2019-12-26 20:43:03","http://112.214.122.145:39784/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/279113/","Gandylyan1"
 "279112","2019-12-26 19:29:04","https://pastebin.com/raw/Yuf5c5Vx","offline","malware_download","None","https://urlhaus.abuse.ch/url/279112/","JayTHL"
@@ -77439,7 +77826,7 @@
 "276594","2019-12-25 03:16:14","http://111.42.66.52:53451/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/276594/","Gandylyan1"
 "276593","2019-12-25 03:16:06","http://117.241.248.160:50223/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/276593/","Gandylyan1"
 "276592","2019-12-25 03:16:03","http://111.43.223.20:54265/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/276592/","Gandylyan1"
-"276591","2019-12-25 03:15:53","http://176.113.161.133:44031/Mozi.m","online","malware_download","elf","https://urlhaus.abuse.ch/url/276591/","Gandylyan1"
+"276591","2019-12-25 03:15:53","http://176.113.161.133:44031/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/276591/","Gandylyan1"
 "276590","2019-12-25 03:15:51","http://122.116.242.179:34245/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/276590/","Gandylyan1"
 "276589","2019-12-25 03:15:50","http://115.206.45.60:39989/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/276589/","Gandylyan1"
 "276588","2019-12-25 03:15:44","http://1.246.222.113:4235/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/276588/","Gandylyan1"
@@ -78557,7 +78944,7 @@
 "275468","2019-12-22 15:09:13","http://61.2.176.249:52652/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/275468/","Gandylyan1"
 "275467","2019-12-22 15:09:11","http://176.113.161.93:37965/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/275467/","Gandylyan1"
 "275466","2019-12-22 15:09:10","http://111.42.102.65:45047/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/275466/","Gandylyan1"
-"275465","2019-12-22 15:09:05","http://1.246.222.41:3798/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/275465/","Gandylyan1"
+"275465","2019-12-22 15:09:05","http://1.246.222.41:3798/Mozi.m","online","malware_download","elf","https://urlhaus.abuse.ch/url/275465/","Gandylyan1"
 "275464","2019-12-22 15:09:00","http://106.110.90.185:57503/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/275464/","Gandylyan1"
 "275463","2019-12-22 15:08:28","http://117.95.48.48:60506/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/275463/","Gandylyan1"
 "275462","2019-12-22 15:07:56","http://172.39.31.106:45470/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/275462/","Gandylyan1"
@@ -79352,7 +79739,7 @@
 "274673","2019-12-21 07:04:31","http://116.114.95.236:60303/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/274673/","Gandylyan1"
 "274672","2019-12-21 07:04:28","http://221.210.211.18:51947/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/274672/","Gandylyan1"
 "274671","2019-12-21 07:04:24","http://117.199.41.124:34006/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/274671/","Gandylyan1"
-"274670","2019-12-21 07:03:53","http://1.246.222.4:2683/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/274670/","Gandylyan1"
+"274670","2019-12-21 07:03:53","http://1.246.222.4:2683/Mozi.m","online","malware_download","elf","https://urlhaus.abuse.ch/url/274670/","Gandylyan1"
 "274669","2019-12-21 07:03:47","http://112.17.78.163:57836/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/274669/","Gandylyan1"
 "274668","2019-12-21 07:03:26","http://180.104.58.4:40016/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/274668/","Gandylyan1"
 "274667","2019-12-21 07:03:20","http://223.93.157.244:41807/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/274667/","Gandylyan1"
@@ -79779,7 +80166,7 @@
 "274245","2019-12-20 14:35:38","http://113.138.151.107:60191/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/274245/","Gandylyan1"
 "274244","2019-12-20 14:35:26","http://58.217.64.52:37827/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/274244/","Gandylyan1"
 "274243","2019-12-20 14:35:22","http://211.137.225.83:47548/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/274243/","Gandylyan1"
-"274242","2019-12-20 14:35:10","http://1.246.222.69:2197/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/274242/","Gandylyan1"
+"274242","2019-12-20 14:35:10","http://1.246.222.69:2197/Mozi.m","online","malware_download","elf","https://urlhaus.abuse.ch/url/274242/","Gandylyan1"
 "274241","2019-12-20 14:35:05","http://117.251.2.135:52704/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/274241/","Gandylyan1"
 "274240","2019-12-20 14:34:34","http://111.42.67.72:38053/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/274240/","Gandylyan1"
 "274239","2019-12-20 14:34:24","http://171.127.44.108:43148/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/274239/","Gandylyan1"
@@ -80282,7 +80669,7 @@
 "273740","2019-12-20 07:34:52","http://116.114.95.168:60959/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/273740/","Gandylyan1"
 "273739","2019-12-20 07:34:49","http://111.42.66.24:55190/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/273739/","Gandylyan1"
 "273738","2019-12-20 07:34:41","http://27.22.230.221:39187/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/273738/","Gandylyan1"
-"273737","2019-12-20 07:34:34","http://176.113.161.136:60133/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/273737/","Gandylyan1"
+"273737","2019-12-20 07:34:34","http://176.113.161.136:60133/Mozi.m","online","malware_download","elf","https://urlhaus.abuse.ch/url/273737/","Gandylyan1"
 "273736","2019-12-20 07:34:02","http://176.113.161.72:50651/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/273736/","Gandylyan1"
 "273735","2019-12-20 07:34:00","http://111.42.103.28:32779/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/273735/","Gandylyan1"
 "273734","2019-12-20 07:33:53","http://115.55.123.56:52543/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/273734/","Gandylyan1"
@@ -80325,7 +80712,7 @@
 "273697","2019-12-20 07:27:50","http://60.162.199.115:40669/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/273697/","Gandylyan1"
 "273696","2019-12-20 07:27:46","http://113.134.132.110:33449/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/273696/","Gandylyan1"
 "273695","2019-12-20 07:27:43","http://222.246.228.185:56944/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/273695/","Gandylyan1"
-"273694","2019-12-20 07:27:39","http://176.113.161.119:44031/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/273694/","Gandylyan1"
+"273694","2019-12-20 07:27:39","http://176.113.161.119:44031/Mozi.m","online","malware_download","elf","https://urlhaus.abuse.ch/url/273694/","Gandylyan1"
 "273693","2019-12-20 07:27:37","http://172.36.40.105:38963/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/273693/","Gandylyan1"
 "273692","2019-12-20 07:27:05","http://14.205.199.253:38992/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/273692/","Gandylyan1"
 "273691","2019-12-20 07:27:00","http://222.138.165.176:51555/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/273691/","Gandylyan1"
@@ -82033,7 +82420,7 @@
 "271974","2019-12-18 19:12:07","http://soulignac.net/error/multifunctional-sector/verified-8tk-6qwkeqyf0q/exilxbv3rmg-4w1z80t69x5us/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/271974/","Cryptolaemus1"
 "271973","2019-12-18 19:12:05","http://sportz.co.jp/smih/RRsytdH/","offline","malware_download","doc,emotet,epoch3,heodo","https://urlhaus.abuse.ch/url/271973/","spamhaus"
 "271972","2019-12-18 19:10:03","https://pastebin.com/raw/4KEmrSdu","offline","malware_download","None","https://urlhaus.abuse.ch/url/271972/","JayTHL"
-"271971","2019-12-18 19:07:06","http://steelbuildings.com/Cloud/open-resource/external-ajcxenzsbq9ewa-hg3fvow5tfc/eztbkxqb0tc1jvh-116s81xts/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/271971/","Cryptolaemus1"
+"271971","2019-12-18 19:07:06","http://steelbuildings.com/Cloud/open-resource/external-ajcxenzsbq9ewa-hg3fvow5tfc/eztbkxqb0tc1jvh-116s81xts/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/271971/","Cryptolaemus1"
 "271970","2019-12-18 19:07:02","http://stipech.com.ar/cache/FILE/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/271970/","Cryptolaemus1"
 "271969","2019-12-18 19:03:09","http://techintersystems.com/cgi-bin/FILE/ukafpuef/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/271969/","Cryptolaemus1"
 "271968","2019-12-18 19:02:10","http://stuartherring.com/awstatsicons/DsmW/","offline","malware_download","doc,emotet,epoch3,heodo","https://urlhaus.abuse.ch/url/271968/","Cryptolaemus1"
@@ -85931,7 +86318,7 @@
 "268015","2019-12-13 01:16:04","http://elaboro.pl/imgs/OCT/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/268015/","spamhaus"
 "268014","2019-12-13 01:11:05","http://funkessentials.com.au/cgi-bin/TZy/","offline","malware_download","doc,emotet,epoch3,heodo","https://urlhaus.abuse.ch/url/268014/","spamhaus"
 "268013","2019-12-13 01:11:02","http://epicguru.co.uk/cgi-bin/OCT/6gmjgtu6q-03827405-824379190-qa4ec6qy-ayveqtm7/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/268013/","spamhaus"
-"268012","2019-12-13 01:08:06","http://energisegroup.com/images/esp/1lcdds8jgw/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/268012/","spamhaus"
+"268012","2019-12-13 01:08:06","http://energisegroup.com/images/esp/1lcdds8jgw/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/268012/","spamhaus"
 "268011","2019-12-13 01:04:03","http://expo300.com/ruth/docs/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/268011/","spamhaus"
 "268010","2019-12-13 01:02:04","http://f-plast.pl/pub/fj0s-i984g-470112/","offline","malware_download","doc,emotet,epoch3,heodo","https://urlhaus.abuse.ch/url/268010/","spamhaus"
 "268009","2019-12-13 01:01:42","http://evolvingfaith.org/cgi-bin/Overview/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/268009/","spamhaus"
@@ -86030,7 +86417,7 @@
 "267916","2019-12-12 22:13:37","https://www.maruay99.com/wp-admin/private_module/corporate_space/66710039541_MKbaR7ehGjPW1MHk/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/267916/","Cryptolaemus1"
 "267915","2019-12-12 22:13:30","http://abm-jsc.ru/backup__/closed_92468726_CyVAE9q3d/verified_space/qbpovbv2q8_1v9s/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/267915/","Cryptolaemus1"
 "267914","2019-12-12 22:13:25","http://ninthwave.us/physics/wp-content/uploads/JmVg_ZCybZb1E_box/test_cloud/892920_845l8t5w58v/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/267914/","Cryptolaemus1"
-"267913","2019-12-12 22:13:15","http://oknoplastik.sk/index_soubory/common_sector/external_area/61551354147_t4d0KY73JJyWFfGY/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/267913/","Cryptolaemus1"
+"267913","2019-12-12 22:13:15","http://oknoplastik.sk/index_soubory/common_sector/external_area/61551354147_t4d0KY73JJyWFfGY/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/267913/","Cryptolaemus1"
 "267912","2019-12-12 22:13:02","https://sahilpanindre.000webhostapp.com/wp-admin/available-sector/individual-forum/oqAGLdoga2H-vdwdvn3s58rKJu/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/267912/","Cryptolaemus1"
 "267911","2019-12-12 22:12:46","http://arterihealth.id/wp-includes/private-935670-rdi4P4dw7pkUrw/2da3h6y0vnoo1-eia-space/50685921510-cIuiuKt2eMdk/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/267911/","Cryptolaemus1"
 "267910","2019-12-12 22:12:08","http://ds-al.er42.org/error/ttqxWV/","offline","malware_download","doc,emotet,epoch3,heodo","https://urlhaus.abuse.ch/url/267910/","spamhaus"
@@ -101093,7 +101480,7 @@
 "251967","2019-11-06 09:38:49","http://gun.com/wp-content/uploads/2019/09/fct.php","offline","malware_download","CZE,doc,Dreambot","https://urlhaus.abuse.ch/url/251967/","anonymous"
 "251966","2019-11-06 09:38:47","http://guard-your-health.com/wp-content/uploads/2019/09/fct.php","offline","malware_download","CZE,doc,Dreambot","https://urlhaus.abuse.ch/url/251966/","anonymous"
 "251965","2019-11-06 09:38:42","http://genpactdigital.digitalmilesgroup.com/wp-content/uploads/2019/08/fct.php","offline","malware_download","CZE,doc,Dreambot,Gozi","https://urlhaus.abuse.ch/url/251965/","anonymous"
-"251964","2019-11-06 09:38:40","http://depgrup.com/wp-content/uploads/2019/08/fct.php","offline","malware_download","CZE,doc,Dreambot,emotet,heodo","https://urlhaus.abuse.ch/url/251964/","anonymous"
+"251964","2019-11-06 09:38:40","http://depgrup.com/wp-content/uploads/2019/08/fct.php","online","malware_download","CZE,doc,Dreambot,emotet,heodo","https://urlhaus.abuse.ch/url/251964/","anonymous"
 "251963","2019-11-06 09:38:07","http://deleogun.com/wp-content/uploads/2019/09/fct.php","offline","malware_download","CZE,doc,Dreambot","https://urlhaus.abuse.ch/url/251963/","anonymous"
 "251962","2019-11-06 09:38:05","http://columbuslease2ownhomes.com/fct.php","offline","malware_download","CZE,doc,Dreambot,Gozi","https://urlhaus.abuse.ch/url/251962/","anonymous"
 "251960","2019-11-06 08:07:07","http://uzojesse.top/pressplay/pressplay.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/251960/","cocaman"
@@ -107158,7 +107545,7 @@
 "245429","2019-10-16 07:07:07","http://scan.switchnets.net/b/okosu.arm5","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/245429/","0xrb"
 "245428","2019-10-16 07:07:04","http://scan.switchnets.net/b/okosu.arm","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/245428/","0xrb"
 "245427","2019-10-16 07:05:13","http://www.psynchro.org/wp-content/cache/meta/xl/","offline","malware_download","downloader,js,zip","https://urlhaus.abuse.ch/url/245427/","oppimaniac"
-"245426","2019-10-16 07:05:06","https://hfsoftware.cl/wp-content/themes/flatsome/woocommerce/back-comp/cart/xl/","offline","malware_download","downloader,js,zip","https://urlhaus.abuse.ch/url/245426/","oppimaniac"
+"245426","2019-10-16 07:05:06","https://hfsoftware.cl/wp-content/themes/flatsome/woocommerce/back-comp/cart/xl/","online","malware_download","downloader,js,zip","https://urlhaus.abuse.ch/url/245426/","oppimaniac"
 "245425","2019-10-16 07:03:24","http://complaintboardonline.com/wp-admin/qekr3925/","offline","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/245425/","abuse_ch"
 "245424","2019-10-16 07:03:19","https://naturerepublickh.com/test/wvvqa9","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/245424/","abuse_ch"
 "245423","2019-10-16 07:03:14","https://watonlight.com/wp-admin/wa31628/","offline","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/245423/","abuse_ch"
@@ -109031,7 +109418,7 @@
 "243458","2019-10-10 22:42:49","http://36.85.21.96:19934/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/243458/","Petras_Simeon"
 "243457","2019-10-10 22:42:42","http://36.84.108.181:17115/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/243457/","Petras_Simeon"
 "243456","2019-10-10 22:42:34","http://36.75.212.88:53250/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/243456/","Petras_Simeon"
-"243455","2019-10-10 22:42:27","http://36.67.152.163:65239/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/243455/","Petras_Simeon"
+"243455","2019-10-10 22:42:27","http://36.67.152.163:65239/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/243455/","Petras_Simeon"
 "243454","2019-10-10 22:42:19","http://222.124.177.152:59846/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/243454/","Petras_Simeon"
 "243453","2019-10-10 22:42:13","http://218.35.198.109:15748/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/243453/","Petras_Simeon"
 "243452","2019-10-10 22:42:07","http://2.183.111.24:8453/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/243452/","Petras_Simeon"
@@ -109317,7 +109704,7 @@
 "243166","2019-10-10 16:57:39","http://201.49.228.251:57267/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/243166/","Petras_Simeon"
 "243165","2019-10-10 16:57:32","http://201.42.33.196:24602/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/243165/","Petras_Simeon"
 "243164","2019-10-10 16:57:24","http://192.81.217.59/zehir/z3hir.x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/243164/","0xrb"
-"243163","2019-10-10 16:57:22","http://196.32.106.85:31039/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/243163/","Petras_Simeon"
+"243163","2019-10-10 16:57:22","http://196.32.106.85:31039/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/243163/","Petras_Simeon"
 "243162","2019-10-10 16:57:16","http://194.53.179.237:62240/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/243162/","Petras_Simeon"
 "243161","2019-10-10 16:57:11","http://189.78.192.166:1529/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/243161/","Petras_Simeon"
 "243160","2019-10-10 16:57:06","http://189.176.68.26:37325/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/243160/","Petras_Simeon"
@@ -109774,7 +110161,7 @@
 "242679","2019-10-10 10:03:34","http://187.56.141.48:24323/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242679/","Petras_Simeon"
 "242678","2019-10-10 10:03:28","http://187.11.29.27:22164/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242678/","Petras_Simeon"
 "242677","2019-10-10 10:03:22","http://186.192.24.29:4839/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242677/","Petras_Simeon"
-"242676","2019-10-10 10:03:17","http://185.14.250.199:38520/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242676/","Petras_Simeon"
+"242676","2019-10-10 10:03:17","http://185.14.250.199:38520/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/242676/","Petras_Simeon"
 "242675","2019-10-10 10:03:13","http://182.119.69.224:44526/i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242675/","Petras_Simeon"
 "242674","2019-10-10 10:02:32","http://178.34.183.30:34796/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/242674/","Petras_Simeon"
 "242673","2019-10-10 10:02:28","http://159.146.31.210:47993/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242673/","Petras_Simeon"
@@ -110161,7 +110548,7 @@
 "242291","2019-10-09 19:52:10","http://187.35.13.175:33316/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242291/","Petras_Simeon"
 "242290","2019-10-09 19:51:27","http://177.130.46.26:46105/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242290/","Petras_Simeon"
 "242289","2019-10-09 19:51:20","http://177.102.127.154:2313/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242289/","Petras_Simeon"
-"242288","2019-10-09 19:51:13","http://163.47.145.202:30616/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242288/","Petras_Simeon"
+"242288","2019-10-09 19:51:13","http://163.47.145.202:30616/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/242288/","Petras_Simeon"
 "242287","2019-10-09 19:51:07","http://143.255.1.198:20164/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242287/","Petras_Simeon"
 "242286","2019-10-09 19:50:55","http://130.43.124.213:36441/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242286/","Petras_Simeon"
 "242285","2019-10-09 19:50:48","http://128.65.152.225:16647/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242285/","Petras_Simeon"
@@ -110326,7 +110713,7 @@
 "242126","2019-10-09 17:27:13","http://177.94.161.115:53168/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242126/","Petras_Simeon"
 "242125","2019-10-09 17:27:06","http://168.195.228.246:11783/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242125/","Petras_Simeon"
 "242124","2019-10-09 17:26:16","http://103.253.181.74:29308/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242124/","Petras_Simeon"
-"242123","2019-10-09 17:26:10","http://103.247.217.147:43057/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242123/","Petras_Simeon"
+"242123","2019-10-09 17:26:10","http://103.247.217.147:43057/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/242123/","Petras_Simeon"
 "242122","2019-10-09 17:26:05","http://103.135.38.175:18897/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242122/","Petras_Simeon"
 "242121","2019-10-09 17:09:09","http://167.71.64.141/yfbg/out-1369462999.hta","offline","malware_download","None","https://urlhaus.abuse.ch/url/242121/","JayTHL"
 "242120","2019-10-09 17:09:07","http://167.71.64.141/yfbg/out-834610808.hta","offline","malware_download","None","https://urlhaus.abuse.ch/url/242120/","JayTHL"
@@ -110428,7 +110815,7 @@
 "242024","2019-10-09 16:21:09","http://billboardstoday.com/browser/3kwuoqci23nt4hvu2v12c_e4a4a00xu-72996516/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/242024/","zbetcheckin"
 "242023","2019-10-09 16:21:06","http://championsifm.com/qvotoxy/DOC/wryNTTLZ/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/242023/","zbetcheckin"
 "242022","2019-10-09 16:21:04","http://cricview.in/block.function/paclm/5nt1xc4nk2mdm4jze2_tb1b44a59n-0908762582969/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/242022/","zbetcheckin"
-"242021","2019-10-09 16:19:13","http://41.79.234.90:8234/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/242021/","Petras_Simeon"
+"242021","2019-10-09 16:19:13","http://41.79.234.90:8234/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242021/","Petras_Simeon"
 "242020","2019-10-09 16:18:05","http://45.127.220.129:51427/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242020/","Petras_Simeon"
 "242019","2019-10-09 16:17:06","http://65.255.148.106:43527/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242019/","Petras_Simeon"
 "242018","2019-10-09 16:16:56","http://45.221.78.166:8973/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/242018/","Petras_Simeon"
@@ -110606,7 +110993,7 @@
 "241846","2019-10-09 14:34:25","http://201.93.70.136:29556/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/241846/","Petras_Simeon"
 "241845","2019-10-09 14:34:01","http://201.103.89.230:36932/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/241845/","Petras_Simeon"
 "241844","2019-10-09 14:33:49","http://191.254.98.46:56795/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/241844/","Petras_Simeon"
-"241843","2019-10-09 14:33:42","http://191.253.24.14:56632/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/241843/","Petras_Simeon"
+"241843","2019-10-09 14:33:42","http://191.253.24.14:56632/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/241843/","Petras_Simeon"
 "241842","2019-10-09 14:33:34","http://190.128.135.130:53002/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/241842/","Petras_Simeon"
 "241841","2019-10-09 14:33:22","http://190.103.31.142:34470/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/241841/","Petras_Simeon"
 "241840","2019-10-09 14:33:17","http://189.69.78.76:38031/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/241840/","Petras_Simeon"
@@ -111887,7 +112274,7 @@
 "240556","2019-10-07 06:39:24","http://78.189.167.112:15802/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240556/","Petras_Simeon"
 "240555","2019-10-07 06:39:18","http://78.186.15.210:30728/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240555/","Petras_Simeon"
 "240554","2019-10-07 06:39:14","http://78.158.170.145:13545/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240554/","Petras_Simeon"
-"240553","2019-10-07 06:39:09","http://77.89.203.238:23915/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240553/","Petras_Simeon"
+"240553","2019-10-07 06:39:09","http://77.89.203.238:23915/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/240553/","Petras_Simeon"
 "240552","2019-10-07 06:39:05","http://5.160.212.95:12026/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240552/","Petras_Simeon"
 "240551","2019-10-07 06:38:40","http://76.10.188.16:2955/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240551/","Petras_Simeon"
 "240550","2019-10-07 06:38:34","http://71.42.105.34:48823/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240550/","Petras_Simeon"
@@ -111934,7 +112321,7 @@
 "240509","2019-10-07 06:33:20","http://191.205.225.93:30374/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240509/","Petras_Simeon"
 "240508","2019-10-07 06:33:11","http://191.17.16.55:43274/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240508/","Petras_Simeon"
 "240507","2019-10-07 06:32:55","http://191.17.163.236:29422/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240507/","Petras_Simeon"
-"240506","2019-10-07 06:32:39","http://190.92.4.231:50099/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/240506/","Petras_Simeon"
+"240506","2019-10-07 06:32:39","http://190.92.4.231:50099/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240506/","Petras_Simeon"
 "240505","2019-10-07 06:32:28","http://190.104.213.52:28545/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240505/","Petras_Simeon"
 "240504","2019-10-07 06:32:22","http://189.78.95.83:2800/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240504/","Petras_Simeon"
 "240503","2019-10-07 06:32:13","http://189.69.37.159:60582/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240503/","Petras_Simeon"
@@ -112014,11 +112401,11 @@
 "240429","2019-10-07 05:26:09","http://95.234.68.89:63748/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240429/","Petras_Simeon"
 "240428","2019-10-07 05:26:04","http://95.231.116.118:4210/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/240428/","Petras_Simeon"
 "240427","2019-10-07 05:25:57","http://95.172.45.30:43703/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240427/","Petras_Simeon"
-"240426","2019-10-07 05:25:53","http://95.170.113.227:32493/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/240426/","Petras_Simeon"
+"240426","2019-10-07 05:25:53","http://95.170.113.227:32493/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240426/","Petras_Simeon"
 "240425","2019-10-07 05:25:48","http://95.167.138.250:49992/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/240425/","Petras_Simeon"
 "240424","2019-10-07 05:25:44","http://95.161.150.22:58921/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240424/","Petras_Simeon"
 "240423","2019-10-07 05:25:39","http://95.142.184.132:42708/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240423/","Petras_Simeon"
-"240422","2019-10-07 05:25:32","http://95.132.129.250:1029/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/240422/","Petras_Simeon"
+"240422","2019-10-07 05:25:32","http://95.132.129.250:1029/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240422/","Petras_Simeon"
 "240421","2019-10-07 05:25:26","http://94.38.209.114:20923/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240421/","Petras_Simeon"
 "240420","2019-10-07 05:25:20","http://94.243.24.138:3368/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240420/","Petras_Simeon"
 "240419","2019-10-07 05:25:15","http://94.243.20.148:39321/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240419/","Petras_Simeon"
@@ -112075,7 +112462,7 @@
 "240368","2019-10-07 05:20:21","http://85.104.38.87:21997/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240368/","Petras_Simeon"
 "240367","2019-10-07 05:20:16","http://85.100.32.114:62731/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240367/","Petras_Simeon"
 "240366","2019-10-07 05:20:11","http://84.79.61.182:40246/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240366/","Petras_Simeon"
-"240365","2019-10-07 05:20:06","http://83.234.147.99:24412/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240365/","Petras_Simeon"
+"240365","2019-10-07 05:20:06","http://83.234.147.99:24412/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/240365/","Petras_Simeon"
 "240364","2019-10-07 05:19:06","http://jppost-ji.com/jppost.apk","offline","malware_download","None","https://urlhaus.abuse.ch/url/240364/","JayTHL"
 "240363","2019-10-07 05:18:28","http://83.209.212.21:63684/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240363/","Petras_Simeon"
 "240362","2019-10-07 05:18:23","http://82.211.156.38:47941/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/240362/","Petras_Simeon"
@@ -112148,7 +112535,7 @@
 "240295","2019-10-07 05:09:11","http://45.170.222.135:30557/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240295/","Petras_Simeon"
 "240294","2019-10-07 05:09:03","http://45.165.15.252:34331/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240294/","Petras_Simeon"
 "240293","2019-10-07 05:08:52","http://45.132.200.12:17567/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240293/","Petras_Simeon"
-"240292","2019-10-07 05:08:42","http://45.115.254.154:14279/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/240292/","Petras_Simeon"
+"240292","2019-10-07 05:08:42","http://45.115.254.154:14279/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240292/","Petras_Simeon"
 "240291","2019-10-07 05:08:35","http://45.115.253.82:3755/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/240291/","Petras_Simeon"
 "240290","2019-10-07 05:08:24","http://45.114.68.156:60077/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/240290/","Petras_Simeon"
 "240289","2019-10-07 05:08:11","http://45.114.182.82:47052/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240289/","Petras_Simeon"
@@ -112178,7 +112565,7 @@
 "240265","2019-10-07 05:03:06","http://37.17.21.242:39911/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/240265/","Petras_Simeon"
 "240264","2019-10-07 05:02:58","http://36.91.90.171:62797/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/240264/","Petras_Simeon"
 "240263","2019-10-07 05:02:41","http://36.89.218.3:18614/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240263/","Petras_Simeon"
-"240262","2019-10-07 05:02:27","http://36.89.18.133:63529/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/240262/","Petras_Simeon"
+"240262","2019-10-07 05:02:27","http://36.89.18.133:63529/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240262/","Petras_Simeon"
 "240261","2019-10-07 05:02:11","http://36.89.108.17:59356/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240261/","Petras_Simeon"
 "240260","2019-10-07 05:01:00","http://36.81.140.242:30354/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240260/","Petras_Simeon"
 "240259","2019-10-07 05:00:47","http://36.67.47.179:35379/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240259/","Petras_Simeon"
@@ -112221,7 +112608,7 @@
 "240222","2019-10-07 04:56:28","http://212.126.125.226:64726/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/240222/","Petras_Simeon"
 "240221","2019-10-07 04:56:25","http://212.107.238.191:12685/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240221/","Petras_Simeon"
 "240220","2019-10-07 04:56:20","http://212.106.159.124:57242/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/240220/","Petras_Simeon"
-"240219","2019-10-07 04:56:15","http://208.163.58.18:20912/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240219/","Petras_Simeon"
+"240219","2019-10-07 04:56:15","http://208.163.58.18:20912/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/240219/","Petras_Simeon"
 "240218","2019-10-07 04:56:11","http://206.248.136.6:44434/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240218/","Petras_Simeon"
 "240217","2019-10-07 04:56:08","http://206.201.0.41:49736/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240217/","Petras_Simeon"
 "240216","2019-10-07 04:56:02","http://203.80.171.149:36958/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/240216/","Petras_Simeon"
@@ -112402,9 +112789,9 @@
 "240041","2019-10-07 04:24:50","http://178.93.22.181:11905/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240041/","Petras_Simeon"
 "240040","2019-10-07 04:24:46","http://178.212.54.200:18789/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/240040/","Petras_Simeon"
 "240039","2019-10-07 04:24:41","http://178.210.129.150:10910/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240039/","Petras_Simeon"
-"240038","2019-10-07 04:24:36","http://178.165.122.141:17685/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/240038/","Petras_Simeon"
+"240038","2019-10-07 04:24:36","http://178.165.122.141:17685/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240038/","Petras_Simeon"
 "240037","2019-10-07 04:24:33","http://178.156.64.52:63080/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240037/","Petras_Simeon"
-"240036","2019-10-07 04:24:29","http://178.151.143.2:21623/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240036/","Petras_Simeon"
+"240036","2019-10-07 04:24:29","http://178.151.143.2:21623/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/240036/","Petras_Simeon"
 "240035","2019-10-07 04:24:23","http://178.150.54.4:36982/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240035/","Petras_Simeon"
 "240034","2019-10-07 04:24:19","http://178.136.195.90:37020/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/240034/","Petras_Simeon"
 "240033","2019-10-07 04:24:13","http://177.95.76.97:38821/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240033/","Petras_Simeon"
@@ -112415,7 +112802,7 @@
 "240028","2019-10-07 04:23:13","http://177.68.101.23:52493/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240028/","Petras_Simeon"
 "240027","2019-10-07 04:23:07","http://177.53.106.18:42677/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240027/","Petras_Simeon"
 "240026","2019-10-07 04:23:00","http://177.45.212.125:41078/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240026/","Petras_Simeon"
-"240025","2019-10-07 04:22:54","http://177.38.176.22:4407/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/240025/","Petras_Simeon"
+"240025","2019-10-07 04:22:54","http://177.38.176.22:4407/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240025/","Petras_Simeon"
 "240024","2019-10-07 04:22:47","http://177.36.244.83:37438/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240024/","Petras_Simeon"
 "240023","2019-10-07 04:22:40","http://177.241.245.218:32785/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240023/","Petras_Simeon"
 "240022","2019-10-07 04:22:33","http://177.223.58.33:21843/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240022/","Petras_Simeon"
@@ -112427,7 +112814,7 @@
 "240016","2019-10-07 04:21:57","http://177.134.243.37:64273/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240016/","Petras_Simeon"
 "240015","2019-10-07 04:21:53","http://177.130.42.31:63033/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240015/","Petras_Simeon"
 "240014","2019-10-07 04:21:47","http://177.126.193.88:5922/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240014/","Petras_Simeon"
-"240013","2019-10-07 04:21:40","http://177.125.227.85:9730/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/240013/","Petras_Simeon"
+"240013","2019-10-07 04:21:40","http://177.125.227.85:9730/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240013/","Petras_Simeon"
 "240012","2019-10-07 04:21:34","http://177.11.85.64:8487/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240012/","Petras_Simeon"
 "240011","2019-10-07 04:21:29","http://177.11.237.103:23963/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240011/","Petras_Simeon"
 "240010","2019-10-07 04:21:22","http://177.11.138.42:36307/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240010/","Petras_Simeon"
@@ -112463,7 +112850,7 @@
 "239980","2019-10-07 04:17:27","http://1.55.241.76:10774/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239980/","Petras_Simeon"
 "239979","2019-10-07 04:17:16","http://154.72.95.242:22688/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239979/","Petras_Simeon"
 "239978","2019-10-07 04:17:13","http://154.72.92.206:27074/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239978/","Petras_Simeon"
-"239977","2019-10-07 04:17:07","http://154.126.178.16:30629/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239977/","Petras_Simeon"
+"239977","2019-10-07 04:17:07","http://154.126.178.16:30629/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/239977/","Petras_Simeon"
 "239976","2019-10-07 04:17:00","http://152.249.135.172:63651/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239976/","Petras_Simeon"
 "239975","2019-10-07 04:16:54","http://152.173.25.125:26123/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239975/","Petras_Simeon"
 "239974","2019-10-07 04:16:48","http://151.235.232.86:49970/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239974/","Petras_Simeon"
@@ -112747,7 +113134,7 @@
 "239696","2019-10-06 11:27:54","http://94.74.189.162:24117/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239696/","Petras_Simeon"
 "239695","2019-10-06 11:27:48","http://94.154.82.190:26596/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/239695/","Petras_Simeon"
 "239694","2019-10-06 11:27:43","http://79.42.167.61:10469/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239694/","Petras_Simeon"
-"239693","2019-10-06 11:27:37","http://62.69.241.72:35641/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239693/","Petras_Simeon"
+"239693","2019-10-06 11:27:37","http://62.69.241.72:35641/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/239693/","Petras_Simeon"
 "239692","2019-10-06 11:27:33","http://5.236.170.251:52212/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239692/","Petras_Simeon"
 "239691","2019-10-06 11:27:26","http://37.6.178.118:14987/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239691/","Petras_Simeon"
 "239690","2019-10-06 11:27:21","http://203.202.245.77:64580/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/239690/","Petras_Simeon"
@@ -112768,7 +113155,7 @@
 "239675","2019-10-06 11:23:53","http://93.126.47.235:57746/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239675/","Petras_Simeon"
 "239674","2019-10-06 11:23:47","http://93.117.30.225:62647/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239674/","Petras_Simeon"
 "239673","2019-10-06 11:23:37","http://92.241.143.9:12136/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239673/","Petras_Simeon"
-"239672","2019-10-06 11:23:33","http://91.221.177.94:6373/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239672/","Petras_Simeon"
+"239672","2019-10-06 11:23:33","http://91.221.177.94:6373/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/239672/","Petras_Simeon"
 "239671","2019-10-06 11:23:27","http://91.191.32.34:1480/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/239671/","Petras_Simeon"
 "239670","2019-10-06 11:23:23","http://89.168.181.210:53488/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239670/","Petras_Simeon"
 "239669","2019-10-06 11:23:18","http://89.165.110.157:46986/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239669/","Petras_Simeon"
@@ -112851,7 +113238,7 @@
 "239592","2019-10-06 11:10:03","http://www.orchardim.com/l7jbnx3/8c4wlk9s-ba0cr0sy-94564/","offline","malware_download","emotet,epoch3,exe","https://urlhaus.abuse.ch/url/239592/","Cryptolaemus1"
 "239591","2019-10-06 11:09:32","http://123.200.4.142:23764/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239591/","Petras_Simeon"
 "239590","2019-10-06 11:09:13","http://www.yesemtechnologies.com/css/xwxpjbj9z_zlrjt-71894126/","offline","malware_download","emotet,epoch2,exe","https://urlhaus.abuse.ch/url/239590/","Cryptolaemus1"
-"239589","2019-10-06 11:09:10","http://120.29.81.99:26777/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/239589/","Petras_Simeon"
+"239589","2019-10-06 11:09:10","http://120.29.81.99:26777/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239589/","Petras_Simeon"
 "239588","2019-10-06 11:09:03","http://119.252.171.222:56115/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239588/","Petras_Simeon"
 "239587","2019-10-06 11:08:58","https://thangmaychauau.com.vn/aj1xahh/dpTONdwm/","offline","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/239587/","Cryptolaemus1"
 "239586","2019-10-06 11:08:54","http://tutoriaenvivo.estudioovalle.com.ar/wp-content/gosPgvApQ/","offline","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/239586/","Cryptolaemus1"
@@ -113213,7 +113600,7 @@
 "239229","2019-10-06 07:21:04","http://31.148.120.121:30286/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/239229/","Petras_Simeon"
 "239228","2019-10-06 07:20:59","http://24.135.239.98:22456/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/239228/","Petras_Simeon"
 "239227","2019-10-06 07:20:55","http://203.115.102.243:16200/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/239227/","Petras_Simeon"
-"239226","2019-10-06 07:20:51","http://202.79.46.30:57770/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/239226/","Petras_Simeon"
+"239226","2019-10-06 07:20:51","http://202.79.46.30:57770/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/239226/","Petras_Simeon"
 "239225","2019-10-06 07:20:46","http://202.159.123.66:19084/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/239225/","Petras_Simeon"
 "239224","2019-10-06 07:20:41","http://201.27.56.103:17301/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/239224/","Petras_Simeon"
 "239223","2019-10-06 07:20:09","http://201.1.15.166:14014/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/239223/","Petras_Simeon"
@@ -113280,7 +113667,7 @@
 "239162","2019-10-06 07:09:30","http://95.47.63.206:23241/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/239162/","Petras_Simeon"
 "239161","2019-10-06 07:09:21","http://95.38.172.9:56519/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/239161/","Petras_Simeon"
 "239160","2019-10-06 07:09:09","http://95.233.56.62:1729/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/239160/","Petras_Simeon"
-"239159","2019-10-06 07:08:55","http://95.167.71.245:43343/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/239159/","Petras_Simeon"
+"239159","2019-10-06 07:08:55","http://95.167.71.245:43343/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/239159/","Petras_Simeon"
 "239158","2019-10-06 07:08:51","http://95.106.245.203:7069/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/239158/","Petras_Simeon"
 "239157","2019-10-06 07:08:43","http://95.106.130.244:6685/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/239157/","Petras_Simeon"
 "239156","2019-10-06 07:08:38","http://94.39.209.146:58975/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/239156/","Petras_Simeon"
@@ -113447,7 +113834,7 @@
 "238994","2019-10-06 06:46:54","http://213.142.25.139:10510/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238994/","Petras_Simeon"
 "238993","2019-10-06 06:46:49","http://212.216.124.145:25559/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238993/","Petras_Simeon"
 "238992","2019-10-06 06:46:43","http://209.45.49.177:5105/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238992/","Petras_Simeon"
-"238991","2019-10-06 06:46:38","http://203.82.36.34:5944/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238991/","Petras_Simeon"
+"238991","2019-10-06 06:46:38","http://203.82.36.34:5944/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238991/","Petras_Simeon"
 "238990","2019-10-06 06:46:30","http://203.202.243.233:5479/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238990/","Petras_Simeon"
 "238989","2019-10-06 06:46:26","http://203.129.254.50:37024/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238989/","Petras_Simeon"
 "238988","2019-10-06 06:46:22","http://203.112.79.66:21628/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238988/","Petras_Simeon"
@@ -113643,7 +114030,7 @@
 "238794","2019-10-06 06:15:10","http://105.216.14.79:44384/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238794/","Petras_Simeon"
 "238793","2019-10-06 06:15:05","http://103.90.206.125:42761/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238793/","Petras_Simeon"
 "238792","2019-10-06 06:15:03","http://103.84.130.111:59876/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238792/","Petras_Simeon"
-"238791","2019-10-06 06:15:01","http://103.79.112.254:65533/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238791/","Petras_Simeon"
+"238791","2019-10-06 06:15:01","http://103.79.112.254:65533/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238791/","Petras_Simeon"
 "238790","2019-10-06 06:14:56","http://103.58.95.128:41246/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238790/","Petras_Simeon"
 "238789","2019-10-06 06:14:51","http://103.58.248.113:49788/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238789/","Petras_Simeon"
 "238788","2019-10-06 06:14:46","http://103.47.169.76:32250/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238788/","Petras_Simeon"
@@ -113700,7 +114087,7 @@
 "238726","2019-10-06 06:02:41","http://197.255.218.83:2179/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238726/","Petras_Simeon"
 "238725","2019-10-06 06:02:35","http://193.86.186.162:56645/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238725/","Petras_Simeon"
 "238720","2019-10-06 06:00:24","http://190.57.193.238:4275/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238720/","Petras_Simeon"
-"238719","2019-10-06 06:00:12","http://190.110.161.252:22693/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238719/","Petras_Simeon"
+"238719","2019-10-06 06:00:12","http://190.110.161.252:22693/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238719/","Petras_Simeon"
 "238716","2019-10-06 05:58:57","http://187.74.139.94:32879/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238716/","Petras_Simeon"
 "238714","2019-10-06 05:58:19","http://187.35.245.118:64328/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238714/","Petras_Simeon"
 "238713","2019-10-06 05:58:13","http://187.109.50.195:51675/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238713/","Petras_Simeon"
@@ -113709,7 +114096,7 @@
 "238710","2019-10-06 05:57:57","http://181.143.70.194:54917/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238710/","Petras_Simeon"
 "238709","2019-10-06 05:57:50","http://181.129.140.26:42878/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238709/","Petras_Simeon"
 "238708","2019-10-06 05:57:44","http://181.114.101.85:30173/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238708/","Petras_Simeon"
-"238705","2019-10-06 05:56:35","http://179.60.84.7:38467/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238705/","Petras_Simeon"
+"238705","2019-10-06 05:56:35","http://179.60.84.7:38467/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238705/","Petras_Simeon"
 "238704","2019-10-06 05:56:29","http://178.215.68.66:61570/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238704/","Petras_Simeon"
 "238702","2019-10-06 05:55:51","http://177.152.139.214:32418/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238702/","Petras_Simeon"
 "238701","2019-10-06 05:55:44","http://177.126.23.67:55785/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238701/","Petras_Simeon"
@@ -113992,7 +114379,7 @@
 "238412","2019-10-05 14:12:51","http://5.202.144.233:43782/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238412/","Petras_Simeon"
 "238411","2019-10-05 14:12:44","http://2.190.113.3:51443/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238411/","Petras_Simeon"
 "238410","2019-10-05 14:12:26","http://217.195.108.129:60857/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238410/","Petras_Simeon"
-"238409","2019-10-05 14:12:20","http://202.166.217.54:62070/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238409/","Petras_Simeon"
+"238409","2019-10-05 14:12:20","http://202.166.217.54:62070/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238409/","Petras_Simeon"
 "238408","2019-10-05 14:12:14","http://194.135.147.57:52680/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238408/","Petras_Simeon"
 "238407","2019-10-05 14:12:10","http://191.205.47.182:29427/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238407/","Petras_Simeon"
 "238406","2019-10-05 14:11:30","http://189.110.15.155:21404/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238406/","Petras_Simeon"
@@ -114049,7 +114436,7 @@
 "238355","2019-10-05 13:25:08","http://191.17.58.32:62490/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238355/","Petras_Simeon"
 "238354","2019-10-05 13:25:02","http://191.17.52.20:7545/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238354/","Petras_Simeon"
 "238353","2019-10-05 13:24:55","http://190.144.96.181:28502/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238353/","Petras_Simeon"
-"238352","2019-10-05 13:24:50","http://190.130.27.198:28868/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238352/","Petras_Simeon"
+"238352","2019-10-05 13:24:50","http://190.130.27.198:28868/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238352/","Petras_Simeon"
 "238351","2019-10-05 13:24:43","http://189.78.116.165:32523/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238351/","Petras_Simeon"
 "238350","2019-10-05 13:24:37","http://189.47.249.62:46281/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238350/","Petras_Simeon"
 "238349","2019-10-05 13:24:32","http://189.159.137.235:43727/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238349/","Petras_Simeon"
@@ -114239,7 +114626,7 @@
 "238165","2019-10-05 10:46:51","http://201.69.187.217:44748/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238165/","Petras_Simeon"
 "238164","2019-10-05 10:46:35","http://201.46.28.166:53990/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238164/","Petras_Simeon"
 "238163","2019-10-05 10:46:17","http://200.122.209.90:9352/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238163/","Petras_Simeon"
-"238162","2019-10-05 10:46:10","http://196.202.194.133:63946/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238162/","Petras_Simeon"
+"238162","2019-10-05 10:46:10","http://196.202.194.133:63946/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238162/","Petras_Simeon"
 "238161","2019-10-05 10:45:57","http://195.9.216.42:8145/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238161/","Petras_Simeon"
 "238160","2019-10-05 10:45:45","http://191.8.102.94:57456/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238160/","Petras_Simeon"
 "238159","2019-10-05 10:45:19","http://191.5.215.250:4473/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238159/","Petras_Simeon"
@@ -114274,7 +114661,7 @@
 "238130","2019-10-05 10:40:38","http://115.134.0.22:63433/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238130/","Petras_Simeon"
 "238129","2019-10-05 10:40:33","http://114.47.112.134:61005/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238129/","Petras_Simeon"
 "238128","2019-10-05 10:40:26","http://1.1.226.93:61093/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238128/","Petras_Simeon"
-"238127","2019-10-05 10:40:21","http://109.248.58.238:50004/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238127/","Petras_Simeon"
+"238127","2019-10-05 10:40:21","http://109.248.58.238:50004/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238127/","Petras_Simeon"
 "238126","2019-10-05 10:40:17","http://103.73.183.53:44671/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238126/","Petras_Simeon"
 "238125","2019-10-05 10:40:12","http://103.209.176.85:54764/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238125/","Petras_Simeon"
 "238124","2019-10-05 10:40:07","http://103.124.173.72:13616/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238124/","Petras_Simeon"
@@ -114531,7 +114918,7 @@
 "237873","2019-10-05 07:40:49","http://109.1.183.254:61200/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/237873/","Petras_Simeon"
 "237872","2019-10-05 07:40:43","http://105.225.22.122:33227/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/237872/","Petras_Simeon"
 "237871","2019-10-05 07:40:36","http://103.90.204.135:34370/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/237871/","Petras_Simeon"
-"237870","2019-10-05 07:40:30","http://103.234.226.133:20102/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/237870/","Petras_Simeon"
+"237870","2019-10-05 07:40:30","http://103.234.226.133:20102/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/237870/","Petras_Simeon"
 "237869","2019-10-05 07:40:23","http://103.23.133.187:31459/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/237869/","Petras_Simeon"
 "237868","2019-10-05 07:40:17","http://103.199.115.14:40870/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/237868/","Petras_Simeon"
 "237867","2019-10-05 07:40:12","http://103.73.182.55:30817/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/237867/","Petras_Simeon"
@@ -121046,7 +121433,7 @@
 "231136","2019-09-13 19:04:04","http://213.202.211.188/.dayum/updaterservice0.mips","offline","malware_download","elf","https://urlhaus.abuse.ch/url/231136/","zbetcheckin"
 "231135","2019-09-13 19:04:03","http://213.202.211.188/.dayum/updaterservice0.spc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/231135/","zbetcheckin"
 "231134","2019-09-13 18:56:03","http://213.202.211.188/.dayum/updaterservice0.arm7","offline","malware_download","elf","https://urlhaus.abuse.ch/url/231134/","zbetcheckin"
-"231133","2019-09-13 18:52:05","http://196.218.53.68:30024/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/231133/","zbetcheckin"
+"231133","2019-09-13 18:52:05","http://196.218.53.68:30024/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/231133/","zbetcheckin"
 "231132","2019-09-13 18:39:06","http://200.96.214.131:44247/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/231132/","zbetcheckin"
 "231131","2019-09-13 18:35:05","http://1.32.53.191:22167/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/231131/","zbetcheckin"
 "231130","2019-09-13 18:23:02","http://142.11.219.110/bins/hoho.arm5","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/231130/","zbetcheckin"
@@ -121468,9 +121855,9 @@
 "230692","2019-09-12 09:30:03","http://149.202.110.2/00008873MNZ.exe","offline","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/230692/","dvk01uk"
 "230691","2019-09-12 09:20:04","https://www.dropbox.com/s/ai35a1c0bz938gc/Product-Order.rar?dl=1","offline","malware_download","exe,NetWire,zip","https://urlhaus.abuse.ch/url/230691/","ps66uk"
 "230690","2019-09-12 09:17:04","https://www.dropbox.com/s/6zlzvoa232fafqx/Revised%20document_840989.tbz2?dl=1","offline","malware_download","exe,NanoCore,zip","https://urlhaus.abuse.ch/url/230690/","ps66uk"
-"230689","2019-09-12 09:15:32","http://globaleuropeans.com/wp-content/themes/zerif-lite/css/1c.jpg","offline","malware_download","Ransomware,Shade,Troldesh","https://urlhaus.abuse.ch/url/230689/","JAMESWT_MHT"
+"230689","2019-09-12 09:15:32","http://globaleuropeans.com/wp-content/themes/zerif-lite/css/1c.jpg","online","malware_download","Ransomware,Shade,Troldesh","https://urlhaus.abuse.ch/url/230689/","JAMESWT_MHT"
 "230688","2019-09-12 09:15:29","http://familyrecipeproject.com/wp-includes/ID3/1c.jpg","offline","malware_download","Ransomware,Shade,Troldesh","https://urlhaus.abuse.ch/url/230688/","JAMESWT_MHT"
-"230687","2019-09-12 09:15:09","http://globaleuropeans.com/wp-content/themes/zerif-lite/css/2c.jpg","offline","malware_download","Ransomware,Shade,Troldesh","https://urlhaus.abuse.ch/url/230687/","JAMESWT_MHT"
+"230687","2019-09-12 09:15:09","http://globaleuropeans.com/wp-content/themes/zerif-lite/css/2c.jpg","online","malware_download","Ransomware,Shade,Troldesh","https://urlhaus.abuse.ch/url/230687/","JAMESWT_MHT"
 "230686","2019-09-12 09:15:06","http://familyrecipeproject.com/wp-includes/ID3/2c.jpg","offline","malware_download","Ransomware,Shade,Troldesh","https://urlhaus.abuse.ch/url/230686/","JAMESWT_MHT"
 "230685","2019-09-12 09:15:03","http://xn--t8j4aa4ntg8h1b7466ejpyad32f.com/wp-admin/css/colors/blue/1c.jpg","offline","malware_download","Ransomware,Shade,Troldesh","https://urlhaus.abuse.ch/url/230685/","JAMESWT_MHT"
 "230684","2019-09-12 09:14:05","https://shope002online.com/wp-content/themes/superbmarketing/fonts/1c.jpg","offline","malware_download","Ransomware,Shade,Troldesh","https://urlhaus.abuse.ch/url/230684/","JAMESWT_MHT"
@@ -121994,7 +122381,7 @@
 "230156","2019-09-09 15:17:05","https://onedrive.live.com/download?cid=063732C6D894FA66&resid=63732C6D894FA66%21850&authkey=AAsl1K6nxMnA3Pw&em=2","offline","malware_download","doc","https://urlhaus.abuse.ch/url/230156/","ps66uk"
 "230155","2019-09-09 14:29:02","http://leadbraintraining.com/PlayVoiceMessage.com","offline","malware_download","None","https://urlhaus.abuse.ch/url/230155/","JayTHL"
 "230154","2019-09-09 14:28:07","http://svc.darkhost.pro/x32.vmp.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/230154/","P3pperP0tts"
-"230153","2019-09-09 14:10:06","http://128.65.187.123:11308/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/230153/","zbetcheckin"
+"230153","2019-09-09 14:10:06","http://128.65.187.123:11308/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/230153/","zbetcheckin"
 "230152","2019-09-09 12:49:02","http://157.245.67.116/lmaoWTF/loligang.arm7","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/230152/","zbetcheckin"
 "230151","2019-09-09 12:45:23","http://157.245.67.116/lmaoWTF/loligang.sh4","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/230151/","zbetcheckin"
 "230150","2019-09-09 12:45:21","http://157.245.67.116/lmaoWTF/loligang.spc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/230150/","zbetcheckin"
@@ -122975,14 +123362,14 @@
 "229148","2019-09-05 00:24:30","http://foodera.co/wp-includes/ID3/1c.jpg","offline","malware_download","exe,Troldesh","https://urlhaus.abuse.ch/url/229148/","zbetcheckin"
 "229147","2019-09-04 22:29:08","http://rollscar.pk/update.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/229147/","zbetcheckin"
 "229146","2019-09-04 22:24:55","http://sgpf.eu/support/microsoft/help.exe","offline","malware_download","exe,njRAT","https://urlhaus.abuse.ch/url/229146/","zbetcheckin"
-"229145","2019-09-04 22:24:53","http://down.xrpdf.com/softdownload/xrpdf5050.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/229145/","zbetcheckin"
+"229145","2019-09-04 22:24:53","http://down.xrpdf.com/softdownload/xrpdf5050.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/229145/","zbetcheckin"
 "229144","2019-09-04 20:29:03","http://gdfdfv.ru/nwfsd43_signed.exe","offline","malware_download","exe,NetWire","https://urlhaus.abuse.ch/url/229144/","zbetcheckin"
 "229143","2019-09-04 20:21:04","http://acsetup5.icu/eu/2.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/229143/","zbetcheckin"
 "229142","2019-09-04 20:12:03","http://5.56.133.111/AMANI0309.exe","offline","malware_download","exe,HawkEye","https://urlhaus.abuse.ch/url/229142/","zbetcheckin"
 "229141","2019-09-04 20:08:08","http://svc.darkhost.pro/x64.vmp.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/229141/","zbetcheckin"
 "229140","2019-09-04 18:45:12","http://rdmapperels.com/Statement.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/229140/","zbetcheckin"
-"229139","2019-09-04 18:18:05","http://down.xrpdf.com/softdownloadol/plpdfol.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/229139/","zbetcheckin"
-"229138","2019-09-04 18:06:14","http://down.xrpdf.com/softdownloadol/xrpdfhebingol5024.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/229138/","zbetcheckin"
+"229139","2019-09-04 18:18:05","http://down.xrpdf.com/softdownloadol/plpdfol.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/229139/","zbetcheckin"
+"229138","2019-09-04 18:06:14","http://down.xrpdf.com/softdownloadol/xrpdfhebingol5024.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/229138/","zbetcheckin"
 "229137","2019-09-04 18:06:05","http://moselink.xyz/ff.exe","offline","malware_download","exe,HawkEye","https://urlhaus.abuse.ch/url/229137/","zbetcheckin"
 "229136","2019-09-04 17:52:04","http://www.andrewwill.com/Documents/IMOSMGFGR.bmp","offline","malware_download","exe","https://urlhaus.abuse.ch/url/229136/","ps66uk"
 "229135","2019-09-04 17:16:27","http://somasterons.com/dfhguer74554gjdfjgi4458845hghhv/ncvbsdf.bin","offline","malware_download","None","https://urlhaus.abuse.ch/url/229135/","JayTHL"
@@ -128266,7 +128653,7 @@
 "223752","2019-08-11 06:25:04","http://165.22.236.154/Demon.mpsl","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/223752/","zbetcheckin"
 "223751","2019-08-11 06:05:07","http://216.170.126.120/qwertyuba.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/223751/","zbetcheckin"
 "223750","2019-08-11 06:05:03","http://79.159.202.162:1524/.i","offline","malware_download","elf","https://urlhaus.abuse.ch/url/223750/","zbetcheckin"
-"223749","2019-08-11 06:01:42","http://da.alibuf.com:3/dst.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/223749/","zbetcheckin"
+"223749","2019-08-11 06:01:42","http://da.alibuf.com:3/dst.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/223749/","zbetcheckin"
 "223748","2019-08-11 06:01:04","http://216.170.126.120/blackqwerty.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/223748/","zbetcheckin"
 "223747","2019-08-11 05:57:02","http://192.236.208.231/botnet.x86","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/223747/","zbetcheckin"
 "223746","2019-08-11 05:24:17","http://setup4.icu/us/2.exe","offline","malware_download","Amadey,exe","https://urlhaus.abuse.ch/url/223746/","zbetcheckin"
@@ -137791,7 +138178,7 @@
 "213970","2019-07-05 09:13:24","http://empowwwer.com/templates/rt_myriad/admin/presets/1c.jpg","offline","malware_download","exe,Troldesh","https://urlhaus.abuse.ch/url/213970/","zbetcheckin"
 "213969","2019-07-05 09:13:16","http://websiteprivacypolicy.org/includes/database/mysql/1c.jpg","offline","malware_download","exe,Troldesh","https://urlhaus.abuse.ch/url/213969/","zbetcheckin"
 "213968","2019-07-05 09:13:08","http://fusion105.com/wp-content/themes/goodnews47/builder/js_composer/assets/bootstrap/css/1c.jpg","offline","malware_download","exe,Troldesh","https://urlhaus.abuse.ch/url/213968/","zbetcheckin"
-"213967","2019-07-05 09:13:03","http://kupaliskohs.sk/wp-content/themes/kupaliskohs/styles/1c.jpg","offline","malware_download","exe,Troldesh","https://urlhaus.abuse.ch/url/213967/","zbetcheckin"
+"213967","2019-07-05 09:13:03","http://kupaliskohs.sk/wp-content/themes/kupaliskohs/styles/1c.jpg","online","malware_download","exe,Troldesh","https://urlhaus.abuse.ch/url/213967/","zbetcheckin"
 "213966","2019-07-05 09:09:08","http://christen.dybenko.net/_wp-admin/css/1c.jpg","offline","malware_download","exe,Troldesh","https://urlhaus.abuse.ch/url/213966/","zbetcheckin"
 "213965","2019-07-05 09:09:06","http://unaniherbalist.com/new/1c.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/213965/","zbetcheckin"
 "213964","2019-07-05 09:09:05","http://crowdercabinets.com/templates/beez3/html/com_contact/categories/1c.jpg","offline","malware_download","exe,Troldesh","https://urlhaus.abuse.ch/url/213964/","zbetcheckin"
@@ -138437,7 +138824,7 @@
 "213319","2019-07-02 17:27:04","http://37.49.230.232/boss.arm6","offline","malware_download","elf","https://urlhaus.abuse.ch/url/213319/","hypoweb"
 "213316","2019-07-02 17:27:03","http://37.49.230.232/boss.arm4","offline","malware_download","elf","https://urlhaus.abuse.ch/url/213316/","hypoweb"
 "213317","2019-07-02 17:27:03","http://37.49.230.232/boss.arm4t","offline","malware_download","elf","https://urlhaus.abuse.ch/url/213317/","hypoweb"
-"213315","2019-07-02 17:09:09","http://res.uf1.cn/web/uploads/20190529/b3317fbea3178225c9e8f508eb7a8741.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/213315/","zbetcheckin"
+"213315","2019-07-02 17:09:09","http://res.uf1.cn/web/uploads/20190529/b3317fbea3178225c9e8f508eb7a8741.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/213315/","zbetcheckin"
 "213314","2019-07-02 17:06:05","http://janavenanciomakeup.com.br/js/coco/skyy.exe","offline","malware_download","AgentTesla,rat","https://urlhaus.abuse.ch/url/213314/","p5yb34m"
 "213313","2019-07-02 17:06:04","http://janavenanciomakeup.com.br/js/coco/seee.exe","offline","malware_download","AgentTesla,rat","https://urlhaus.abuse.ch/url/213313/","p5yb34m"
 "213312","2019-07-02 17:06:03","http://janavenanciomakeup.com.br/js/coco/kin.exe","offline","malware_download","AgentTesla,exe,rat","https://urlhaus.abuse.ch/url/213312/","p5yb34m"
@@ -141207,7 +141594,7 @@
 "210527","2019-06-20 01:47:03","http://51.79.53.247/lmaoWTF/loligang.ppc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/210527/","zbetcheckin"
 "210526","2019-06-20 01:47:02","http://51.79.53.247/lmaoWTF/loligang.mips","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/210526/","zbetcheckin"
 "210525","2019-06-20 01:39:07","http://fakers.co.jp/20.06.2019_130.22.doc","offline","malware_download","doc","https://urlhaus.abuse.ch/url/210525/","zbetcheckin"
-"210524","2019-06-20 01:06:53","http://indonesias.me:9998/c64.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/210524/","zbetcheckin"
+"210524","2019-06-20 01:06:53","http://indonesias.me:9998/c64.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/210524/","zbetcheckin"
 "210523","2019-06-20 00:37:03","http://179.43.147.77/pm1","offline","malware_download","msi","https://urlhaus.abuse.ch/url/210523/","zbetcheckin"
 "210521","2019-06-20 00:20:06","http://46.101.218.87/bins/BaCkTrAcK.arm7","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/210521/","zbetcheckin"
 "210520","2019-06-20 00:20:06","http://46.101.218.87:80/bins/BaCkTrAcK.arm","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/210520/","zbetcheckin"
@@ -148424,7 +148811,7 @@
 "203283","2019-05-29 04:14:03","http://joshworld.top/ach/ach.exe","offline","malware_download","exe,HawkEye","https://urlhaus.abuse.ch/url/203283/","zbetcheckin"
 "203282","2019-05-29 04:09:02","http://soft.trm.cn/TRM/SETUPZ619A.EXE","offline","malware_download","exe","https://urlhaus.abuse.ch/url/203282/","zbetcheckin"
 "203281","2019-05-29 04:00:07","https://www.dropbox.com/s/dl/6vtusjqlxmabs35/PAYMENT.pdf.gz","offline","malware_download","zip","https://urlhaus.abuse.ch/url/203281/","zbetcheckin"
-"203280","2019-05-29 03:55:06","http://www.hseda.com/download/qt51crk.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/203280/","zbetcheckin"
+"203280","2019-05-29 03:55:06","http://www.hseda.com/download/qt51crk.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/203280/","zbetcheckin"
 "203279","2019-05-29 03:55:03","http://joshworld.top/winn/winn.exe","offline","malware_download","exe,HawkEye","https://urlhaus.abuse.ch/url/203279/","zbetcheckin"
 "203278","2019-05-29 03:50:09","http://www.trm.cn/ggt/6-18c.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/203278/","zbetcheckin"
 "203277","2019-05-29 03:50:04","http://www.websound.ru/issues/136_140/flt_shovemydiscoupyourarse.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/203277/","zbetcheckin"
@@ -148547,7 +148934,7 @@
 "203160","2019-05-28 20:28:02","http://planologia.com/mail/parts_service/cn1yathgn1rs0_mhayfznqy0-143270358110018/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/203160/","spamhaus"
 "203159","2019-05-28 20:14:03","https://popitnot.com/List/lm/mttsPaXTDb/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/203159/","spamhaus"
 "203158","2019-05-28 20:07:05","http://sewamobilmurahdibali.co.id/wp-admin/sites/p6l77hrpl3a6btaqtg6izcmez_8utwvfzzk4-9823369595449/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/203158/","spamhaus"
-"203157","2019-05-28 20:06:16","http://hseda.com/download/qt51crk.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/203157/","zbetcheckin"
+"203157","2019-05-28 20:06:16","http://hseda.com/download/qt51crk.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/203157/","zbetcheckin"
 "203156","2019-05-28 20:06:14","http://nathanhubble.com/gallery/01/TheCooters-Photos.scr","offline","malware_download","exe","https://urlhaus.abuse.ch/url/203156/","zbetcheckin"
 "203155","2019-05-28 20:06:14","http://trm.cn/ggt/6-18C.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/203155/","zbetcheckin"
 "203154","2019-05-28 20:06:09","http://reservoirhill.org/reserv.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/203154/","zbetcheckin"
@@ -151847,7 +152234,7 @@
 "199847","2019-05-22 06:29:22","http://c.etheos.site/o/amd32.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/199847/","abuse_ch"
 "199846","2019-05-22 06:24:08","http://176.223.142.43/akbins/mips.akirag","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/199846/","zbetcheckin"
 "199845","2019-05-22 06:16:03","http://processoeng.com.br/sistemafolha/folha/clienteftp.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/199845/","zbetcheckin"
-"199844","2019-05-22 06:08:20","http://static.ilclock.com/gcld/updates/gcmgr.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/199844/","zbetcheckin"
+"199844","2019-05-22 06:08:20","http://static.ilclock.com/gcld/updates/gcmgr.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/199844/","zbetcheckin"
 "199843","2019-05-22 05:56:28","http://wex-notdead.ru/1.doc","offline","malware_download","Dreambot,exe,Gozi,ursnif","https://urlhaus.abuse.ch/url/199843/","Sec_S_Owl"
 "199842","2019-05-22 05:20:16","http://account-serv-v12.ml/dp/utt.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/199842/","zbetcheckin"
 "199841","2019-05-22 05:20:07","https://samanthatowne.com/wp-includes/rest-api/endpoints/remited_x.vbs","offline","malware_download","None","https://urlhaus.abuse.ch/url/199841/","JayTHL"
@@ -153004,7 +153391,7 @@
 "198686","2019-05-19 20:30:02","http://139.59.159.87/bins/sora.x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/198686/","zbetcheckin"
 "198685","2019-05-19 20:23:05","http://51.255.54.43:80/zehir/z3hir.x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/198685/","zbetcheckin"
 "198684","2019-05-19 20:22:12","http://157.230.102.141:80/zehir/z3hir.x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/198684/","zbetcheckin"
-"198683","2019-05-19 20:22:07","http://221.144.153.139:61729/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/198683/","zbetcheckin"
+"198683","2019-05-19 20:22:07","http://221.144.153.139:61729/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/198683/","zbetcheckin"
 "198682","2019-05-19 20:18:04","http://139.59.159.87:80/bins/sora.x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/198682/","zbetcheckin"
 "198681","2019-05-19 19:47:02","http://178.211.33.210:80/lmaoWTF/loligang.m68k","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/198681/","zbetcheckin"
 "198680","2019-05-19 19:43:09","http://178.211.33.210:80/lmaoWTF/loligang.arm","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/198680/","zbetcheckin"
@@ -154080,7 +154467,7 @@
 "197603","2019-05-17 00:24:12","http://down1.xt70.com/soft/170331/12037.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/197603/","zbetcheckin"
 "197602","2019-05-17 00:16:06","http://gorinkan.org/DVedit/INC/cgyfeo3enwqh1db8t6a3_13xbr8q-1836727870671/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/197602/","spamhaus"
 "197601","2019-05-17 00:12:13","http://great.cl/ortuzar.cl/esp/ixjwtev0k5ze2_6pt2rqck3-52580352/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/197601/","spamhaus"
-"197600","2019-05-17 00:11:41","http://buhleni.co.za/images/Spyder.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/197600/","zbetcheckin"
+"197600","2019-05-17 00:11:41","http://buhleni.co.za/images/Spyder.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/197600/","zbetcheckin"
 "197599","2019-05-17 00:06:05","http://congnghexanhtn.vn/cgi-bin/lm/HXiFZxIhssOosIxXZEDO/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/197599/","spamhaus"
 "197598","2019-05-17 00:02:22","http://congnghexanhtn.vn/cgi-bin/sites/oi2h8eb32rlswyhyoe274vh802q_vd3boc2o-7590611699/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/197598/","spamhaus"
 "197597","2019-05-16 23:59:10","http://mysterylover.com/corenascreations/zencartcatalog/cache/LLC/tYTXviiUWFyKjmIVRksMFt/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/197597/","spamhaus"
@@ -155735,7 +156122,7 @@
 "195932","2019-05-14 06:51:26","http://89.32.62.100:59306/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/195932/","UrBogan"
 "195931","2019-05-14 06:51:23","http://93.78.52.109:19844/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/195931/","UrBogan"
 "195930","2019-05-14 06:51:18","http://221.158.52.96:31273/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/195930/","UrBogan"
-"195929","2019-05-14 06:51:14","http://86.107.167.93:5333/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/195929/","UrBogan"
+"195929","2019-05-14 06:51:14","http://86.107.167.93:5333/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/195929/","UrBogan"
 "195928","2019-05-14 06:51:09","http://176.230.127.229:43697/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/195928/","UrBogan"
 "195927","2019-05-14 06:51:04","http://151.177.105.32:1152/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/195927/","UrBogan"
 "195926","2019-05-14 06:50:12","http://109.185.43.219:3763/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/195926/","UrBogan"
@@ -156321,7 +156708,7 @@
 "195340","2019-05-13 09:17:02","http://ideone.com/plain/sF4RBX","offline","malware_download","njRAT","https://urlhaus.abuse.ch/url/195340/","gorimpthon"
 "195339","2019-05-13 09:15:03","http://wordpress-263723-820316.cloudwaysapps.com/wp-includes/parts_service/DdkQiEVJWgjYpqYVwDkIaP/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/195339/","spamhaus"
 "195338","2019-05-13 09:14:02","https://roubaix-coworking.fr/wp-content/wj7hitf-vba84p-iyluwe/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/195338/","spamhaus"
-"195337","2019-05-13 09:13:04","http://191.255.248.220:15219/.i","offline","malware_download","None","https://urlhaus.abuse.ch/url/195337/","VtLyra"
+"195337","2019-05-13 09:13:04","http://191.255.248.220:15219/.i","online","malware_download","None","https://urlhaus.abuse.ch/url/195337/","VtLyra"
 "195336","2019-05-13 09:11:15","http://nhaxinhvina.xyz/36e/nnrm97524/","offline","malware_download","doc,emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/195336/","anonymous"
 "195335","2019-05-13 09:11:12","http://derleyicihatasi.com/gecmis/or116/","offline","malware_download","doc,emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/195335/","anonymous"
 "195334","2019-05-13 09:11:10","http://corehealingmassage.com/wp-admin/ufbyw973/","offline","malware_download","doc,emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/195334/","anonymous"
@@ -159759,7 +160146,7 @@
 "191816","2019-05-06 23:46:03","http://allenheim.dk/wwvvv/trusted.en.signed.public.sec/","offline","malware_download","None","https://urlhaus.abuse.ch/url/191816/","spamhaus"
 "191815","2019-05-06 23:43:03","http://alphaterapi.no/verif.Eng.logged.public.biz/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/191815/","spamhaus"
 "191814","2019-05-06 23:38:03","http://alliancelk.com/kiffsnew/wp-content/uploads/open.En.myacc.docs.com/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/191814/","spamhaus"
-"191813","2019-05-06 23:27:08","http://consultingcy.com/bdrkm/trusted.EN.anyone.office.com/","offline","malware_download","None","https://urlhaus.abuse.ch/url/191813/","spamhaus"
+"191813","2019-05-06 23:27:08","http://consultingcy.com/bdrkm/trusted.EN.anyone.office.com/","online","malware_download","None","https://urlhaus.abuse.ch/url/191813/","spamhaus"
 "191812","2019-05-06 23:23:05","http://anareborn.com.br/atendimento/trusted.Eng.signed.public.com/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/191812/","spamhaus"
 "191811","2019-05-06 23:18:03","http://andrewsleepa.com/pandarealestateflorida.com/secure.Eng.myaccount.docs.net/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/191811/","spamhaus"
 "191810","2019-05-06 23:17:05","http://andyelliott.us/AIF/r67g80lujgz0p77gg6ecp8r4_o4akncrwh-465247106455076/","offline","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/191810/","spamhaus"
@@ -161072,7 +161459,7 @@
 "190493","2019-05-03 21:36:12","http://206.81.7.240:80/bins/hoho.arm5","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/190493/","zbetcheckin"
 "190492","2019-05-03 21:36:11","http://206.81.7.240:80/bins/hoho.mips","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/190492/","zbetcheckin"
 "190491","2019-05-03 21:36:10","http://fundacionsuperamigos.com/cgi-bin/sites/FIwthgGobIzUjCjVzuRVXj/","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/190491/","spamhaus"
-"190490","2019-05-03 21:18:37","http://61.58.174.253:9950/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/190490/","zbetcheckin"
+"190490","2019-05-03 21:18:37","http://61.58.174.253:9950/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/190490/","zbetcheckin"
 "190489","2019-05-03 21:18:04","http://31.27.221.176:57328/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/190489/","zbetcheckin"
 "190488","2019-05-03 21:18:03","http://206.81.7.240:80/bins/hoho.x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/190488/","zbetcheckin"
 "190487","2019-05-03 21:11:05","http://victormartinezmoreno.es/seguridad/parts_service/u8a5s8kti1_1hri2q-97732345/","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/190487/","spamhaus"
@@ -161851,7 +162238,7 @@
 "189710","2019-05-02 19:18:06","http://fitnessdenofficial.com/wp-content/verif.accounts.docs.com/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/189710/","Cryptolaemus1"
 "189709","2019-05-02 19:18:05","http://emersonprojects.com.au/wp-content/mndp3n5ia73am8h1_y58xx-933473224457830/","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/189709/","spamhaus"
 "189708","2019-05-02 19:14:10","http://danxehoichongnong.com/wp-content/secure.myaccount.docs.net/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/189708/","Cryptolaemus1"
-"189707","2019-05-02 19:14:06","http://elokshinproperty.co.za/jtau/paclm/8ouar200imvhee4iy_f85p9l0e-62227938/","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/189707/","spamhaus"
+"189707","2019-05-02 19:14:06","http://elokshinproperty.co.za/jtau/paclm/8ouar200imvhee4iy_f85p9l0e-62227938/","online","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/189707/","spamhaus"
 "189706","2019-05-02 19:13:55","https://docs.google.com/uc?id=1thLpek5rPVL3fiitK2Za0xyvk6YjxJ7H","offline","malware_download","exe,Gozi,zip","https://urlhaus.abuse.ch/url/189706/","anonymous"
 "189705","2019-05-02 19:13:53","https://docs.google.com/uc?id=1d8Vovpa5svIHhs7BT1gm2svcbjn1DO4m","offline","malware_download","exe,Gozi,zip","https://urlhaus.abuse.ch/url/189705/","anonymous"
 "189704","2019-05-02 19:13:51","https://docs.google.com/uc?id=1Jt4vlN5pyJDrBJW76zAGTbBGbJuOqR43","offline","malware_download","exe,Gozi,zip","https://urlhaus.abuse.ch/url/189704/","anonymous"
@@ -167225,11 +167612,11 @@
 "184282","2019-04-25 01:29:03","http://92.222.143.230/earyzq","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/184282/","zbetcheckin"
 "184280","2019-04-25 01:19:04","http://178.128.152.65/bins/UnHAnaAW.arm6","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/184280/","zbetcheckin"
 "184279","2019-04-25 01:19:03","http://178.128.152.65/bins/UnHAnaAW.arm","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/184279/","zbetcheckin"
-"184278","2019-04-25 00:45:14","http://bangkok-orchids.com/images/Button/Purchase_items_List.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/184278/","zbetcheckin"
+"184278","2019-04-25 00:45:14","http://bangkok-orchids.com/images/Button/Purchase_items_List.exe","online","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/184278/","zbetcheckin"
 "184277","2019-04-25 00:32:05","http://178.128.152.65:80/bins/UnHAnaAW.arm","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/184277/","zbetcheckin"
 "184276","2019-04-25 00:32:04","http://178.128.152.65:80/bins/UnHAnaAW.arm6","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/184276/","zbetcheckin"
 "184275","2019-04-25 00:28:06","http://lukisaholdingsltd.com/readme.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/184275/","zbetcheckin"
-"184274","2019-04-25 00:22:04","http://bangkok-orchids.com/images/background/HelloVB6.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/184274/","zbetcheckin"
+"184274","2019-04-25 00:22:04","http://bangkok-orchids.com/images/background/HelloVB6.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/184274/","zbetcheckin"
 "184273","2019-04-25 00:13:15","http://lukisaholdingsltd.com/ftp.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/184273/","zbetcheckin"
 "184272","2019-04-25 00:13:09","http://lukisaholdingsltd.com/read.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/184272/","zbetcheckin"
 "184271","2019-04-25 00:09:12","http://lukisaholdingsltd.com/file.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/184271/","zbetcheckin"
@@ -179994,7 +180381,7 @@
 "171452","2019-04-04 16:44:03","http://94.191.48.164/hf9tasw/secure.accs.resourses.net/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/171452/","Cryptolaemus1"
 "171451","2019-04-04 16:32:04","http://xxx-lorem.xyz/install_flash_player.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/171451/","zbetcheckin"
 "171450","2019-04-04 16:27:02","http://pool.ug/tesptc/penelop/updatewin2.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/171450/","zbetcheckin"
-"171449","2019-04-04 16:26:10","http://gimscompany.com/wp-admin/user/1/klx.doc","offline","malware_download","RTF","https://urlhaus.abuse.ch/url/171449/","zbetcheckin"
+"171449","2019-04-04 16:26:10","http://gimscompany.com/wp-admin/user/1/klx.doc","online","malware_download","RTF","https://urlhaus.abuse.ch/url/171449/","zbetcheckin"
 "171448","2019-04-04 16:26:07","http://charlesremcos.duckdns.org/a.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/171448/","zbetcheckin"
 "171447","2019-04-04 16:26:04","http://6qa5da.bn1303.livefilestore.com/y4mmzHLySAJrp-4LhNU_OgkI2hiTt2rNhP_wpk-NvTRk_RkmwAW--KKXus1qsmYdMlBySY5p30Q-h62WohI0tnXIPVgg-S3JxcpVtDj9Vj0t-yeWF1dmOqeOPsuUa2xGknT03EOAI15yFJ9Wcsgom3Y2ld9tdEqUuYE9UPQl0Js319HyvpwcaQqYIGZeh2o4g0xf768y85aAaZ2IRUpULVVGg/Purchase%20order%203%202.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/171447/","zbetcheckin"
 "171446","2019-04-04 16:22:07","http://automatrix2.com/361015192ee19db6f000b4855c12e18f0c5a54d269e1/notaflscaleletronlcavisualizarword.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/171446/","zbetcheckin"
@@ -182226,7 +182613,7 @@
 "168870","2019-03-30 04:48:34","http://134.209.39.38/sh","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/168870/","zbetcheckin"
 "168869","2019-03-30 04:48:28","http://134.209.39.38/apache2","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/168869/","zbetcheckin"
 "168868","2019-03-30 04:48:25","http://134.209.39.38/cron","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/168868/","zbetcheckin"
-"168867","2019-03-30 04:48:23","http://24.133.203.45:20107/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/168867/","zbetcheckin"
+"168867","2019-03-30 04:48:23","http://24.133.203.45:20107/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/168867/","zbetcheckin"
 "168866","2019-03-30 04:48:20","http://134.209.39.38/bash","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/168866/","zbetcheckin"
 "168865","2019-03-30 04:48:17","http://134.209.39.38/pftp","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/168865/","zbetcheckin"
 "168864","2019-03-30 04:48:15","http://134.209.39.38/ntpd","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/168864/","zbetcheckin"
@@ -187141,7 +187528,7 @@
 "163868","2019-03-22 06:05:06","http://46.101.156.58:80/gaybub/miori.arm5","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/163868/","zbetcheckin"
 "163867","2019-03-22 06:05:04","http://46.101.156.58:80/gaybub/miori.arm7","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/163867/","zbetcheckin"
 "163866","2019-03-22 06:03:32","http://www.twinplaza.jp/library/use/Photo.scr","offline","malware_download","None","https://urlhaus.abuse.ch/url/163866/","papa_anniekey"
-"163865","2019-03-22 05:52:06","http://s14b.91danji.com/20151215/%E9%87%91%E5%AD%97%E5%A1%94%E6%96%B9%E5%9D%97.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/163865/","zbetcheckin"
+"163865","2019-03-22 05:52:06","http://s14b.91danji.com/20151215/%E9%87%91%E5%AD%97%E5%A1%94%E6%96%B9%E5%9D%97.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/163865/","zbetcheckin"
 "163864","2019-03-22 05:48:02","https://electromada.com/bbl.jpg","offline","malware_download","exe,Formbook","https://urlhaus.abuse.ch/url/163864/","cocaman"
 "163862","2019-03-22 05:42:15","http://206.189.30.147/bins/sbot.arm5","offline","malware_download","elf","https://urlhaus.abuse.ch/url/163862/","Gandylyan1"
 "163861","2019-03-22 05:42:15","http://206.189.30.147/bins/sbot.mpsl","offline","malware_download","elf","https://urlhaus.abuse.ch/url/163861/","Gandylyan1"
@@ -187173,12 +187560,12 @@
 "163835","2019-03-22 05:16:03","http://turismolenzarote.com/accounting/documents/download.php?file=ODQ3Mjk5NjI2OF9fX19lbGV3dWwuZXhl","offline","malware_download","exe","https://urlhaus.abuse.ch/url/163835/","zbetcheckin"
 "163834","2019-03-22 05:08:08","http://declic-prospection.com/installation_declic.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/163834/","zbetcheckin"
 "163833","2019-03-22 05:08:02","http://turismolenzarote.com/accounting/documents/download.php?file=NDg0ODU5MDQyNl9fX19zY2FuczM0LnBuZw==","offline","malware_download","exe","https://urlhaus.abuse.ch/url/163833/","zbetcheckin"
-"163832","2019-03-22 05:03:14","http://s14b.groundyun.cn/20151218/%E5%B0%8F%E9%B8%A1%E5%85%A5%E4%BE%B5%E8%80%853.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/163832/","zbetcheckin"
+"163832","2019-03-22 05:03:14","http://s14b.groundyun.cn/20151218/%E5%B0%8F%E9%B8%A1%E5%85%A5%E4%BE%B5%E8%80%853.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/163832/","zbetcheckin"
 "163831","2019-03-22 05:02:43","http://rrbmexico.com/license.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/163831/","zbetcheckin"
 "163830","2019-03-22 04:51:04","https://www.drivingwitharrow.com/wp-content/plugins/w8KF86/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/163830/","Cryptolaemus1"
 "163829","2019-03-22 04:49:06","http://www.winkniga.ru/installw.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/163829/","zbetcheckin"
-"163828","2019-03-22 04:40:28","http://s14b.91danji.com/20151218/%E5%B0%8F%E9%B8%A1%E5%85%A5%E4%BE%B5%E8%80%853.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/163828/","zbetcheckin"
-"163827","2019-03-22 04:24:44","http://s14b.91danji.com/20151220/%E5%8C%97%E6%96%97%E7%A5%9E%E6%8B%B3%E4%B8%96%E7%BA%AA%E6%9C%AB%E6%95%91%E4%B8%96%E4%B8%BB%E4%BC%A0%E8%AF%B4.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/163827/","zbetcheckin"
+"163828","2019-03-22 04:40:28","http://s14b.91danji.com/20151218/%E5%B0%8F%E9%B8%A1%E5%85%A5%E4%BE%B5%E8%80%853.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/163828/","zbetcheckin"
+"163827","2019-03-22 04:24:44","http://s14b.91danji.com/20151220/%E5%8C%97%E6%96%97%E7%A5%9E%E6%8B%B3%E4%B8%96%E7%BA%AA%E6%9C%AB%E6%95%91%E4%B8%96%E4%B8%BB%E4%BC%A0%E8%AF%B4.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/163827/","zbetcheckin"
 "163826","2019-03-22 03:53:18","http://ahsantiago.pt/templates/beez3/images/personal/rTRhOOmU4duXOXr.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/163826/","zbetcheckin"
 "163825","2019-03-22 03:47:11","http://turismolenzarote.com/accounting/documents/download.php?file=NjU0NDM3NjE4M19fX19pd2VjZXR1LmV4ZQ==","offline","malware_download","exe","https://urlhaus.abuse.ch/url/163825/","zbetcheckin"
 "163824","2019-03-22 03:26:08","http://fileloader.netx.host/ktr/227.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/163824/","zbetcheckin"
@@ -187188,7 +187575,7 @@
 "163820","2019-03-22 03:10:06","http://107.172.41.9/pftp","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/163820/","zbetcheckin"
 "163819","2019-03-22 03:10:05","http://145.239.222.222/armv7l","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/163819/","zbetcheckin"
 "163818","2019-03-22 03:10:03","http://104.248.23.140/tenshiarm6","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/163818/","zbetcheckin"
-"163817","2019-03-22 03:08:23","http://s14b.91danji.com/20160101/%E7%9C%9F%E5%AE%9E%E8%B0%8E%E8%A8%80%E4%B8%96%E7%95%8C%E7%89%88.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/163817/","zbetcheckin"
+"163817","2019-03-22 03:08:23","http://s14b.91danji.com/20160101/%E7%9C%9F%E5%AE%9E%E8%B0%8E%E8%A8%80%E4%B8%96%E7%95%8C%E7%89%88.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/163817/","zbetcheckin"
 "163815","2019-03-22 02:52:25","http://104.248.23.140/tenshim68k","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/163815/","zbetcheckin"
 "163813","2019-03-22 02:50:05","http://104.248.23.140/tenshii686","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/163813/","zbetcheckin"
 "163814","2019-03-22 02:50:05","http://104.248.23.140/tenshix86","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/163814/","zbetcheckin"
@@ -188304,7 +188691,7 @@
 "162692","2019-03-20 07:45:03","http://82.81.196.247:31239/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/162692/","x42x5a"
 "162691","2019-03-20 07:43:29","http://118.42.208.62:30153/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/162691/","x42x5a"
 "162690","2019-03-20 07:43:28","http://187.10.104.118:48511/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/162690/","x42x5a"
-"162689","2019-03-20 07:43:24","http://92.223.177.227:16097/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/162689/","x42x5a"
+"162689","2019-03-20 07:43:24","http://92.223.177.227:16097/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/162689/","x42x5a"
 "162688","2019-03-20 07:43:22","http://82.81.106.65:59035/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/162688/","x42x5a"
 "162687","2019-03-20 07:43:21","http://80.191.250.164:31722/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/162687/","x42x5a"
 "162686","2019-03-20 07:43:17","http://41.32.170.13:64536/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/162686/","x42x5a"
@@ -190823,7 +191210,7 @@
 "160160","2019-03-15 15:57:12","http://www.smilefy.com/it3fqqo/u7lj-b9cr4-sxsouq/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/160160/","Cryptolaemus1"
 "160159","2019-03-15 15:54:16","http://tem2.belocal.today/beauty-house/1ydow-o1ilw9-vfrx/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/160159/","Cryptolaemus1"
 "160158","2019-03-15 15:48:08","http://xsoft.tomsk.ru/kdlkxl/viue-z34n1-naehgcb/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/160158/","Cryptolaemus1"
-"160157","2019-03-15 15:45:09","http://writesofpassage.co.za/cgi-bin/txcj8-c21fa1-kvoqlmgu/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/160157/","Cryptolaemus1"
+"160157","2019-03-15 15:45:09","http://writesofpassage.co.za/cgi-bin/txcj8-c21fa1-kvoqlmgu/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/160157/","Cryptolaemus1"
 "160156","2019-03-15 15:43:19","http://209.141.50.236/33bi/Ares.arm","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/160156/","zbetcheckin"
 "160155","2019-03-15 15:43:17","http://www.zkeke.xyz/wp-admin/secure.myaccount.send.com/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/160155/","zbetcheckin"
 "160154","2019-03-15 15:41:40","https://abhicoupon.com/docc.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/160154/","JAMESWT_MHT"
@@ -192821,7 +193208,7 @@
 "158151","2019-03-13 09:55:11","http://188.209.49.189/nyKnYe6khg/fbot.x86","offline","malware_download","elf,fbot","https://urlhaus.abuse.ch/url/158151/","0xrb"
 "158150","2019-03-13 09:55:10","http://188.209.49.189/nyKnYe6khg/fbot.x86_64","offline","malware_download","elf,fbot","https://urlhaus.abuse.ch/url/158150/","0xrb"
 "158149","2019-03-13 09:55:08","http://hohesc.donebox.hu/wp-admin/0uofhz-550nrs-rznrde/","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/158149/","spamhaus"
-"158148","2019-03-13 09:53:08","http://www.hmpmall.co.kr/statics/images/HMPMall.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/158148/","zbetcheckin"
+"158148","2019-03-13 09:53:08","http://www.hmpmall.co.kr/statics/images/HMPMall.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/158148/","zbetcheckin"
 "158145","2019-03-13 09:39:09","http://185.244.25.169/H18/sh4","offline","malware_download","None","https://urlhaus.abuse.ch/url/158145/","VtLyra"
 "158147","2019-03-13 09:39:09","http://185.244.25.169/H18/spc","offline","malware_download","None","https://urlhaus.abuse.ch/url/158147/","VtLyra"
 "158146","2019-03-13 09:39:09","http://185.244.25.169:80/H18/sh4","offline","malware_download","None","https://urlhaus.abuse.ch/url/158146/","VtLyra"
@@ -198482,8 +198869,8 @@
 "152469","2019-03-05 12:51:16","http://ooliab.org/cgi-bin/td6q2-gzi2o-eqzpz.view/","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/152469/","spamhaus"
 "152468","2019-03-05 12:50:10","http://blog.atxin.cc/wp-admin/sendincsec/messages/trust/EN/032019/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/152468/","Cryptolaemus1"
 "152467","2019-03-05 12:45:05","http://project.hoangnq.com/tour/images/catalog/sendincverif/service/secure/EN_en/03-2019/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/152467/","Cryptolaemus1"
-"152466","2019-03-05 12:35:02","http://ozemag.com/wp-content/themes/emag/template-parts/ashan.russia.zakaz.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/152466/","zbetcheckin"
-"152465","2019-03-05 12:34:07","http://ozemag.com/wp-content/themes/emag/template-parts/metro.cash.and.carry.zakaz.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/152465/","zbetcheckin"
+"152466","2019-03-05 12:35:02","http://ozemag.com/wp-content/themes/emag/template-parts/ashan.russia.zakaz.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/152466/","zbetcheckin"
+"152465","2019-03-05 12:34:07","http://ozemag.com/wp-content/themes/emag/template-parts/metro.cash.and.carry.zakaz.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/152465/","zbetcheckin"
 "152464","2019-03-05 12:34:04","http://46.29.160.82/mips","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/152464/","zbetcheckin"
 "152463","2019-03-05 12:33:03","http://pantone-iq.com/wp-admin/kboh-1vr6p-jzks.view/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/152463/","Cryptolaemus1"
 "152462","2019-03-05 12:30:44","http://mohidigi.com/wp-admin/woic5-n2xz2-qjlnc.view/","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/152462/","spamhaus"
@@ -205559,7 +205946,7 @@
 "145166","2019-02-25 06:30:05","http://gweboffice.co.uk/admin1@office3.doc","offline","malware_download","doc","https://urlhaus.abuse.ch/url/145166/","abuse_ch"
 "145165","2019-02-25 06:27:02","http://77.73.70.115/dkfjb/ke1.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/145165/","zbetcheckin"
 "145164","2019-02-25 06:26:03","http://baycityfence.com/BUBA-PO.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/145164/","abuse_ch"
-"145163","2019-02-25 06:13:07","http://down.tgjkbx.cn/openlink/xzq1.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/145163/","zbetcheckin"
+"145163","2019-02-25 06:13:07","http://down.tgjkbx.cn/openlink/xzq1.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/145163/","zbetcheckin"
 "145161","2019-02-25 06:01:57","http://80.211.172.75/armv5l","offline","malware_download","elf,gafgyt","https://urlhaus.abuse.ch/url/145161/","0xrb"
 "145162","2019-02-25 06:01:57","http://80.211.172.75/powerpc-440fp","offline","malware_download","elf,gafgyt","https://urlhaus.abuse.ch/url/145162/","0xrb"
 "145160","2019-02-25 06:01:54","http://80.211.172.75/armv4l","offline","malware_download","elf,gafgyt","https://urlhaus.abuse.ch/url/145160/","0xrb"
@@ -210243,7 +210630,7 @@
 "140334","2019-02-20 02:59:05","http://152.249.231.35:6929/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/140334/","zbetcheckin"
 "140333","2019-02-20 02:58:09","http://189.113.32.35:10708/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/140333/","zbetcheckin"
 "140332","2019-02-20 02:58:06","http://157.230.208.195:80/x86","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/140332/","zbetcheckin"
-"140331","2019-02-20 02:58:05","http://181.49.241.50:32292/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/140331/","zbetcheckin"
+"140331","2019-02-20 02:58:05","http://181.49.241.50:32292/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/140331/","zbetcheckin"
 "140330","2019-02-20 02:56:03","http://162.216.156.173/rebirth.arm5","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/140330/","zbetcheckin"
 "140329","2019-02-20 02:56:02","http://157.230.49.203/bins/xova.m68k","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/140329/","zbetcheckin"
 "140328","2019-02-20 02:55:05","http://162.216.156.173/ffrebirth.arm6","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/140328/","zbetcheckin"
@@ -211108,7 +211495,7 @@
 "139468","2019-02-19 11:38:09","http://u1.innerpeer.com/znabc.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/139468/","zbetcheckin"
 "139467","2019-02-19 11:33:15","http://u1.innerpeer.com/18839dwyycr.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/139467/","zbetcheckin"
 "139466","2019-02-19 11:33:11","http://u1.innerpeer.com/hithidev5.8.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/139466/","zbetcheckin"
-"139465","2019-02-19 11:29:41","http://wap.dosame.com/ZP/%E7%96%AB%E8%8B%97%E6%8E%A5%E7%A7%8D%E6%97%B6%E9%97%B4%E8%A1%A8.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/139465/","zbetcheckin"
+"139465","2019-02-19 11:29:41","http://wap.dosame.com/ZP/%E7%96%AB%E8%8B%97%E6%8E%A5%E7%A7%8D%E6%97%B6%E9%97%B4%E8%A1%A8.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/139465/","zbetcheckin"
 "139464","2019-02-19 11:29:21","http://sshousingnproperties.com/US_us/company/Copy_Invoice/xhucL-T8_LalYYnEtA-83U","offline","malware_download","doc","https://urlhaus.abuse.ch/url/139464/","zbetcheckin"
 "139463","2019-02-19 11:29:19","http://u1.innerpeer.com/hd2006.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/139463/","zbetcheckin"
 "139462","2019-02-19 10:59:05","https://uc8fb68898141d8cb72ce7c39957.dl.dropboxusercontent.com/cd/0/get/AbrRtcBdmETSlnfhPRv7V0u8hayzj2SAsabHGG3y5l6n4lWlZIpyHNfok086LZ54NLAuKsM4eoY-t8IQAx7ZyOuf_41mEtWDAKDmJ2Whjc8HVw/file?dl=1#","offline","malware_download","ace,exe","https://urlhaus.abuse.ch/url/139462/","oppimaniac"
@@ -237254,7 +237641,7 @@
 "113040","2019-01-29 16:26:03","http://194.147.35.54/ankit/os.mips","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/113040/","zbetcheckin"
 "113039","2019-01-29 16:25:02","http://194.147.35.54/ankit/os.arm","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/113039/","zbetcheckin"
 "113038","2019-01-29 16:24:21","http://www.hanaphoto.co.kr/software/HANAPHOTO.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/113038/","zbetcheckin"
-"113037","2019-01-29 16:24:13","http://hanaphoto.co.kr/software/HANAPHOTO.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/113037/","zbetcheckin"
+"113037","2019-01-29 16:24:13","http://hanaphoto.co.kr/software/HANAPHOTO.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/113037/","zbetcheckin"
 "113036","2019-01-29 16:22:02","http://194.147.35.54/ankit/os.m68k","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/113036/","zbetcheckin"
 "113035","2019-01-29 16:20:03","http://alkmaarculinairplaza.nl/TKuWw_0v-qNDDEkO/iir/Attachments/2019-01/","offline","malware_download","heodo,Quakbot","https://urlhaus.abuse.ch/url/113035/","spamhaus"
 "113034","2019-01-29 16:17:02","http://194.147.35.54/ankit/os.arm7","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/113034/","zbetcheckin"
@@ -238626,7 +239013,7 @@
 "111630","2019-01-27 21:58:38","http://189.180.253.216:29339/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/111630/","zbetcheckin"
 "111629","2019-01-27 21:58:34","http://177.68.147.145:1142/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/111629/","zbetcheckin"
 "111628","2019-01-27 21:58:28","http://37.34.244.167:16848/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/111628/","zbetcheckin"
-"111627","2019-01-27 21:52:04","http://amd.alibuf.com:7723/dsc.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/111627/","zbetcheckin"
+"111627","2019-01-27 21:52:04","http://amd.alibuf.com:7723/dsc.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/111627/","zbetcheckin"
 "111626","2019-01-27 21:51:06","http://66.117.6.174/wpd.jpg","online","malware_download","exe","https://urlhaus.abuse.ch/url/111626/","zbetcheckin"
 "111625","2019-01-27 21:08:06","http://moha-group.ir/nazy/PurchaseOrder.exe","offline","malware_download","exe,Pony","https://urlhaus.abuse.ch/url/111625/","zbetcheckin"
 "111624","2019-01-27 21:07:05","http://komax.ir/Adobe_Flash_Player_Plugin.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/111624/","zbetcheckin"
@@ -238647,7 +239034,7 @@
 "111609","2019-01-27 19:22:11","http://amd.alibuf.com:7723/DSP12.EXE","offline","malware_download","exe","https://urlhaus.abuse.ch/url/111609/","zbetcheckin"
 "111608","2019-01-27 19:18:05","http://dns.fq520000.com:443/9.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/111608/","zbetcheckin"
 "111607","2019-01-27 19:14:02","http://165.227.212.62/bins/hoho.sh4","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/111607/","zbetcheckin"
-"111606","2019-01-27 19:00:08","http://dns.alibuf.com:7723/dsc.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/111606/","zbetcheckin"
+"111606","2019-01-27 19:00:08","http://dns.alibuf.com:7723/dsc.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/111606/","zbetcheckin"
 "111605","2019-01-27 18:48:17","http://ca.fq520000.com:443/123.exe","offline","malware_download","CoinMiner,exe,Redosdru","https://urlhaus.abuse.ch/url/111605/","zbetcheckin"
 "111604","2019-01-27 18:44:26","http://dns.alibuf.com:7723/dsp12.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/111604/","zbetcheckin"
 "111603","2019-01-27 18:44:18","http://165.227.212.62/bins/hoho.ppc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/111603/","zbetcheckin"
@@ -238832,7 +239219,7 @@
 "111423","2019-01-27 14:46:10","http://ca.hashpost.org:443/123.exe","offline","malware_download","CoinMiner,EBDP","https://urlhaus.abuse.ch/url/111423/","anonymous"
 "111422","2019-01-27 14:43:03","http://cnm.idc3389.top/download.exe","offline","malware_download","EBDP","https://urlhaus.abuse.ch/url/111422/","anonymous"
 "111421","2019-01-27 14:42:08","http://ca.monerov8.com:443/321.exe","offline","malware_download","CoinMiner,EBDP,Redosdru","https://urlhaus.abuse.ch/url/111421/","anonymous"
-"111420","2019-01-27 14:39:16","http://dnn.alibuf.com:7723/dsc12.exe","offline","malware_download","CoinMiner,EBDP","https://urlhaus.abuse.ch/url/111420/","anonymous"
+"111420","2019-01-27 14:39:16","http://dnn.alibuf.com:7723/dsc12.exe","online","malware_download","CoinMiner,EBDP","https://urlhaus.abuse.ch/url/111420/","anonymous"
 "111419","2019-01-27 14:39:07","http://dnn.alibuf.com:7723/dsc.exe","online","malware_download","CoinMiner,EBDP","https://urlhaus.abuse.ch/url/111419/","anonymous"
 "111418","2019-01-27 14:38:14","http://t.honker.info:8/madk.exe","online","malware_download","CoinMiner,EBDP","https://urlhaus.abuse.ch/url/111418/","anonymous"
 "111417","2019-01-27 14:38:06","http://t.honker.info:8/445.exe","online","malware_download","CoinMiner,EBDP","https://urlhaus.abuse.ch/url/111417/","anonymous"
@@ -243949,7 +244336,7 @@
 "106086","2019-01-20 14:06:04","http://fxtraderlog.com/downloads/fxtraderlog_upgrade.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/106086/","zbetcheckin"
 "106085","2019-01-20 13:41:05","http://files.hrloo.com/bbs/data/attachment/forum/201212/20/10301044ex3m3s62emr1r7.doc?n=weyvuwtgv3lkzjlt6xln7norq3nrqhnkiblilbluqyuzg9j","offline","malware_download","doc","https://urlhaus.abuse.ch/url/106085/","zbetcheckin"
 "106084","2019-01-20 13:37:17","http://download.fahpvdxw.cn/xbpic/fmt/v1.0.1.17/fmt_01.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/106084/","zbetcheckin"
-"106083","2019-01-20 13:37:08","http://down.xrpdf.com/softdownloadol/xrpdfol5024.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/106083/","zbetcheckin"
+"106083","2019-01-20 13:37:08","http://down.xrpdf.com/softdownloadol/xrpdfol5024.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/106083/","zbetcheckin"
 "106082","2019-01-20 13:12:42","http://45.62.249.171/d/xd.spc","offline","malware_download","elf","https://urlhaus.abuse.ch/url/106082/","Gandylyan1"
 "106081","2019-01-20 13:12:41","http://45.62.249.171/d/xd.mips","offline","malware_download","elf","https://urlhaus.abuse.ch/url/106081/","Gandylyan1"
 "106080","2019-01-20 13:12:40","http://167.114.186.21/i686","offline","malware_download","elf","https://urlhaus.abuse.ch/url/106080/","Gandylyan1"
@@ -244021,7 +244408,7 @@
 "106012","2019-01-19 23:30:07","http://d2.udashi.com/soft/29691/ICOshengchengqi.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/106012/","zbetcheckin"
 "106011","2019-01-19 23:24:19","http://d2.udashi.com/soft/27957/dqeswds1.0.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/106011/","zbetcheckin"
 "106009","2019-01-19 23:07:05","http://listmyfloor.com/file.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/106009/","zbetcheckin"
-"106008","2019-01-19 22:27:06","http://cdn-10049480.file.myqcloud.com/qcoin/qcoin135.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/106008/","zbetcheckin"
+"106008","2019-01-19 22:27:06","http://cdn-10049480.file.myqcloud.com/qcoin/qcoin135.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/106008/","zbetcheckin"
 "106007","2019-01-19 22:24:35","http://220.135.8.93:1543/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/106007/","zbetcheckin"
 "106006","2019-01-19 22:20:06","http://cdn-10049480.file.myqcloud.com/qcoin/qcoin128.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/106006/","zbetcheckin"
 "106005","2019-01-19 22:19:59","http://121.41.0.159/mjsoft/Config/llctk/LLCTK.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/106005/","zbetcheckin"
@@ -244037,7 +244424,7 @@
 "105992","2019-01-19 21:29:07","http://cdn-10049480.file.myqcloud.com/jd/jd145.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/105992/","zbetcheckin"
 "105991","2019-01-19 21:29:06","http://cdn-10049480.file.myqcloud.com/qcoin/qcoin140.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/105991/","zbetcheckin"
 "105990","2019-01-19 21:21:19","http://clarabellebaby.com/wp-content/themes/wpex-pytheas/functions/meta/gallery-metabox/sserv.jpg","offline","malware_download","exe,Troldesh","https://urlhaus.abuse.ch/url/105990/","zbetcheckin"
-"105989","2019-01-19 21:13:05","http://cdn-10049480.file.myqcloud.com/qcoin/qcoin131.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/105989/","zbetcheckin"
+"105989","2019-01-19 21:13:05","http://cdn-10049480.file.myqcloud.com/qcoin/qcoin131.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/105989/","zbetcheckin"
 "105988","2019-01-19 21:10:07","http://cdn-10049480.file.myqcloud.com/jd/jd144.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/105988/","zbetcheckin"
 "105987","2019-01-19 21:05:05","http://cdn-10049480.file.myqcloud.com/jd/jd138.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/105987/","zbetcheckin"
 "105985","2019-01-19 20:56:16","http://cdn-10049480.file.myqcloud.com/jd/jd136.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/105985/","zbetcheckin"
@@ -250360,7 +250747,7 @@
 "99524","2018-12-25 04:00:04","http://tendep.com/hinhanh/thuvienanh/sad.exe","offline","malware_download","exe,njRAT","https://urlhaus.abuse.ch/url/99524/","zbetcheckin"
 "99523","2018-12-25 03:58:10","http://tendep.com/hinhanh/rosinject.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/99523/","zbetcheckin"
 "99522","2018-12-25 03:42:04","http://tendep.com/hinhanh/payload.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/99522/","zbetcheckin"
-"99521","2018-12-25 03:39:32","http://mv360.net/MV360_ACTIVEX_2.5.2.EXE","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/99521/","zbetcheckin"
+"99521","2018-12-25 03:39:32","http://mv360.net/MV360_ACTIVEX_2.5.2.EXE","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/99521/","zbetcheckin"
 "99518","2018-12-25 03:16:28","http://mv360.net/mv360_activex.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/99518/","zbetcheckin"
 "99517","2018-12-25 03:06:04","http://81.133.236.83:13241/.i","offline","malware_download","elf","https://urlhaus.abuse.ch/url/99517/","zbetcheckin"
 "99516","2018-12-25 02:46:04","http://inscribesignage.com/wp-admin/js/mt.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/99516/","zbetcheckin"
@@ -252882,8 +253269,8 @@
 "96924","2018-12-18 07:22:04","https://amsi.co.za/zzmyc/3AA.exe","offline","malware_download","exe,Loki,lokibot","https://urlhaus.abuse.ch/url/96924/","dvk01uk"
 "96923","2018-12-18 07:17:08","http://mso.services/GlennInternational/PurchaseOrder/PO_141218G.doc","offline","malware_download","doc,Loki,threadkit","https://urlhaus.abuse.ch/url/96923/","anonymous"
 "96922","2018-12-18 07:15:19","http://bd19.52lishi.com/bd49786.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/96922/","zbetcheckin"
-"96921","2018-12-18 07:14:20","http://bd19.52lishi.com/bd12836.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/96921/","zbetcheckin"
-"96920","2018-12-18 07:13:21","http://bd19.52lishi.com/bd67489.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/96920/","zbetcheckin"
+"96921","2018-12-18 07:14:20","http://bd19.52lishi.com/bd12836.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/96921/","zbetcheckin"
+"96920","2018-12-18 07:13:21","http://bd19.52lishi.com/bd67489.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/96920/","zbetcheckin"
 "96919","2018-12-18 07:12:08","http://bd19.52lishi.com/bd49020.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/96919/","zbetcheckin"
 "96918","2018-12-18 06:56:04","http://68.183.208.152/AB4g5/Josho.x86","offline","malware_download","elf","https://urlhaus.abuse.ch/url/96918/","zbetcheckin"
 "96916","2018-12-18 06:54:06","http://bd19.52lishi.com/bd71150.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/96916/","zbetcheckin"
@@ -254762,7 +255149,7 @@
 "94992","2018-12-14 10:41:05","http://nismotek.com/SharatSinha/css/sserv.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/94992/","zbetcheckin"
 "94991","2018-12-14 10:41:02","http://newreport.info/wp-content/themes/twentyseventeen/assets/css/sserv.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/94991/","zbetcheckin"
 "94990","2018-12-14 10:31:07","http://ajosdiegopozo.com/OJhNz-1KuIKUyPnJNp7n_NGyDRsGQM-8d/BIZ/Commercial/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/94990/","Cryptolaemus1"
-"94989","2018-12-14 10:25:05","http://a.xiazai163.com/DOWN/RUOKUAIDAMA_ITMOP.COM.ZIP","offline","malware_download","zip","https://urlhaus.abuse.ch/url/94989/","zbetcheckin"
+"94989","2018-12-14 10:25:05","http://a.xiazai163.com/DOWN/RUOKUAIDAMA_ITMOP.COM.ZIP","online","malware_download","zip","https://urlhaus.abuse.ch/url/94989/","zbetcheckin"
 "94987","2018-12-14 10:24:07","http://2.187.39.208:40551/.i","offline","malware_download","elf","https://urlhaus.abuse.ch/url/94987/","zbetcheckin"
 "94988","2018-12-14 10:24:07","http://51.254.84.55/updater.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/94988/","zbetcheckin"
 "94986","2018-12-14 10:24:03","http://93.41.182.249:12228/.i","offline","malware_download","elf","https://urlhaus.abuse.ch/url/94986/","zbetcheckin"
@@ -256375,7 +256762,7 @@
 "93260","2018-12-11 19:37:03","http://kkorner.net/US/ACH/12_18/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/93260/","Cryptolaemus1"
 "93259","2018-12-11 19:37:02","http://zoom-machinery.com/US/Attachments/12_18/","offline","malware_download","emotet,epoch1","https://urlhaus.abuse.ch/url/93259/","Cryptolaemus1"
 "93258","2018-12-11 18:52:02","http://kkorner.net/US/ACH/12_18","offline","malware_download","emotet","https://urlhaus.abuse.ch/url/93258/","zoomequipd"
-"93257","2018-12-11 18:50:03","http://94.244.25.21:51274/.i","online","malware_download","elf","https://urlhaus.abuse.ch/url/93257/","zbetcheckin"
+"93257","2018-12-11 18:50:03","http://94.244.25.21:51274/.i","offline","malware_download","elf","https://urlhaus.abuse.ch/url/93257/","zbetcheckin"
 "93256","2018-12-11 18:49:01","http://vw-stickerspro.fr/wp-content/languages/plugins/bs.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/93256/","zbetcheckin"
 "93255","2018-12-11 18:48:08","http://ssosi.ru/huj/sprites/1234.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/93255/","malware_traffic"
 "93254","2018-12-11 18:48:07","http://ssosi.ru/idiot.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/93254/","malware_traffic"
@@ -258432,7 +258819,7 @@
 "91147","2018-12-07 13:04:03","http://lba-gruppen.dk/spq/","offline","malware_download","exe,heodo","https://urlhaus.abuse.ch/url/91147/","zbetcheckin"
 "91146","2018-12-07 13:03:04","http://uolli.it/mu5g/","offline","malware_download","exe,heodo","https://urlhaus.abuse.ch/url/91146/","zbetcheckin"
 "91145","2018-12-07 13:01:02","http://depozituldegeneratoare.ro/jGIpmPwB0G/","offline","malware_download","exe,heodo","https://urlhaus.abuse.ch/url/91145/","zbetcheckin"
-"91144","2018-12-07 12:43:04","http://72.186.139.38:64234/.i","online","malware_download","elf","https://urlhaus.abuse.ch/url/91144/","zbetcheckin"
+"91144","2018-12-07 12:43:04","http://72.186.139.38:64234/.i","offline","malware_download","elf","https://urlhaus.abuse.ch/url/91144/","zbetcheckin"
 "91143","2018-12-07 12:36:03","http://jetclean.co.uk/tre.tata","offline","malware_download","exe,Trickbot","https://urlhaus.abuse.ch/url/91143/","stoerchl"
 "91142","2018-12-07 12:35:05","http://deaconbrothersfilm.com/tre.tata","offline","malware_download","exe,Trickbot","https://urlhaus.abuse.ch/url/91142/","stoerchl"
 "91141","2018-12-07 12:24:03","http://142.93.90.61/yakuza.ppc","offline","malware_download","elf","https://urlhaus.abuse.ch/url/91141/","zbetcheckin"
@@ -261994,7 +262381,7 @@
 "87533","2018-11-30 15:44:07","http://macecraft.site/modules/geoip/geofile/dll/popup.dbs","offline","malware_download","exe","https://urlhaus.abuse.ch/url/87533/","de_aviation"
 "87532","2018-11-30 15:44:04","http://ddl3.data.hu/get/300095/11552248/2018112810098HTG.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/87532/","de_aviation"
 "87531","2018-11-30 15:44:03","https://share.dmca.gripe/3MPMOJEMMqUSlT7v.jpg","offline","malware_download","exe,NanoCore,rat","https://urlhaus.abuse.ch/url/87531/","de_aviation"
-"87530","2018-11-30 15:29:01","http://www.tandenblekenhoofddorp.nl/files/EN_en/Sales-Invoice/","online","malware_download","emotet,heodo,word doc","https://urlhaus.abuse.ch/url/87530/","malware_traffic"
+"87530","2018-11-30 15:29:01","http://www.tandenblekenhoofddorp.nl/files/EN_en/Sales-Invoice/","offline","malware_download","emotet,heodo,word doc","https://urlhaus.abuse.ch/url/87530/","malware_traffic"
 "87529","2018-11-30 15:29:00","http://wowter.com/files/US/Invoice-for-i/w-11/29/2018/","offline","malware_download","emotet,heodo,word doc","https://urlhaus.abuse.ch/url/87529/","malware_traffic"
 "87528","2018-11-30 15:28:58","http://winnieobrien.com/doc/En/Past-Due-Invoice/","offline","malware_download","emotet,heodo,word doc","https://urlhaus.abuse.ch/url/87528/","malware_traffic"
 "87527","2018-11-30 15:28:56","http://whysquare.co.nz/EN/Clients_Coupons/","offline","malware_download","emotet,heodo,word doc","https://urlhaus.abuse.ch/url/87527/","malware_traffic"
@@ -282328,14 +282715,14 @@
 "66809","2018-10-11 15:36:08","http://mandala.mn/update/chidori.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/66809/","zbetcheckin"
 "66808","2018-10-11 15:36:02","http://185.244.25.200/bins/gemini.m68k","offline","malware_download","elf","https://urlhaus.abuse.ch/url/66808/","zbetcheckin"
 "66807","2018-10-11 15:26:03","http://payesh-co.com/po.doc","offline","malware_download","RTF","https://urlhaus.abuse.ch/url/66807/","zbetcheckin"
-"66806","2018-10-11 15:18:07","http://dx1.qqtn.com/qq/qqdlq.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/66806/","zbetcheckin"
+"66806","2018-10-11 15:18:07","http://dx1.qqtn.com/qq/qqdlq.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/66806/","zbetcheckin"
 "66805","2018-10-11 15:15:06","http://dx1.qqtn.com/qq/ddz.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/66805/","zbetcheckin"
-"66803","2018-10-11 15:05:07","http://dx1.qqtn.com/qq/csoldl.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/66803/","zbetcheckin"
+"66803","2018-10-11 15:05:07","http://dx1.qqtn.com/qq/csoldl.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/66803/","zbetcheckin"
 "66802","2018-10-11 14:58:02","http://cascinadellemele.it/uCpTB/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/66802/","abuse_ch"
 "66801","2018-10-11 14:57:03","http://sfbotvinnik.icu/folua/dwrite.exe","offline","malware_download","exe,Smoke Loader","https://urlhaus.abuse.ch/url/66801/","abuse_ch"
-"66800","2018-10-11 14:56:07","http://dx1.qqtn.com/qq/qqpetnurse.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/66800/","zbetcheckin"
-"66799","2018-10-11 14:47:08","http://dx1.qqtn.com/qq/kjzb.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/66799/","zbetcheckin"
-"66798","2018-10-11 14:39:09","http://dx1.qqtn.com/qq/qqmfkp.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/66798/","zbetcheckin"
+"66800","2018-10-11 14:56:07","http://dx1.qqtn.com/qq/qqpetnurse.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/66800/","zbetcheckin"
+"66799","2018-10-11 14:47:08","http://dx1.qqtn.com/qq/kjzb.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/66799/","zbetcheckin"
+"66798","2018-10-11 14:39:09","http://dx1.qqtn.com/qq/qqmfkp.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/66798/","zbetcheckin"
 "66796","2018-10-11 14:27:02","http://185.244.25.200/bins/gemini.arm","offline","malware_download","elf","https://urlhaus.abuse.ch/url/66796/","zbetcheckin"
 "66795","2018-10-11 14:22:04","http://stroysfera.com.ua/93-78520502289-7208613143877289106.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/66795/","zbetcheckin"
 "66794","2018-10-11 14:17:32","http://pondokarsitek.com/wp-content/themes/west/page-templates/inform.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/66794/","lam_esrever"
@@ -282723,17 +283110,17 @@
 "66392","2018-10-10 00:51:03","http://dx2.qqtn.com/qq/XXHZW2.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/66392/","zbetcheckin"
 "66391","2018-10-10 00:50:12","http://dx2.qqtn.com/QQ/llkxuser.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/66391/","zbetcheckin"
 "66390","2018-10-10 00:50:10","http://gallery.mailchimp.com/e5e323f8390ddd27a48e175ca/files/Factura_Crezcamos.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/66390/","zbetcheckin"
-"66389","2018-10-10 00:50:07","http://dx2.qqtn.com/QQ/QQPetNurse3.01_Beta1.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/66389/","zbetcheckin"
+"66389","2018-10-10 00:50:07","http://dx2.qqtn.com/QQ/QQPetNurse3.01_Beta1.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/66389/","zbetcheckin"
 "66388","2018-10-10 00:45:04","https://gallery.mailchimp.com/30bdf0edb8faf4fb164f8c865/files/WBINBOUNDS.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/66388/","zbetcheckin"
 "66387","2018-10-10 00:38:03","http://gallery.mailchimp.com/5182e3ac85debb9b3b14915a4/files/Swift_Copy.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/66387/","zbetcheckin"
 "66386","2018-10-10 00:37:07","http://dx2.qqtn.com/QQ/olaQQddz1.37.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/66386/","zbetcheckin"
-"66385","2018-10-10 00:37:04","http://dx2.qqtn.com/QQ2/xxjpq.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/66385/","zbetcheckin"
-"66384","2018-10-10 00:37:03","http://dx2.qqtn.com/qq2/jywgxrj.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/66384/","zbetcheckin"
+"66385","2018-10-10 00:37:04","http://dx2.qqtn.com/QQ2/xxjpq.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/66385/","zbetcheckin"
+"66384","2018-10-10 00:37:03","http://dx2.qqtn.com/qq2/jywgxrj.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/66384/","zbetcheckin"
 "66383","2018-10-10 00:36:07","http://gallery.mailchimp.com/8fda4e1d3758c37f74f3de96d/files/inv0ice_0019936.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/66383/","zbetcheckin"
 "66382","2018-10-10 00:36:05","http://dx2.qqtn.com/qq3/bdjpq.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/66382/","zbetcheckin"
 "66381","2018-10-10 00:29:10","http://198.1.188.107/ys808e","offline","malware_download","elf","https://urlhaus.abuse.ch/url/66381/","zbetcheckin"
-"66380","2018-10-10 00:29:08","http://dx2.qqtn.com/qq3/qqlogins.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/66380/","zbetcheckin"
-"66379","2018-10-10 00:29:06","http://dx2.qqtn.com/qq3/x5lydt.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/66379/","zbetcheckin"
+"66380","2018-10-10 00:29:08","http://dx2.qqtn.com/qq3/qqlogins.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/66380/","zbetcheckin"
+"66379","2018-10-10 00:29:06","http://dx2.qqtn.com/qq3/x5lydt.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/66379/","zbetcheckin"
 "66378","2018-10-10 00:28:07","http://dx2.qqtn.com/qq/qq4ddz1.10.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/66378/","zbetcheckin"
 "66377","2018-10-09 23:40:04","https://luckswatch.com/manageaccount/159AL42425-order-status-fulfilled","offline","malware_download","lnk,sLoad,zip","https://urlhaus.abuse.ch/url/66377/","ps66uk"
 "66376","2018-10-09 23:40:03","https://peoplewithai.com/manageaccount/09D2I543-order-status-fulfilled","offline","malware_download","lnk,sLoad,zip","https://urlhaus.abuse.ch/url/66376/","ps66uk"
@@ -282752,7 +283139,7 @@
 "66363","2018-10-09 20:01:06","http://toshioco.com/doc/WIZ.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/66363/","zbetcheckin"
 "66362","2018-10-09 19:55:03","https://oohrdg.by.files.1drv.com/y4mZDL-iW1ATb_5qP8sh7ES7NpyccZvqZHry3LC3St09_q_hEstXReFPyPlHsNx_Fs4kLcFsDeOVjhpBpwUbTHsekv5mbsslVN_K6u4rCHcdQh3obDsPyDeP3bWQfz7WRSt8KlihgrkGmnGNQKcjlmHvRicNb6RTtYHB71qUXVkL6mGAB3-HikMVdW2UKW6CgzBdZcYMH5RNxjoahr_1HAfvQ/DHL%20TRACKING%20REF.scr?download&psid=1","offline","malware_download","exe,NanoCore","https://urlhaus.abuse.ch/url/66362/","zbetcheckin"
 "66361","2018-10-09 19:52:31","http://geolegno.eu/9722653CVAPKJIT/PAYMENT/Business","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/66361/","JayTHL"
-"66360","2018-10-09 19:42:11","http://dx2.qqtn.com/qq/qqangel.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/66360/","zbetcheckin"
+"66360","2018-10-09 19:42:11","http://dx2.qqtn.com/qq/qqangel.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/66360/","zbetcheckin"
 "66359","2018-10-09 19:42:03","http://23.249.161.109/chf/agnt.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/66359/","zbetcheckin"
 "66358","2018-10-09 18:45:03","https://uc5b7b21c37968941e15f53c6c93.dl.dropboxusercontent.com/cd/0/get/ASk5k-lxl6XDzNY8iP8YHtpqx6wXfSOwugyXWql_qNFfmMBsl1kfMDkh1BOloPMNyzAPmln_3kW-7a2WfpGzvCgDDdHGhN92ikkMROYmfuwCnAvD3ZoBcDZHzdqLzawVYBwCLirGgJg5vL35jJlnLdkZ7xrGWGLKM5qwBsUENoQ_s9HWDRSxyv17hd6ROmBUQ3E/file?dl=1","offline","malware_download","zip","https://urlhaus.abuse.ch/url/66358/","zbetcheckin"
 "66357","2018-10-09 18:22:02","http://readyteam.org/29c.msi","offline","malware_download","msi","https://urlhaus.abuse.ch/url/66357/","zbetcheckin"
@@ -285401,7 +285788,7 @@
 "63678","2018-10-02 15:44:07","http://us.cdn.persiangig.com/dl/eFcspg/vjakfree.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/63678/","zbetcheckin"
 "63677","2018-10-02 15:44:04","http://us.cdn.persiangig.com/dl/b0HEoI/test.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/63677/","zbetcheckin"
 "63676","2018-10-02 15:44:03","http://beyondedu.in/En_us/Transaction_details/10_18/","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/63676/","zbetcheckin"
-"63675","2018-10-02 15:36:10","http://bd18.52lishi.com/bd65146.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/63675/","zbetcheckin"
+"63675","2018-10-02 15:36:10","http://bd18.52lishi.com/bd65146.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/63675/","zbetcheckin"
 "63674","2018-10-02 15:34:15","http://bd12.52lishi.com/bd64813.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/63674/","zbetcheckin"
 "63673","2018-10-02 15:22:45","http://thewagelaws.com","offline","malware_download","None","https://urlhaus.abuse.ch/url/63673/","JayTHL"
 "63672","2018-10-02 15:22:39","http://thesecuritieslaws.com","offline","malware_download","None","https://urlhaus.abuse.ch/url/63672/","JayTHL"
@@ -285417,7 +285804,7 @@
 "63662","2018-10-02 15:22:09","http://ehotemnoty.beget.tech/louder/s.exe","offline","malware_download","downloader,exe,Themida","https://urlhaus.abuse.ch/url/63662/","MJRooter"
 "63661","2018-10-02 15:22:06","http://ehotemnoty.beget.tech/louder/r.exe","offline","malware_download","backdoor,exe,Themida,xiclog","https://urlhaus.abuse.ch/url/63661/","MJRooter"
 "63660","2018-10-02 15:22:04","http://localhm6.beget.tech/AU3.exe","offline","malware_download","exe,MoksSteal,spy,stealer","https://urlhaus.abuse.ch/url/63660/","MJRooter"
-"63659","2018-10-02 15:18:08","http://bd18.52lishi.com/bd70305.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/63659/","zbetcheckin"
+"63659","2018-10-02 15:18:08","http://bd18.52lishi.com/bd70305.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/63659/","zbetcheckin"
 "63658","2018-10-02 15:14:15","http://bd12.52lishi.com/bd53544.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/63658/","zbetcheckin"
 "63657","2018-10-02 14:53:37","http://thediscriminationlaws.com","offline","malware_download","None","https://urlhaus.abuse.ch/url/63657/","JayTHL"
 "63656","2018-10-02 14:53:32","http://www.tpoa-indonesia.org/wp-content/plugins/wpgform/3","offline","malware_download","None","https://urlhaus.abuse.ch/url/63656/","JayTHL"
@@ -285470,14 +285857,14 @@
 "63609","2018-10-02 14:20:07","http://77190.prohoster.biz/Fuhacksgameijctr.exe","offline","malware_download","CoinMiner,exe,W64","https://urlhaus.abuse.ch/url/63609/","MJRooter"
 "63608","2018-10-02 14:20:06","http://77190.prohoster.biz/Fuhackssafebanprtct.exe","offline","malware_download","exe,spyware,Themida","https://urlhaus.abuse.ch/url/63608/","MJRooter"
 "63607","2018-10-02 14:20:03","http://very.ruvmp.ru/77777.exe","offline","malware_download","ArkeiStealer,Dapato,dropper,exe","https://urlhaus.abuse.ch/url/63607/","MJRooter"
-"63606","2018-10-02 14:06:09","http://bd11.52lishi.com/bd75837.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/63606/","zbetcheckin"
+"63606","2018-10-02 14:06:09","http://bd11.52lishi.com/bd75837.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/63606/","zbetcheckin"
 "63605","2018-10-02 14:06:03","http://darnellsim.us/doc/WIZZY.exe","offline","malware_download","exe,HawkEye","https://urlhaus.abuse.ch/url/63605/","zbetcheckin"
 "63604","2018-10-02 14:01:08","http://cosmictone.com.au/lHyBcgn/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/63604/","abuse_ch"
 "63603","2018-10-02 14:01:06","http://www.expressarsetelagoas.com.br/8tr1wP/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/63603/","abuse_ch"
 "63602","2018-10-02 14:01:03","http://www.acilisbalon.com/zDLorjW/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/63602/","abuse_ch"
 "63601","2018-10-02 14:01:02","http://jany.be/UsCX/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/63601/","abuse_ch"
-"63600","2018-10-02 13:58:07","http://bd11.52lishi.com/bd55878.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/63600/","zbetcheckin"
-"63599","2018-10-02 13:57:05","http://bd11.52lishi.com/bd11536.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/63599/","zbetcheckin"
+"63600","2018-10-02 13:58:07","http://bd11.52lishi.com/bd55878.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/63600/","zbetcheckin"
+"63599","2018-10-02 13:57:05","http://bd11.52lishi.com/bd11536.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/63599/","zbetcheckin"
 "63598","2018-10-02 13:45:03","http://anonupload.net/uploads/poipkgde/WindowsFormsApp1.exe","offline","malware_download","exe,ImminentRAT","https://urlhaus.abuse.ch/url/63598/","cocaman"
 "63597","2018-10-02 13:04:03","http://23.94.53.164/e5rnad8bjk.exe","offline","malware_download","exe,Gozi","https://urlhaus.abuse.ch/url/63597/","zbetcheckin"
 "63596","2018-10-02 12:19:12","http://ptpjm.co.id/updd/ggp.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/63596/","zbetcheckin"
@@ -289335,12 +289722,12 @@
 "59660","2018-09-24 09:44:16","http://small.962.net/bd/qs1.30xgq.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/59660/","zbetcheckin"
 "59659","2018-09-24 09:44:12","http://jxbaohusan.com/38OPAYMENT/GDZJ841728301YFXC/Aug-10-2018-643480624/RQ-QYMS-Aug-10-2018","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/59659/","zbetcheckin"
 "59658","2018-09-24 09:44:09","http://small.962.net/bd/CFtxfkV12309.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/59658/","zbetcheckin"
-"59657","2018-09-24 09:42:08","http://small.962.net/bd/hero513trn_edit.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/59657/","zbetcheckin"
+"59657","2018-09-24 09:42:08","http://small.962.net/bd/hero513trn_edit.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/59657/","zbetcheckin"
 "59656","2018-09-24 09:26:09","http://woodchips.com.ua/sites/EN_en/Payment-and-address/Invoice-5932518","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/59656/","zbetcheckin"
 "59655","2018-09-24 09:26:04","http://jxbaohusan.com/files/En_us/Latest-payment","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/59655/","zbetcheckin"
 "59654","2018-09-24 09:25:35","http://van-wonders.co.uk/wwvvv/646IZV/com/Smallbusiness","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/59654/","zbetcheckin"
 "59653","2018-09-24 09:24:04","http://small.962.net/bd/ylyxfblxgbd.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/59653/","zbetcheckin"
-"59652","2018-09-24 09:23:53","http://small.962.net/bd/rxwlsegjjcdlc.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/59652/","zbetcheckin"
+"59652","2018-09-24 09:23:53","http://small.962.net/bd/rxwlsegjjcdlc.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/59652/","zbetcheckin"
 "59651","2018-09-24 09:22:06","http://woodchips.com.ua/files/US/INVOICES/Invoice-57697","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/59651/","zbetcheckin"
 "59650","2018-09-24 09:12:04","http://23.249.161.109/shell/vb.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/59650/","oppimaniac"
 "59649","2018-09-24 09:10:18","http://files6.uludagbilisim.com/Setup/NBYS_AH/v10487/eimzaKurulum.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/59649/","zbetcheckin"
@@ -304545,7 +304932,7 @@
 "44182","2018-08-18 04:49:29","http://mentorytraining.com/fnb9HH/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/44182/","dvk01uk"
 "44181","2018-08-18 04:49:29","https://mountalbertdental.com/qoute/50790.exe","offline","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/44181/","olihough86"
 "44180","2018-08-18 04:49:26","http://repro4.com/website/wp-content/uploads/3759717YKLXRQVS/PAY/Smallbusiness","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/44180/","dvk01uk"
-"44179","2018-08-18 04:49:25","http://patch2.99ddd.com/2013/ALI213-NSUNSR.SP.MP.Unlocker.tools.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/44179/","zbetcheckin"
+"44179","2018-08-18 04:49:25","http://patch2.99ddd.com/2013/ALI213-NSUNSR.SP.MP.Unlocker.tools.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/44179/","zbetcheckin"
 "44178","2018-08-18 04:49:17","http://hvatator.ru/2222LR/identity/US","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/44178/","dvk01uk"
 "44177","2018-08-18 04:49:16","http://news.digirook.com/OH7l/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/44177/","dvk01uk"
 "44176","2018-08-18 04:49:12","http://vantaihoangphi.com/3107186PDIYJVK/ACH/US/","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/44176/","zbetcheckin"
@@ -323236,7 +323623,7 @@
 "25170","2018-06-28 23:04:08","http://signsdesigns.com.au/Invoice-Corrections-06/28/2018/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/25170/","anonymous"
 "25171","2018-06-28 23:04:08","http://smi-nkama.ru/STATUS/New-Invoice-QL5101-VO-90626/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/25171/","anonymous"
 "25169","2018-06-28 23:04:06","http://sasamototen.jp/Company-Invoices-June/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/25169/","anonymous"
-"25168","2018-06-28 23:04:04","http://sahathaikasetpan.com/Declaracion-mensual-junio/","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/25168/","anonymous"
+"25168","2018-06-28 23:04:04","http://sahathaikasetpan.com/Declaracion-mensual-junio/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/25168/","anonymous"
 "25167","2018-06-28 23:04:01","http://sahathaikasetpan.com/DEF/New-Order-Upcoming/Invoice-06-28-18/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/25167/","anonymous"
 "25165","2018-06-28 23:03:57","http://nisekotourguide.net/acmailer/harmoneyresorts/image/Payment-and-address/Order-8288256568/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/25165/","anonymous"
 "25164","2018-06-28 23:03:55","http://muybn.com/aspnet_client/Outstanding-Invoices-June/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/25164/","anonymous"
@@ -323918,7 +324305,7 @@
 "24480","2018-06-28 04:33:00","http://saudigeriatrics.org/OVERDUE-ACCOUNT/Invoice-06-27-18/","offline","malware_download","heodo","https://urlhaus.abuse.ch/url/24480/","JayTHL"
 "24478","2018-06-28 04:32:58","http://sandearth.com/Client/Invoice-955175372-062618/","offline","malware_download","heodo","https://urlhaus.abuse.ch/url/24478/","JayTHL"
 "24479","2018-06-28 04:32:58","http://sangorod.websaiting.ru/RECHNUNG/Bezahlen-Sie-die-Rechnung/","offline","malware_download","None","https://urlhaus.abuse.ch/url/24479/","JayTHL"
-"24477","2018-06-28 04:32:51","http://sahathaikasetpan.com/ACCOUNT/Order-22374507161/","online","malware_download","heodo","https://urlhaus.abuse.ch/url/24477/","JayTHL"
+"24477","2018-06-28 04:32:51","http://sahathaikasetpan.com/ACCOUNT/Order-22374507161/","offline","malware_download","heodo","https://urlhaus.abuse.ch/url/24477/","JayTHL"
 "24476","2018-06-28 04:32:46","http://ru-usa.ru/New-Order-Upcoming/Invoice-03575/","offline","malware_download","heodo","https://urlhaus.abuse.ch/url/24476/","JayTHL"
 "24475","2018-06-28 04:32:44","http://russiantraders.ru/Zahlungserinnerung/Erinnerung-an-die-Rechnungszahlung-Nr03625/","offline","malware_download","heodo","https://urlhaus.abuse.ch/url/24475/","JayTHL"
 "24474","2018-06-28 04:32:41","http://rite-equipment.aboxercompany.com/Pago-atrasado/","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/24474/","JayTHL"
@@ -326960,7 +327347,7 @@
 "21356","2018-06-20 06:06:03","http://74.222.1.38:8888/close.bat","offline","malware_download","Smominru","https://urlhaus.abuse.ch/url/21356/","anonymous"
 "21355","2018-06-20 06:02:47","http://ca.hashnice.org:443/123.exe","offline","malware_download","exe,Redosdru","https://urlhaus.abuse.ch/url/21355/","anonymous"
 "21354","2018-06-20 06:02:38","http://118.184.31.215/gg.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/21354/","anonymous"
-"21353","2018-06-20 06:00:36","http://da.alibuf.com:3/mado.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/21353/","anonymous"
+"21353","2018-06-20 06:00:36","http://da.alibuf.com:3/mado.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/21353/","anonymous"
 "21352","2018-06-20 06:00:29","http://da.alibuf.com:3/445.exe","online","malware_download","CoinMiner,exe","https://urlhaus.abuse.ch/url/21352/","anonymous"
 "21351","2018-06-20 05:55:05","http://104.223.213.141/mi3307","offline","malware_download","elf","https://urlhaus.abuse.ch/url/21351/","anonymous"
 "21350","2018-06-20 05:50:09","http://60.250.99.131:9998/liux","offline","malware_download","CoinMiner,elf,xmrig","https://urlhaus.abuse.ch/url/21350/","anonymous"
@@ -339576,7 +339963,7 @@
 "8002","2018-05-02 06:26:18","http://188.138.75.246/out/pir2.bin","offline","malware_download","Trickbot","https://urlhaus.abuse.ch/url/8002/","lovemalware"
 "8001","2018-05-02 06:25:57","https://fsp3.transfernow.net/download/5ae096aa8227f/attachment/0cf95fd9be8d/Nfe-09hMO1.zip","offline","malware_download","hancitor,zip","https://urlhaus.abuse.ch/url/8001/","lovemalware"
 "8000","2018-05-02 06:25:52","http://jarmilakavanova.cz/wp-content/themes/whatsappaudio754875421437.zip","offline","malware_download","hancitor,zip","https://urlhaus.abuse.ch/url/8000/","lovemalware"
-"7999","2018-05-02 06:25:50","http://bbs.sunwy.org/forum.php?mod=attachment&aid=MTY4NjM0fGRhNWIxYTVkNDJlMDdlOWQxZjM0YjdjZGMwY2FjZWFkfDEzNDc1NDM0MDU%3D&request=yes&_f=.zip","online","malware_download","hancitor,zip","https://urlhaus.abuse.ch/url/7999/","lovemalware"
+"7999","2018-05-02 06:25:50","http://bbs.sunwy.org/forum.php?mod=attachment&aid=MTY4NjM0fGRhNWIxYTVkNDJlMDdlOWQxZjM0YjdjZGMwY2FjZWFkfDEzNDc1NDM0MDU%3D&request=yes&_f=.zip","offline","malware_download","hancitor,zip","https://urlhaus.abuse.ch/url/7999/","lovemalware"
 "7998","2018-05-02 06:24:58","http://tangvision.com/wp-content/themes/flecia/images/e73b1ef95bc1d76f150c8328b8c66e3f.zip","offline","malware_download","hancitor,zip","https://urlhaus.abuse.ch/url/7998/","lovemalware"
 "7997","2018-05-02 06:24:53","http://camertondesigns.com/data/message.pdf","offline","malware_download","emotet","https://urlhaus.abuse.ch/url/7997/","lovemalware"
 "7996","2018-05-02 06:24:47","http://gold-proxy.ru/files/ready_21.exe","offline","malware_download","emotet,exe","https://urlhaus.abuse.ch/url/7996/","lovemalware"
@@ -342339,7 +342726,7 @@
 "1491","2018-03-29 14:42:52","http://cosmeticoslindas.com/Mar-20-01-58-05/Quantum-View/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/1491/","abuse_ch"
 "1490","2018-03-29 14:42:48","http://coolsculptingbeforeafter.com/PayPal-US/Corporation/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/1490/","abuse_ch"
 "1489","2018-03-29 14:42:45","http://clients.steadfast.digital/QQV-206648272849/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/1489/","abuse_ch"
-"1488","2018-03-29 14:42:44","http://cista-dobra-voda.com/WIRE-FORM/PK-4143542213772/","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/1488/","abuse_ch"
+"1488","2018-03-29 14:42:44","http://cista-dobra-voda.com/WIRE-FORM/PK-4143542213772/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/1488/","abuse_ch"
 "1487","2018-03-29 14:42:23","http://chungcuirisgardenmydinh.info/WIRE-FORM/QCQ-44937/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/1487/","abuse_ch"
 "1486","2018-03-29 14:42:05","http://chovaytienmatdanang.info/WIRE-FORM/CUB-89915244/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/1486/","abuse_ch"
 "1485","2018-03-29 14:41:45","http://chdagent.com/PayPal-US/INFO/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/1485/","abuse_ch"
diff --git a/urlhaus-filter-bind-online.conf b/urlhaus-filter-bind-online.conf
index 0958a801..2c95e469 100644
--- a/urlhaus-filter-bind-online.conf
+++ b/urlhaus-filter-bind-online.conf
@@ -1,5 +1,5 @@
 # Title: abuse.ch URLhaus Malicious Domains BIND Blocklist
-# Updated: Thu, 30 Apr 2020 12:09:30 UTC
+# Updated: Fri, 01 May 2020 00:10:35 UTC
 # Repo: https://gitlab.com/curben/urlhaus-filter
 # License: https://creativecommons.org/publicdomain/zero/1.0/
 # Source: https://urlhaus.abuse.ch/api/
@@ -12,20 +12,23 @@ zone "3.zhzy999.net" { type master; notify no; file "null.zone.file"; };
 zone "3.zhzy999.net3.zhzy999.net" { type master; notify no; file "null.zone.file"; };
 zone "3mandatesmedia.com" { type master; notify no; file "null.zone.file"; };
 zone "402musicfest.com" { type master; notify no; file "null.zone.file"; };
-zone "420hempizone.co" { type master; notify no; file "null.zone.file"; };
 zone "49parallel.ca" { type master; notify no; file "null.zone.file"; };
 zone "786suncity.com" { type master; notify no; file "null.zone.file"; };
 zone "8133msc.com" { type master; notify no; file "null.zone.file"; };
 zone "8200msc.com" { type master; notify no; file "null.zone.file"; };
+zone "87du.vip" { type master; notify no; file "null.zone.file"; };
 zone "887sconline.com" { type master; notify no; file "null.zone.file"; };
 zone "88mscco.com" { type master; notify no; file "null.zone.file"; };
 zone "9983suncity.com" { type master; notify no; file "null.zone.file"; };
+zone "Muanha.xyz" { type master; notify no; file "null.zone.file"; };
 zone "a-reality.co.uk" { type master; notify no; file "null.zone.file"; };
+zone "a.xiazai163.com" { type master; notify no; file "null.zone.file"; };
 zone "aaasolution.co.th" { type master; notify no; file "null.zone.file"; };
 zone "accentlandscapes.com" { type master; notify no; file "null.zone.file"; };
 zone "accessyouraudience.com" { type master; notify no; file "null.zone.file"; };
 zone "acteon.com.ar" { type master; notify no; file "null.zone.file"; };
 zone "ade.topepics.com" { type master; notify no; file "null.zone.file"; };
+zone "adnquocte.com" { type master; notify no; file "null.zone.file"; };
 zone "aelogica.com" { type master; notify no; file "null.zone.file"; };
 zone "agiandsam.com" { type master; notify no; file "null.zone.file"; };
 zone "agipasesores.com" { type master; notify no; file "null.zone.file"; };
@@ -42,11 +45,11 @@ zone "allloveseries.com" { type master; notify no; file "null.zone.file"; };
 zone "alohasoftware.net" { type master; notify no; file "null.zone.file"; };
 zone "alphaconsumer.net" { type master; notify no; file "null.zone.file"; };
 zone "am-concepts.ca" { type master; notify no; file "null.zone.file"; };
+zone "amd.alibuf.com" { type master; notify no; file "null.zone.file"; };
 zone "amedeoscognamiglio.329263.com" { type master; notify no; file "null.zone.file"; };
 zone "amemarine.co.th" { type master; notify no; file "null.zone.file"; };
 zone "americanrange.com" { type master; notify no; file "null.zone.file"; };
 zone "anadolutatili.com" { type master; notify no; file "null.zone.file"; };
-zone "andreabo1.myftp.biz" { type master; notify no; file "null.zone.file"; };
 zone "andreelapeyre.com" { type master; notify no; file "null.zone.file"; };
 zone "andremaraisbeleggings.co.za" { type master; notify no; file "null.zone.file"; };
 zone "angthong.nfe.go.th" { type master; notify no; file "null.zone.file"; };
@@ -60,9 +63,9 @@ zone "archiv.bg" { type master; notify no; file "null.zone.file"; };
 zone "arcticprospectus.com" { type master; notify no; file "null.zone.file"; };
 zone "areac-agr.com" { type master; notify no; file "null.zone.file"; };
 zone "aresorganics.com" { type master; notify no; file "null.zone.file"; };
+zone "arowanafishforsale.com" { type master; notify no; file "null.zone.file"; };
 zone "asadairtravel.com" { type master; notify no; file "null.zone.file"; };
 zone "ascentive.com" { type master; notify no; file "null.zone.file"; };
-zone "ashoakacharya.com" { type master; notify no; file "null.zone.file"; };
 zone "askarindo.or.id" { type master; notify no; file "null.zone.file"; };
 zone "atfile.com" { type master; notify no; file "null.zone.file"; };
 zone "atomlines.com" { type master; notify no; file "null.zone.file"; };
@@ -71,60 +74,66 @@ zone "atteuqpotentialunlimited.com" { type master; notify no; file "null.zone.fi
 zone "audiosv.com" { type master; notify no; file "null.zone.file"; };
 zone "aulist.com" { type master; notify no; file "null.zone.file"; };
 zone "auraco.ca" { type master; notify no; file "null.zone.file"; };
+zone "aurumboy.com" { type master; notify no; file "null.zone.file"; };
+zone "avestor.uz" { type master; notify no; file "null.zone.file"; };
 zone "azmeasurement.com" { type master; notify no; file "null.zone.file"; };
 zone "aznetsolutions.com" { type master; notify no; file "null.zone.file"; };
 zone "azureautomation.co.uk" { type master; notify no; file "null.zone.file"; };
 zone "azzd.co.kr" { type master; notify no; file "null.zone.file"; };
 zone "babaroadways.in" { type master; notify no; file "null.zone.file"; };
 zone "badgesforbullies.org" { type master; notify no; file "null.zone.file"; };
-zone "badmildiou.com" { type master; notify no; file "null.zone.file"; };
 zone "bagmatisanchar.com" { type master; notify no; file "null.zone.file"; };
 zone "bamakobleach.free.fr" { type master; notify no; file "null.zone.file"; };
+zone "bangkok-orchids.com" { type master; notify no; file "null.zone.file"; };
 zone "banzaimonkey.com" { type master; notify no; file "null.zone.file"; };
 zone "bapo.granudan.cn" { type master; notify no; file "null.zone.file"; };
-zone "bbs.sunwy.org" { type master; notify no; file "null.zone.file"; };
+zone "baritaco.com" { type master; notify no; file "null.zone.file"; };
 zone "bbs1.marisfrolg.com" { type master; notify no; file "null.zone.file"; };
+zone "bd11.52lishi.com" { type master; notify no; file "null.zone.file"; };
 zone "bd12.52lishi.com" { type master; notify no; file "null.zone.file"; };
+zone "bd18.52lishi.com" { type master; notify no; file "null.zone.file"; };
 zone "bd19.52lishi.com" { type master; notify no; file "null.zone.file"; };
-zone "beforeshithappens.com" { type master; notify no; file "null.zone.file"; };
 zone "beibei.xx007.cc" { type master; notify no; file "null.zone.file"; };
 zone "bepgroup.com.hk" { type master; notify no; file "null.zone.file"; };
 zone "besserblok-ufa.ru" { type master; notify no; file "null.zone.file"; };
-zone "besthack.co" { type master; notify no; file "null.zone.file"; };
 zone "besttasimacilik.com.tr" { type master; notify no; file "null.zone.file"; };
 zone "beta.pterosol.com" { type master; notify no; file "null.zone.file"; };
 zone "bflow.security-portal.cz" { type master; notify no; file "null.zone.file"; };
 zone "bildeboks.no" { type master; notify no; file "null.zone.file"; };
 zone "bilim-pavlodar.gov.kz" { type master; notify no; file "null.zone.file"; };
+zone "billieellish.org" { type master; notify no; file "null.zone.file"; };
 zone "bingxiong.vip" { type master; notify no; file "null.zone.file"; };
 zone "bjkumdo.com" { type master; notify no; file "null.zone.file"; };
-zone "blankki.com" { type master; notify no; file "null.zone.file"; };
 zone "blog.241optical.com" { type master; notify no; file "null.zone.file"; };
-zone "blog.anytimeneeds.com" { type master; notify no; file "null.zone.file"; };
 zone "blog.hanxe.com" { type master; notify no; file "null.zone.file"; };
 zone "bolidar.dnset.com" { type master; notify no; file "null.zone.file"; };
 zone "bondbuild.com.sg" { type master; notify no; file "null.zone.file"; };
-zone "bookmytripping.com" { type master; notify no; file "null.zone.file"; };
+zone "bonyamin.com" { type master; notify no; file "null.zone.file"; };
+zone "boscanatural.com" { type master; notify no; file "null.zone.file"; };
+zone "bovientix.com" { type master; notify no; file "null.zone.file"; };
 zone "bpo.correct.go.th" { type master; notify no; file "null.zone.file"; };
 zone "brasstec.com.br" { type master; notify no; file "null.zone.file"; };
 zone "brbs.customer.netspace.net.au" { type master; notify no; file "null.zone.file"; };
 zone "brenleyquartzgh.com" { type master; notify no; file "null.zone.file"; };
 zone "brewmethods.com" { type master; notify no; file "null.zone.file"; };
 zone "btlocum.pl" { type master; notify no; file "null.zone.file"; };
+zone "bucketstrong.s3-us-west-1.amazonaws.com" { type master; notify no; file "null.zone.file"; };
 zone "bugansavings.com" { type master; notify no; file "null.zone.file"; };
+zone "buhleni.co.za" { type master; notify no; file "null.zone.file"; };
 zone "buydishtv.in" { type master; notify no; file "null.zone.file"; };
 zone "bxbx28.cn" { type master; notify no; file "null.zone.file"; };
 zone "byqkdy.com" { type master; notify no; file "null.zone.file"; };
 zone "cameli.vn" { type master; notify no; file "null.zone.file"; };
+zone "canaan.io" { type master; notify no; file "null.zone.file"; };
 zone "caravella.com.br" { type master; notify no; file "null.zone.file"; };
 zone "cassiagumrefined.com" { type master; notify no; file "null.zone.file"; };
 zone "cassovia.sk" { type master; notify no; file "null.zone.file"; };
+zone "castmart.ga" { type master; notify no; file "null.zone.file"; };
 zone "cbk.m.dodo52.com" { type master; notify no; file "null.zone.file"; };
 zone "ccnn.xiaomier.cn" { type master; notify no; file "null.zone.file"; };
+zone "cdn-10049480.file.myqcloud.com" { type master; notify no; file "null.zone.file"; };
 zone "cdn.xiaoduoai.com" { type master; notify no; file "null.zone.file"; };
 zone "cdnus.laboratoryconecpttoday.com" { type master; notify no; file "null.zone.file"; };
-zone "cecadesayu.corazondelcielo.mx" { type master; notify no; file "null.zone.file"; };
-zone "ceirecrear.com.br" { type master; notify no; file "null.zone.file"; };
 zone "cellas.sk" { type master; notify no; file "null.zone.file"; };
 zone "cf.uuu9.com" { type master; notify no; file "null.zone.file"; };
 zone "cf0.pw" { type master; notify no; file "null.zone.file"; };
@@ -133,7 +142,6 @@ zone "ch.rmu.ac.th" { type master; notify no; file "null.zone.file"; };
 zone "changematterscounselling.com" { type master; notify no; file "null.zone.file"; };
 zone "chanvribloc.com" { type master; notify no; file "null.zone.file"; };
 zone "charm.bizfxr.com" { type master; notify no; file "null.zone.file"; };
-zone "chattosport.com" { type master; notify no; file "null.zone.file"; };
 zone "chauffeursontravel.com" { type master; notify no; file "null.zone.file"; };
 zone "chedea.eu" { type master; notify no; file "null.zone.file"; };
 zone "chinhdropfile.myvnc.com" { type master; notify no; file "null.zone.file"; };
@@ -141,25 +149,26 @@ zone "chinhdropfile80.myvnc.com" { type master; notify no; file "null.zone.file"
 zone "chipmarkets.com" { type master; notify no; file "null.zone.file"; };
 zone "chj.m.dodo52.com" { type master; notify no; file "null.zone.file"; };
 zone "chnes17wsdywealthandmoduleorganisationui.duckdns.org" { type master; notify no; file "null.zone.file"; };
-zone "cista-dobra-voda.com" { type master; notify no; file "null.zone.file"; };
+zone "cinnamoncreations.com.au" { type master; notify no; file "null.zone.file"; };
 zone "clearwaterriveroutfitting.com" { type master; notify no; file "null.zone.file"; };
 zone "client.yaap.co.uk" { type master; notify no; file "null.zone.file"; };
 zone "clinicamariademolina.com" { type master; notify no; file "null.zone.file"; };
 zone "cloud-server-updater2.co.za" { type master; notify no; file "null.zone.file"; };
+zone "cloud.wmsinfo.com.br" { type master; notify no; file "null.zone.file"; };
 zone "colourcreative.co.za" { type master; notify no; file "null.zone.file"; };
-zone "compesat.com" { type master; notify no; file "null.zone.file"; };
+zone "common-factor.nl" { type master; notify no; file "null.zone.file"; };
 zone "complan.hu" { type master; notify no; file "null.zone.file"; };
 zone "complanbt.hu" { type master; notify no; file "null.zone.file"; };
 zone "comtechadsl.com" { type master; notify no; file "null.zone.file"; };
 zone "config.kuaisousou.top" { type master; notify no; file "null.zone.file"; };
-zone "corazondelcielo.mx" { type master; notify no; file "null.zone.file"; };
+zone "consultingcy.com" { type master; notify no; file "null.zone.file"; };
 zone "counciloflight.bravepages.com" { type master; notify no; file "null.zone.file"; };
 zone "cqjcc.org" { type master; notify no; file "null.zone.file"; };
 zone "crittersbythebay.com" { type master; notify no; file "null.zone.file"; };
-zone "crudenergyllc.com" { type master; notify no; file "null.zone.file"; };
 zone "cryptoomarket.com" { type master; notify no; file "null.zone.file"; };
 zone "csnserver.com" { type master; notify no; file "null.zone.file"; };
 zone "csw.hu" { type master; notify no; file "null.zone.file"; };
+zone "cuacuonsieure.com" { type master; notify no; file "null.zone.file"; };
 zone "cvc.com.pl" { type master; notify no; file "null.zone.file"; };
 zone "cyclomove.com" { type master; notify no; file "null.zone.file"; };
 zone "czsl.91756.cn" { type master; notify no; file "null.zone.file"; };
@@ -174,11 +183,13 @@ zone "datvensaigon.com" { type master; notify no; file "null.zone.file"; };
 zone "davinadouthard.com" { type master; notify no; file "null.zone.file"; };
 zone "dawaphoto.co.kr" { type master; notify no; file "null.zone.file"; };
 zone "daynightgym.com" { type master; notify no; file "null.zone.file"; };
+zone "ddl7.data.hu" { type master; notify no; file "null.zone.file"; };
 zone "de.gsearch.com.de" { type master; notify no; file "null.zone.file"; };
 zone "deixameuskls.tripod.com" { type master; notify no; file "null.zone.file"; };
 zone "demo10.onbm.ir" { type master; notify no; file "null.zone.file"; };
 zone "demo13.dsdemosite.com" { type master; notify no; file "null.zone.file"; };
 zone "denkagida.com.tr" { type master; notify no; file "null.zone.file"; };
+zone "depgrup.com" { type master; notify no; file "null.zone.file"; };
 zone "depot7.com" { type master; notify no; file "null.zone.file"; };
 zone "derivativespro.in" { type master; notify no; file "null.zone.file"; };
 zone "dev.sebpo.net" { type master; notify no; file "null.zone.file"; };
@@ -191,6 +202,7 @@ zone "dfzm.91756.cn" { type master; notify no; file "null.zone.file"; };
 zone "dgecolesdepolice.bf" { type master; notify no; file "null.zone.file"; };
 zone "dgnj.cn" { type master; notify no; file "null.zone.file"; };
 zone "diazavendano.cl" { type master; notify no; file "null.zone.file"; };
+zone "dichthuatsnu.com" { type master; notify no; file "null.zone.file"; };
 zone "dichvuvesinhcongnghiep.top" { type master; notify no; file "null.zone.file"; };
 zone "dienmaycu.vn" { type master; notify no; file "null.zone.file"; };
 zone "dieselmoreno.cl" { type master; notify no; file "null.zone.file"; };
@@ -209,6 +221,7 @@ zone "dl2.soft-lenta.ru" { type master; notify no; file "null.zone.file"; };
 zone "dlist.iqilie.com" { type master; notify no; file "null.zone.file"; };
 zone "dmresor.se" { type master; notify no; file "null.zone.file"; };
 zone "dnn.alibuf.com" { type master; notify no; file "null.zone.file"; };
+zone "dns.alibuf.com" { type master; notify no; file "null.zone.file"; };
 zone "dodsonimaging.com" { type master; notify no; file "null.zone.file"; };
 zone "don.viameventos.com.br" { type master; notify no; file "null.zone.file"; };
 zone "dongiln.co" { type master; notify no; file "null.zone.file"; };
@@ -223,7 +236,6 @@ zone "down.pcclear.com" { type master; notify no; file "null.zone.file"; };
 zone "down.startools.co.kr" { type master; notify no; file "null.zone.file"; };
 zone "down.upzxt.com" { type master; notify no; file "null.zone.file"; };
 zone "down.webbora.com" { type master; notify no; file "null.zone.file"; };
-zone "down.xrpdf.com" { type master; notify no; file "null.zone.file"; };
 zone "down1.arpun.com" { type master; notify no; file "null.zone.file"; };
 zone "downcdn.xianshuabao.com" { type master; notify no; file "null.zone.file"; };
 zone "download.1ys.com" { type master; notify no; file "null.zone.file"; };
@@ -237,12 +249,15 @@ zone "download.ware.ru" { type master; notify no; file "null.zone.file"; };
 zone "download.zjsyawqj.cn" { type master; notify no; file "null.zone.file"; };
 zone "download301.wanmei.com" { type master; notify no; file "null.zone.file"; };
 zone "dpeasesummithilltoppers.pbworks.com" { type master; notify no; file "null.zone.file"; };
+zone "dr080.com" { type master; notify no; file "null.zone.file"; };
 zone "dralpaslan.com" { type master; notify no; file "null.zone.file"; };
 zone "drools-moved.46999.n3.nabble.com" { type master; notify no; file "null.zone.file"; };
 zone "druzim.freewww.biz" { type master; notify no; file "null.zone.file"; };
+zone "drwendyellis.com" { type master; notify no; file "null.zone.file"; };
 zone "dsiun.com" { type master; notify no; file "null.zone.file"; };
 zone "dtsay.xyz" { type master; notify no; file "null.zone.file"; };
 zone "dudulm.com" { type master; notify no; file "null.zone.file"; };
+zone "duongfpt.ga" { type master; notify no; file "null.zone.file"; };
 zone "dusdn.mireene.com" { type master; notify no; file "null.zone.file"; };
 zone "dw.58wangdun.com" { type master; notify no; file "null.zone.file"; };
 zone "dx.qqyewu.com" { type master; notify no; file "null.zone.file"; };
@@ -252,27 +267,29 @@ zone "dx30.siweidaoxiang.com" { type master; notify no; file "null.zone.file"; }
 zone "dx60.siweidaoxiang.com" { type master; notify no; file "null.zone.file"; };
 zone "dzapasigroup.usapglobal.org" { type master; notify no; file "null.zone.file"; };
 zone "dzinestudio87.co.uk" { type master; notify no; file "null.zone.file"; };
-zone "e-internetim.com" { type master; notify no; file "null.zone.file"; };
 zone "e.dangeana.com" { type master; notify no; file "null.zone.file"; };
+zone "earningtipsbd.com" { type master; notify no; file "null.zone.file"; };
 zone "easydown.workday360.cn" { type master; notify no; file "null.zone.file"; };
-zone "ebook.w3wvg.com" { type master; notify no; file "null.zone.file"; };
 zone "edicolanazionale.it" { type master; notify no; file "null.zone.file"; };
+zone "elokshinproperty.co.za" { type master; notify no; file "null.zone.file"; };
 zone "emir-elbahr.com" { type master; notify no; file "null.zone.file"; };
 zone "enc-tech.com" { type master; notify no; file "null.zone.file"; };
+zone "energisegroup.com" { type master; notify no; file "null.zone.file"; };
+zone "enixc.com" { type master; notify no; file "null.zone.file"; };
 zone "entre-potes.mon-application.com" { type master; notify no; file "null.zone.file"; };
-zone "eposar.com.ar" { type master; notify no; file "null.zone.file"; };
 zone "er-bulisguvenligi.com" { type master; notify no; file "null.zone.file"; };
 zone "ermekanik.com" { type master; notify no; file "null.zone.file"; };
 zone "esolvent.pl" { type master; notify no; file "null.zone.file"; };
 zone "esteteam.org" { type master; notify no; file "null.zone.file"; };
-zone "evdekal-kampanyasi20gbhediye.com" { type master; notify no; file "null.zone.file"; };
+zone "evdekaldiye20-gb.com" { type master; notify no; file "null.zone.file"; };
 zone "ezfintechcorp.com" { type master; notify no; file "null.zone.file"; };
 zone "fafhoafouehfuh.su" { type master; notify no; file "null.zone.file"; };
-zone "fairyqueenstore.com" { type master; notify no; file "null.zone.file"; };
+zone "fast.rentaroom.ml" { type master; notify no; file "null.zone.file"; };
 zone "fastsoft.onlinedown.net" { type master; notify no; file "null.zone.file"; };
 zone "fazi.pl" { type master; notify no; file "null.zone.file"; };
 zone "fenoma.net" { type master; notify no; file "null.zone.file"; };
 zone "fidiag.kymco.com" { type master; notify no; file "null.zone.file"; };
+zone "fifa555easy.329263.com" { type master; notify no; file "null.zone.file"; };
 zone "figuig.net" { type master; notify no; file "null.zone.file"; };
 zone "fileco.jobkorea.co.kr" { type master; notify no; file "null.zone.file"; };
 zone "filen3.utengine.co.kr" { type master; notify no; file "null.zone.file"; };
@@ -286,6 +303,7 @@ zone "flood-protection.org" { type master; notify no; file "null.zone.file"; };
 zone "foodbooktv.com" { type master; notify no; file "null.zone.file"; };
 zone "fordlamdong.com.vn" { type master; notify no; file "null.zone.file"; };
 zone "foreverprecious.org" { type master; notify no; file "null.zone.file"; };
+zone "foxfennecs.com" { type master; notify no; file "null.zone.file"; };
 zone "frin.ng" { type master; notify no; file "null.zone.file"; };
 zone "fte.m.dodo52.com" { type master; notify no; file "null.zone.file"; };
 zone "ftpcnc-p2sp.pconline.com.cn" { type master; notify no; file "null.zone.file"; };
@@ -293,7 +311,6 @@ zone "ftpftpftp.com" { type master; notify no; file "null.zone.file"; };
 zone "funletters.net" { type master; notify no; file "null.zone.file"; };
 zone "funpartyrent.com" { type master; notify no; file "null.zone.file"; };
 zone "futuregraphics.com.ar" { type master; notify no; file "null.zone.file"; };
-zone "futurodelasciudades.org" { type master; notify no; file "null.zone.file"; };
 zone "g0ogle.free.fr" { type master; notify no; file "null.zone.file"; };
 zone "gainsdirectory.com" { type master; notify no; file "null.zone.file"; };
 zone "galuhtea.com" { type master; notify no; file "null.zone.file"; };
@@ -308,7 +325,10 @@ zone "genesisconstruction.co.za" { type master; notify no; file "null.zone.file"
 zone "germistonmiraclecentre.co.za" { type master; notify no; file "null.zone.file"; };
 zone "ghislain.dartois.pagesperso-orange.fr" { type master; notify no; file "null.zone.file"; };
 zone "ghwls44.gabia.io" { type master; notify no; file "null.zone.file"; };
+zone "gimscompany.com" { type master; notify no; file "null.zone.file"; };
 zone "glitzygal.net" { type master; notify no; file "null.zone.file"; };
+zone "globaleuropeans.com" { type master; notify no; file "null.zone.file"; };
+zone "gmassurance.fr" { type master; notify no; file "null.zone.file"; };
 zone "gnimelf.net" { type master; notify no; file "null.zone.file"; };
 zone "go.xsuad.com" { type master; notify no; file "null.zone.file"; };
 zone "gocanada.vn" { type master; notify no; file "null.zone.file"; };
@@ -318,12 +338,11 @@ zone "grafchekloder.rebatesrule.net" { type master; notify no; file "null.zone.f
 zone "granportale.com.br" { type master; notify no; file "null.zone.file"; };
 zone "green100.cn" { type master; notify no; file "null.zone.file"; };
 zone "greenleaveperu.com" { type master; notify no; file "null.zone.file"; };
-zone "greindustry.com" { type master; notify no; file "null.zone.file"; };
 zone "gssgroups.com" { type master; notify no; file "null.zone.file"; };
-zone "gstat.dondyablo.com" { type master; notify no; file "null.zone.file"; };
 zone "gx-10012947.file.myqcloud.com" { type master; notify no; file "null.zone.file"; };
 zone "habbotips.free.fr" { type master; notify no; file "null.zone.file"; };
 zone "hagebakken.no" { type master; notify no; file "null.zone.file"; };
+zone "halcat.com" { type master; notify no; file "null.zone.file"; };
 zone "hanaphoto.co.kr" { type master; notify no; file "null.zone.file"; };
 zone "handrush.com" { type master; notify no; file "null.zone.file"; };
 zone "hanoihub.vn" { type master; notify no; file "null.zone.file"; };
@@ -331,20 +350,21 @@ zone "hazel-azure.co.th" { type master; notify no; file "null.zone.file"; };
 zone "hdxa.net" { type master; notify no; file "null.zone.file"; };
 zone "healtina.com" { type master; notify no; file "null.zone.file"; };
 zone "heavenif.co.za" { type master; notify no; file "null.zone.file"; };
-zone "hediye-internet.site" { type master; notify no; file "null.zone.file"; };
-zone "hediyegapsinternet.com" { type master; notify no; file "null.zone.file"; };
+zone "hediyem20gb-internet.org" { type master; notify no; file "null.zone.file"; };
 zone "hellomessager.com" { type master; notify no; file "null.zone.file"; };
+zone "herrfischer.me" { type master; notify no; file "null.zone.file"; };
 zone "hfsoftware.cl" { type master; notify no; file "null.zone.file"; };
 zone "hingcheong.hk" { type master; notify no; file "null.zone.file"; };
 zone "hldschool.com" { type master; notify no; file "null.zone.file"; };
 zone "hmbwgroup.com" { type master; notify no; file "null.zone.file"; };
+zone "hmpmall.co.kr" { type master; notify no; file "null.zone.file"; };
 zone "hoayeuthuong-my.sharepoint.com" { type master; notify no; file "null.zone.file"; };
 zone "hostzaa.com" { type master; notify no; file "null.zone.file"; };
 zone "hotart.co.nz" { type master; notify no; file "null.zone.file"; };
 zone "hotel-le-relais-des-moulins.com" { type master; notify no; file "null.zone.file"; };
 zone "housewifes.co" { type master; notify no; file "null.zone.file"; };
+zone "how.ph" { type master; notify no; file "null.zone.file"; };
 zone "hqsistemas.com.ar" { type master; notify no; file "null.zone.file"; };
-zone "hseda.com" { type master; notify no; file "null.zone.file"; };
 zone "hsmwebapp.com" { type master; notify no; file "null.zone.file"; };
 zone "htxl.cn" { type master; notify no; file "null.zone.file"; };
 zone "huishuren.nu" { type master; notify no; file "null.zone.file"; };
@@ -372,6 +392,7 @@ zone "iran-gold.com" { type master; notify no; file "null.zone.file"; };
 zone "iremart.es" { type master; notify no; file "null.zone.file"; };
 zone "isso.ps" { type master; notify no; file "null.zone.file"; };
 zone "itd.m.dodo52.com" { type master; notify no; file "null.zone.file"; };
+zone "itohukuk.com" { type master; notify no; file "null.zone.file"; };
 zone "itsnixielou.com" { type master; notify no; file "null.zone.file"; };
 zone "ixlonbcc.com" { type master; notify no; file "null.zone.file"; };
 zone "izu.co.jp" { type master; notify no; file "null.zone.file"; };
@@ -379,10 +400,11 @@ zone "jaincakes.xyz" { type master; notify no; file "null.zone.file"; };
 zone "jamiekaylive.com" { type master; notify no; file "null.zone.file"; };
 zone "jansen-heesch.nl" { type master; notify no; file "null.zone.file"; };
 zone "janvierassocies.fr" { type master; notify no; file "null.zone.file"; };
-zone "jaservicioscontables.casteviajes.com" { type master; notify no; file "null.zone.file"; };
 zone "javatank.ru" { type master; notify no; file "null.zone.file"; };
 zone "jcedu.org" { type master; notify no; file "null.zone.file"; };
 zone "jessymart.flexyhub.com" { type master; notify no; file "null.zone.file"; };
+zone "jhorapatarastana.xyz" { type master; notify no; file "null.zone.file"; };
+zone "jjjexx.329263.com" { type master; notify no; file "null.zone.file"; };
 zone "jmtc.91756.cn" { type master; notify no; file "null.zone.file"; };
 zone "jointings.org" { type master; notify no; file "null.zone.file"; };
 zone "jonpetesharefile.com" { type master; notify no; file "null.zone.file"; };
@@ -399,6 +421,7 @@ zone "jyv.fi" { type master; notify no; file "null.zone.file"; };
 zone "jzny.com.cn" { type master; notify no; file "null.zone.file"; };
 zone "k.ludong.tv" { type master; notify no; file "null.zone.file"; };
 zone "k3.etfiber.net" { type master; notify no; file "null.zone.file"; };
+zone "kabiru.ru" { type master; notify no; file "null.zone.file"; };
 zone "kachsurf.mylftv.com" { type master; notify no; file "null.zone.file"; };
 zone "kamasu11.cafe24.com" { type master; notify no; file "null.zone.file"; };
 zone "kanok.co.th" { type master; notify no; file "null.zone.file"; };
@@ -406,9 +429,10 @@ zone "kar.big-pro.com" { type master; notify no; file "null.zone.file"; };
 zone "karavantekstil.com" { type master; notify no; file "null.zone.file"; };
 zone "kassohome.com.tr" { type master; notify no; file "null.zone.file"; };
 zone "kazanin20gbturkiye.com" { type master; notify no; file "null.zone.file"; };
-zone "kazanturkiye20gb.com" { type master; notify no; file "null.zone.file"; };
 zone "kdsp.co.kr" { type master; notify no; file "null.zone.file"; };
+zone "keckarangdadap.pekalongankab.go.id" { type master; notify no; file "null.zone.file"; };
 zone "kejpa.com" { type master; notify no; file "null.zone.file"; };
+zone "kgfs3.329263.com" { type master; notify no; file "null.zone.file"; };
 zone "khan-associates.net" { type master; notify no; file "null.zone.file"; };
 zone "khunnapap.com" { type master; notify no; file "null.zone.file"; };
 zone "kiaowadubai.com" { type master; notify no; file "null.zone.file"; };
@@ -416,10 +440,12 @@ zone "kiencuonghotel.vn" { type master; notify no; file "null.zone.file"; };
 zone "kjbm9.mof.gov.cn" { type master; notify no; file "null.zone.file"; };
 zone "kleinendeli.co.za" { type master; notify no; file "null.zone.file"; };
 zone "knightsbridgeenergy.com.ng" { type master; notify no; file "null.zone.file"; };
+zone "kolibri-fabrika.ru" { type master; notify no; file "null.zone.file"; };
 zone "koppemotta.com.br" { type master; notify no; file "null.zone.file"; };
 zone "koralli.if.ua" { type master; notify no; file "null.zone.file"; };
 zone "kqq.kz" { type master; notify no; file "null.zone.file"; };
 zone "kristofferdaniels.com" { type master; notify no; file "null.zone.file"; };
+zone "kupaliskohs.sk" { type master; notify no; file "null.zone.file"; };
 zone "kuznetsov.ca" { type master; notify no; file "null.zone.file"; };
 zone "kwanfromhongkong.com" { type master; notify no; file "null.zone.file"; };
 zone "kwikomfi-lab.com" { type master; notify no; file "null.zone.file"; };
@@ -428,7 +454,6 @@ zone "lameguard.ru" { type master; notify no; file "null.zone.file"; };
 zone "lammaixep.com" { type master; notify no; file "null.zone.file"; };
 zone "landmarktreks.com" { type master; notify no; file "null.zone.file"; };
 zone "langyabbs.05yun.cn" { type master; notify no; file "null.zone.file"; };
-zone "lastmorgoth.com" { type master; notify no; file "null.zone.file"; };
 zone "lcfurtado.com.br" { type master; notify no; file "null.zone.file"; };
 zone "ld.mediaget.com" { type master; notify no; file "null.zone.file"; };
 zone "learnbuddy.com" { type master; notify no; file "null.zone.file"; };
@@ -449,6 +474,7 @@ zone "log.yundabao.cn" { type master; notify no; file "null.zone.file"; };
 zone "lsyr.net" { type master; notify no; file "null.zone.file"; };
 zone "lt02.datacomspecialists.net" { type master; notify no; file "null.zone.file"; };
 zone "luatminhthuan.com" { type master; notify no; file "null.zone.file"; };
+zone "luckytriumph.com" { type master; notify no; file "null.zone.file"; };
 zone "luisnacht.com.ar" { type master; notify no; file "null.zone.file"; };
 zone "luyalu.net" { type master; notify no; file "null.zone.file"; };
 zone "lvr.samacomplus.com" { type master; notify no; file "null.zone.file"; };
@@ -484,6 +510,7 @@ zone "mhkdhotbot80.myvnc.com" { type master; notify no; file "null.zone.file"; }
 zone "miaoshuosh.com" { type master; notify no; file "null.zone.file"; };
 zone "micahproducts.com" { type master; notify no; file "null.zone.file"; };
 zone "micalle.com.au" { type master; notify no; file "null.zone.file"; };
+zone "milebgd.mycpanel.rs" { type master; notify no; file "null.zone.file"; };
 zone "mirror.mypage.sk" { type master; notify no; file "null.zone.file"; };
 zone "mis.nbcc.ac.th" { type master; notify no; file "null.zone.file"; };
 zone "misterson.com" { type master; notify no; file "null.zone.file"; };
@@ -491,12 +518,14 @@ zone "mistydeblasiophotography.com" { type master; notify no; file "null.zone.fi
 zone "mkk09.kr" { type master; notify no; file "null.zone.file"; };
 zone "mkontakt.az" { type master; notify no; file "null.zone.file"; };
 zone "mlbfreestream.gq" { type master; notify no; file "null.zone.file"; };
+zone "mlbfreestream.ml" { type master; notify no; file "null.zone.file"; };
 zone "mmc.ru.com" { type master; notify no; file "null.zone.file"; };
 zone "mobiadnews.com" { type master; notify no; file "null.zone.file"; };
 zone "mobilier-modern.ro" { type master; notify no; file "null.zone.file"; };
 zone "mochandmade.us" { type master; notify no; file "null.zone.file"; };
+zone "modcloudserver.eu" { type master; notify no; file "null.zone.file"; };
 zone "moha-group.com" { type master; notify no; file "null.zone.file"; };
-zone "mononet.lv" { type master; notify no; file "null.zone.file"; };
+zone "moinmo.de" { type master; notify no; file "null.zone.file"; };
 zone "moscow11.at" { type master; notify no; file "null.zone.file"; };
 zone "mountveederwines.com" { type master; notify no; file "null.zone.file"; };
 zone "moyo.co.kr" { type master; notify no; file "null.zone.file"; };
@@ -506,13 +535,13 @@ zone "msecurity.ro" { type master; notify no; file "null.zone.file"; };
 zone "mteng.mmj7.com" { type master; notify no; file "null.zone.file"; };
 zone "mtfelektroteknik.com" { type master; notify no; file "null.zone.file"; };
 zone "mueblesjcp.cl" { type master; notify no; file "null.zone.file"; };
+zone "mv360.net" { type master; notify no; file "null.zone.file"; };
 zone "mvb.kz" { type master; notify no; file "null.zone.file"; };
 zone "mxpiqw.am.files.1drv.com" { type master; notify no; file "null.zone.file"; };
 zone "myexpertca.in" { type master; notify no; file "null.zone.file"; };
 zone "myhood.cl" { type master; notify no; file "null.zone.file"; };
 zone "myo.net.au" { type master; notify no; file "null.zone.file"; };
 zone "myofficeplus.com" { type master; notify no; file "null.zone.file"; };
-zone "myonlinepokiesblog.com" { type master; notify no; file "null.zone.file"; };
 zone "mytex.pe" { type master; notify no; file "null.zone.file"; };
 zone "mytrains.net" { type master; notify no; file "null.zone.file"; };
 zone "mywp.asia" { type master; notify no; file "null.zone.file"; };
@@ -532,7 +561,6 @@ zone "newsun-shop.com" { type master; notify no; file "null.zone.file"; };
 zone "newxing.com" { type master; notify no; file "null.zone.file"; };
 zone "nfbio.com" { type master; notify no; file "null.zone.file"; };
 zone "ngoaingu.garage.com.vn" { type master; notify no; file "null.zone.file"; };
-zone "nilemixitupd.biz.pl" { type master; notify no; file "null.zone.file"; };
 zone "nkdhub.com" { type master; notify no; file "null.zone.file"; };
 zone "nofound.000webhostapp.com" { type master; notify no; file "null.zone.file"; };
 zone "nprg.ru" { type master; notify no; file "null.zone.file"; };
@@ -543,11 +571,11 @@ zone "oa.hys.cn" { type master; notify no; file "null.zone.file"; };
 zone "obnova.zzux.com" { type master; notify no; file "null.zone.file"; };
 zone "obseques-conseils.com" { type master; notify no; file "null.zone.file"; };
 zone "ohe.ie" { type master; notify no; file "null.zone.file"; };
+zone "oknoplastik.sk" { type master; notify no; file "null.zone.file"; };
 zone "omega.az" { type master; notify no; file "null.zone.file"; };
 zone "omsk-osma.ru" { type master; notify no; file "null.zone.file"; };
 zone "omuzgor.tj" { type master; notify no; file "null.zone.file"; };
 zone "onestin.ro" { type master; notify no; file "null.zone.file"; };
-zone "onyourmarkmindsetgo.com" { type master; notify no; file "null.zone.file"; };
 zone "openclient.sroinfo.com" { type master; notify no; file "null.zone.file"; };
 zone "operasanpiox.bravepages.com" { type master; notify no; file "null.zone.file"; };
 zone "ophtalmiccenter.com" { type master; notify no; file "null.zone.file"; };
@@ -566,6 +594,7 @@ zone "p3.zbjimg.com" { type master; notify no; file "null.zone.file"; };
 zone "p30qom.ir" { type master; notify no; file "null.zone.file"; };
 zone "p500.mon-application.com" { type master; notify no; file "null.zone.file"; };
 zone "pack301.bravepages.com" { type master; notify no; file "null.zone.file"; };
+zone "pakdesighee.com" { type master; notify no; file "null.zone.file"; };
 zone "palochusvet.szm.com" { type master; notify no; file "null.zone.file"; };
 zone "partyflix.net" { type master; notify no; file "null.zone.file"; };
 zone "pat4.jetos.com" { type master; notify no; file "null.zone.file"; };
@@ -575,20 +604,26 @@ zone "patch2.99ddd.com" { type master; notify no; file "null.zone.file"; };
 zone "patch3.99ddd.com" { type master; notify no; file "null.zone.file"; };
 zone "patrickchan-hk.net" { type master; notify no; file "null.zone.file"; };
 zone "pawel-sikora.pl" { type master; notify no; file "null.zone.file"; };
+zone "pcexperts.co.za" { type master; notify no; file "null.zone.file"; };
 zone "pcginsure.com" { type master; notify no; file "null.zone.file"; };
 zone "pcsoori.com" { type master; notify no; file "null.zone.file"; };
 zone "pedidoslalacteo.com.ar" { type master; notify no; file "null.zone.file"; };
+zone "peterssandmay.com" { type master; notify no; file "null.zone.file"; };
+zone "petromltd.com" { type master; notify no; file "null.zone.file"; };
 zone "ph4s.ru" { type master; notify no; file "null.zone.file"; };
 zone "phamchilong.com" { type master; notify no; file "null.zone.file"; };
 zone "phudieusongma.com" { type master; notify no; file "null.zone.file"; };
+zone "phuphamca.com" { type master; notify no; file "null.zone.file"; };
 zone "piapendet.com" { type master; notify no; file "null.zone.file"; };
 zone "pink99.com" { type master; notify no; file "null.zone.file"; };
 zone "platisher.xyz" { type master; notify no; file "null.zone.file"; };
+zone "pmguide.net" { type master; notify no; file "null.zone.file"; };
 zone "podiatristlansdale.com" { type master; notify no; file "null.zone.file"; };
 zone "podrska.com.hr" { type master; notify no; file "null.zone.file"; };
 zone "ponto50.com.br" { type master; notify no; file "null.zone.file"; };
 zone "poolbook.ir" { type master; notify no; file "null.zone.file"; };
 zone "ppl.ac.id" { type master; notify no; file "null.zone.file"; };
+zone "prepaenunsoloexamen.academiagalileoac.com" { type master; notify no; file "null.zone.file"; };
 zone "probost.cz" { type master; notify no; file "null.zone.file"; };
 zone "profitcoach.net" { type master; notify no; file "null.zone.file"; };
 zone "prosoc.nl" { type master; notify no; file "null.zone.file"; };
@@ -611,11 +646,11 @@ zone "rc.ixiaoyang.cn" { type master; notify no; file "null.zone.file"; };
 zone "readytalk.github.io" { type master; notify no; file "null.zone.file"; };
 zone "real-song.tjmedia.co.kr" { type master; notify no; file "null.zone.file"; };
 zone "recommendservices.com" { type master; notify no; file "null.zone.file"; };
-zone "redeemerssports.com" { type master; notify no; file "null.zone.file"; };
 zone "redesoftdownload.info" { type master; notify no; file "null.zone.file"; };
 zone "rekspirit.ru" { type master; notify no; file "null.zone.file"; };
 zone "renimin.mymom.info" { type master; notify no; file "null.zone.file"; };
 zone "renovanorte.com" { type master; notify no; file "null.zone.file"; };
+zone "rentaroom.ml" { type master; notify no; file "null.zone.file"; };
 zone "res.uf1.cn" { type master; notify no; file "null.zone.file"; };
 zone "ret.space" { type master; notify no; file "null.zone.file"; };
 zone "rezaazizi.ir" { type master; notify no; file "null.zone.file"; };
@@ -628,13 +663,16 @@ zone "robotrade.com.vn" { type master; notify no; file "null.zone.file"; };
 zone "rollingmill.in" { type master; notify no; file "null.zone.file"; };
 zone "rollscar.pk" { type master; notify no; file "null.zone.file"; };
 zone "rossogato.com" { type master; notify no; file "null.zone.file"; };
+zone "royalplusmobile.ir" { type master; notify no; file "null.zone.file"; };
 zone "ruisgood.ru" { type master; notify no; file "null.zone.file"; };
 zone "s.51shijuan.com" { type master; notify no; file "null.zone.file"; };
 zone "s.kk30.com" { type master; notify no; file "null.zone.file"; };
+zone "s14b.91danji.com" { type master; notify no; file "null.zone.file"; };
+zone "s14b.groundyun.cn" { type master; notify no; file "null.zone.file"; };
 zone "sabiupd.compress.to" { type master; notify no; file "null.zone.file"; };
 zone "saboorjaam.ir" { type master; notify no; file "null.zone.file"; };
 zone "sabupda.vizvaz.com" { type master; notify no; file "null.zone.file"; };
-zone "sahathaikasetpan.com" { type master; notify no; file "null.zone.file"; };
+zone "saglikodemelerinial.org" { type master; notify no; file "null.zone.file"; };
 zone "salvation24.com" { type master; notify no; file "null.zone.file"; };
 zone "salvationbd.com" { type master; notify no; file "null.zone.file"; };
 zone "sandovalgraphics.com" { type master; notify no; file "null.zone.file"; };
@@ -648,11 +686,11 @@ zone "seibee.biz" { type master; notify no; file "null.zone.file"; };
 zone "selekture.com" { type master; notify no; file "null.zone.file"; };
 zone "selfuseproperty.com" { type master; notify no; file "null.zone.file"; };
 zone "selvikoyunciftligi.com" { type master; notify no; file "null.zone.file"; };
-zone "sendeyararlanturkiye20gb.com" { type master; notify no; file "null.zone.file"; };
 zone "serpentrising.com" { type master; notify no; file "null.zone.file"; };
 zone "servicemhkd.myvnc.com" { type master; notify no; file "null.zone.file"; };
 zone "servicemhkd80.myvnc.com" { type master; notify no; file "null.zone.file"; };
 zone "serviciosinfoware.cl" { type master; notify no; file "null.zone.file"; };
+zone "sexybaccarat.329263.com" { type master; notify no; file "null.zone.file"; };
 zone "sfoodfeedf.org" { type master; notify no; file "null.zone.file"; };
 zone "sgm.pc6.com" { type master; notify no; file "null.zone.file"; };
 zone "shacked.webdepot.co.il" { type master; notify no; file "null.zone.file"; };
@@ -661,6 +699,7 @@ zone "shaoxiaofei.cn" { type master; notify no; file "null.zone.file"; };
 zone "share.dmca.gripe" { type master; notify no; file "null.zone.file"; };
 zone "sharjahas.com" { type master; notify no; file "null.zone.file"; };
 zone "shembefoundation.com" { type master; notify no; file "null.zone.file"; };
+zone "shopjumpn.ch" { type master; notify no; file "null.zone.file"; };
 zone "simlun.com.ar" { type master; notify no; file "null.zone.file"; };
 zone "sinastorage.cn" { type master; notify no; file "null.zone.file"; };
 zone "sindicato1ucm.cl" { type master; notify no; file "null.zone.file"; };
@@ -683,6 +722,7 @@ zone "sophiaskyhotel.vn" { type master; notify no; file "null.zone.file"; };
 zone "sota-france.fr" { type master; notify no; file "null.zone.file"; };
 zone "souldancing.cn" { type master; notify no; file "null.zone.file"; };
 zone "speed.myz.info" { type master; notify no; file "null.zone.file"; };
+zone "sportshlive.xyz" { type master; notify no; file "null.zone.file"; };
 zone "sportstrem.gq" { type master; notify no; file "null.zone.file"; };
 zone "spurstogo.com" { type master; notify no; file "null.zone.file"; };
 zone "sputnikmailru.cdnmail.ru" { type master; notify no; file "null.zone.file"; };
@@ -693,15 +733,16 @@ zone "ss.cybersoft-vn.com" { type master; notify no; file "null.zone.file"; };
 zone "sslv3.at" { type master; notify no; file "null.zone.file"; };
 zone "staging.popclusive.asia" { type master; notify no; file "null.zone.file"; };
 zone "starcountry.net" { type master; notify no; file "null.zone.file"; };
+zone "static.ilclock.com" { type master; notify no; file "null.zone.file"; };
 zone "static.topxgun.com" { type master; notify no; file "null.zone.file"; };
+zone "stationaryhome.com" { type master; notify no; file "null.zone.file"; };
 zone "stecit.nl" { type master; notify no; file "null.zone.file"; };
-zone "steelbuildings.com" { type master; notify no; file "null.zone.file"; };
 zone "stevewalker.com.au" { type master; notify no; file "null.zone.file"; };
 zone "story-maker.jp" { type master; notify no; file "null.zone.file"; };
+zone "stubbackup.ru" { type master; notify no; file "null.zone.file"; };
 zone "suc9898.com" { type master; notify no; file "null.zone.file"; };
 zone "suncity116.com" { type master; notify no; file "null.zone.file"; };
 zone "support.clz.kr" { type master; notify no; file "null.zone.file"; };
-zone "supportalaskausa.org" { type master; notify no; file "null.zone.file"; };
 zone "sv.pvroe.com" { type master; notify no; file "null.zone.file"; };
 zone "svkacademy.com" { type master; notify no; file "null.zone.file"; };
 zone "svn.cc.jyu.fi" { type master; notify no; file "null.zone.file"; };
@@ -710,7 +751,6 @@ zone "swwbia.com" { type master; notify no; file "null.zone.file"; };
 zone "symanreni.mysecondarydns.com" { type master; notify no; file "null.zone.file"; };
 zone "szxypt.com" { type master; notify no; file "null.zone.file"; };
 zone "t.honker.info" { type master; notify no; file "null.zone.file"; };
-zone "tandenblekenhoofddorp.nl" { type master; notify no; file "null.zone.file"; };
 zone "taraward.com" { type master; notify no; file "null.zone.file"; };
 zone "taxpos.com" { type master; notify no; file "null.zone.file"; };
 zone "tcy.198424.com" { type master; notify no; file "null.zone.file"; };
@@ -732,21 +772,21 @@ zone "theelectronics4u.com" { type master; notify no; file "null.zone.file"; };
 zone "theprestige.ro" { type master; notify no; file "null.zone.file"; };
 zone "theptiendat.com" { type master; notify no; file "null.zone.file"; };
 zone "therecruiter.io" { type master; notify no; file "null.zone.file"; };
-zone "thesecuritysoftwarescannerindustrgreat.duckdns.org" { type master; notify no; file "null.zone.file"; };
-zone "thornadops.com" { type master; notify no; file "null.zone.file"; };
 zone "thosewebbs.com" { type master; notify no; file "null.zone.file"; };
+zone "thuong.bidiworks.com" { type master; notify no; file "null.zone.file"; };
 zone "tianangdep.com" { type master; notify no; file "null.zone.file"; };
+zone "tianmaouae.com" { type master; notify no; file "null.zone.file"; };
 zone "tianzi8.cn" { type master; notify no; file "null.zone.file"; };
 zone "tibinst.mefound.com" { type master; notify no; file "null.zone.file"; };
 zone "tibok.lflink.com" { type master; notify no; file "null.zone.file"; };
 zone "ticte.in" { type master; notify no; file "null.zone.file"; };
 zone "timlinger.com" { type master; notify no; file "null.zone.file"; };
+zone "tinckorm.beget.tech" { type master; notify no; file "null.zone.file"; };
 zone "tmhfashionhouse.co.za" { type master; notify no; file "null.zone.file"; };
 zone "toe.polinema.ac.id" { type master; notify no; file "null.zone.file"; };
 zone "tonghopgia.net" { type master; notify no; file "null.zone.file"; };
 zone "tonydong.com" { type master; notify no; file "null.zone.file"; };
 zone "tonyzone.com" { type master; notify no; file "null.zone.file"; };
-zone "treefighter.org" { type master; notify no; file "null.zone.file"; };
 zone "tsd.jxwan.com" { type master; notify no; file "null.zone.file"; };
 zone "tsredco.telangana.gov.in" { type master; notify no; file "null.zone.file"; };
 zone "tulli.info" { type master; notify no; file "null.zone.file"; };
@@ -755,6 +795,7 @@ zone "tuneup.ibk.me" { type master; notify no; file "null.zone.file"; };
 zone "tup.com.cn" { type master; notify no; file "null.zone.file"; };
 zone "tutuler.com" { type master; notify no; file "null.zone.file"; };
 zone "uc-56.ru" { type master; notify no; file "null.zone.file"; };
+zone "ucto-id.cz" { type master; notify no; file "null.zone.file"; };
 zone "ufabet168168.329263.com" { type master; notify no; file "null.zone.file"; };
 zone "ugc.wegame.com.cn" { type master; notify no; file "null.zone.file"; };
 zone "ultimatelamborghiniexperience.com" { type master; notify no; file "null.zone.file"; };
@@ -769,10 +810,14 @@ zone "upd.m.dodo52.com" { type master; notify no; file "null.zone.file"; };
 zone "update.iwang8.com" { type master; notify no; file "null.zone.file"; };
 zone "update.my.99.com" { type master; notify no; file "null.zone.file"; };
 zone "updateflashplayer.link" { type master; notify no; file "null.zone.file"; };
+zone "upendiveterinariovalencia.es" { type master; notify no; file "null.zone.file"; };
 zone "urgentmessage.org" { type master; notify no; file "null.zone.file"; };
+zone "usapglobal.usapglobal.org" { type master; notify no; file "null.zone.file"; };
 zone "users.skynet.be" { type master; notify no; file "null.zone.file"; };
 zone "uskeba.ca" { type master; notify no; file "null.zone.file"; };
 zone "usmadetshirts.com" { type master; notify no; file "null.zone.file"; };
+zone "uyen.vn" { type master; notify no; file "null.zone.file"; };
+zone "uygulamalarim-hediyeinternet.org" { type master; notify no; file "null.zone.file"; };
 zone "vadyur.github.io" { type master; notify no; file "null.zone.file"; };
 zone "vaeqpu.329263.com" { type master; notify no; file "null.zone.file"; };
 zone "valedchap.ir" { type master; notify no; file "null.zone.file"; };
@@ -781,12 +826,12 @@ zone "vasoccernews.com" { type master; notify no; file "null.zone.file"; };
 zone "vaziri.echobit.ir" { type master; notify no; file "null.zone.file"; };
 zone "vdotrip.blog" { type master; notify no; file "null.zone.file"; };
 zone "vfocus.net" { type master; notify no; file "null.zone.file"; };
+zone "vibicloud.com" { type master; notify no; file "null.zone.file"; };
 zone "videoswebcammsn.free.fr" { type master; notify no; file "null.zone.file"; };
 zone "vietducbio.com" { type master; notify no; file "null.zone.file"; };
 zone "vigilar.com.br" { type master; notify no; file "null.zone.file"; };
 zone "vip.recommendedtoyoo.com" { type master; notify no; file "null.zone.file"; };
 zone "virustreatments.empeeevents.com" { type master; notify no; file "null.zone.file"; };
-zone "visagepk.com" { type master; notify no; file "null.zone.file"; };
 zone "visualdata.ru" { type master; notify no; file "null.zone.file"; };
 zone "vitinhvnt.com" { type master; notify no; file "null.zone.file"; };
 zone "vitromed.ro" { type master; notify no; file "null.zone.file"; };
@@ -796,9 +841,9 @@ zone "w.zhzy999.net" { type master; notify no; file "null.zone.file"; };
 zone "wakecar.cn" { type master; notify no; file "null.zone.file"; };
 zone "wangtong7.siweidaoxiang.com" { type master; notify no; file "null.zone.file"; };
 zone "wangzonghang.cn" { type master; notify no; file "null.zone.file"; };
+zone "wap.dosame.com" { type master; notify no; file "null.zone.file"; };
 zone "ware.ru" { type master; notify no; file "null.zone.file"; };
 zone "warriorllc.com" { type master; notify no; file "null.zone.file"; };
-zone "waterosmo.com" { type master; notify no; file "null.zone.file"; };
 zone "wbd.5636.com" { type master; notify no; file "null.zone.file"; };
 zone "wbkmt.com" { type master; notify no; file "null.zone.file"; };
 zone "webarte.com.br" { type master; notify no; file "null.zone.file"; };
@@ -815,17 +860,19 @@ zone "wood-expert.net" { type master; notify no; file "null.zone.file"; };
 zone "woodsytech.com" { type master; notify no; file "null.zone.file"; };
 zone "wp.quercus.palustris.dk" { type master; notify no; file "null.zone.file"; };
 zone "wq.feiniaoai.cn" { type master; notify no; file "null.zone.file"; };
-zone "writesofpassage.co.za" { type master; notify no; file "null.zone.file"; };
 zone "wsg.com.sg" { type master; notify no; file "null.zone.file"; };
 zone "wt8.siweidaoxiang.com" { type master; notify no; file "null.zone.file"; };
 zone "wt9.siweidaoxiang.com" { type master; notify no; file "null.zone.file"; };
 zone "wwealthllc.com" { type master; notify no; file "null.zone.file"; };
+zone "www-ecimer-uygulamayukleme-govtr.com" { type master; notify no; file "null.zone.file"; };
 zone "www2.recepty5.com" { type master; notify no; file "null.zone.file"; };
 zone "x2vn.com" { type master; notify no; file "null.zone.file"; };
 zone "xia.vzboot.com" { type master; notify no; file "null.zone.file"; };
 zone "xiaidown.com" { type master; notify no; file "null.zone.file"; };
 zone "xiegushi.cn" { type master; notify no; file "null.zone.file"; };
 zone "xirfad.com" { type master; notify no; file "null.zone.file"; };
+zone "xn--d1aciabhfsdfe0a7e3b.xn--p1acf" { type master; notify no; file "null.zone.file"; };
+zone "xn--transfgran-mgbbb600b.ro" { type master; notify no; file "null.zone.file"; };
 zone "xtremeforumz.com" { type master; notify no; file "null.zone.file"; };
 zone "xuhss.com" { type master; notify no; file "null.zone.file"; };
 zone "xxwl.kuaiyunds.com" { type master; notify no; file "null.zone.file"; };
diff --git a/urlhaus-filter-bind.conf b/urlhaus-filter-bind.conf
index af32ee2e..874b91ec 100644
--- a/urlhaus-filter-bind.conf
+++ b/urlhaus-filter-bind.conf
@@ -1,5 +1,5 @@
 # Title: abuse.ch URLhaus Malicious Domains BIND Blocklist
-# Updated: Thu, 30 Apr 2020 12:09:30 UTC
+# Updated: Fri, 01 May 2020 00:10:35 UTC
 # Repo: https://gitlab.com/curben/urlhaus-filter
 # License: https://creativecommons.org/publicdomain/zero/1.0/
 # Source: https://urlhaus.abuse.ch/api/
@@ -2342,6 +2342,7 @@ zone "admyinfo.000webhostapp.com" { type master; notify no; file "null.zone.file
 zone "adnaan.website" { type master; notify no; file "null.zone.file"; };
 zone "adnc.cn" { type master; notify no; file "null.zone.file"; };
 zone "adnetss.com" { type master; notify no; file "null.zone.file"; };
+zone "adnquocte.com" { type master; notify no; file "null.zone.file"; };
 zone "adoam.pw" { type master; notify no; file "null.zone.file"; };
 zone "adoam.site" { type master; notify no; file "null.zone.file"; };
 zone "adobe-flash-player.pro" { type master; notify no; file "null.zone.file"; };
@@ -5771,6 +5772,7 @@ zone "ariesnetworks.org.uk" { type master; notify no; file "null.zone.file"; };
 zone "arifcagan.com" { type master; notify no; file "null.zone.file"; };
 zone "arifhajj.umrahsoftware.co.uk" { type master; notify no; file "null.zone.file"; };
 zone "arifolmancohen.com" { type master; notify no; file "null.zone.file"; };
+zone "arifrehan.xyz" { type master; notify no; file "null.zone.file"; };
 zone "arifzena.com" { type master; notify no; file "null.zone.file"; };
 zone "arigato.com.vn" { type master; notify no; file "null.zone.file"; };
 zone "arigbabuwogalleria.com" { type master; notify no; file "null.zone.file"; };
@@ -7173,6 +7175,7 @@ zone "averin.pro" { type master; notify no; file "null.zone.file"; };
 zone "averson.by" { type master; notify no; file "null.zone.file"; };
 zone "averybit.com" { type master; notify no; file "null.zone.file"; };
 zone "aveslor.com" { type master; notify no; file "null.zone.file"; };
+zone "avestor.uz" { type master; notify no; file "null.zone.file"; };
 zone "avfphoto.com" { type master; notify no; file "null.zone.file"; };
 zone "avgsupport.info" { type master; notify no; file "null.zone.file"; };
 zone "avheaven.icu" { type master; notify no; file "null.zone.file"; };
@@ -7460,6 +7463,7 @@ zone "azcama.org" { type master; notify no; file "null.zone.file"; };
 zone "azdhj.com" { type master; notify no; file "null.zone.file"; };
 zone "azedizayn.com" { type master; notify no; file "null.zone.file"; };
 zone "azeevatech.in" { type master; notify no; file "null.zone.file"; };
+zone "azenzatowers.com" { type master; notify no; file "null.zone.file"; };
 zone "azeritibb.pe.hu" { type master; notify no; file "null.zone.file"; };
 zone "azerothland.com" { type master; notify no; file "null.zone.file"; };
 zone "azeta.xyz" { type master; notify no; file "null.zone.file"; };
@@ -9477,6 +9481,7 @@ zone "billenloe.com" { type master; notify no; file "null.zone.file"; };
 zone "billerimpex.com" { type master; notify no; file "null.zone.file"; };
 zone "billeter.net" { type master; notify no; file "null.zone.file"; };
 zone "billfritzjr.com" { type master; notify no; file "null.zone.file"; };
+zone "billieellish.org" { type master; notify no; file "null.zone.file"; };
 zone "billing.wpkami.com" { type master; notify no; file "null.zone.file"; };
 zone "billingsupport.ru" { type master; notify no; file "null.zone.file"; };
 zone "billingtonbarristers.com" { type master; notify no; file "null.zone.file"; };
@@ -11483,6 +11488,7 @@ zone "buchanancu.org" { type master; notify no; file "null.zone.file"; };
 zone "bucharest-independent-escort.com" { type master; notify no; file "null.zone.file"; };
 zone "bucketlistadvtours.com" { type master; notify no; file "null.zone.file"; };
 zone "bucketlistrecipes.com" { type master; notify no; file "null.zone.file"; };
+zone "bucketstrong.s3-us-west-1.amazonaws.com" { type master; notify no; file "null.zone.file"; };
 zone "buckeyeoptical.com" { type master; notify no; file "null.zone.file"; };
 zone "buckinghamandlloyds.com" { type master; notify no; file "null.zone.file"; };
 zone "buckleman.co.id" { type master; notify no; file "null.zone.file"; };
@@ -12285,6 +12291,7 @@ zone "camsexsnol.nl" { type master; notify no; file "null.zone.file"; };
 zone "can-do-property.co.uk" { type master; notify no; file "null.zone.file"; };
 zone "can-doelectric.com" { type master; notify no; file "null.zone.file"; };
 zone "can-media.de" { type master; notify no; file "null.zone.file"; };
+zone "canaan.io" { type master; notify no; file "null.zone.file"; };
 zone "canaccordgenuity.bluematrix.com" { type master; notify no; file "null.zone.file"; };
 zone "canacofactura.com.mx" { type master; notify no; file "null.zone.file"; };
 zone "canadabestonline.com" { type master; notify no; file "null.zone.file"; };
@@ -16656,6 +16663,7 @@ zone "currencyavenue.com" { type master; notify no; file "null.zone.file"; };
 zone "currencyexchanger.com.ng" { type master; notify no; file "null.zone.file"; };
 zone "currenteventsmemes.com" { type master; notify no; file "null.zone.file"; };
 zone "curs.neagoeandrei.com" { type master; notify no; file "null.zone.file"; };
+zone "cursdictie.ro" { type master; notify no; file "null.zone.file"; };
 zone "curso.domeducacional.com" { type master; notify no; file "null.zone.file"; };
 zone "curso.ssthno.webdesignssw.cl" { type master; notify no; file "null.zone.file"; };
 zone "cursoaphonline.com.br" { type master; notify no; file "null.zone.file"; };
@@ -17335,6 +17343,7 @@ zone "data.kaoyany.top" { type master; notify no; file "null.zone.file"; };
 zone "data.nanhai.cn" { type master; notify no; file "null.zone.file"; };
 zone "data.over-blog-kiwi.com" { type master; notify no; file "null.zone.file"; };
 zone "data.yx1999.com" { type master; notify no; file "null.zone.file"; };
+zone "data4i.com" { type master; notify no; file "null.zone.file"; };
 zone "data4u.kay-tech.info" { type master; notify no; file "null.zone.file"; };
 zone "databacknow.com" { type master; notify no; file "null.zone.file"; };
 zone "database.z-flooring.com" { type master; notify no; file "null.zone.file"; };
@@ -17446,6 +17455,7 @@ zone "david.ph-prod.com" { type master; notify no; file "null.zone.file"; };
 zone "davidaluke.com" { type master; notify no; file "null.zone.file"; };
 zone "davidcizek.cz" { type master; notify no; file "null.zone.file"; };
 zone "davidcjones.ca" { type master; notify no; file "null.zone.file"; };
+zone "davidd47.sg-host.com" { type master; notify no; file "null.zone.file"; };
 zone "davidedigiorgio360.com" { type master; notify no; file "null.zone.file"; };
 zone "davidemarocco.com" { type master; notify no; file "null.zone.file"; };
 zone "davidephoto.it" { type master; notify no; file "null.zone.file"; };
@@ -18987,6 +18997,7 @@ zone "dicampo.cl" { type master; notify no; file "null.zone.file"; };
 zone "dicarmo.com" { type master; notify no; file "null.zone.file"; };
 zone "dicebot-game.com" { type master; notify no; file "null.zone.file"; };
 zone "dichiara.com.ar" { type master; notify no; file "null.zone.file"; };
+zone "dichthuatsnu.com" { type master; notify no; file "null.zone.file"; };
 zone "dichvuchupanhsanpham.com" { type master; notify no; file "null.zone.file"; };
 zone "dichvucong.vn" { type master; notify no; file "null.zone.file"; };
 zone "dichvucuoi0f16.toannang.xyz" { type master; notify no; file "null.zone.file"; };
@@ -20183,6 +20194,7 @@ zone "dotlenieni.pl" { type master; notify no; file "null.zone.file"; };
 zone "dotlineplane.co.th" { type master; notify no; file "null.zone.file"; };
 zone "dotnetdays.ro" { type master; notify no; file "null.zone.file"; };
 zone "dotnetebusiness.com" { type master; notify no; file "null.zone.file"; };
+zone "dotpay.id" { type master; notify no; file "null.zone.file"; };
 zone "dotpos.in" { type master; notify no; file "null.zone.file"; };
 zone "dotproject.org" { type master; notify no; file "null.zone.file"; };
 zone "dotshopify.com" { type master; notify no; file "null.zone.file"; };
@@ -20427,6 +20439,7 @@ zone "dr-nasrinataeifar.ir" { type master; notify no; file "null.zone.file"; };
 zone "dr-popa.com" { type master; notify no; file "null.zone.file"; };
 zone "dr-prof-sachidanandasinha-dentalclinic.com" { type master; notify no; file "null.zone.file"; };
 zone "dr-recella-global.com" { type master; notify no; file "null.zone.file"; };
+zone "dr080.com" { type master; notify no; file "null.zone.file"; };
 zone "dr702.com" { type master; notify no; file "null.zone.file"; };
 zone "draaiercnc.nl" { type master; notify no; file "null.zone.file"; };
 zone "draaiorgel.org" { type master; notify no; file "null.zone.file"; };
@@ -22792,6 +22805,7 @@ zone "enilaegroj.com" { type master; notify no; file "null.zone.file"; };
 zone "enilegho.com.br" { type master; notify no; file "null.zone.file"; };
 zone "enis1130.000webhostapp.com" { type master; notify no; file "null.zone.file"; };
 zone "eniture-qa.com" { type master; notify no; file "null.zone.file"; };
+zone "enixc.com" { type master; notify no; file "null.zone.file"; };
 zone "eniyionfirma.com" { type master; notify no; file "null.zone.file"; };
 zone "enjoy-aquaristik.de" { type master; notify no; file "null.zone.file"; };
 zone "enjoy-kobac.com" { type master; notify no; file "null.zone.file"; };
@@ -23656,6 +23670,7 @@ zone "evdekal-kampanyasi20gbhediye.com" { type master; notify no; file "null.zon
 zone "evdekal20kapgb.com" { type master; notify no; file "null.zone.file"; };
 zone "evdekalan20gbkazaniyor.com" { type master; notify no; file "null.zone.file"; };
 zone "evdekalana20gb-hehe.com" { type master; notify no; file "null.zone.file"; };
+zone "evdekaldiye20-gb.com" { type master; notify no; file "null.zone.file"; };
 zone "evdekaltuekiyesaglik.com" { type master; notify no; file "null.zone.file"; };
 zone "evdekl20gbx.com" { type master; notify no; file "null.zone.file"; };
 zone "evdyn.com.sg" { type master; notify no; file "null.zone.file"; };
@@ -26221,6 +26236,7 @@ zone "freeofshackles.com" { type master; notify no; file "null.zone.file"; };
 zone "freepaidcourses.com" { type master; notify no; file "null.zone.file"; };
 zone "freepalestinemovement.org" { type master; notify no; file "null.zone.file"; };
 zone "freephenix.cn" { type master; notify no; file "null.zone.file"; };
+zone "freeprofessionalwebhosting.com" { type master; notify no; file "null.zone.file"; };
 zone "freeselfstoragequote.com" { type master; notify no; file "null.zone.file"; };
 zone "freeslits.net" { type master; notify no; file "null.zone.file"; };
 zone "freesoft.website" { type master; notify no; file "null.zone.file"; };
@@ -28155,6 +28171,7 @@ zone "gmakeup.ru" { type master; notify no; file "null.zone.file"; };
 zone "gmann.blog" { type master; notify no; file "null.zone.file"; };
 zone "gmann.info" { type master; notify no; file "null.zone.file"; };
 zone "gmann.photos" { type master; notify no; file "null.zone.file"; };
+zone "gmassurance.fr" { type master; notify no; file "null.zone.file"; };
 zone "gmc2.ru" { type master; notify no; file "null.zone.file"; };
 zone "gmcoflouisville.com" { type master; notify no; file "null.zone.file"; };
 zone "gmcostruzionieservizi.com" { type master; notify no; file "null.zone.file"; };
@@ -30330,6 +30347,7 @@ zone "hediye-internet-saglik.org" { type master; notify no; file "null.zone.file
 zone "hediye-internet.site" { type master; notify no; file "null.zone.file"; };
 zone "hediyegapsinternet.com" { type master; notify no; file "null.zone.file"; };
 zone "hediyeinternetpaketim.com" { type master; notify no; file "null.zone.file"; };
+zone "hediyem20gb-internet.org" { type master; notify no; file "null.zone.file"; };
 zone "hediyenkolay.com" { type master; notify no; file "null.zone.file"; };
 zone "hedrasl.com" { type master; notify no; file "null.zone.file"; };
 zone "hedwise.com" { type master; notify no; file "null.zone.file"; };
@@ -30569,6 +30587,7 @@ zone "herrajesmasota.com" { type master; notify no; file "null.zone.file"; };
 zone "herratech.com" { type master; notify no; file "null.zone.file"; };
 zone "herrenmode.tk" { type master; notify no; file "null.zone.file"; };
 zone "herrent.com" { type master; notify no; file "null.zone.file"; };
+zone "herrfischer.me" { type master; notify no; file "null.zone.file"; };
 zone "herrgaardstak.se" { type master; notify no; file "null.zone.file"; };
 zone "herryjoa.mireene.com" { type master; notify no; file "null.zone.file"; };
 zone "herscare.net" { type master; notify no; file "null.zone.file"; };
@@ -31708,6 +31727,7 @@ zone "htmedia.net" { type master; notify no; file "null.zone.file"; };
 zone "htmediagroups.com" { type master; notify no; file "null.zone.file"; };
 zone "html.nichost.ru" { type master; notify no; file "null.zone.file"; };
 zone "htmlget.com" { type master; notify no; file "null.zone.file"; };
+zone "htn13.com" { type master; notify no; file "null.zone.file"; };
 zone "htnieuw.hazenbergtimmerwerken.nl" { type master; notify no; file "null.zone.file"; };
 zone "htpinvestment.com.vn" { type master; notify no; file "null.zone.file"; };
 zone "htt.nu" { type master; notify no; file "null.zone.file"; };
@@ -34454,6 +34474,7 @@ zone "itray.co.kr" { type master; notify no; file "null.zone.file"; };
 zone "itrc.gov.co" { type master; notify no; file "null.zone.file"; };
 zone "itrenaissance.com" { type master; notify no; file "null.zone.file"; };
 zone "itreni.net" { type master; notify no; file "null.zone.file"; };
+zone "itrigger.cn" { type master; notify no; file "null.zone.file"; };
 zone "itroj.ir" { type master; notify no; file "null.zone.file"; };
 zone "its-fondazionearchimede.it" { type master; notify no; file "null.zone.file"; };
 zone "its-oh.net" { type master; notify no; file "null.zone.file"; };
@@ -35244,6 +35265,7 @@ zone "jhdwas.org" { type master; notify no; file "null.zone.file"; };
 zone "jhelt.net" { type master; notify no; file "null.zone.file"; };
 zone "jhom.in" { type master; notify no; file "null.zone.file"; };
 zone "jhonhusein.com" { type master; notify no; file "null.zone.file"; };
+zone "jhorapatarastana.xyz" { type master; notify no; file "null.zone.file"; };
 zone "jhrt185.com" { type master; notify no; file "null.zone.file"; };
 zone "jhssourcingltd.com" { type master; notify no; file "null.zone.file"; };
 zone "jhsstudio.com.br" { type master; notify no; file "null.zone.file"; };
@@ -37216,6 +37238,7 @@ zone "khoshrougallery.com" { type master; notify no; file "null.zone.file"; };
 zone "khotanperfume.com" { type master; notify no; file "null.zone.file"; };
 zone "khotawa.com" { type master; notify no; file "null.zone.file"; };
 zone "khothietbivesinh24h.com" { type master; notify no; file "null.zone.file"; };
+zone "khoztrip.ir" { type master; notify no; file "null.zone.file"; };
 zone "khp89wc.com" { type master; notify no; file "null.zone.file"; };
 zone "khpm.ir" { type master; notify no; file "null.zone.file"; };
 zone "khrystyna-verkholiak.com" { type master; notify no; file "null.zone.file"; };
@@ -37860,6 +37883,7 @@ zone "kolbecompany.com" { type master; notify no; file "null.zone.file"; };
 zone "kolejmontlari.com" { type master; notify no; file "null.zone.file"; };
 zone "kolejnicky.cz" { type master; notify no; file "null.zone.file"; };
 zone "kolejskilmentari.edu.my" { type master; notify no; file "null.zone.file"; };
+zone "kolibri-fabrika.ru" { type master; notify no; file "null.zone.file"; };
 zone "kolibristattoo.lt" { type master; notify no; file "null.zone.file"; };
 zone "kolkatacleanair.in" { type master; notify no; file "null.zone.file"; };
 zone "koll-partner.tax" { type master; notify no; file "null.zone.file"; };
@@ -38096,6 +38120,7 @@ zone "kpmicrowave.com" { type master; notify no; file "null.zone.file"; };
 zone "kpodata.com" { type master; notify no; file "null.zone.file"; };
 zone "kpogroup.bo" { type master; notify no; file "null.zone.file"; };
 zone "kpopstarz.kienthucsong.info" { type master; notify no; file "null.zone.file"; };
+zone "kposter.alexandruplesea.ro" { type master; notify no; file "null.zone.file"; };
 zone "kppspgrojec.internetdsl.pl" { type master; notify no; file "null.zone.file"; };
 zone "kprsolutions.com" { type master; notify no; file "null.zone.file"; };
 zone "kpss.ir" { type master; notify no; file "null.zone.file"; };
@@ -43473,6 +43498,7 @@ zone "mebs-marketing.de" { type master; notify no; file "null.zone.file"; };
 zone "mecanique-vivante.com" { type master; notify no; file "null.zone.file"; };
 zone "mecanizadosgurrutxaga.com" { type master; notify no; file "null.zone.file"; };
 zone "mecatronica.ifc-riodosul.edu.br" { type master; notify no; file "null.zone.file"; };
+zone "mecbox.cn" { type master; notify no; file "null.zone.file"; };
 zone "mecenat.com.ua" { type master; notify no; file "null.zone.file"; };
 zone "mecflui.com.br" { type master; notify no; file "null.zone.file"; };
 zone "mecgwl.ac.in" { type master; notify no; file "null.zone.file"; };
@@ -44456,6 +44482,7 @@ zone "milcommonline.com" { type master; notify no; file "null.zone.file"; };
 zone "milczanowska.com" { type master; notify no; file "null.zone.file"; };
 zone "mildibsilgip.com" { type master; notify no; file "null.zone.file"; };
 zone "mileageindia.com" { type master; notify no; file "null.zone.file"; };
+zone "milebgd.mycpanel.rs" { type master; notify no; file "null.zone.file"; };
 zone "milehighffa.com" { type master; notify no; file "null.zone.file"; };
 zone "milehighhomebuyers.com" { type master; notify no; file "null.zone.file"; };
 zone "milena-koenig.de" { type master; notify no; file "null.zone.file"; };
@@ -45239,6 +45266,7 @@ zone "moie.nl" { type master; notify no; file "null.zone.file"; };
 zone "moigioi.info" { type master; notify no; file "null.zone.file"; };
 zone "moikihit.ru" { type master; notify no; file "null.zone.file"; };
 zone "moinetfils.com" { type master; notify no; file "null.zone.file"; };
+zone "moinmo.de" { type master; notify no; file "null.zone.file"; };
 zone "mois.com.br" { type master; notify no; file "null.zone.file"; };
 zone "moiselektronik.com" { type master; notify no; file "null.zone.file"; };
 zone "moisesdavid.com" { type master; notify no; file "null.zone.file"; };
@@ -46030,6 +46058,8 @@ zone "muhammadiyahamin.com" { type master; notify no; file "null.zone.file"; };
 zone "muhammadshahid.techsandooq.com" { type master; notify no; file "null.zone.file"; };
 zone "muhanoiss6.net" { type master; notify no; file "null.zone.file"; };
 zone "muhendismeraki.com" { type master; notify no; file "null.zone.file"; };
+zone "muhtesem20gb.xyz" { type master; notify no; file "null.zone.file"; };
+zone "muhtessemramazan20gb.com" { type master; notify no; file "null.zone.file"; };
 zone "muidokan.com" { type master; notify no; file "null.zone.file"; };
 zone "muikarellep.band" { type master; notify no; file "null.zone.file"; };
 zone "muilyt.com" { type master; notify no; file "null.zone.file"; };
@@ -46444,6 +46474,8 @@ zone "myhscnow.com" { type master; notify no; file "null.zone.file"; };
 zone "myimmigrationlawmarketingpartner.com" { type master; notify no; file "null.zone.file"; };
 zone "myinfoart.online" { type master; notify no; file "null.zone.file"; };
 zone "myinternetjobs.com" { type master; notify no; file "null.zone.file"; };
+zone "myintromationsz.win" { type master; notify no; file "null.zone.file"; };
+zone "myintromationszcj.win" { type master; notify no; file "null.zone.file"; };
 zone "myjedesigns.com" { type master; notify no; file "null.zone.file"; };
 zone "myjmcedu-my.sharepoint.com" { type master; notify no; file "null.zone.file"; };
 zone "myjnia-samochodowa.com" { type master; notify no; file "null.zone.file"; };
@@ -47814,6 +47846,7 @@ zone "ngoibitumsinhthai.com.vn" { type master; notify no; file "null.zone.file";
 zone "ngoinhadaquy.com" { type master; notify no; file "null.zone.file"; };
 zone "ngoitruonghanhphuc.edu.vn" { type master; notify no; file "null.zone.file"; };
 zone "ngomavibe.co.ke" { type master; notify no; file "null.zone.file"; };
+zone "ngon10.com" { type master; notify no; file "null.zone.file"; };
 zone "ngoshakarpura.online" { type master; notify no; file "null.zone.file"; };
 zone "ngovietanh.com" { type master; notify no; file "null.zone.file"; };
 zone "ngowebsite.developeratfiverr.in" { type master; notify no; file "null.zone.file"; };
@@ -51845,6 +51878,7 @@ zone "phuongart.000webhostapp.com" { type master; notify no; file "null.zone.fil
 zone "phuongnguyencutrinh.gov.vn" { type master; notify no; file "null.zone.file"; };
 zone "phuongphamngulao.gov.vn" { type master; notify no; file "null.zone.file"; };
 zone "phuongphan.co" { type master; notify no; file "null.zone.file"; };
+zone "phuphamca.com" { type master; notify no; file "null.zone.file"; };
 zone "phusonland.vn" { type master; notify no; file "null.zone.file"; };
 zone "phutung24h.vn" { type master; notify no; file "null.zone.file"; };
 zone "phy.mbstu.ac.bd" { type master; notify no; file "null.zone.file"; };
@@ -56592,6 +56626,7 @@ zone "rociton.com.bd" { type master; notify no; file "null.zone.file"; };
 zone "rock-creek.com" { type master; notify no; file "null.zone.file"; };
 zone "rockcanyonoutfitters.com" { type master; notify no; file "null.zone.file"; };
 zone "rockenstein-gmbh.de" { type master; notify no; file "null.zone.file"; };
+zone "rockersdolphin.co.za" { type master; notify no; file "null.zone.file"; };
 zone "rocket-tutor.com" { type master; notify no; file "null.zone.file"; };
 zone "rocketbagger.com" { type master; notify no; file "null.zone.file"; };
 zone "rocketx.fun" { type master; notify no; file "null.zone.file"; };
@@ -56972,6 +57007,7 @@ zone "rrdm.co.in" { type master; notify no; file "null.zone.file"; };
 zone "rrexkmwi.yjdata.me" { type master; notify no; file "null.zone.file"; };
 zone "rrglobaltrade.com" { type master; notify no; file "null.zone.file"; };
 zone "rrgodshsf.ug" { type master; notify no; file "null.zone.file"; };
+zone "rrinteriores.neoistone.site" { type master; notify no; file "null.zone.file"; };
 zone "rrmedical-gmbh.com" { type master; notify no; file "null.zone.file"; };
 zone "rronrestaurant.com" { type master; notify no; file "null.zone.file"; };
 zone "rroun-nourr.ga" { type master; notify no; file "null.zone.file"; };
@@ -57599,6 +57635,7 @@ zone "saglikbakanligindanhediye20gb.com" { type master; notify no; file "null.zo
 zone "saglikgoalapp.site" { type master; notify no; file "null.zone.file"; };
 zone "saglikliapp.live" { type master; notify no; file "null.zone.file"; };
 zone "sagliklibedenim.com" { type master; notify no; file "null.zone.file"; };
+zone "saglikodemelerinial.org" { type master; notify no; file "null.zone.file"; };
 zone "sagrathi.com" { type master; notify no; file "null.zone.file"; };
 zone "sagunpapers.com" { type master; notify no; file "null.zone.file"; };
 zone "sahabathasyim.com" { type master; notify no; file "null.zone.file"; };
@@ -59324,7 +59361,9 @@ zone "setonpaloalto.org" { type master; notify no; file "null.zone.file"; };
 zone "setra.ir" { type master; notify no; file "null.zone.file"; };
 zone "setrals.net" { type master; notify no; file "null.zone.file"; };
 zone "setrals.website" { type master; notify no; file "null.zone.file"; };
+zone "setsd.xyz" { type master; notify no; file "null.zone.file"; };
 zone "setseta.com" { type master; notify no; file "null.zone.file"; };
+zone "setss.xyz" { type master; notify no; file "null.zone.file"; };
 zone "settecieli.com" { type master; notify no; file "null.zone.file"; };
 zone "setticonference.it" { type master; notify no; file "null.zone.file"; };
 zone "setup.co.il" { type master; notify no; file "null.zone.file"; };
@@ -59962,6 +60001,7 @@ zone "shopinclub.in" { type master; notify no; file "null.zone.file"; };
 zone "shopinsta.in" { type master; notify no; file "null.zone.file"; };
 zone "shopinterbuild.com" { type master; notify no; file "null.zone.file"; };
 zone "shopiqtoys.com" { type master; notify no; file "null.zone.file"; };
+zone "shopjumpn.ch" { type master; notify no; file "null.zone.file"; };
 zone "shopkaro.apps19.com" { type master; notify no; file "null.zone.file"; };
 zone "shopkimhuyen.com" { type master; notify no; file "null.zone.file"; };
 zone "shopkinhdoanh.com" { type master; notify no; file "null.zone.file"; };
@@ -60465,6 +60505,7 @@ zone "sipil.fatek.untad.ac.id" { type master; notify no; file "null.zone.file";
 zone "sipmanagement-my.sharepoint.com" { type master; notify no; file "null.zone.file"; };
 zone "siprev.net.br" { type master; notify no; file "null.zone.file"; };
 zone "siragehad.com" { type master; notify no; file "null.zone.file"; };
+zone "sirajaoloan.com" { type master; notify no; file "null.zone.file"; };
 zone "sirajhummus.com" { type master; notify no; file "null.zone.file"; };
 zone "siranagi.sakura.ne.jp" { type master; notify no; file "null.zone.file"; };
 zone "sirenas-spa.com" { type master; notify no; file "null.zone.file"; };
@@ -61092,6 +61133,7 @@ zone "smokesock.com" { type master; notify no; file "null.zone.file"; };
 zone "smokesome.xyz" { type master; notify no; file "null.zone.file"; };
 zone "smoketravkueveryday.tech" { type master; notify no; file "null.zone.file"; };
 zone "smokingpot.xyz" { type master; notify no; file "null.zone.file"; };
+zone "smollmart.com" { type master; notify no; file "null.zone.file"; };
 zone "smoltest.tk" { type master; notify no; file "null.zone.file"; };
 zone "smoon.co.kr" { type master; notify no; file "null.zone.file"; };
 zone "smooth-moves.com" { type master; notify no; file "null.zone.file"; };
@@ -62302,6 +62344,7 @@ zone "srtechno.co.in" { type master; notify no; file "null.zone.file"; };
 zone "srtms.in" { type master; notify no; file "null.zone.file"; };
 zone "srujanovision.com" { type master; notify no; file "null.zone.file"; };
 zone "srv-15.directserver.us" { type master; notify no; file "null.zone.file"; };
+zone "srv-file9.gofile.io" { type master; notify no; file "null.zone.file"; };
 zone "srv7.computerkolkata.com" { type master; notify no; file "null.zone.file"; };
 zone "srv77956.ht-test.ru" { type master; notify no; file "null.zone.file"; };
 zone "srv9.computerkolkata.com" { type master; notify no; file "null.zone.file"; };
@@ -64598,6 +64641,7 @@ zone "tappteam.co.uk" { type master; notify no; file "null.zone.file"; };
 zone "tapretriat.com" { type master; notify no; file "null.zone.file"; };
 zone "taproomagogo.com" { type master; notify no; file "null.zone.file"; };
 zone "tapsglobalsolutions.com" { type master; notify no; file "null.zone.file"; };
+zone "tapss.com.br" { type master; notify no; file "null.zone.file"; };
 zone "tapsu.in" { type master; notify no; file "null.zone.file"; };
 zone "taptagtees.com" { type master; notify no; file "null.zone.file"; };
 zone "tapucreative.com" { type master; notify no; file "null.zone.file"; };
@@ -65007,6 +65051,7 @@ zone "technoknot.com" { type master; notify no; file "null.zone.file"; };
 zone "technologicznie.pl" { type master; notify no; file "null.zone.file"; };
 zone "technologiebeloeil.com" { type master; notify no; file "null.zone.file"; };
 zone "technologielaurendeau.com" { type master; notify no; file "null.zone.file"; };
+zone "technology-bd.com" { type master; notify no; file "null.zone.file"; };
 zone "technologyadvantages.000webhostapp.com" { type master; notify no; file "null.zone.file"; };
 zone "technologyaroundu.com" { type master; notify no; file "null.zone.file"; };
 zone "technologycomponents.com" { type master; notify no; file "null.zone.file"; };
@@ -67497,6 +67542,7 @@ zone "tourcrafters.in" { type master; notify no; file "null.zone.file"; };
 zone "tourderichelieu.com" { type master; notify no; file "null.zone.file"; };
 zone "tourdezsokolat.hu" { type master; notify no; file "null.zone.file"; };
 zone "tourecoz.in" { type master; notify no; file "null.zone.file"; };
+zone "tourenhelicoptero.com" { type master; notify no; file "null.zone.file"; };
 zone "tourguy.com" { type master; notify no; file "null.zone.file"; };
 zone "touring-athens.com" { type master; notify no; file "null.zone.file"; };
 zone "touring.woolston.com.au" { type master; notify no; file "null.zone.file"; };
@@ -67643,6 +67689,7 @@ zone "tradingexpert.website" { type master; notify no; file "null.zone.file"; };
 zone "tradingmatic.youralgo.com" { type master; notify no; file "null.zone.file"; };
 zone "tradingpartneredi.com" { type master; notify no; file "null.zone.file"; };
 zone "tradingstyle.net" { type master; notify no; file "null.zone.file"; };
+zone "tradingwithharmony.com" { type master; notify no; file "null.zone.file"; };
 zone "traditionsfinegifts.com" { type master; notify no; file "null.zone.file"; };
 zone "tradutorgeek.com" { type master; notify no; file "null.zone.file"; };
 zone "traektoria.com" { type master; notify no; file "null.zone.file"; };
@@ -68709,6 +68756,7 @@ zone "ucomechina.com" { type master; notify no; file "null.zone.file"; };
 zone "uconthailand.com" { type master; notify no; file "null.zone.file"; };
 zone "ucrealtors.com" { type master; notify no; file "null.zone.file"; };
 zone "ucrealtors.net" { type master; notify no; file "null.zone.file"; };
+zone "ucretsiz20gbturkiye.com" { type master; notify no; file "null.zone.file"; };
 zone "ucrnn.org" { type master; notify no; file "null.zone.file"; };
 zone "ucstandart.ru" { type master; notify no; file "null.zone.file"; };
 zone "ucto-id.cz" { type master; notify no; file "null.zone.file"; };
@@ -69449,6 +69497,7 @@ zone "usakisdunyasi.com" { type master; notify no; file "null.zone.file"; };
 zone "usamashakeel.com" { type master; notify no; file "null.zone.file"; };
 zone "usamovers.net" { type master; notify no; file "null.zone.file"; };
 zone "usanin.info" { type master; notify no; file "null.zone.file"; };
+zone "usapglobal.usapglobal.org" { type master; notify no; file "null.zone.file"; };
 zone "usaselfstoragenetwork.com" { type master; notify no; file "null.zone.file"; };
 zone "usastoragenetwork.com" { type master; notify no; file "null.zone.file"; };
 zone "usax138.oicp.net" { type master; notify no; file "null.zone.file"; };
@@ -69580,9 +69629,11 @@ zone "uy-akwaibom.ru" { type master; notify no; file "null.zone.file"; };
 zone "uyaiblog.com" { type master; notify no; file "null.zone.file"; };
 zone "uycqawua.applekid.cn" { type master; notify no; file "null.zone.file"; };
 zone "uydu.antalyaelektrikariza.net" { type master; notify no; file "null.zone.file"; };
+zone "uyen.vn" { type master; notify no; file "null.zone.file"; };
 zone "uyencometics.bmt.city" { type master; notify no; file "null.zone.file"; };
 zone "uyf.com.ua" { type master; notify no; file "null.zone.file"; };
 zone "uyghurchem.com" { type master; notify no; file "null.zone.file"; };
+zone "uygulamalarim-hediyeinternet.org" { type master; notify no; file "null.zone.file"; };
 zone "uyijbmxxm8874337.gameofthrones05.site" { type master; notify no; file "null.zone.file"; };
 zone "uyikjtn.eu" { type master; notify no; file "null.zone.file"; };
 zone "uytr5e.imtbreds.com" { type master; notify no; file "null.zone.file"; };
@@ -70056,6 +70107,7 @@ zone "vencury.com" { type master; notify no; file "null.zone.file"; };
 zone "vendacomcelular.com.br" { type master; notify no; file "null.zone.file"; };
 zone "vendaiot.ir" { type master; notify no; file "null.zone.file"; };
 zone "vendameucarroo.com" { type master; notify no; file "null.zone.file"; };
+zone "vendeaki.online" { type master; notify no; file "null.zone.file"; };
 zone "vendem.com.br" { type master; notify no; file "null.zone.file"; };
 zone "vendere-su-internet.com" { type master; notify no; file "null.zone.file"; };
 zone "vendermicasaenbarcelona.com" { type master; notify no; file "null.zone.file"; };
@@ -70299,6 +70351,7 @@ zone "viberspyware.com" { type master; notify no; file "null.zone.file"; };
 zone "vibescyahdone.com" { type master; notify no; file "null.zone.file"; };
 zone "vibeshirt.de" { type master; notify no; file "null.zone.file"; };
 zone "vibetronic.id" { type master; notify no; file "null.zone.file"; };
+zone "vibicloud.com" { type master; notify no; file "null.zone.file"; };
 zone "vibni.dk" { type master; notify no; file "null.zone.file"; };
 zone "vibor-anapa.ru" { type master; notify no; file "null.zone.file"; };
 zone "vibramarketing.cl" { type master; notify no; file "null.zone.file"; };
@@ -73110,6 +73163,7 @@ zone "wws.tkgventures.com" { type master; notify no; file "null.zone.file"; };
 zone "www-88xyxy-com.info" { type master; notify no; file "null.zone.file"; };
 zone "www-bsac.eecs.berkeley.edu" { type master; notify no; file "null.zone.file"; };
 zone "www-dev.e4healthinc.com" { type master; notify no; file "null.zone.file"; };
+zone "www-ecimer-uygulamayukleme-govtr.com" { type master; notify no; file "null.zone.file"; };
 zone "www-grupotv1-com-br.azurclaireritter.cmail-oln040092069015.outbound.protection.sketchwefair-watduoliprudential.com.watchdogdns.duckdns.org" { type master; notify no; file "null.zone.file"; };
 zone "www.smart-eg.com" { type master; notify no; file "null.zone.file"; };
 zone "www022284.com" { type master; notify no; file "null.zone.file"; };
@@ -73197,6 +73251,7 @@ zone "x86tpkujgu1ksoky.com" { type master; notify no; file "null.zone.file"; };
 zone "xacrosoft.com" { type master; notify no; file "null.zone.file"; };
 zone "xact.ma" { type master; notify no; file "null.zone.file"; };
 zone "xadrezgigante.com.br" { type master; notify no; file "null.zone.file"; };
+zone "xaergtcrcd.info" { type master; notify no; file "null.zone.file"; };
 zone "xagency.co" { type master; notify no; file "null.zone.file"; };
 zone "xaidol.com" { type master; notify no; file "null.zone.file"; };
 zone "xajfgz.com" { type master; notify no; file "null.zone.file"; };
@@ -73681,6 +73736,7 @@ zone "xn--celegeninaat-dnc.com" { type master; notify no; file "null.zone.file";
 zone "xn--cryptohoppe-bec.com" { type master; notify no; file "null.zone.file"; };
 zone "xn--czstochowadlazwierzt-mkc63b.pl" { type master; notify no; file "null.zone.file"; };
 zone "xn--d1achkaoe4a.xn--p1ai" { type master; notify no; file "null.zone.file"; };
+zone "xn--d1aciabhfsdfe0a7e3b.xn--p1acf" { type master; notify no; file "null.zone.file"; };
 zone "xn--d1ahebikdfcgr7jsa.xn--p1ai" { type master; notify no; file "null.zone.file"; };
 zone "xn--d1ahjkdbhfjy4g.xn--p1ai" { type master; notify no; file "null.zone.file"; };
 zone "xn--d1aiocodol6a8d.xn--p1ai" { type master; notify no; file "null.zone.file"; };
@@ -74627,6 +74683,7 @@ zone "yzbot.com" { type master; notify no; file "null.zone.file"; };
 zone "yzmwh.com" { type master; notify no; file "null.zone.file"; };
 zone "yzzqdz.com" { type master; notify no; file "null.zone.file"; };
 zone "z-prava.ru" { type master; notify no; file "null.zone.file"; };
+zone "z.loyaltyaboveall.com" { type master; notify no; file "null.zone.file"; };
 zone "z.zz.ht" { type master; notify no; file "null.zone.file"; };
 zone "z0451.net" { type master; notify no; file "null.zone.file"; };
 zone "z0tt3l.de" { type master; notify no; file "null.zone.file"; };
diff --git a/urlhaus-filter-dnsmasq-online.conf b/urlhaus-filter-dnsmasq-online.conf
index 13e746dc..f63d7ae9 100644
--- a/urlhaus-filter-dnsmasq-online.conf
+++ b/urlhaus-filter-dnsmasq-online.conf
@@ -1,5 +1,5 @@
 # Title: abuse.ch URLhaus Malicious Domains dnsmasq Blocklist
-# Updated: Thu, 30 Apr 2020 12:09:30 UTC
+# Updated: Fri, 01 May 2020 00:10:35 UTC
 # Repo: https://gitlab.com/curben/urlhaus-filter
 # License: https://creativecommons.org/publicdomain/zero/1.0/
 # Source: https://urlhaus.abuse.ch/api/
@@ -12,20 +12,23 @@ address=/3.zhzy999.net/0.0.0.0
 address=/3.zhzy999.net3.zhzy999.net/0.0.0.0
 address=/3mandatesmedia.com/0.0.0.0
 address=/402musicfest.com/0.0.0.0
-address=/420hempizone.co/0.0.0.0
 address=/49parallel.ca/0.0.0.0
 address=/786suncity.com/0.0.0.0
 address=/8133msc.com/0.0.0.0
 address=/8200msc.com/0.0.0.0
+address=/87du.vip/0.0.0.0
 address=/887sconline.com/0.0.0.0
 address=/88mscco.com/0.0.0.0
 address=/9983suncity.com/0.0.0.0
+address=/Muanha.xyz/0.0.0.0
 address=/a-reality.co.uk/0.0.0.0
+address=/a.xiazai163.com/0.0.0.0
 address=/aaasolution.co.th/0.0.0.0
 address=/accentlandscapes.com/0.0.0.0
 address=/accessyouraudience.com/0.0.0.0
 address=/acteon.com.ar/0.0.0.0
 address=/ade.topepics.com/0.0.0.0
+address=/adnquocte.com/0.0.0.0
 address=/aelogica.com/0.0.0.0
 address=/agiandsam.com/0.0.0.0
 address=/agipasesores.com/0.0.0.0
@@ -42,11 +45,11 @@ address=/allloveseries.com/0.0.0.0
 address=/alohasoftware.net/0.0.0.0
 address=/alphaconsumer.net/0.0.0.0
 address=/am-concepts.ca/0.0.0.0
+address=/amd.alibuf.com/0.0.0.0
 address=/amedeoscognamiglio.329263.com/0.0.0.0
 address=/amemarine.co.th/0.0.0.0
 address=/americanrange.com/0.0.0.0
 address=/anadolutatili.com/0.0.0.0
-address=/andreabo1.myftp.biz/0.0.0.0
 address=/andreelapeyre.com/0.0.0.0
 address=/andremaraisbeleggings.co.za/0.0.0.0
 address=/angthong.nfe.go.th/0.0.0.0
@@ -60,9 +63,9 @@ address=/archiv.bg/0.0.0.0
 address=/arcticprospectus.com/0.0.0.0
 address=/areac-agr.com/0.0.0.0
 address=/aresorganics.com/0.0.0.0
+address=/arowanafishforsale.com/0.0.0.0
 address=/asadairtravel.com/0.0.0.0
 address=/ascentive.com/0.0.0.0
-address=/ashoakacharya.com/0.0.0.0
 address=/askarindo.or.id/0.0.0.0
 address=/atfile.com/0.0.0.0
 address=/atomlines.com/0.0.0.0
@@ -71,60 +74,66 @@ address=/atteuqpotentialunlimited.com/0.0.0.0
 address=/audiosv.com/0.0.0.0
 address=/aulist.com/0.0.0.0
 address=/auraco.ca/0.0.0.0
+address=/aurumboy.com/0.0.0.0
+address=/avestor.uz/0.0.0.0
 address=/azmeasurement.com/0.0.0.0
 address=/aznetsolutions.com/0.0.0.0
 address=/azureautomation.co.uk/0.0.0.0
 address=/azzd.co.kr/0.0.0.0
 address=/babaroadways.in/0.0.0.0
 address=/badgesforbullies.org/0.0.0.0
-address=/badmildiou.com/0.0.0.0
 address=/bagmatisanchar.com/0.0.0.0
 address=/bamakobleach.free.fr/0.0.0.0
+address=/bangkok-orchids.com/0.0.0.0
 address=/banzaimonkey.com/0.0.0.0
 address=/bapo.granudan.cn/0.0.0.0
-address=/bbs.sunwy.org/0.0.0.0
+address=/baritaco.com/0.0.0.0
 address=/bbs1.marisfrolg.com/0.0.0.0
+address=/bd11.52lishi.com/0.0.0.0
 address=/bd12.52lishi.com/0.0.0.0
+address=/bd18.52lishi.com/0.0.0.0
 address=/bd19.52lishi.com/0.0.0.0
-address=/beforeshithappens.com/0.0.0.0
 address=/beibei.xx007.cc/0.0.0.0
 address=/bepgroup.com.hk/0.0.0.0
 address=/besserblok-ufa.ru/0.0.0.0
-address=/besthack.co/0.0.0.0
 address=/besttasimacilik.com.tr/0.0.0.0
 address=/beta.pterosol.com/0.0.0.0
 address=/bflow.security-portal.cz/0.0.0.0
 address=/bildeboks.no/0.0.0.0
 address=/bilim-pavlodar.gov.kz/0.0.0.0
+address=/billieellish.org/0.0.0.0
 address=/bingxiong.vip/0.0.0.0
 address=/bjkumdo.com/0.0.0.0
-address=/blankki.com/0.0.0.0
 address=/blog.241optical.com/0.0.0.0
-address=/blog.anytimeneeds.com/0.0.0.0
 address=/blog.hanxe.com/0.0.0.0
 address=/bolidar.dnset.com/0.0.0.0
 address=/bondbuild.com.sg/0.0.0.0
-address=/bookmytripping.com/0.0.0.0
+address=/bonyamin.com/0.0.0.0
+address=/boscanatural.com/0.0.0.0
+address=/bovientix.com/0.0.0.0
 address=/bpo.correct.go.th/0.0.0.0
 address=/brasstec.com.br/0.0.0.0
 address=/brbs.customer.netspace.net.au/0.0.0.0
 address=/brenleyquartzgh.com/0.0.0.0
 address=/brewmethods.com/0.0.0.0
 address=/btlocum.pl/0.0.0.0
+address=/bucketstrong.s3-us-west-1.amazonaws.com/0.0.0.0
 address=/bugansavings.com/0.0.0.0
+address=/buhleni.co.za/0.0.0.0
 address=/buydishtv.in/0.0.0.0
 address=/bxbx28.cn/0.0.0.0
 address=/byqkdy.com/0.0.0.0
 address=/cameli.vn/0.0.0.0
+address=/canaan.io/0.0.0.0
 address=/caravella.com.br/0.0.0.0
 address=/cassiagumrefined.com/0.0.0.0
 address=/cassovia.sk/0.0.0.0
+address=/castmart.ga/0.0.0.0
 address=/cbk.m.dodo52.com/0.0.0.0
 address=/ccnn.xiaomier.cn/0.0.0.0
+address=/cdn-10049480.file.myqcloud.com/0.0.0.0
 address=/cdn.xiaoduoai.com/0.0.0.0
 address=/cdnus.laboratoryconecpttoday.com/0.0.0.0
-address=/cecadesayu.corazondelcielo.mx/0.0.0.0
-address=/ceirecrear.com.br/0.0.0.0
 address=/cellas.sk/0.0.0.0
 address=/cf.uuu9.com/0.0.0.0
 address=/cf0.pw/0.0.0.0
@@ -133,7 +142,6 @@ address=/ch.rmu.ac.th/0.0.0.0
 address=/changematterscounselling.com/0.0.0.0
 address=/chanvribloc.com/0.0.0.0
 address=/charm.bizfxr.com/0.0.0.0
-address=/chattosport.com/0.0.0.0
 address=/chauffeursontravel.com/0.0.0.0
 address=/chedea.eu/0.0.0.0
 address=/chinhdropfile.myvnc.com/0.0.0.0
@@ -141,25 +149,26 @@ address=/chinhdropfile80.myvnc.com/0.0.0.0
 address=/chipmarkets.com/0.0.0.0
 address=/chj.m.dodo52.com/0.0.0.0
 address=/chnes17wsdywealthandmoduleorganisationui.duckdns.org/0.0.0.0
-address=/cista-dobra-voda.com/0.0.0.0
+address=/cinnamoncreations.com.au/0.0.0.0
 address=/clearwaterriveroutfitting.com/0.0.0.0
 address=/client.yaap.co.uk/0.0.0.0
 address=/clinicamariademolina.com/0.0.0.0
 address=/cloud-server-updater2.co.za/0.0.0.0
+address=/cloud.wmsinfo.com.br/0.0.0.0
 address=/colourcreative.co.za/0.0.0.0
-address=/compesat.com/0.0.0.0
+address=/common-factor.nl/0.0.0.0
 address=/complan.hu/0.0.0.0
 address=/complanbt.hu/0.0.0.0
 address=/comtechadsl.com/0.0.0.0
 address=/config.kuaisousou.top/0.0.0.0
-address=/corazondelcielo.mx/0.0.0.0
+address=/consultingcy.com/0.0.0.0
 address=/counciloflight.bravepages.com/0.0.0.0
 address=/cqjcc.org/0.0.0.0
 address=/crittersbythebay.com/0.0.0.0
-address=/crudenergyllc.com/0.0.0.0
 address=/cryptoomarket.com/0.0.0.0
 address=/csnserver.com/0.0.0.0
 address=/csw.hu/0.0.0.0
+address=/cuacuonsieure.com/0.0.0.0
 address=/cvc.com.pl/0.0.0.0
 address=/cyclomove.com/0.0.0.0
 address=/czsl.91756.cn/0.0.0.0
@@ -174,11 +183,13 @@ address=/datvensaigon.com/0.0.0.0
 address=/davinadouthard.com/0.0.0.0
 address=/dawaphoto.co.kr/0.0.0.0
 address=/daynightgym.com/0.0.0.0
+address=/ddl7.data.hu/0.0.0.0
 address=/de.gsearch.com.de/0.0.0.0
 address=/deixameuskls.tripod.com/0.0.0.0
 address=/demo10.onbm.ir/0.0.0.0
 address=/demo13.dsdemosite.com/0.0.0.0
 address=/denkagida.com.tr/0.0.0.0
+address=/depgrup.com/0.0.0.0
 address=/depot7.com/0.0.0.0
 address=/derivativespro.in/0.0.0.0
 address=/dev.sebpo.net/0.0.0.0
@@ -191,6 +202,7 @@ address=/dfzm.91756.cn/0.0.0.0
 address=/dgecolesdepolice.bf/0.0.0.0
 address=/dgnj.cn/0.0.0.0
 address=/diazavendano.cl/0.0.0.0
+address=/dichthuatsnu.com/0.0.0.0
 address=/dichvuvesinhcongnghiep.top/0.0.0.0
 address=/dienmaycu.vn/0.0.0.0
 address=/dieselmoreno.cl/0.0.0.0
@@ -209,6 +221,7 @@ address=/dl2.soft-lenta.ru/0.0.0.0
 address=/dlist.iqilie.com/0.0.0.0
 address=/dmresor.se/0.0.0.0
 address=/dnn.alibuf.com/0.0.0.0
+address=/dns.alibuf.com/0.0.0.0
 address=/dodsonimaging.com/0.0.0.0
 address=/don.viameventos.com.br/0.0.0.0
 address=/dongiln.co/0.0.0.0
@@ -223,7 +236,6 @@ address=/down.pcclear.com/0.0.0.0
 address=/down.startools.co.kr/0.0.0.0
 address=/down.upzxt.com/0.0.0.0
 address=/down.webbora.com/0.0.0.0
-address=/down.xrpdf.com/0.0.0.0
 address=/down1.arpun.com/0.0.0.0
 address=/downcdn.xianshuabao.com/0.0.0.0
 address=/download.1ys.com/0.0.0.0
@@ -237,12 +249,15 @@ address=/download.ware.ru/0.0.0.0
 address=/download.zjsyawqj.cn/0.0.0.0
 address=/download301.wanmei.com/0.0.0.0
 address=/dpeasesummithilltoppers.pbworks.com/0.0.0.0
+address=/dr080.com/0.0.0.0
 address=/dralpaslan.com/0.0.0.0
 address=/drools-moved.46999.n3.nabble.com/0.0.0.0
 address=/druzim.freewww.biz/0.0.0.0
+address=/drwendyellis.com/0.0.0.0
 address=/dsiun.com/0.0.0.0
 address=/dtsay.xyz/0.0.0.0
 address=/dudulm.com/0.0.0.0
+address=/duongfpt.ga/0.0.0.0
 address=/dusdn.mireene.com/0.0.0.0
 address=/dw.58wangdun.com/0.0.0.0
 address=/dx.qqyewu.com/0.0.0.0
@@ -252,27 +267,29 @@ address=/dx30.siweidaoxiang.com/0.0.0.0
 address=/dx60.siweidaoxiang.com/0.0.0.0
 address=/dzapasigroup.usapglobal.org/0.0.0.0
 address=/dzinestudio87.co.uk/0.0.0.0
-address=/e-internetim.com/0.0.0.0
 address=/e.dangeana.com/0.0.0.0
+address=/earningtipsbd.com/0.0.0.0
 address=/easydown.workday360.cn/0.0.0.0
-address=/ebook.w3wvg.com/0.0.0.0
 address=/edicolanazionale.it/0.0.0.0
+address=/elokshinproperty.co.za/0.0.0.0
 address=/emir-elbahr.com/0.0.0.0
 address=/enc-tech.com/0.0.0.0
+address=/energisegroup.com/0.0.0.0
+address=/enixc.com/0.0.0.0
 address=/entre-potes.mon-application.com/0.0.0.0
-address=/eposar.com.ar/0.0.0.0
 address=/er-bulisguvenligi.com/0.0.0.0
 address=/ermekanik.com/0.0.0.0
 address=/esolvent.pl/0.0.0.0
 address=/esteteam.org/0.0.0.0
-address=/evdekal-kampanyasi20gbhediye.com/0.0.0.0
+address=/evdekaldiye20-gb.com/0.0.0.0
 address=/ezfintechcorp.com/0.0.0.0
 address=/fafhoafouehfuh.su/0.0.0.0
-address=/fairyqueenstore.com/0.0.0.0
+address=/fast.rentaroom.ml/0.0.0.0
 address=/fastsoft.onlinedown.net/0.0.0.0
 address=/fazi.pl/0.0.0.0
 address=/fenoma.net/0.0.0.0
 address=/fidiag.kymco.com/0.0.0.0
+address=/fifa555easy.329263.com/0.0.0.0
 address=/figuig.net/0.0.0.0
 address=/fileco.jobkorea.co.kr/0.0.0.0
 address=/filen3.utengine.co.kr/0.0.0.0
@@ -286,6 +303,7 @@ address=/flood-protection.org/0.0.0.0
 address=/foodbooktv.com/0.0.0.0
 address=/fordlamdong.com.vn/0.0.0.0
 address=/foreverprecious.org/0.0.0.0
+address=/foxfennecs.com/0.0.0.0
 address=/frin.ng/0.0.0.0
 address=/fte.m.dodo52.com/0.0.0.0
 address=/ftpcnc-p2sp.pconline.com.cn/0.0.0.0
@@ -293,7 +311,6 @@ address=/ftpftpftp.com/0.0.0.0
 address=/funletters.net/0.0.0.0
 address=/funpartyrent.com/0.0.0.0
 address=/futuregraphics.com.ar/0.0.0.0
-address=/futurodelasciudades.org/0.0.0.0
 address=/g0ogle.free.fr/0.0.0.0
 address=/gainsdirectory.com/0.0.0.0
 address=/galuhtea.com/0.0.0.0
@@ -308,7 +325,10 @@ address=/genesisconstruction.co.za/0.0.0.0
 address=/germistonmiraclecentre.co.za/0.0.0.0
 address=/ghislain.dartois.pagesperso-orange.fr/0.0.0.0
 address=/ghwls44.gabia.io/0.0.0.0
+address=/gimscompany.com/0.0.0.0
 address=/glitzygal.net/0.0.0.0
+address=/globaleuropeans.com/0.0.0.0
+address=/gmassurance.fr/0.0.0.0
 address=/gnimelf.net/0.0.0.0
 address=/go.xsuad.com/0.0.0.0
 address=/gocanada.vn/0.0.0.0
@@ -318,12 +338,11 @@ address=/grafchekloder.rebatesrule.net/0.0.0.0
 address=/granportale.com.br/0.0.0.0
 address=/green100.cn/0.0.0.0
 address=/greenleaveperu.com/0.0.0.0
-address=/greindustry.com/0.0.0.0
 address=/gssgroups.com/0.0.0.0
-address=/gstat.dondyablo.com/0.0.0.0
 address=/gx-10012947.file.myqcloud.com/0.0.0.0
 address=/habbotips.free.fr/0.0.0.0
 address=/hagebakken.no/0.0.0.0
+address=/halcat.com/0.0.0.0
 address=/hanaphoto.co.kr/0.0.0.0
 address=/handrush.com/0.0.0.0
 address=/hanoihub.vn/0.0.0.0
@@ -331,20 +350,21 @@ address=/hazel-azure.co.th/0.0.0.0
 address=/hdxa.net/0.0.0.0
 address=/healtina.com/0.0.0.0
 address=/heavenif.co.za/0.0.0.0
-address=/hediye-internet.site/0.0.0.0
-address=/hediyegapsinternet.com/0.0.0.0
+address=/hediyem20gb-internet.org/0.0.0.0
 address=/hellomessager.com/0.0.0.0
+address=/herrfischer.me/0.0.0.0
 address=/hfsoftware.cl/0.0.0.0
 address=/hingcheong.hk/0.0.0.0
 address=/hldschool.com/0.0.0.0
 address=/hmbwgroup.com/0.0.0.0
+address=/hmpmall.co.kr/0.0.0.0
 address=/hoayeuthuong-my.sharepoint.com/0.0.0.0
 address=/hostzaa.com/0.0.0.0
 address=/hotart.co.nz/0.0.0.0
 address=/hotel-le-relais-des-moulins.com/0.0.0.0
 address=/housewifes.co/0.0.0.0
+address=/how.ph/0.0.0.0
 address=/hqsistemas.com.ar/0.0.0.0
-address=/hseda.com/0.0.0.0
 address=/hsmwebapp.com/0.0.0.0
 address=/htxl.cn/0.0.0.0
 address=/huishuren.nu/0.0.0.0
@@ -372,6 +392,7 @@ address=/iran-gold.com/0.0.0.0
 address=/iremart.es/0.0.0.0
 address=/isso.ps/0.0.0.0
 address=/itd.m.dodo52.com/0.0.0.0
+address=/itohukuk.com/0.0.0.0
 address=/itsnixielou.com/0.0.0.0
 address=/ixlonbcc.com/0.0.0.0
 address=/izu.co.jp/0.0.0.0
@@ -379,10 +400,11 @@ address=/jaincakes.xyz/0.0.0.0
 address=/jamiekaylive.com/0.0.0.0
 address=/jansen-heesch.nl/0.0.0.0
 address=/janvierassocies.fr/0.0.0.0
-address=/jaservicioscontables.casteviajes.com/0.0.0.0
 address=/javatank.ru/0.0.0.0
 address=/jcedu.org/0.0.0.0
 address=/jessymart.flexyhub.com/0.0.0.0
+address=/jhorapatarastana.xyz/0.0.0.0
+address=/jjjexx.329263.com/0.0.0.0
 address=/jmtc.91756.cn/0.0.0.0
 address=/jointings.org/0.0.0.0
 address=/jonpetesharefile.com/0.0.0.0
@@ -399,6 +421,7 @@ address=/jyv.fi/0.0.0.0
 address=/jzny.com.cn/0.0.0.0
 address=/k.ludong.tv/0.0.0.0
 address=/k3.etfiber.net/0.0.0.0
+address=/kabiru.ru/0.0.0.0
 address=/kachsurf.mylftv.com/0.0.0.0
 address=/kamasu11.cafe24.com/0.0.0.0
 address=/kanok.co.th/0.0.0.0
@@ -406,9 +429,10 @@ address=/kar.big-pro.com/0.0.0.0
 address=/karavantekstil.com/0.0.0.0
 address=/kassohome.com.tr/0.0.0.0
 address=/kazanin20gbturkiye.com/0.0.0.0
-address=/kazanturkiye20gb.com/0.0.0.0
 address=/kdsp.co.kr/0.0.0.0
+address=/keckarangdadap.pekalongankab.go.id/0.0.0.0
 address=/kejpa.com/0.0.0.0
+address=/kgfs3.329263.com/0.0.0.0
 address=/khan-associates.net/0.0.0.0
 address=/khunnapap.com/0.0.0.0
 address=/kiaowadubai.com/0.0.0.0
@@ -416,10 +440,12 @@ address=/kiencuonghotel.vn/0.0.0.0
 address=/kjbm9.mof.gov.cn/0.0.0.0
 address=/kleinendeli.co.za/0.0.0.0
 address=/knightsbridgeenergy.com.ng/0.0.0.0
+address=/kolibri-fabrika.ru/0.0.0.0
 address=/koppemotta.com.br/0.0.0.0
 address=/koralli.if.ua/0.0.0.0
 address=/kqq.kz/0.0.0.0
 address=/kristofferdaniels.com/0.0.0.0
+address=/kupaliskohs.sk/0.0.0.0
 address=/kuznetsov.ca/0.0.0.0
 address=/kwanfromhongkong.com/0.0.0.0
 address=/kwikomfi-lab.com/0.0.0.0
@@ -428,7 +454,6 @@ address=/lameguard.ru/0.0.0.0
 address=/lammaixep.com/0.0.0.0
 address=/landmarktreks.com/0.0.0.0
 address=/langyabbs.05yun.cn/0.0.0.0
-address=/lastmorgoth.com/0.0.0.0
 address=/lcfurtado.com.br/0.0.0.0
 address=/ld.mediaget.com/0.0.0.0
 address=/learnbuddy.com/0.0.0.0
@@ -449,6 +474,7 @@ address=/log.yundabao.cn/0.0.0.0
 address=/lsyr.net/0.0.0.0
 address=/lt02.datacomspecialists.net/0.0.0.0
 address=/luatminhthuan.com/0.0.0.0
+address=/luckytriumph.com/0.0.0.0
 address=/luisnacht.com.ar/0.0.0.0
 address=/luyalu.net/0.0.0.0
 address=/lvr.samacomplus.com/0.0.0.0
@@ -484,6 +510,7 @@ address=/mhkdhotbot80.myvnc.com/0.0.0.0
 address=/miaoshuosh.com/0.0.0.0
 address=/micahproducts.com/0.0.0.0
 address=/micalle.com.au/0.0.0.0
+address=/milebgd.mycpanel.rs/0.0.0.0
 address=/mirror.mypage.sk/0.0.0.0
 address=/mis.nbcc.ac.th/0.0.0.0
 address=/misterson.com/0.0.0.0
@@ -491,12 +518,14 @@ address=/mistydeblasiophotography.com/0.0.0.0
 address=/mkk09.kr/0.0.0.0
 address=/mkontakt.az/0.0.0.0
 address=/mlbfreestream.gq/0.0.0.0
+address=/mlbfreestream.ml/0.0.0.0
 address=/mmc.ru.com/0.0.0.0
 address=/mobiadnews.com/0.0.0.0
 address=/mobilier-modern.ro/0.0.0.0
 address=/mochandmade.us/0.0.0.0
+address=/modcloudserver.eu/0.0.0.0
 address=/moha-group.com/0.0.0.0
-address=/mononet.lv/0.0.0.0
+address=/moinmo.de/0.0.0.0
 address=/moscow11.at/0.0.0.0
 address=/mountveederwines.com/0.0.0.0
 address=/moyo.co.kr/0.0.0.0
@@ -506,13 +535,13 @@ address=/msecurity.ro/0.0.0.0
 address=/mteng.mmj7.com/0.0.0.0
 address=/mtfelektroteknik.com/0.0.0.0
 address=/mueblesjcp.cl/0.0.0.0
+address=/mv360.net/0.0.0.0
 address=/mvb.kz/0.0.0.0
 address=/mxpiqw.am.files.1drv.com/0.0.0.0
 address=/myexpertca.in/0.0.0.0
 address=/myhood.cl/0.0.0.0
 address=/myo.net.au/0.0.0.0
 address=/myofficeplus.com/0.0.0.0
-address=/myonlinepokiesblog.com/0.0.0.0
 address=/mytex.pe/0.0.0.0
 address=/mytrains.net/0.0.0.0
 address=/mywp.asia/0.0.0.0
@@ -532,7 +561,6 @@ address=/newsun-shop.com/0.0.0.0
 address=/newxing.com/0.0.0.0
 address=/nfbio.com/0.0.0.0
 address=/ngoaingu.garage.com.vn/0.0.0.0
-address=/nilemixitupd.biz.pl/0.0.0.0
 address=/nkdhub.com/0.0.0.0
 address=/nofound.000webhostapp.com/0.0.0.0
 address=/nprg.ru/0.0.0.0
@@ -543,11 +571,11 @@ address=/oa.hys.cn/0.0.0.0
 address=/obnova.zzux.com/0.0.0.0
 address=/obseques-conseils.com/0.0.0.0
 address=/ohe.ie/0.0.0.0
+address=/oknoplastik.sk/0.0.0.0
 address=/omega.az/0.0.0.0
 address=/omsk-osma.ru/0.0.0.0
 address=/omuzgor.tj/0.0.0.0
 address=/onestin.ro/0.0.0.0
-address=/onyourmarkmindsetgo.com/0.0.0.0
 address=/openclient.sroinfo.com/0.0.0.0
 address=/operasanpiox.bravepages.com/0.0.0.0
 address=/ophtalmiccenter.com/0.0.0.0
@@ -566,6 +594,7 @@ address=/p3.zbjimg.com/0.0.0.0
 address=/p30qom.ir/0.0.0.0
 address=/p500.mon-application.com/0.0.0.0
 address=/pack301.bravepages.com/0.0.0.0
+address=/pakdesighee.com/0.0.0.0
 address=/palochusvet.szm.com/0.0.0.0
 address=/partyflix.net/0.0.0.0
 address=/pat4.jetos.com/0.0.0.0
@@ -575,20 +604,26 @@ address=/patch2.99ddd.com/0.0.0.0
 address=/patch3.99ddd.com/0.0.0.0
 address=/patrickchan-hk.net/0.0.0.0
 address=/pawel-sikora.pl/0.0.0.0
+address=/pcexperts.co.za/0.0.0.0
 address=/pcginsure.com/0.0.0.0
 address=/pcsoori.com/0.0.0.0
 address=/pedidoslalacteo.com.ar/0.0.0.0
+address=/peterssandmay.com/0.0.0.0
+address=/petromltd.com/0.0.0.0
 address=/ph4s.ru/0.0.0.0
 address=/phamchilong.com/0.0.0.0
 address=/phudieusongma.com/0.0.0.0
+address=/phuphamca.com/0.0.0.0
 address=/piapendet.com/0.0.0.0
 address=/pink99.com/0.0.0.0
 address=/platisher.xyz/0.0.0.0
+address=/pmguide.net/0.0.0.0
 address=/podiatristlansdale.com/0.0.0.0
 address=/podrska.com.hr/0.0.0.0
 address=/ponto50.com.br/0.0.0.0
 address=/poolbook.ir/0.0.0.0
 address=/ppl.ac.id/0.0.0.0
+address=/prepaenunsoloexamen.academiagalileoac.com/0.0.0.0
 address=/probost.cz/0.0.0.0
 address=/profitcoach.net/0.0.0.0
 address=/prosoc.nl/0.0.0.0
@@ -611,11 +646,11 @@ address=/rc.ixiaoyang.cn/0.0.0.0
 address=/readytalk.github.io/0.0.0.0
 address=/real-song.tjmedia.co.kr/0.0.0.0
 address=/recommendservices.com/0.0.0.0
-address=/redeemerssports.com/0.0.0.0
 address=/redesoftdownload.info/0.0.0.0
 address=/rekspirit.ru/0.0.0.0
 address=/renimin.mymom.info/0.0.0.0
 address=/renovanorte.com/0.0.0.0
+address=/rentaroom.ml/0.0.0.0
 address=/res.uf1.cn/0.0.0.0
 address=/ret.space/0.0.0.0
 address=/rezaazizi.ir/0.0.0.0
@@ -628,13 +663,16 @@ address=/robotrade.com.vn/0.0.0.0
 address=/rollingmill.in/0.0.0.0
 address=/rollscar.pk/0.0.0.0
 address=/rossogato.com/0.0.0.0
+address=/royalplusmobile.ir/0.0.0.0
 address=/ruisgood.ru/0.0.0.0
 address=/s.51shijuan.com/0.0.0.0
 address=/s.kk30.com/0.0.0.0
+address=/s14b.91danji.com/0.0.0.0
+address=/s14b.groundyun.cn/0.0.0.0
 address=/sabiupd.compress.to/0.0.0.0
 address=/saboorjaam.ir/0.0.0.0
 address=/sabupda.vizvaz.com/0.0.0.0
-address=/sahathaikasetpan.com/0.0.0.0
+address=/saglikodemelerinial.org/0.0.0.0
 address=/salvation24.com/0.0.0.0
 address=/salvationbd.com/0.0.0.0
 address=/sandovalgraphics.com/0.0.0.0
@@ -648,11 +686,11 @@ address=/seibee.biz/0.0.0.0
 address=/selekture.com/0.0.0.0
 address=/selfuseproperty.com/0.0.0.0
 address=/selvikoyunciftligi.com/0.0.0.0
-address=/sendeyararlanturkiye20gb.com/0.0.0.0
 address=/serpentrising.com/0.0.0.0
 address=/servicemhkd.myvnc.com/0.0.0.0
 address=/servicemhkd80.myvnc.com/0.0.0.0
 address=/serviciosinfoware.cl/0.0.0.0
+address=/sexybaccarat.329263.com/0.0.0.0
 address=/sfoodfeedf.org/0.0.0.0
 address=/sgm.pc6.com/0.0.0.0
 address=/shacked.webdepot.co.il/0.0.0.0
@@ -661,6 +699,7 @@ address=/shaoxiaofei.cn/0.0.0.0
 address=/share.dmca.gripe/0.0.0.0
 address=/sharjahas.com/0.0.0.0
 address=/shembefoundation.com/0.0.0.0
+address=/shopjumpn.ch/0.0.0.0
 address=/simlun.com.ar/0.0.0.0
 address=/sinastorage.cn/0.0.0.0
 address=/sindicato1ucm.cl/0.0.0.0
@@ -683,6 +722,7 @@ address=/sophiaskyhotel.vn/0.0.0.0
 address=/sota-france.fr/0.0.0.0
 address=/souldancing.cn/0.0.0.0
 address=/speed.myz.info/0.0.0.0
+address=/sportshlive.xyz/0.0.0.0
 address=/sportstrem.gq/0.0.0.0
 address=/spurstogo.com/0.0.0.0
 address=/sputnikmailru.cdnmail.ru/0.0.0.0
@@ -693,15 +733,16 @@ address=/ss.cybersoft-vn.com/0.0.0.0
 address=/sslv3.at/0.0.0.0
 address=/staging.popclusive.asia/0.0.0.0
 address=/starcountry.net/0.0.0.0
+address=/static.ilclock.com/0.0.0.0
 address=/static.topxgun.com/0.0.0.0
+address=/stationaryhome.com/0.0.0.0
 address=/stecit.nl/0.0.0.0
-address=/steelbuildings.com/0.0.0.0
 address=/stevewalker.com.au/0.0.0.0
 address=/story-maker.jp/0.0.0.0
+address=/stubbackup.ru/0.0.0.0
 address=/suc9898.com/0.0.0.0
 address=/suncity116.com/0.0.0.0
 address=/support.clz.kr/0.0.0.0
-address=/supportalaskausa.org/0.0.0.0
 address=/sv.pvroe.com/0.0.0.0
 address=/svkacademy.com/0.0.0.0
 address=/svn.cc.jyu.fi/0.0.0.0
@@ -710,7 +751,6 @@ address=/swwbia.com/0.0.0.0
 address=/symanreni.mysecondarydns.com/0.0.0.0
 address=/szxypt.com/0.0.0.0
 address=/t.honker.info/0.0.0.0
-address=/tandenblekenhoofddorp.nl/0.0.0.0
 address=/taraward.com/0.0.0.0
 address=/taxpos.com/0.0.0.0
 address=/tcy.198424.com/0.0.0.0
@@ -732,21 +772,21 @@ address=/theelectronics4u.com/0.0.0.0
 address=/theprestige.ro/0.0.0.0
 address=/theptiendat.com/0.0.0.0
 address=/therecruiter.io/0.0.0.0
-address=/thesecuritysoftwarescannerindustrgreat.duckdns.org/0.0.0.0
-address=/thornadops.com/0.0.0.0
 address=/thosewebbs.com/0.0.0.0
+address=/thuong.bidiworks.com/0.0.0.0
 address=/tianangdep.com/0.0.0.0
+address=/tianmaouae.com/0.0.0.0
 address=/tianzi8.cn/0.0.0.0
 address=/tibinst.mefound.com/0.0.0.0
 address=/tibok.lflink.com/0.0.0.0
 address=/ticte.in/0.0.0.0
 address=/timlinger.com/0.0.0.0
+address=/tinckorm.beget.tech/0.0.0.0
 address=/tmhfashionhouse.co.za/0.0.0.0
 address=/toe.polinema.ac.id/0.0.0.0
 address=/tonghopgia.net/0.0.0.0
 address=/tonydong.com/0.0.0.0
 address=/tonyzone.com/0.0.0.0
-address=/treefighter.org/0.0.0.0
 address=/tsd.jxwan.com/0.0.0.0
 address=/tsredco.telangana.gov.in/0.0.0.0
 address=/tulli.info/0.0.0.0
@@ -755,6 +795,7 @@ address=/tuneup.ibk.me/0.0.0.0
 address=/tup.com.cn/0.0.0.0
 address=/tutuler.com/0.0.0.0
 address=/uc-56.ru/0.0.0.0
+address=/ucto-id.cz/0.0.0.0
 address=/ufabet168168.329263.com/0.0.0.0
 address=/ugc.wegame.com.cn/0.0.0.0
 address=/ultimatelamborghiniexperience.com/0.0.0.0
@@ -769,10 +810,14 @@ address=/upd.m.dodo52.com/0.0.0.0
 address=/update.iwang8.com/0.0.0.0
 address=/update.my.99.com/0.0.0.0
 address=/updateflashplayer.link/0.0.0.0
+address=/upendiveterinariovalencia.es/0.0.0.0
 address=/urgentmessage.org/0.0.0.0
+address=/usapglobal.usapglobal.org/0.0.0.0
 address=/users.skynet.be/0.0.0.0
 address=/uskeba.ca/0.0.0.0
 address=/usmadetshirts.com/0.0.0.0
+address=/uyen.vn/0.0.0.0
+address=/uygulamalarim-hediyeinternet.org/0.0.0.0
 address=/vadyur.github.io/0.0.0.0
 address=/vaeqpu.329263.com/0.0.0.0
 address=/valedchap.ir/0.0.0.0
@@ -781,12 +826,12 @@ address=/vasoccernews.com/0.0.0.0
 address=/vaziri.echobit.ir/0.0.0.0
 address=/vdotrip.blog/0.0.0.0
 address=/vfocus.net/0.0.0.0
+address=/vibicloud.com/0.0.0.0
 address=/videoswebcammsn.free.fr/0.0.0.0
 address=/vietducbio.com/0.0.0.0
 address=/vigilar.com.br/0.0.0.0
 address=/vip.recommendedtoyoo.com/0.0.0.0
 address=/virustreatments.empeeevents.com/0.0.0.0
-address=/visagepk.com/0.0.0.0
 address=/visualdata.ru/0.0.0.0
 address=/vitinhvnt.com/0.0.0.0
 address=/vitromed.ro/0.0.0.0
@@ -796,9 +841,9 @@ address=/w.zhzy999.net/0.0.0.0
 address=/wakecar.cn/0.0.0.0
 address=/wangtong7.siweidaoxiang.com/0.0.0.0
 address=/wangzonghang.cn/0.0.0.0
+address=/wap.dosame.com/0.0.0.0
 address=/ware.ru/0.0.0.0
 address=/warriorllc.com/0.0.0.0
-address=/waterosmo.com/0.0.0.0
 address=/wbd.5636.com/0.0.0.0
 address=/wbkmt.com/0.0.0.0
 address=/webarte.com.br/0.0.0.0
@@ -815,17 +860,19 @@ address=/wood-expert.net/0.0.0.0
 address=/woodsytech.com/0.0.0.0
 address=/wp.quercus.palustris.dk/0.0.0.0
 address=/wq.feiniaoai.cn/0.0.0.0
-address=/writesofpassage.co.za/0.0.0.0
 address=/wsg.com.sg/0.0.0.0
 address=/wt8.siweidaoxiang.com/0.0.0.0
 address=/wt9.siweidaoxiang.com/0.0.0.0
 address=/wwealthllc.com/0.0.0.0
+address=/www-ecimer-uygulamayukleme-govtr.com/0.0.0.0
 address=/www2.recepty5.com/0.0.0.0
 address=/x2vn.com/0.0.0.0
 address=/xia.vzboot.com/0.0.0.0
 address=/xiaidown.com/0.0.0.0
 address=/xiegushi.cn/0.0.0.0
 address=/xirfad.com/0.0.0.0
+address=/xn--d1aciabhfsdfe0a7e3b.xn--p1acf/0.0.0.0
+address=/xn--transfgran-mgbbb600b.ro/0.0.0.0
 address=/xtremeforumz.com/0.0.0.0
 address=/xuhss.com/0.0.0.0
 address=/xxwl.kuaiyunds.com/0.0.0.0
diff --git a/urlhaus-filter-dnsmasq.conf b/urlhaus-filter-dnsmasq.conf
index 9bab739b..b61c42e7 100644
--- a/urlhaus-filter-dnsmasq.conf
+++ b/urlhaus-filter-dnsmasq.conf
@@ -1,5 +1,5 @@
 # Title: abuse.ch URLhaus Malicious Domains dnsmasq Blocklist
-# Updated: Thu, 30 Apr 2020 12:09:30 UTC
+# Updated: Fri, 01 May 2020 00:10:35 UTC
 # Repo: https://gitlab.com/curben/urlhaus-filter
 # License: https://creativecommons.org/publicdomain/zero/1.0/
 # Source: https://urlhaus.abuse.ch/api/
@@ -2342,6 +2342,7 @@ address=/admyinfo.000webhostapp.com/0.0.0.0
 address=/adnaan.website/0.0.0.0
 address=/adnc.cn/0.0.0.0
 address=/adnetss.com/0.0.0.0
+address=/adnquocte.com/0.0.0.0
 address=/adoam.pw/0.0.0.0
 address=/adoam.site/0.0.0.0
 address=/adobe-flash-player.pro/0.0.0.0
@@ -5771,6 +5772,7 @@ address=/ariesnetworks.org.uk/0.0.0.0
 address=/arifcagan.com/0.0.0.0
 address=/arifhajj.umrahsoftware.co.uk/0.0.0.0
 address=/arifolmancohen.com/0.0.0.0
+address=/arifrehan.xyz/0.0.0.0
 address=/arifzena.com/0.0.0.0
 address=/arigato.com.vn/0.0.0.0
 address=/arigbabuwogalleria.com/0.0.0.0
@@ -7173,6 +7175,7 @@ address=/averin.pro/0.0.0.0
 address=/averson.by/0.0.0.0
 address=/averybit.com/0.0.0.0
 address=/aveslor.com/0.0.0.0
+address=/avestor.uz/0.0.0.0
 address=/avfphoto.com/0.0.0.0
 address=/avgsupport.info/0.0.0.0
 address=/avheaven.icu/0.0.0.0
@@ -7460,6 +7463,7 @@ address=/azcama.org/0.0.0.0
 address=/azdhj.com/0.0.0.0
 address=/azedizayn.com/0.0.0.0
 address=/azeevatech.in/0.0.0.0
+address=/azenzatowers.com/0.0.0.0
 address=/azeritibb.pe.hu/0.0.0.0
 address=/azerothland.com/0.0.0.0
 address=/azeta.xyz/0.0.0.0
@@ -9477,6 +9481,7 @@ address=/billenloe.com/0.0.0.0
 address=/billerimpex.com/0.0.0.0
 address=/billeter.net/0.0.0.0
 address=/billfritzjr.com/0.0.0.0
+address=/billieellish.org/0.0.0.0
 address=/billing.wpkami.com/0.0.0.0
 address=/billingsupport.ru/0.0.0.0
 address=/billingtonbarristers.com/0.0.0.0
@@ -11483,6 +11488,7 @@ address=/buchanancu.org/0.0.0.0
 address=/bucharest-independent-escort.com/0.0.0.0
 address=/bucketlistadvtours.com/0.0.0.0
 address=/bucketlistrecipes.com/0.0.0.0
+address=/bucketstrong.s3-us-west-1.amazonaws.com/0.0.0.0
 address=/buckeyeoptical.com/0.0.0.0
 address=/buckinghamandlloyds.com/0.0.0.0
 address=/buckleman.co.id/0.0.0.0
@@ -12285,6 +12291,7 @@ address=/camsexsnol.nl/0.0.0.0
 address=/can-do-property.co.uk/0.0.0.0
 address=/can-doelectric.com/0.0.0.0
 address=/can-media.de/0.0.0.0
+address=/canaan.io/0.0.0.0
 address=/canaccordgenuity.bluematrix.com/0.0.0.0
 address=/canacofactura.com.mx/0.0.0.0
 address=/canadabestonline.com/0.0.0.0
@@ -16656,6 +16663,7 @@ address=/currencyavenue.com/0.0.0.0
 address=/currencyexchanger.com.ng/0.0.0.0
 address=/currenteventsmemes.com/0.0.0.0
 address=/curs.neagoeandrei.com/0.0.0.0
+address=/cursdictie.ro/0.0.0.0
 address=/curso.domeducacional.com/0.0.0.0
 address=/curso.ssthno.webdesignssw.cl/0.0.0.0
 address=/cursoaphonline.com.br/0.0.0.0
@@ -17335,6 +17343,7 @@ address=/data.kaoyany.top/0.0.0.0
 address=/data.nanhai.cn/0.0.0.0
 address=/data.over-blog-kiwi.com/0.0.0.0
 address=/data.yx1999.com/0.0.0.0
+address=/data4i.com/0.0.0.0
 address=/data4u.kay-tech.info/0.0.0.0
 address=/databacknow.com/0.0.0.0
 address=/database.z-flooring.com/0.0.0.0
@@ -17446,6 +17455,7 @@ address=/david.ph-prod.com/0.0.0.0
 address=/davidaluke.com/0.0.0.0
 address=/davidcizek.cz/0.0.0.0
 address=/davidcjones.ca/0.0.0.0
+address=/davidd47.sg-host.com/0.0.0.0
 address=/davidedigiorgio360.com/0.0.0.0
 address=/davidemarocco.com/0.0.0.0
 address=/davidephoto.it/0.0.0.0
@@ -18987,6 +18997,7 @@ address=/dicampo.cl/0.0.0.0
 address=/dicarmo.com/0.0.0.0
 address=/dicebot-game.com/0.0.0.0
 address=/dichiara.com.ar/0.0.0.0
+address=/dichthuatsnu.com/0.0.0.0
 address=/dichvuchupanhsanpham.com/0.0.0.0
 address=/dichvucong.vn/0.0.0.0
 address=/dichvucuoi0f16.toannang.xyz/0.0.0.0
@@ -20183,6 +20194,7 @@ address=/dotlenieni.pl/0.0.0.0
 address=/dotlineplane.co.th/0.0.0.0
 address=/dotnetdays.ro/0.0.0.0
 address=/dotnetebusiness.com/0.0.0.0
+address=/dotpay.id/0.0.0.0
 address=/dotpos.in/0.0.0.0
 address=/dotproject.org/0.0.0.0
 address=/dotshopify.com/0.0.0.0
@@ -20427,6 +20439,7 @@ address=/dr-nasrinataeifar.ir/0.0.0.0
 address=/dr-popa.com/0.0.0.0
 address=/dr-prof-sachidanandasinha-dentalclinic.com/0.0.0.0
 address=/dr-recella-global.com/0.0.0.0
+address=/dr080.com/0.0.0.0
 address=/dr702.com/0.0.0.0
 address=/draaiercnc.nl/0.0.0.0
 address=/draaiorgel.org/0.0.0.0
@@ -22792,6 +22805,7 @@ address=/enilaegroj.com/0.0.0.0
 address=/enilegho.com.br/0.0.0.0
 address=/enis1130.000webhostapp.com/0.0.0.0
 address=/eniture-qa.com/0.0.0.0
+address=/enixc.com/0.0.0.0
 address=/eniyionfirma.com/0.0.0.0
 address=/enjoy-aquaristik.de/0.0.0.0
 address=/enjoy-kobac.com/0.0.0.0
@@ -23656,6 +23670,7 @@ address=/evdekal-kampanyasi20gbhediye.com/0.0.0.0
 address=/evdekal20kapgb.com/0.0.0.0
 address=/evdekalan20gbkazaniyor.com/0.0.0.0
 address=/evdekalana20gb-hehe.com/0.0.0.0
+address=/evdekaldiye20-gb.com/0.0.0.0
 address=/evdekaltuekiyesaglik.com/0.0.0.0
 address=/evdekl20gbx.com/0.0.0.0
 address=/evdyn.com.sg/0.0.0.0
@@ -26221,6 +26236,7 @@ address=/freeofshackles.com/0.0.0.0
 address=/freepaidcourses.com/0.0.0.0
 address=/freepalestinemovement.org/0.0.0.0
 address=/freephenix.cn/0.0.0.0
+address=/freeprofessionalwebhosting.com/0.0.0.0
 address=/freeselfstoragequote.com/0.0.0.0
 address=/freeslits.net/0.0.0.0
 address=/freesoft.website/0.0.0.0
@@ -28155,6 +28171,7 @@ address=/gmakeup.ru/0.0.0.0
 address=/gmann.blog/0.0.0.0
 address=/gmann.info/0.0.0.0
 address=/gmann.photos/0.0.0.0
+address=/gmassurance.fr/0.0.0.0
 address=/gmc2.ru/0.0.0.0
 address=/gmcoflouisville.com/0.0.0.0
 address=/gmcostruzionieservizi.com/0.0.0.0
@@ -30330,6 +30347,7 @@ address=/hediye-internet-saglik.org/0.0.0.0
 address=/hediye-internet.site/0.0.0.0
 address=/hediyegapsinternet.com/0.0.0.0
 address=/hediyeinternetpaketim.com/0.0.0.0
+address=/hediyem20gb-internet.org/0.0.0.0
 address=/hediyenkolay.com/0.0.0.0
 address=/hedrasl.com/0.0.0.0
 address=/hedwise.com/0.0.0.0
@@ -30569,6 +30587,7 @@ address=/herrajesmasota.com/0.0.0.0
 address=/herratech.com/0.0.0.0
 address=/herrenmode.tk/0.0.0.0
 address=/herrent.com/0.0.0.0
+address=/herrfischer.me/0.0.0.0
 address=/herrgaardstak.se/0.0.0.0
 address=/herryjoa.mireene.com/0.0.0.0
 address=/herscare.net/0.0.0.0
@@ -31708,6 +31727,7 @@ address=/htmedia.net/0.0.0.0
 address=/htmediagroups.com/0.0.0.0
 address=/html.nichost.ru/0.0.0.0
 address=/htmlget.com/0.0.0.0
+address=/htn13.com/0.0.0.0
 address=/htnieuw.hazenbergtimmerwerken.nl/0.0.0.0
 address=/htpinvestment.com.vn/0.0.0.0
 address=/htt.nu/0.0.0.0
@@ -34454,6 +34474,7 @@ address=/itray.co.kr/0.0.0.0
 address=/itrc.gov.co/0.0.0.0
 address=/itrenaissance.com/0.0.0.0
 address=/itreni.net/0.0.0.0
+address=/itrigger.cn/0.0.0.0
 address=/itroj.ir/0.0.0.0
 address=/its-fondazionearchimede.it/0.0.0.0
 address=/its-oh.net/0.0.0.0
@@ -35244,6 +35265,7 @@ address=/jhdwas.org/0.0.0.0
 address=/jhelt.net/0.0.0.0
 address=/jhom.in/0.0.0.0
 address=/jhonhusein.com/0.0.0.0
+address=/jhorapatarastana.xyz/0.0.0.0
 address=/jhrt185.com/0.0.0.0
 address=/jhssourcingltd.com/0.0.0.0
 address=/jhsstudio.com.br/0.0.0.0
@@ -37216,6 +37238,7 @@ address=/khoshrougallery.com/0.0.0.0
 address=/khotanperfume.com/0.0.0.0
 address=/khotawa.com/0.0.0.0
 address=/khothietbivesinh24h.com/0.0.0.0
+address=/khoztrip.ir/0.0.0.0
 address=/khp89wc.com/0.0.0.0
 address=/khpm.ir/0.0.0.0
 address=/khrystyna-verkholiak.com/0.0.0.0
@@ -37860,6 +37883,7 @@ address=/kolbecompany.com/0.0.0.0
 address=/kolejmontlari.com/0.0.0.0
 address=/kolejnicky.cz/0.0.0.0
 address=/kolejskilmentari.edu.my/0.0.0.0
+address=/kolibri-fabrika.ru/0.0.0.0
 address=/kolibristattoo.lt/0.0.0.0
 address=/kolkatacleanair.in/0.0.0.0
 address=/koll-partner.tax/0.0.0.0
@@ -38096,6 +38120,7 @@ address=/kpmicrowave.com/0.0.0.0
 address=/kpodata.com/0.0.0.0
 address=/kpogroup.bo/0.0.0.0
 address=/kpopstarz.kienthucsong.info/0.0.0.0
+address=/kposter.alexandruplesea.ro/0.0.0.0
 address=/kppspgrojec.internetdsl.pl/0.0.0.0
 address=/kprsolutions.com/0.0.0.0
 address=/kpss.ir/0.0.0.0
@@ -43473,6 +43498,7 @@ address=/mebs-marketing.de/0.0.0.0
 address=/mecanique-vivante.com/0.0.0.0
 address=/mecanizadosgurrutxaga.com/0.0.0.0
 address=/mecatronica.ifc-riodosul.edu.br/0.0.0.0
+address=/mecbox.cn/0.0.0.0
 address=/mecenat.com.ua/0.0.0.0
 address=/mecflui.com.br/0.0.0.0
 address=/mecgwl.ac.in/0.0.0.0
@@ -44456,6 +44482,7 @@ address=/milcommonline.com/0.0.0.0
 address=/milczanowska.com/0.0.0.0
 address=/mildibsilgip.com/0.0.0.0
 address=/mileageindia.com/0.0.0.0
+address=/milebgd.mycpanel.rs/0.0.0.0
 address=/milehighffa.com/0.0.0.0
 address=/milehighhomebuyers.com/0.0.0.0
 address=/milena-koenig.de/0.0.0.0
@@ -45239,6 +45266,7 @@ address=/moie.nl/0.0.0.0
 address=/moigioi.info/0.0.0.0
 address=/moikihit.ru/0.0.0.0
 address=/moinetfils.com/0.0.0.0
+address=/moinmo.de/0.0.0.0
 address=/mois.com.br/0.0.0.0
 address=/moiselektronik.com/0.0.0.0
 address=/moisesdavid.com/0.0.0.0
@@ -46030,6 +46058,8 @@ address=/muhammadiyahamin.com/0.0.0.0
 address=/muhammadshahid.techsandooq.com/0.0.0.0
 address=/muhanoiss6.net/0.0.0.0
 address=/muhendismeraki.com/0.0.0.0
+address=/muhtesem20gb.xyz/0.0.0.0
+address=/muhtessemramazan20gb.com/0.0.0.0
 address=/muidokan.com/0.0.0.0
 address=/muikarellep.band/0.0.0.0
 address=/muilyt.com/0.0.0.0
@@ -46444,6 +46474,8 @@ address=/myhscnow.com/0.0.0.0
 address=/myimmigrationlawmarketingpartner.com/0.0.0.0
 address=/myinfoart.online/0.0.0.0
 address=/myinternetjobs.com/0.0.0.0
+address=/myintromationsz.win/0.0.0.0
+address=/myintromationszcj.win/0.0.0.0
 address=/myjedesigns.com/0.0.0.0
 address=/myjmcedu-my.sharepoint.com/0.0.0.0
 address=/myjnia-samochodowa.com/0.0.0.0
@@ -47814,6 +47846,7 @@ address=/ngoibitumsinhthai.com.vn/0.0.0.0
 address=/ngoinhadaquy.com/0.0.0.0
 address=/ngoitruonghanhphuc.edu.vn/0.0.0.0
 address=/ngomavibe.co.ke/0.0.0.0
+address=/ngon10.com/0.0.0.0
 address=/ngoshakarpura.online/0.0.0.0
 address=/ngovietanh.com/0.0.0.0
 address=/ngowebsite.developeratfiverr.in/0.0.0.0
@@ -51845,6 +51878,7 @@ address=/phuongart.000webhostapp.com/0.0.0.0
 address=/phuongnguyencutrinh.gov.vn/0.0.0.0
 address=/phuongphamngulao.gov.vn/0.0.0.0
 address=/phuongphan.co/0.0.0.0
+address=/phuphamca.com/0.0.0.0
 address=/phusonland.vn/0.0.0.0
 address=/phutung24h.vn/0.0.0.0
 address=/phy.mbstu.ac.bd/0.0.0.0
@@ -56592,6 +56626,7 @@ address=/rociton.com.bd/0.0.0.0
 address=/rock-creek.com/0.0.0.0
 address=/rockcanyonoutfitters.com/0.0.0.0
 address=/rockenstein-gmbh.de/0.0.0.0
+address=/rockersdolphin.co.za/0.0.0.0
 address=/rocket-tutor.com/0.0.0.0
 address=/rocketbagger.com/0.0.0.0
 address=/rocketx.fun/0.0.0.0
@@ -56972,6 +57007,7 @@ address=/rrdm.co.in/0.0.0.0
 address=/rrexkmwi.yjdata.me/0.0.0.0
 address=/rrglobaltrade.com/0.0.0.0
 address=/rrgodshsf.ug/0.0.0.0
+address=/rrinteriores.neoistone.site/0.0.0.0
 address=/rrmedical-gmbh.com/0.0.0.0
 address=/rronrestaurant.com/0.0.0.0
 address=/rroun-nourr.ga/0.0.0.0
@@ -57599,6 +57635,7 @@ address=/saglikbakanligindanhediye20gb.com/0.0.0.0
 address=/saglikgoalapp.site/0.0.0.0
 address=/saglikliapp.live/0.0.0.0
 address=/sagliklibedenim.com/0.0.0.0
+address=/saglikodemelerinial.org/0.0.0.0
 address=/sagrathi.com/0.0.0.0
 address=/sagunpapers.com/0.0.0.0
 address=/sahabathasyim.com/0.0.0.0
@@ -59324,7 +59361,9 @@ address=/setonpaloalto.org/0.0.0.0
 address=/setra.ir/0.0.0.0
 address=/setrals.net/0.0.0.0
 address=/setrals.website/0.0.0.0
+address=/setsd.xyz/0.0.0.0
 address=/setseta.com/0.0.0.0
+address=/setss.xyz/0.0.0.0
 address=/settecieli.com/0.0.0.0
 address=/setticonference.it/0.0.0.0
 address=/setup.co.il/0.0.0.0
@@ -59962,6 +60001,7 @@ address=/shopinclub.in/0.0.0.0
 address=/shopinsta.in/0.0.0.0
 address=/shopinterbuild.com/0.0.0.0
 address=/shopiqtoys.com/0.0.0.0
+address=/shopjumpn.ch/0.0.0.0
 address=/shopkaro.apps19.com/0.0.0.0
 address=/shopkimhuyen.com/0.0.0.0
 address=/shopkinhdoanh.com/0.0.0.0
@@ -60465,6 +60505,7 @@ address=/sipil.fatek.untad.ac.id/0.0.0.0
 address=/sipmanagement-my.sharepoint.com/0.0.0.0
 address=/siprev.net.br/0.0.0.0
 address=/siragehad.com/0.0.0.0
+address=/sirajaoloan.com/0.0.0.0
 address=/sirajhummus.com/0.0.0.0
 address=/siranagi.sakura.ne.jp/0.0.0.0
 address=/sirenas-spa.com/0.0.0.0
@@ -61092,6 +61133,7 @@ address=/smokesock.com/0.0.0.0
 address=/smokesome.xyz/0.0.0.0
 address=/smoketravkueveryday.tech/0.0.0.0
 address=/smokingpot.xyz/0.0.0.0
+address=/smollmart.com/0.0.0.0
 address=/smoltest.tk/0.0.0.0
 address=/smoon.co.kr/0.0.0.0
 address=/smooth-moves.com/0.0.0.0
@@ -62302,6 +62344,7 @@ address=/srtechno.co.in/0.0.0.0
 address=/srtms.in/0.0.0.0
 address=/srujanovision.com/0.0.0.0
 address=/srv-15.directserver.us/0.0.0.0
+address=/srv-file9.gofile.io/0.0.0.0
 address=/srv7.computerkolkata.com/0.0.0.0
 address=/srv77956.ht-test.ru/0.0.0.0
 address=/srv9.computerkolkata.com/0.0.0.0
@@ -64598,6 +64641,7 @@ address=/tappteam.co.uk/0.0.0.0
 address=/tapretriat.com/0.0.0.0
 address=/taproomagogo.com/0.0.0.0
 address=/tapsglobalsolutions.com/0.0.0.0
+address=/tapss.com.br/0.0.0.0
 address=/tapsu.in/0.0.0.0
 address=/taptagtees.com/0.0.0.0
 address=/tapucreative.com/0.0.0.0
@@ -65007,6 +65051,7 @@ address=/technoknot.com/0.0.0.0
 address=/technologicznie.pl/0.0.0.0
 address=/technologiebeloeil.com/0.0.0.0
 address=/technologielaurendeau.com/0.0.0.0
+address=/technology-bd.com/0.0.0.0
 address=/technologyadvantages.000webhostapp.com/0.0.0.0
 address=/technologyaroundu.com/0.0.0.0
 address=/technologycomponents.com/0.0.0.0
@@ -67497,6 +67542,7 @@ address=/tourcrafters.in/0.0.0.0
 address=/tourderichelieu.com/0.0.0.0
 address=/tourdezsokolat.hu/0.0.0.0
 address=/tourecoz.in/0.0.0.0
+address=/tourenhelicoptero.com/0.0.0.0
 address=/tourguy.com/0.0.0.0
 address=/touring-athens.com/0.0.0.0
 address=/touring.woolston.com.au/0.0.0.0
@@ -67643,6 +67689,7 @@ address=/tradingexpert.website/0.0.0.0
 address=/tradingmatic.youralgo.com/0.0.0.0
 address=/tradingpartneredi.com/0.0.0.0
 address=/tradingstyle.net/0.0.0.0
+address=/tradingwithharmony.com/0.0.0.0
 address=/traditionsfinegifts.com/0.0.0.0
 address=/tradutorgeek.com/0.0.0.0
 address=/traektoria.com/0.0.0.0
@@ -68709,6 +68756,7 @@ address=/ucomechina.com/0.0.0.0
 address=/uconthailand.com/0.0.0.0
 address=/ucrealtors.com/0.0.0.0
 address=/ucrealtors.net/0.0.0.0
+address=/ucretsiz20gbturkiye.com/0.0.0.0
 address=/ucrnn.org/0.0.0.0
 address=/ucstandart.ru/0.0.0.0
 address=/ucto-id.cz/0.0.0.0
@@ -69449,6 +69497,7 @@ address=/usakisdunyasi.com/0.0.0.0
 address=/usamashakeel.com/0.0.0.0
 address=/usamovers.net/0.0.0.0
 address=/usanin.info/0.0.0.0
+address=/usapglobal.usapglobal.org/0.0.0.0
 address=/usaselfstoragenetwork.com/0.0.0.0
 address=/usastoragenetwork.com/0.0.0.0
 address=/usax138.oicp.net/0.0.0.0
@@ -69580,9 +69629,11 @@ address=/uy-akwaibom.ru/0.0.0.0
 address=/uyaiblog.com/0.0.0.0
 address=/uycqawua.applekid.cn/0.0.0.0
 address=/uydu.antalyaelektrikariza.net/0.0.0.0
+address=/uyen.vn/0.0.0.0
 address=/uyencometics.bmt.city/0.0.0.0
 address=/uyf.com.ua/0.0.0.0
 address=/uyghurchem.com/0.0.0.0
+address=/uygulamalarim-hediyeinternet.org/0.0.0.0
 address=/uyijbmxxm8874337.gameofthrones05.site/0.0.0.0
 address=/uyikjtn.eu/0.0.0.0
 address=/uytr5e.imtbreds.com/0.0.0.0
@@ -70056,6 +70107,7 @@ address=/vencury.com/0.0.0.0
 address=/vendacomcelular.com.br/0.0.0.0
 address=/vendaiot.ir/0.0.0.0
 address=/vendameucarroo.com/0.0.0.0
+address=/vendeaki.online/0.0.0.0
 address=/vendem.com.br/0.0.0.0
 address=/vendere-su-internet.com/0.0.0.0
 address=/vendermicasaenbarcelona.com/0.0.0.0
@@ -70299,6 +70351,7 @@ address=/viberspyware.com/0.0.0.0
 address=/vibescyahdone.com/0.0.0.0
 address=/vibeshirt.de/0.0.0.0
 address=/vibetronic.id/0.0.0.0
+address=/vibicloud.com/0.0.0.0
 address=/vibni.dk/0.0.0.0
 address=/vibor-anapa.ru/0.0.0.0
 address=/vibramarketing.cl/0.0.0.0
@@ -73110,6 +73163,7 @@ address=/wws.tkgventures.com/0.0.0.0
 address=/www-88xyxy-com.info/0.0.0.0
 address=/www-bsac.eecs.berkeley.edu/0.0.0.0
 address=/www-dev.e4healthinc.com/0.0.0.0
+address=/www-ecimer-uygulamayukleme-govtr.com/0.0.0.0
 address=/www-grupotv1-com-br.azurclaireritter.cmail-oln040092069015.outbound.protection.sketchwefair-watduoliprudential.com.watchdogdns.duckdns.org/0.0.0.0
 address=/www.smart-eg.com/0.0.0.0
 address=/www022284.com/0.0.0.0
@@ -73197,6 +73251,7 @@ address=/x86tpkujgu1ksoky.com/0.0.0.0
 address=/xacrosoft.com/0.0.0.0
 address=/xact.ma/0.0.0.0
 address=/xadrezgigante.com.br/0.0.0.0
+address=/xaergtcrcd.info/0.0.0.0
 address=/xagency.co/0.0.0.0
 address=/xaidol.com/0.0.0.0
 address=/xajfgz.com/0.0.0.0
@@ -73681,6 +73736,7 @@ address=/xn--celegeninaat-dnc.com/0.0.0.0
 address=/xn--cryptohoppe-bec.com/0.0.0.0
 address=/xn--czstochowadlazwierzt-mkc63b.pl/0.0.0.0
 address=/xn--d1achkaoe4a.xn--p1ai/0.0.0.0
+address=/xn--d1aciabhfsdfe0a7e3b.xn--p1acf/0.0.0.0
 address=/xn--d1ahebikdfcgr7jsa.xn--p1ai/0.0.0.0
 address=/xn--d1ahjkdbhfjy4g.xn--p1ai/0.0.0.0
 address=/xn--d1aiocodol6a8d.xn--p1ai/0.0.0.0
@@ -74627,6 +74683,7 @@ address=/yzbot.com/0.0.0.0
 address=/yzmwh.com/0.0.0.0
 address=/yzzqdz.com/0.0.0.0
 address=/z-prava.ru/0.0.0.0
+address=/z.loyaltyaboveall.com/0.0.0.0
 address=/z.zz.ht/0.0.0.0
 address=/z0451.net/0.0.0.0
 address=/z0tt3l.de/0.0.0.0
diff --git a/urlhaus-filter-domains-online.txt b/urlhaus-filter-domains-online.txt
index 7be63338..d6c8edb8 100644
--- a/urlhaus-filter-domains-online.txt
+++ b/urlhaus-filter-domains-online.txt
@@ -1,9 +1,10 @@
 # Title: abuse.ch URLhaus Online Malicious Domains Blocklist
-# Updated: Thu, 30 Apr 2020 12:09:30 UTC
+# Updated: Fri, 01 May 2020 00:10:35 UTC
 # Repo: https://gitlab.com/curben/urlhaus-filter
 # License: https://creativecommons.org/publicdomain/zero/1.0/
 # Source: https://urlhaus.abuse.ch/api/
 0400msc.com
+1.11.132.252
 1.220.9.68
 1.226.176.21
 1.246.222.105
@@ -23,12 +24,14 @@
 1.246.222.249
 1.246.222.36
 1.246.222.38
+1.246.222.4
 1.246.222.41
 1.246.222.43
 1.246.222.44
 1.246.222.49
 1.246.222.62
 1.246.222.63
+1.246.222.69
 1.246.222.80
 1.246.222.83
 1.246.222.87
@@ -37,6 +40,7 @@
 1.246.223.109
 1.246.223.125
 1.246.223.126
+1.246.223.127
 1.246.223.130
 1.246.223.146
 1.246.223.15
@@ -78,10 +82,10 @@
 103.214.6.199
 103.221.254.130
 103.230.62.146
-103.234.226.133
 103.237.173.218
 103.240.249.121
 103.245.199.222
+103.247.217.147
 103.254.205.135
 103.255.235.219
 103.31.47.214
@@ -89,7 +93,6 @@
 103.51.249.64
 103.60.110.111
 103.76.20.197
-103.79.112.254
 103.80.210.9
 103.92.25.90
 103.92.25.95
@@ -103,7 +106,6 @@
 106.104.115.213
 106.105.197.111
 106.105.218.18
-106.110.107.180
 106.110.129.163
 106.110.69.24
 106.110.71.236
@@ -113,14 +115,12 @@
 106.124.188.160
 106.248.202.245
 107.158.154.88
-107.158.154.94
-107.158.154.99
+108.174.197.76
 108.190.31.236
 108.214.240.100
 108.220.3.201
 108.237.60.93
 108.77.246.129
-108.95.162.21
 109.104.197.153
 109.124.90.229
 109.167.200.82
@@ -128,11 +128,12 @@
 109.185.229.159
 109.185.26.178
 109.233.196.232
-109.248.58.238
 109.86.85.253
 109.88.185.119
 109.95.15.210
 109.96.57.246
+110.154.15.122
+110.154.250.225
 110.179.30.218
 110.182.107.42
 110.34.28.113
@@ -144,7 +145,6 @@
 110.74.209.190
 111.119.245.114
 111.184.156.73
-111.185.192.249
 111.185.227.170
 111.185.231.198
 111.185.235.13
@@ -162,21 +162,20 @@
 111.38.27.80
 111.38.30.47
 111.38.9.115
-111.40.79.79
+111.42.102.136
+111.42.102.149
+111.42.103.107
 111.42.103.45
 111.42.103.55
 111.42.103.77
 111.42.103.78
 111.43.223.124
-111.43.223.177
-111.43.223.194
 111.43.223.77
 111.61.52.53
 111.90.150.64
 111.90.187.162
 111.93.169.90
 112.122.61.250
-112.123.109.200
 112.123.109.68
 112.123.61.18
 112.156.36.178
@@ -186,7 +185,8 @@
 112.167.14.237
 112.167.148.70
 112.167.218.221
-112.17.130.136
+112.17.104.45
+112.17.190.176
 112.170.165.71
 112.170.23.21
 112.184.231.90
@@ -196,23 +196,17 @@
 112.187.143.180
 112.187.217.80
 112.187.5.125
-112.187.86.179
 112.199.76.44
 112.27.124.111
-112.27.88.116
-112.27.91.205
 112.27.91.236
 112.27.91.241
 112.27.91.247
-112.28.98.70
 112.78.45.158
 113.11.95.254
-113.218.234.32
-113.221.145.204
+113.133.226.226
 113.221.50.64
 113.240.186.132
 113.254.169.251
-113.75.14.148
 114.168.158.117
 114.226.234.153
 114.226.81.155
@@ -238,18 +232,22 @@
 114.79.172.42
 115.213.176.80
 115.216.210.105
+115.229.200.2
 115.48.151.80
+115.49.246.62
 115.49.74.215
 115.49.76.131
 115.53.102.161
-115.53.63.184
 115.55.9.181
 115.59.118.51
 115.61.2.125
 115.63.60.199
 115.77.186.182
 115.85.65.211
+116.100.249.121
+116.114.95.108
 116.114.95.50
+116.114.95.89
 116.177.178.206
 116.177.179.202
 116.206.164.46
@@ -259,18 +257,20 @@
 117.63.51.128
 117.86.24.209
 117.87.44.106
+117.87.72.41
 117.90.128.14
 117.90.89.95
 117.93.176.207
 117.93.216.98
 117.95.173.64
+117.95.194.127
 117.95.226.223
+118.127.210.136
 118.151.220.206
 118.232.208.215
 118.232.96.150
 118.233.39.25
 118.32.199.219
-118.35.65.115
 118.37.91.137
 118.40.183.176
 118.42.208.62
@@ -278,10 +278,10 @@
 118.46.7.246
 118.99.179.164
 118.99.239.217
+119.102.153.184
 119.194.91.157
 119.2.48.159
 119.203.9.192
-119.206.2.248
 119.212.101.8
 119.77.165.204
 12.171.247.123
@@ -297,14 +297,11 @@
 120.209.99.118
 120.209.99.201
 120.212.208.227
-120.29.81.99
 120.52.120.11
 120.52.33.2
 120.69.89.50
 121.135.146.40
-121.136.137.7
 121.140.141.73
-121.148.122.219
 121.148.72.160
 121.150.77.164
 121.154.107.249
@@ -315,10 +312,10 @@
 121.162.174.59
 121.163.48.30
 121.165.140.117
-121.176.31.174
 121.177.37.127
 121.178.96.50
 121.179.232.246
+121.180.181.177
 121.180.75.151
 121.184.131.249
 121.186.105.200
@@ -328,15 +325,15 @@
 121.231.164.108
 121.232.179.201
 121.233.103.163
+121.233.116.232
 121.233.117.174
 121.233.24.190
 121.233.68.89
 121.86.113.254
-122.241.24.146
+122.243.173.3
 123.0.198.186
 123.0.209.88
-123.10.155.32
-123.10.229.210
+123.10.101.22
 123.122.232.190
 123.148.140.145
 123.194.235.37
@@ -346,16 +343,19 @@
 123.9.37.45
 123.96.134.180
 124.67.89.70
+125.125.44.18
 125.130.59.163
+125.136.182.124
 125.136.238.170
 125.136.94.85
 125.138.43.216
 125.18.28.170
 125.209.71.6
 125.26.165.244
-125.41.82.28
+125.44.215.179
+125.44.241.64
+125.47.248.28
 128.65.183.8
-128.65.187.123
 129.121.176.89
 129.126.204.40
 138.117.6.232
@@ -369,6 +369,7 @@
 14.33.86.236
 14.34.165.243
 14.37.6.148
+14.41.57.152
 14.45.167.58
 14.46.209.82
 14.46.51.53
@@ -379,7 +380,6 @@
 14.55.136.146
 141.0.178.134
 141.226.28.195
-141.226.94.115
 142.11.194.209
 142.11.195.135
 142.11.206.45
@@ -388,34 +388,38 @@
 144.136.155.166
 145.255.26.115
 146.71.79.230
-147.75.67.253
 150.co.il
 151.232.56.134
 151.236.38.234
 152.249.225.24
 152.250.250.194
+154.126.178.16
 154.91.144.44
 159.224.23.120
 159.224.74.112
-162.212.112.189
 162.212.112.240
 162.212.113.149
 162.212.113.70
+162.212.114.196
+162.212.114.57
 162.212.115.102
-162.212.115.91
 162.250.126.186
 163.13.182.105
 163.22.51.1
+163.47.145.202
 165.227.220.53
 165.73.60.72
 165.90.16.5
 167.114.85.125
+167.250.49.155
 168.121.239.172
 171.100.2.234
+171.232.106.147
 171.235.177.250
 171.42.97.178
 172.84.255.201
 172.90.37.142
+173.15.162.151
 173.160.86.173
 173.161.208.193
 173.168.197.166
@@ -429,41 +433,34 @@
 174.2.176.60
 174.48.14.129
 175.10.145.138
-175.11.193.122
-175.200.153.48
 175.202.162.120
 175.208.203.123
 175.210.50.4
-175.212.31.241
+175.211.16.150
 175.212.52.9
 175.213.134.89
 175.215.226.31
 176.108.58.123
 176.113.161.101
 176.113.161.104
-176.113.161.111
-176.113.161.112
 176.113.161.113
+176.113.161.119
+176.113.161.120
 176.113.161.126
 176.113.161.128
-176.113.161.129
-176.113.161.133
+176.113.161.136
 176.113.161.40
 176.113.161.41
-176.113.161.45
 176.113.161.47
 176.113.161.51
-176.113.161.52
 176.113.161.57
-176.113.161.65
-176.113.161.66
 176.113.161.67
 176.113.161.68
 176.113.161.71
 176.113.161.76
 176.113.161.84
 176.113.161.86
-176.113.161.91
+176.113.161.87
 176.113.161.92
 176.113.161.93
 176.12.117.70
@@ -473,14 +470,12 @@
 176.32.35.22
 176.33.72.218
 177.103.202.52
-177.125.227.85
 177.128.126.70
 177.137.107.131
 177.152.139.214
 177.185.159.250
 177.35.175.125
 177.37.163.174
-177.38.176.22
 177.46.86.65
 177.54.82.154
 177.54.83.22
@@ -492,7 +487,7 @@
 178.134.248.74
 178.134.61.94
 178.136.195.90
-178.165.122.141
+178.151.143.2
 178.169.165.90
 178.19.183.14
 178.212.53.57
@@ -506,16 +501,14 @@
 179.108.246.34
 179.111.8.164
 179.127.180.9
-179.156.196.13
-179.60.84.7
 179.99.210.161
 180.104.183.200
 180.104.195.10
 180.104.9.150
-180.115.66.239
 180.116.17.37
 180.116.224.151
 180.116.224.91
+180.116.47.28
 180.116.96.229
 180.117.89.28
 180.117.91.251
@@ -561,16 +554,23 @@
 181.224.242.131
 181.40.117.138
 181.48.187.146
+181.49.241.50
+182.113.220.114
+182.113.56.170
 182.114.212.28
+182.117.160.121
 182.121.152.74
 182.126.101.85
+182.126.183.195
 182.126.238.159
 182.127.201.42
+182.127.64.253
 182.160.101.51
 182.160.125.229
 182.160.98.250
 182.171.202.23
 182.222.195.145
+182.222.195.192
 182.233.0.252
 183.100.109.156
 183.105.206.26
@@ -581,15 +581,18 @@
 183.4.30.251
 184.163.2.58
 185.10.165.62
-185.112.146.165
 185.12.78.161
 185.136.193.70
 185.138.123.179
+185.14.250.199
+185.153.196.209
+185.172.110.208
 185.172.110.216
 185.172.110.221
 185.172.110.224
 185.172.110.232
 185.172.110.238
+185.172.110.241
 185.172.110.243
 185.172.110.250
 185.181.10.234
@@ -613,9 +616,7 @@
 186.251.253.134
 186.34.4.40
 186.42.255.230
-186.73.188.132
 187.12.10.98
-187.142.7.199
 187.183.213.88
 187.235.239.64
 187.250.220.89
@@ -635,6 +636,7 @@
 188.169.229.190
 188.169.229.202
 188.170.177.98
+188.170.243.195
 188.237.212.202
 188.242.242.144
 188.36.121.184
@@ -646,7 +648,6 @@
 190.0.42.106
 190.109.189.120
 190.109.189.204
-190.110.161.252
 190.119.207.58
 190.12.4.98
 190.12.99.194
@@ -654,6 +655,7 @@
 190.128.153.54
 190.130.15.212
 190.130.20.14
+190.130.27.198
 190.130.31.152
 190.131.243.218
 190.159.240.9
@@ -663,11 +665,9 @@
 190.186.56.84
 190.187.55.150
 190.196.248.3
-190.206.35.3
 190.214.24.194
 190.4.187.143
 190.7.27.69
-190.92.4.231
 190.92.46.42
 190.95.76.212
 190.98.36.201
@@ -676,7 +676,7 @@
 191.103.252.116
 191.209.53.113
 191.223.54.151
-191.253.24.14
+191.255.248.220
 191.37.220.200
 191.7.136.37
 191.8.80.207
@@ -699,25 +699,24 @@
 195.24.94.187
 195.28.15.110
 195.66.194.6
-196.202.194.133
 196.202.26.182
 196.218.202.115
 196.218.48.82
 196.218.5.243
-196.218.53.68
 196.221.144.149
+196.32.106.85
 197.155.66.202
 197.159.2.106
 197.254.106.78
 197.51.235.38
 198.24.75.52
 199.36.76.2
-199.83.200.194
+199.83.203.104
+199.83.203.137
 199.83.203.85
 199.83.204.132
 199.83.204.89
 199.83.205.205
-199.83.205.25
 199.83.206.38
 2.180.33.118
 2.180.37.166
@@ -729,7 +728,6 @@
 2.55.103.71
 2.55.89.188
 2.82.28.27
-2.87.229.142
 200.105.167.98
 200.107.7.242
 200.111.189.70
@@ -757,12 +755,12 @@
 202.149.90.98
 202.166.206.80
 202.166.21.123
+202.166.217.54
 202.191.124.185
 202.29.95.12
 202.4.124.58
 202.51.191.174
 202.74.236.9
-202.79.46.30
 203.114.116.37
 203.129.254.50
 203.163.211.46
@@ -777,22 +775,23 @@
 203.77.80.159
 203.80.171.138
 203.80.171.149
-203.82.36.34
 203.83.174.227
-206.189.208.7
 208.113.130.13
+208.163.58.18
 209.141.53.115
 209.45.49.177
 210.123.151.27
-210.204.50.140
 210.4.69.22
 210.56.16.67
 210.76.64.46
 211.106.11.193
 211.107.230.86
+211.137.225.106
 211.137.225.126
+211.137.225.60
 211.179.143.199
 211.187.75.220
+211.192.121.74
 211.192.64.222
 211.194.183.51
 211.194.29.174
@@ -800,7 +799,6 @@
 211.195.27.69
 211.196.28.116
 211.197.212.57
-211.216.116.40
 211.223.166.51
 211.224.8.211
 211.225.152.102
@@ -821,10 +819,8 @@
 212.244.210.26
 212.46.197.114
 212.9.74.89
-213.109.235.169
 213.157.39.242
 213.16.63.103
-213.202.255.4
 213.215.85.141
 213.241.10.110
 213.27.8.6
@@ -832,7 +828,6 @@
 213.7.222.78
 213.97.24.164
 216.15.112.251
-216.180.117.45
 216.183.54.169
 216.189.145.11
 216.36.12.98
@@ -842,7 +837,6 @@
 217.8.117.23
 217.8.117.76
 218.144.252.19
-218.154.126.150
 218.156.132.7
 218.156.26.85
 218.157.214.219
@@ -859,10 +853,9 @@
 218.70.144.50
 218.72.196.220
 219.154.145.111
-219.155.130.92
 219.155.169.47
 219.155.173.125
-219.155.209.74
+219.155.62.175
 219.68.1.148
 219.68.242.33
 219.68.245.63
@@ -871,21 +864,21 @@
 219.80.217.209
 21robo.com
 220.120.114.39
-220.122.180.53
 220.71.176.94
 220.82.140.17
-221.144.153.139
+221.14.237.63
+221.155.253.61
 221.155.30.60
 221.155.68.193
-221.158.124.81
 221.159.171.90
 221.166.254.127
 221.167.18.122
+221.210.211.132
+221.210.211.16
+221.210.211.30
 221.226.86.151
-222.113.138.43
 222.116.70.13
 222.138.17.196
-222.138.181.140
 222.139.29.155
 222.185.161.165
 222.185.199.202
@@ -894,7 +887,9 @@
 222.187.180.157
 222.187.191.224
 222.188.131.220
+222.217.65.112
 222.242.158.161
+222.242.182.26
 222.243.14.67
 222.81.213.61
 23.122.183.241
@@ -902,13 +897,13 @@
 23.247.102.120
 23.254.204.253
 23.254.226.60
-23.99.177.235
 24.0.252.145
 24.10.116.43
 24.103.74.180
 24.11.195.147
 24.115.48.43
 24.119.158.74
+24.133.203.45
 24.152.235.88
 24.16.32.40
 24.165.41.55
@@ -921,9 +916,10 @@
 27.147.29.52
 27.147.40.128
 27.238.33.39
-27.41.175.86
+27.41.138.104
+27.41.138.49
 27.41.208.122
-27.41.224.202
+27.41.213.143
 27.48.138.13
 27.76.91.206
 3.zhzy999.net
@@ -964,7 +960,6 @@
 36.33.138.140
 36.34.150.235
 36.34.234.8
-36.35.160.146
 36.35.160.240
 36.66.105.159
 36.66.111.203
@@ -972,11 +967,9 @@
 36.66.139.36
 36.66.168.45
 36.66.190.11
-36.67.152.163
 36.67.223.231
 36.67.42.193
 36.89.133.67
-36.89.18.133
 36.91.89.187
 36.91.90.171
 37.113.131.172
@@ -991,6 +984,7 @@
 37.34.228.1
 37.34.250.243
 37.49.226.162
+37.49.226.209
 37.49.230.128
 37.54.14.36
 3mandatesmedia.com
@@ -1005,8 +999,9 @@
 41.32.132.218
 41.32.170.13
 41.39.182.198
+41.64.170.241
 41.67.137.162
-41.79.234.90
+42.115.12.180
 42.115.25.55
 42.115.86.142
 42.227.191.5
@@ -1014,18 +1009,15 @@
 42.234.86.212
 42.239.132.107
 42.239.168.235
-42.239.77.201
 42.61.99.155
-42.82.191.105
-420hempizone.co
 43.252.8.94
 45.114.68.156
 45.115.253.82
-45.115.254.154
 45.118.165.115
 45.133.9.21
 45.138.97.46
 45.139.236.14
+45.14.150.29
 45.14.151.249
 45.147.228.245
 45.148.122.113
@@ -1035,11 +1027,10 @@
 45.229.22.195
 45.49.113.70
 45.50.228.207
-45.89.230.141
-45.95.168.251
 45.95.168.254
 45.95.168.97
 45.95.169.234
+45.95.55.58
 46.100.251.72
 46.100.56.152
 46.100.57.58
@@ -1057,7 +1048,6 @@
 46.241.120.165
 46.248.193.75
 46.36.74.43
-46.39.247.65
 46.47.106.63
 46.6.1.167
 46.97.76.242
@@ -1085,14 +1075,19 @@
 49.68.226.132
 49.68.235.19
 49.68.250.118
+49.68.54.141
+49.70.137.78
 49.70.234.20
+49.81.134.147
 49.82.14.191
+49.82.196.117
 49.82.249.71
 49.82.252.63
 49.84.125.254
 49.84.93.106
 49.89.115.124
 49.89.139.161
+49.89.228.167
 49.89.234.53
 49.89.64.24
 49.89.80.45
@@ -1100,12 +1095,10 @@
 5.101.196.90
 5.101.213.234
 5.128.62.127
-5.185.85.122
 5.19.248.85
 5.198.241.29
 5.201.130.125
 5.206.227.18
-5.238.110.62
 5.29.175.150
 5.56.124.92
 5.57.133.136
@@ -1117,6 +1110,7 @@
 50.3.177.106
 50.78.15.50
 51.255.170.237
+51.89.119.154
 58.120.159.133
 58.209.239.23
 58.227.101.108
@@ -1138,20 +1132,19 @@
 59.2.40.1
 59.22.144.136
 59.23.208.62
-59.3.94.190
 59.4.104.15
-59.55.253.105
 59.7.40.82
+61.168.136.199
 61.247.224.66
-61.53.197.182
-61.54.248.65
 61.56.182.218
+61.58.174.253
 61.58.55.226
 61.60.204.178
 61.70.110.59
 61.70.45.130
 61.75.111.224
 61.82.215.186
+61.83.40.183
 62.103.77.120
 62.122.102.236
 62.140.224.186
@@ -1162,6 +1155,7 @@
 62.34.210.232
 62.38.149.66
 62.38.222.98
+62.69.241.72
 62.80.231.196
 62.82.172.42
 62.90.219.154
@@ -1172,6 +1166,7 @@
 66.103.9.249
 66.117.6.174
 66.215.81.68
+66.57.55.210
 66.90.187.191
 66.96.241.234
 66.96.252.2
@@ -1182,7 +1177,6 @@
 68.204.73.133
 68.255.156.146
 69.119.140.197
-69.139.2.66
 69.146.232.34
 69.203.68.243
 69.229.0.133
@@ -1198,14 +1192,12 @@
 71.79.146.82
 72.17.60.150
 72.186.129.13
-72.186.139.38
 72.227.229.129
 72.234.57.0
 72.252.201.135
 72.69.204.59
 72.89.84.172
 73.0.143.64
-73.139.46.234
 73.231.235.88
 73.233.67.25
 73.55.122.210
@@ -1231,6 +1223,7 @@
 77.46.163.158
 77.71.52.220
 77.79.191.32
+77.89.203.238
 78.186.190.222
 78.186.49.146
 78.189.104.157
@@ -1245,6 +1238,7 @@
 79.136.27.40
 79.159.207.150
 79.179.199.159
+79.18.119.169
 79.2.211.133
 79.7.170.58
 79.79.58.94
@@ -1301,8 +1295,10 @@
 82.81.9.62
 8200msc.com
 83.198.36.130
+83.234.147.99
 83.234.218.42
 83.67.163.73
+84.10.31.238
 84.197.14.92
 84.20.68.26
 84.228.95.204
@@ -1324,11 +1320,13 @@
 86.105.60.204
 86.107.163.176
 86.107.163.98
+86.107.167.93
 86.18.117.139
 87.120.235.164
 87.241.175.89
 87.66.219.63
 87.97.154.37
+87du.vip
 88.102.33.14
 88.156.169.98
 88.201.34.243
@@ -1345,7 +1343,6 @@
 89.116.174.223
 89.122.77.154
 89.136.197.170
-89.141.1.115
 89.189.184.225
 89.208.105.18
 89.215.233.24
@@ -1353,6 +1350,7 @@
 89.22.152.244
 89.40.85.166
 89.40.87.5
+90.63.176.144
 91.134.252.221
 91.149.191.182
 91.177.139.132
@@ -1363,7 +1361,7 @@
 91.216.149.130
 91.217.2.120
 91.217.221.68
-91.226.253.227
+91.221.177.94
 91.237.238.242
 91.244.114.198
 91.244.169.139
@@ -1372,6 +1370,7 @@
 92.114.191.82
 92.115.155.161
 92.126.201.17
+92.223.177.227
 92.24.137.113
 92.241.78.114
 92.45.198.60
@@ -1379,7 +1378,6 @@
 92.55.124.64
 93.102.193.254
 93.116.166.51
-93.119.205.159
 93.119.236.72
 93.122.213.217
 93.122.225.34
@@ -1400,14 +1398,12 @@
 94.202.61.191
 94.230.152.192
 94.244.113.217
-94.244.25.21
 94.41.0.174
 94.53.120.109
 94.64.246.247
-95.132.129.250
 95.156.65.14
 95.167.138.250
-95.170.113.227
+95.167.71.245
 95.170.113.52
 95.170.201.34
 95.210.1.42
@@ -1419,18 +1415,22 @@
 96.9.69.148
 98.114.21.206
 98.124.101.193
+98.159.99.37
 98.21.251.169
 98.231.109.153
 98.238.122.130
 99.121.0.96
 99.50.211.58
 9983suncity.com
+Muanha.xyz
 a-reality.co.uk
+a.xiazai163.com
 aaasolution.co.th
 accentlandscapes.com
 accessyouraudience.com
 acteon.com.ar
 ade.topepics.com
+adnquocte.com
 aelogica.com
 agiandsam.com
 agipasesores.com
@@ -1447,11 +1447,11 @@ allloveseries.com
 alohasoftware.net
 alphaconsumer.net
 am-concepts.ca
+amd.alibuf.com
 amedeoscognamiglio.329263.com
 amemarine.co.th
 americanrange.com
 anadolutatili.com
-andreabo1.myftp.biz
 andreelapeyre.com
 andremaraisbeleggings.co.za
 angthong.nfe.go.th
@@ -1465,9 +1465,9 @@ archiv.bg
 arcticprospectus.com
 areac-agr.com
 aresorganics.com
+arowanafishforsale.com
 asadairtravel.com
 ascentive.com
-ashoakacharya.com
 askarindo.or.id
 atfile.com
 atomlines.com
@@ -1476,60 +1476,66 @@ atteuqpotentialunlimited.com
 audiosv.com
 aulist.com
 auraco.ca
+aurumboy.com
+avestor.uz
 azmeasurement.com
 aznetsolutions.com
 azureautomation.co.uk
 azzd.co.kr
 babaroadways.in
 badgesforbullies.org
-badmildiou.com
 bagmatisanchar.com
 bamakobleach.free.fr
+bangkok-orchids.com
 banzaimonkey.com
 bapo.granudan.cn
-bbs.sunwy.org
+baritaco.com
 bbs1.marisfrolg.com
+bd11.52lishi.com
 bd12.52lishi.com
+bd18.52lishi.com
 bd19.52lishi.com
-beforeshithappens.com
 beibei.xx007.cc
 bepgroup.com.hk
 besserblok-ufa.ru
-besthack.co
 besttasimacilik.com.tr
 beta.pterosol.com
 bflow.security-portal.cz
 bildeboks.no
 bilim-pavlodar.gov.kz
+billieellish.org
 bingxiong.vip
 bjkumdo.com
-blankki.com
 blog.241optical.com
-blog.anytimeneeds.com
 blog.hanxe.com
 bolidar.dnset.com
 bondbuild.com.sg
-bookmytripping.com
+bonyamin.com
+boscanatural.com
+bovientix.com
 bpo.correct.go.th
 brasstec.com.br
 brbs.customer.netspace.net.au
 brenleyquartzgh.com
 brewmethods.com
 btlocum.pl
+bucketstrong.s3-us-west-1.amazonaws.com
 bugansavings.com
+buhleni.co.za
 buydishtv.in
 bxbx28.cn
 byqkdy.com
 cameli.vn
+canaan.io
 caravella.com.br
 cassiagumrefined.com
 cassovia.sk
+castmart.ga
 cbk.m.dodo52.com
 ccnn.xiaomier.cn
+cdn-10049480.file.myqcloud.com
 cdn.xiaoduoai.com
 cdnus.laboratoryconecpttoday.com
-cecadesayu.corazondelcielo.mx
-ceirecrear.com.br
 cellas.sk
 cf.uuu9.com
 cf0.pw
@@ -1538,7 +1544,6 @@ ch.rmu.ac.th
 changematterscounselling.com
 chanvribloc.com
 charm.bizfxr.com
-chattosport.com
 chauffeursontravel.com
 chedea.eu
 chinhdropfile.myvnc.com
@@ -1546,25 +1551,26 @@ chinhdropfile80.myvnc.com
 chipmarkets.com
 chj.m.dodo52.com
 chnes17wsdywealthandmoduleorganisationui.duckdns.org
-cista-dobra-voda.com
+cinnamoncreations.com.au
 clearwaterriveroutfitting.com
 client.yaap.co.uk
 clinicamariademolina.com
 cloud-server-updater2.co.za
+cloud.wmsinfo.com.br
 colourcreative.co.za
-compesat.com
+common-factor.nl
 complan.hu
 complanbt.hu
 comtechadsl.com
 config.kuaisousou.top
-corazondelcielo.mx
+consultingcy.com
 counciloflight.bravepages.com
 cqjcc.org
 crittersbythebay.com
-crudenergyllc.com
 cryptoomarket.com
 csnserver.com
 csw.hu
+cuacuonsieure.com
 cvc.com.pl
 cyclomove.com
 czsl.91756.cn
@@ -1579,11 +1585,13 @@ datvensaigon.com
 davinadouthard.com
 dawaphoto.co.kr
 daynightgym.com
+ddl7.data.hu
 de.gsearch.com.de
 deixameuskls.tripod.com
 demo10.onbm.ir
 demo13.dsdemosite.com
 denkagida.com.tr
+depgrup.com
 depot7.com
 derivativespro.in
 dev.sebpo.net
@@ -1596,6 +1604,7 @@ dfzm.91756.cn
 dgecolesdepolice.bf
 dgnj.cn
 diazavendano.cl
+dichthuatsnu.com
 dichvuvesinhcongnghiep.top
 dienmaycu.vn
 dieselmoreno.cl
@@ -1614,6 +1623,7 @@ dl2.soft-lenta.ru
 dlist.iqilie.com
 dmresor.se
 dnn.alibuf.com
+dns.alibuf.com
 dodsonimaging.com
 don.viameventos.com.br
 dongiln.co
@@ -1628,7 +1638,6 @@ down.pcclear.com
 down.startools.co.kr
 down.upzxt.com
 down.webbora.com
-down.xrpdf.com
 down1.arpun.com
 downcdn.xianshuabao.com
 download.1ys.com
@@ -1642,12 +1651,15 @@ download.ware.ru
 download.zjsyawqj.cn
 download301.wanmei.com
 dpeasesummithilltoppers.pbworks.com
+dr080.com
 dralpaslan.com
 drools-moved.46999.n3.nabble.com
 druzim.freewww.biz
+drwendyellis.com
 dsiun.com
 dtsay.xyz
 dudulm.com
+duongfpt.ga
 dusdn.mireene.com
 dw.58wangdun.com
 dx.qqyewu.com
@@ -1657,27 +1669,29 @@ dx30.siweidaoxiang.com
 dx60.siweidaoxiang.com
 dzapasigroup.usapglobal.org
 dzinestudio87.co.uk
-e-internetim.com
 e.dangeana.com
+earningtipsbd.com
 easydown.workday360.cn
-ebook.w3wvg.com
 edicolanazionale.it
+elokshinproperty.co.za
 emir-elbahr.com
 enc-tech.com
+energisegroup.com
+enixc.com
 entre-potes.mon-application.com
-eposar.com.ar
 er-bulisguvenligi.com
 ermekanik.com
 esolvent.pl
 esteteam.org
-evdekal-kampanyasi20gbhediye.com
+evdekaldiye20-gb.com
 ezfintechcorp.com
 fafhoafouehfuh.su
-fairyqueenstore.com
+fast.rentaroom.ml
 fastsoft.onlinedown.net
 fazi.pl
 fenoma.net
 fidiag.kymco.com
+fifa555easy.329263.com
 figuig.net
 fileco.jobkorea.co.kr
 filen3.utengine.co.kr
@@ -1691,6 +1705,7 @@ flood-protection.org
 foodbooktv.com
 fordlamdong.com.vn
 foreverprecious.org
+foxfennecs.com
 frin.ng
 fte.m.dodo52.com
 ftpcnc-p2sp.pconline.com.cn
@@ -1698,7 +1713,6 @@ ftpftpftp.com
 funletters.net
 funpartyrent.com
 futuregraphics.com.ar
-futurodelasciudades.org
 g0ogle.free.fr
 gainsdirectory.com
 galuhtea.com
@@ -1713,7 +1727,10 @@ genesisconstruction.co.za
 germistonmiraclecentre.co.za
 ghislain.dartois.pagesperso-orange.fr
 ghwls44.gabia.io
+gimscompany.com
 glitzygal.net
+globaleuropeans.com
+gmassurance.fr
 gnimelf.net
 go.xsuad.com
 gocanada.vn
@@ -1723,12 +1740,11 @@ grafchekloder.rebatesrule.net
 granportale.com.br
 green100.cn
 greenleaveperu.com
-greindustry.com
 gssgroups.com
-gstat.dondyablo.com
 gx-10012947.file.myqcloud.com
 habbotips.free.fr
 hagebakken.no
+halcat.com
 hanaphoto.co.kr
 handrush.com
 hanoihub.vn
@@ -1736,20 +1752,21 @@ hazel-azure.co.th
 hdxa.net
 healtina.com
 heavenif.co.za
-hediye-internet.site
-hediyegapsinternet.com
+hediyem20gb-internet.org
 hellomessager.com
+herrfischer.me
 hfsoftware.cl
 hingcheong.hk
 hldschool.com
 hmbwgroup.com
+hmpmall.co.kr
 hoayeuthuong-my.sharepoint.com
 hostzaa.com
 hotart.co.nz
 hotel-le-relais-des-moulins.com
 housewifes.co
+how.ph
 hqsistemas.com.ar
-hseda.com
 hsmwebapp.com
 htxl.cn
 huishuren.nu
@@ -1777,6 +1794,7 @@ iran-gold.com
 iremart.es
 isso.ps
 itd.m.dodo52.com
+itohukuk.com
 itsnixielou.com
 ixlonbcc.com
 izu.co.jp
@@ -1784,10 +1802,11 @@ jaincakes.xyz
 jamiekaylive.com
 jansen-heesch.nl
 janvierassocies.fr
-jaservicioscontables.casteviajes.com
 javatank.ru
 jcedu.org
 jessymart.flexyhub.com
+jhorapatarastana.xyz
+jjjexx.329263.com
 jmtc.91756.cn
 jointings.org
 jonpetesharefile.com
@@ -1804,6 +1823,7 @@ jyv.fi
 jzny.com.cn
 k.ludong.tv
 k3.etfiber.net
+kabiru.ru
 kachsurf.mylftv.com
 kamasu11.cafe24.com
 kanok.co.th
@@ -1811,9 +1831,10 @@ kar.big-pro.com
 karavantekstil.com
 kassohome.com.tr
 kazanin20gbturkiye.com
-kazanturkiye20gb.com
 kdsp.co.kr
+keckarangdadap.pekalongankab.go.id
 kejpa.com
+kgfs3.329263.com
 khan-associates.net
 khunnapap.com
 kiaowadubai.com
@@ -1821,10 +1842,12 @@ kiencuonghotel.vn
 kjbm9.mof.gov.cn
 kleinendeli.co.za
 knightsbridgeenergy.com.ng
+kolibri-fabrika.ru
 koppemotta.com.br
 koralli.if.ua
 kqq.kz
 kristofferdaniels.com
+kupaliskohs.sk
 kuznetsov.ca
 kwanfromhongkong.com
 kwikomfi-lab.com
@@ -1833,7 +1856,6 @@ lameguard.ru
 lammaixep.com
 landmarktreks.com
 langyabbs.05yun.cn
-lastmorgoth.com
 lcfurtado.com.br
 ld.mediaget.com
 learnbuddy.com
@@ -1854,6 +1876,7 @@ log.yundabao.cn
 lsyr.net
 lt02.datacomspecialists.net
 luatminhthuan.com
+luckytriumph.com
 luisnacht.com.ar
 luyalu.net
 lvr.samacomplus.com
@@ -1889,6 +1912,7 @@ mhkdhotbot80.myvnc.com
 miaoshuosh.com
 micahproducts.com
 micalle.com.au
+milebgd.mycpanel.rs
 mirror.mypage.sk
 mis.nbcc.ac.th
 misterson.com
@@ -1896,12 +1920,14 @@ mistydeblasiophotography.com
 mkk09.kr
 mkontakt.az
 mlbfreestream.gq
+mlbfreestream.ml
 mmc.ru.com
 mobiadnews.com
 mobilier-modern.ro
 mochandmade.us
+modcloudserver.eu
 moha-group.com
-mononet.lv
+moinmo.de
 moscow11.at
 mountveederwines.com
 moyo.co.kr
@@ -1911,13 +1937,13 @@ msecurity.ro
 mteng.mmj7.com
 mtfelektroteknik.com
 mueblesjcp.cl
+mv360.net
 mvb.kz
 mxpiqw.am.files.1drv.com
 myexpertca.in
 myhood.cl
 myo.net.au
 myofficeplus.com
-myonlinepokiesblog.com
 mytex.pe
 mytrains.net
 mywp.asia
@@ -1937,7 +1963,6 @@ newsun-shop.com
 newxing.com
 nfbio.com
 ngoaingu.garage.com.vn
-nilemixitupd.biz.pl
 nkdhub.com
 nofound.000webhostapp.com
 nprg.ru
@@ -1948,11 +1973,11 @@ oa.hys.cn
 obnova.zzux.com
 obseques-conseils.com
 ohe.ie
+oknoplastik.sk
 omega.az
 omsk-osma.ru
 omuzgor.tj
 onestin.ro
-onyourmarkmindsetgo.com
 openclient.sroinfo.com
 operasanpiox.bravepages.com
 ophtalmiccenter.com
@@ -1971,6 +1996,7 @@ p3.zbjimg.com
 p30qom.ir
 p500.mon-application.com
 pack301.bravepages.com
+pakdesighee.com
 palochusvet.szm.com
 partyflix.net
 pat4.jetos.com
@@ -1980,20 +2006,26 @@ patch2.99ddd.com
 patch3.99ddd.com
 patrickchan-hk.net
 pawel-sikora.pl
+pcexperts.co.za
 pcginsure.com
 pcsoori.com
 pedidoslalacteo.com.ar
+peterssandmay.com
+petromltd.com
 ph4s.ru
 phamchilong.com
 phudieusongma.com
+phuphamca.com
 piapendet.com
 pink99.com
 platisher.xyz
+pmguide.net
 podiatristlansdale.com
 podrska.com.hr
 ponto50.com.br
 poolbook.ir
 ppl.ac.id
+prepaenunsoloexamen.academiagalileoac.com
 probost.cz
 profitcoach.net
 prosoc.nl
@@ -2016,11 +2048,11 @@ rc.ixiaoyang.cn
 readytalk.github.io
 real-song.tjmedia.co.kr
 recommendservices.com
-redeemerssports.com
 redesoftdownload.info
 rekspirit.ru
 renimin.mymom.info
 renovanorte.com
+rentaroom.ml
 res.uf1.cn
 ret.space
 rezaazizi.ir
@@ -2033,13 +2065,16 @@ robotrade.com.vn
 rollingmill.in
 rollscar.pk
 rossogato.com
+royalplusmobile.ir
 ruisgood.ru
 s.51shijuan.com
 s.kk30.com
+s14b.91danji.com
+s14b.groundyun.cn
 sabiupd.compress.to
 saboorjaam.ir
 sabupda.vizvaz.com
-sahathaikasetpan.com
+saglikodemelerinial.org
 salvation24.com
 salvationbd.com
 sandovalgraphics.com
@@ -2053,11 +2088,11 @@ seibee.biz
 selekture.com
 selfuseproperty.com
 selvikoyunciftligi.com
-sendeyararlanturkiye20gb.com
 serpentrising.com
 servicemhkd.myvnc.com
 servicemhkd80.myvnc.com
 serviciosinfoware.cl
+sexybaccarat.329263.com
 sfoodfeedf.org
 sgm.pc6.com
 shacked.webdepot.co.il
@@ -2066,6 +2101,7 @@ shaoxiaofei.cn
 share.dmca.gripe
 sharjahas.com
 shembefoundation.com
+shopjumpn.ch
 simlun.com.ar
 sinastorage.cn
 sindicato1ucm.cl
@@ -2088,6 +2124,7 @@ sophiaskyhotel.vn
 sota-france.fr
 souldancing.cn
 speed.myz.info
+sportshlive.xyz
 sportstrem.gq
 spurstogo.com
 sputnikmailru.cdnmail.ru
@@ -2098,15 +2135,16 @@ ss.cybersoft-vn.com
 sslv3.at
 staging.popclusive.asia
 starcountry.net
+static.ilclock.com
 static.topxgun.com
+stationaryhome.com
 stecit.nl
-steelbuildings.com
 stevewalker.com.au
 story-maker.jp
+stubbackup.ru
 suc9898.com
 suncity116.com
 support.clz.kr
-supportalaskausa.org
 sv.pvroe.com
 svkacademy.com
 svn.cc.jyu.fi
@@ -2115,7 +2153,6 @@ swwbia.com
 symanreni.mysecondarydns.com
 szxypt.com
 t.honker.info
-tandenblekenhoofddorp.nl
 taraward.com
 taxpos.com
 tcy.198424.com
@@ -2137,21 +2174,21 @@ theelectronics4u.com
 theprestige.ro
 theptiendat.com
 therecruiter.io
-thesecuritysoftwarescannerindustrgreat.duckdns.org
-thornadops.com
 thosewebbs.com
+thuong.bidiworks.com
 tianangdep.com
+tianmaouae.com
 tianzi8.cn
 tibinst.mefound.com
 tibok.lflink.com
 ticte.in
 timlinger.com
+tinckorm.beget.tech
 tmhfashionhouse.co.za
 toe.polinema.ac.id
 tonghopgia.net
 tonydong.com
 tonyzone.com
-treefighter.org
 tsd.jxwan.com
 tsredco.telangana.gov.in
 tulli.info
@@ -2160,6 +2197,7 @@ tuneup.ibk.me
 tup.com.cn
 tutuler.com
 uc-56.ru
+ucto-id.cz
 ufabet168168.329263.com
 ugc.wegame.com.cn
 ultimatelamborghiniexperience.com
@@ -2174,10 +2212,14 @@ upd.m.dodo52.com
 update.iwang8.com
 update.my.99.com
 updateflashplayer.link
+upendiveterinariovalencia.es
 urgentmessage.org
+usapglobal.usapglobal.org
 users.skynet.be
 uskeba.ca
 usmadetshirts.com
+uyen.vn
+uygulamalarim-hediyeinternet.org
 vadyur.github.io
 vaeqpu.329263.com
 valedchap.ir
@@ -2186,12 +2228,12 @@ vasoccernews.com
 vaziri.echobit.ir
 vdotrip.blog
 vfocus.net
+vibicloud.com
 videoswebcammsn.free.fr
 vietducbio.com
 vigilar.com.br
 vip.recommendedtoyoo.com
 virustreatments.empeeevents.com
-visagepk.com
 visualdata.ru
 vitinhvnt.com
 vitromed.ro
@@ -2201,9 +2243,9 @@ w.zhzy999.net
 wakecar.cn
 wangtong7.siweidaoxiang.com
 wangzonghang.cn
+wap.dosame.com
 ware.ru
 warriorllc.com
-waterosmo.com
 wbd.5636.com
 wbkmt.com
 webarte.com.br
@@ -2220,17 +2262,19 @@ wood-expert.net
 woodsytech.com
 wp.quercus.palustris.dk
 wq.feiniaoai.cn
-writesofpassage.co.za
 wsg.com.sg
 wt8.siweidaoxiang.com
 wt9.siweidaoxiang.com
 wwealthllc.com
+www-ecimer-uygulamayukleme-govtr.com
 www2.recepty5.com
 x2vn.com
 xia.vzboot.com
 xiaidown.com
 xiegushi.cn
 xirfad.com
+xn--d1aciabhfsdfe0a7e3b.xn--p1acf
+xn--transfgran-mgbbb600b.ro
 xtremeforumz.com
 xuhss.com
 xxwl.kuaiyunds.com
diff --git a/urlhaus-filter-domains.txt b/urlhaus-filter-domains.txt
index 975d1615..52173f0d 100644
--- a/urlhaus-filter-domains.txt
+++ b/urlhaus-filter-domains.txt
@@ -1,5 +1,5 @@
 # Title: abuse.ch URLhaus Malicious Domains Blocklist
-# Updated: Thu, 30 Apr 2020 12:09:30 UTC
+# Updated: Fri, 01 May 2020 00:10:35 UTC
 # Repo: https://gitlab.com/curben/urlhaus-filter
 # License: https://creativecommons.org/publicdomain/zero/1.0/
 # Source: https://urlhaus.abuse.ch/api/
@@ -2032,6 +2032,7 @@
 110.154.144.236
 110.154.145.89
 110.154.147.158
+110.154.15.122
 110.154.168.81
 110.154.169.197
 110.154.170.136
@@ -2210,6 +2211,7 @@
 110.154.249.171
 110.154.250.107
 110.154.250.177
+110.154.250.225
 110.154.250.249
 110.154.251.151
 110.154.35.161
@@ -3159,6 +3161,7 @@
 113.133.226.116
 113.133.226.193
 113.133.226.220
+113.133.226.226
 113.133.226.47
 113.133.227.111
 113.133.227.144
@@ -4527,6 +4530,7 @@
 115.226.178.184
 115.226.94.217
 115.229.141.76
+115.229.200.2
 115.229.207.0
 115.229.224.202
 115.229.227.153
@@ -4735,6 +4739,7 @@
 115.49.245.83
 115.49.246.101
 115.49.246.210
+115.49.246.62
 115.49.247.107
 115.49.247.160
 115.49.247.238
@@ -5800,6 +5805,7 @@
 115.96.130.7
 116.10.110.130
 116.100.132.158
+116.100.249.121
 116.100.4.17
 116.100.5.168
 116.102.164.203
@@ -5894,6 +5900,7 @@
 116.149.247.125
 116.149.247.139
 116.149.247.204
+116.149.247.247
 116.149.247.27
 116.149.33.83
 116.149.41.178
@@ -7275,6 +7282,7 @@
 119.1.92.114
 119.1.92.85
 119.102.127.122
+119.102.153.184
 119.118.173.180
 119.125.104.59
 119.125.104.93
@@ -7904,6 +7912,7 @@
 121.233.108.20
 121.233.108.216
 121.233.111.181
+121.233.116.232
 121.233.117.174
 121.233.117.238
 121.233.117.50
@@ -8145,6 +8154,7 @@
 122.241.33.17
 122.241.35.69
 122.241.43.85
+122.243.173.3
 122.243.180.141
 122.246.150.24
 122.247.208.135
@@ -8168,6 +8178,7 @@
 123.10.10.10
 123.10.10.251
 123.10.10.58
+123.10.101.22
 123.10.102.2
 123.10.103.115
 123.10.103.252
@@ -8251,6 +8262,7 @@
 123.10.135.218
 123.10.135.26
 123.10.135.69
+123.10.135.87
 123.10.137.45
 123.10.138.227
 123.10.140.128
@@ -9759,6 +9771,7 @@
 125.125.209.13
 125.125.210.32
 125.125.41.129
+125.125.44.18
 125.125.44.243
 125.125.44.92
 125.125.92.91
@@ -10044,6 +10057,7 @@
 125.44.214.55
 125.44.214.59
 125.44.214.79
+125.44.215.179
 125.44.215.43
 125.44.215.50
 125.44.215.74
@@ -10083,6 +10097,7 @@
 125.44.237.24
 125.44.238.248
 125.44.239.162
+125.44.241.64
 125.44.242.185
 125.44.244.4
 125.44.245.33
@@ -10254,6 +10269,7 @@
 125.47.245.116
 125.47.245.184
 125.47.246.161
+125.47.248.28
 125.47.252.160
 125.47.253.223
 125.47.254.28
@@ -12841,6 +12857,7 @@
 162.212.114.179
 162.212.114.189
 162.212.114.19
+162.212.114.196
 162.212.114.199
 162.212.114.204
 162.212.114.206
@@ -12871,6 +12888,7 @@
 162.212.114.50
 162.212.114.54
 162.212.114.55
+162.212.114.57
 162.212.114.59
 162.212.114.62
 162.212.114.65
@@ -12880,6 +12898,7 @@
 162.212.114.75
 162.212.114.76
 162.212.114.77
+162.212.114.8
 162.212.114.80
 162.212.114.88
 162.212.114.96
@@ -13902,6 +13921,7 @@
 171.227.222.50
 171.231.131.233
 171.231.234.132
+171.232.106.147
 171.232.81.227
 171.232.86.225
 171.233.103.73
@@ -14238,6 +14258,7 @@
 172.36.24.33
 172.36.24.68
 172.36.24.77
+172.36.24.88
 172.36.24.96
 172.36.25.110
 172.36.25.134
@@ -14528,6 +14549,7 @@
 172.36.45.228
 172.36.45.244
 172.36.45.248
+172.36.45.41
 172.36.45.82
 172.36.45.90
 172.36.45.94
@@ -14580,6 +14602,7 @@
 172.36.49.50
 172.36.49.6
 172.36.49.70
+172.36.49.78
 172.36.49.84
 172.36.5.0
 172.36.5.100
@@ -15039,6 +15062,7 @@
 172.39.41.213
 172.39.41.32
 172.39.42.199
+172.39.42.216
 172.39.42.246
 172.39.42.36
 172.39.42.76
@@ -16830,6 +16854,7 @@
 178.62.198.53
 178.62.201.163
 178.62.203.226
+178.62.204.84
 178.62.205.54
 178.62.206.32
 178.62.21.111
@@ -17283,6 +17308,7 @@
 180.116.234.234
 180.116.234.30
 180.116.238.199
+180.116.47.28
 180.116.96.229
 180.117.108.134
 180.117.116.233
@@ -17882,6 +17908,7 @@
 182.113.219.236
 182.113.219.54
 182.113.219.81
+182.113.220.114
 182.113.220.129
 182.113.220.147
 182.113.220.179
@@ -17937,6 +17964,7 @@
 182.113.43.246
 182.113.49.193
 182.113.55.206
+182.113.56.170
 182.113.58.37
 182.113.58.68
 182.113.63.103
@@ -18281,6 +18309,7 @@
 182.117.158.101
 182.117.158.156
 182.117.158.91
+182.117.160.121
 182.117.160.168
 182.117.160.30
 182.117.164.211
@@ -18701,6 +18730,7 @@
 182.126.177.232
 182.126.179.85
 182.126.181.149
+182.126.183.195
 182.126.192.155
 182.126.192.166
 182.126.192.18
@@ -19130,6 +19160,7 @@
 182.127.57.80
 182.127.59.63
 182.127.6.212
+182.127.64.253
 182.127.67.83
 182.127.68.228
 182.127.68.82
@@ -22499,6 +22530,7 @@
 199.83.202.240
 199.83.202.251
 199.83.203.100
+199.83.203.104
 199.83.203.106
 199.83.203.108
 199.83.203.114
@@ -22508,6 +22540,7 @@
 199.83.203.127
 199.83.203.132
 199.83.203.134
+199.83.203.137
 199.83.203.14
 199.83.203.152
 199.83.203.157
@@ -24003,6 +24036,7 @@
 211.159.168.108
 211.179.143.199
 211.187.75.220
+211.192.121.74
 211.192.64.222
 211.193.86.151
 211.194.183.51
@@ -25008,6 +25042,7 @@
 219.155.29.65
 219.155.60.194
 219.155.61.47
+219.155.62.175
 219.155.62.19
 219.155.62.201
 219.155.69.164
@@ -25343,6 +25378,7 @@
 221.14.17.49
 221.14.170.23
 221.14.237.229
+221.14.237.63
 221.14.238.36
 221.14.239.158
 221.14.239.67
@@ -25681,6 +25717,7 @@
 222.138.126.198
 222.138.126.212
 222.138.126.23
+222.138.133.206
 222.138.134.154
 222.138.134.236
 222.138.134.29
@@ -26083,6 +26120,7 @@
 222.142.195.124
 222.142.195.194
 222.142.195.39
+222.142.196.145
 222.142.197.35
 222.142.197.36
 222.142.198.130
@@ -27123,6 +27161,8 @@
 27.41.134.131
 27.41.135.216
 27.41.136.46
+27.41.138.104
+27.41.138.49
 27.41.138.56
 27.41.141.116
 27.41.145.22
@@ -27165,6 +27205,7 @@
 27.41.208.52
 27.41.209.226
 27.41.211.155
+27.41.213.143
 27.41.214.143
 27.41.215.24
 27.41.216.113
@@ -28336,6 +28377,7 @@
 36.35.161.130
 36.35.161.153
 36.35.161.166
+36.35.161.186
 36.35.161.202
 36.35.161.215
 36.35.161.232
@@ -29075,6 +29117,7 @@
 42.113.243.65
 42.113.247.186
 42.115.10.67
+42.115.12.180
 42.115.153.198
 42.115.174.149
 42.115.2.228
@@ -31424,6 +31467,7 @@
 45.95.168.244
 45.95.168.245
 45.95.168.246
+45.95.168.247
 45.95.168.249
 45.95.168.250
 45.95.168.251
@@ -32660,6 +32704,7 @@
 49.81.133.151
 49.81.133.189
 49.81.133.54
+49.81.134.147
 49.81.134.16
 49.81.134.90
 49.81.143.164
@@ -32731,6 +32776,7 @@
 49.82.18.249
 49.82.181.254
 49.82.194.9
+49.82.196.117
 49.82.196.170
 49.82.200.142
 49.82.200.191
@@ -34744,6 +34790,7 @@
 61.168.136.100
 61.168.136.109
 61.168.136.133
+61.168.136.199
 61.168.136.97
 61.168.137.108
 61.168.137.147
@@ -35915,6 +35962,7 @@
 66.55.71.111
 66.55.71.12
 66.55.80.140
+66.57.55.210
 66.65.36.82
 66.66.23.90
 66.70.172.74
@@ -36623,6 +36671,7 @@
 77.43.130.144
 77.43.130.254
 77.43.131.238
+77.43.133.49
 77.43.137.62
 77.43.150.93
 77.43.151.144
@@ -37010,6 +37059,7 @@
 79.174.24.172
 79.176.82.85
 79.179.199.159
+79.18.119.169
 79.18.68.24
 79.180.24.85
 79.181.42.113
@@ -37648,6 +37698,7 @@
 834d1705-a-62cb3a1a-s-sites.googlegroups.com
 84.0.213.219
 84.1.27.113
+84.10.31.238
 84.108.209.36
 84.16.248.159
 84.16.248.166
@@ -39158,6 +39209,7 @@
 98.159.99.11
 98.159.99.213
 98.159.99.33
+98.159.99.37
 98.159.99.43
 98.159.99.9
 98.159.99.93
@@ -40223,6 +40275,7 @@ admyinfo.000webhostapp.com
 adnaan.website
 adnc.cn
 adnetss.com
+adnquocte.com
 adoam.pw
 adoam.site
 adobe-flash-player.pro
@@ -43652,6 +43705,7 @@ ariesnetworks.org.uk
 arifcagan.com
 arifhajj.umrahsoftware.co.uk
 arifolmancohen.com
+arifrehan.xyz
 arifzena.com
 arigato.com.vn
 arigbabuwogalleria.com
@@ -45054,6 +45108,7 @@ averin.pro
 averson.by
 averybit.com
 aveslor.com
+avestor.uz
 avfphoto.com
 avgsupport.info
 avheaven.icu
@@ -45341,6 +45396,7 @@ azcama.org
 azdhj.com
 azedizayn.com
 azeevatech.in
+azenzatowers.com
 azeritibb.pe.hu
 azerothland.com
 azeta.xyz
@@ -47358,6 +47414,7 @@ billenloe.com
 billerimpex.com
 billeter.net
 billfritzjr.com
+billieellish.org
 billing.wpkami.com
 billingsupport.ru
 billingtonbarristers.com
@@ -49364,6 +49421,7 @@ buchanancu.org
 bucharest-independent-escort.com
 bucketlistadvtours.com
 bucketlistrecipes.com
+bucketstrong.s3-us-west-1.amazonaws.com
 buckeyeoptical.com
 buckinghamandlloyds.com
 buckleman.co.id
@@ -50166,6 +50224,7 @@ camsexsnol.nl
 can-do-property.co.uk
 can-doelectric.com
 can-media.de
+canaan.io
 canaccordgenuity.bluematrix.com
 canacofactura.com.mx
 canadabestonline.com
@@ -54537,6 +54596,7 @@ currencyavenue.com
 currencyexchanger.com.ng
 currenteventsmemes.com
 curs.neagoeandrei.com
+cursdictie.ro
 curso.domeducacional.com
 curso.ssthno.webdesignssw.cl
 cursoaphonline.com.br
@@ -55216,6 +55276,7 @@ data.kaoyany.top
 data.nanhai.cn
 data.over-blog-kiwi.com
 data.yx1999.com
+data4i.com
 data4u.kay-tech.info
 databacknow.com
 database.z-flooring.com
@@ -55327,6 +55388,7 @@ david.ph-prod.com
 davidaluke.com
 davidcizek.cz
 davidcjones.ca
+davidd47.sg-host.com
 davidedigiorgio360.com
 davidemarocco.com
 davidephoto.it
@@ -56868,6 +56930,7 @@ dicampo.cl
 dicarmo.com
 dicebot-game.com
 dichiara.com.ar
+dichthuatsnu.com
 dichvuchupanhsanpham.com
 dichvucong.vn
 dichvucuoi0f16.toannang.xyz
@@ -58064,6 +58127,7 @@ dotlenieni.pl
 dotlineplane.co.th
 dotnetdays.ro
 dotnetebusiness.com
+dotpay.id
 dotpos.in
 dotproject.org
 dotshopify.com
@@ -58308,6 +58372,7 @@ dr-nasrinataeifar.ir
 dr-popa.com
 dr-prof-sachidanandasinha-dentalclinic.com
 dr-recella-global.com
+dr080.com
 dr702.com
 draaiercnc.nl
 draaiorgel.org
@@ -60673,6 +60738,7 @@ enilaegroj.com
 enilegho.com.br
 enis1130.000webhostapp.com
 eniture-qa.com
+enixc.com
 eniyionfirma.com
 enjoy-aquaristik.de
 enjoy-kobac.com
@@ -61537,6 +61603,7 @@ evdekal-kampanyasi20gbhediye.com
 evdekal20kapgb.com
 evdekalan20gbkazaniyor.com
 evdekalana20gb-hehe.com
+evdekaldiye20-gb.com
 evdekaltuekiyesaglik.com
 evdekl20gbx.com
 evdyn.com.sg
@@ -64102,6 +64169,7 @@ freeofshackles.com
 freepaidcourses.com
 freepalestinemovement.org
 freephenix.cn
+freeprofessionalwebhosting.com
 freeselfstoragequote.com
 freeslits.net
 freesoft.website
@@ -66036,6 +66104,7 @@ gmakeup.ru
 gmann.blog
 gmann.info
 gmann.photos
+gmassurance.fr
 gmc2.ru
 gmcoflouisville.com
 gmcostruzionieservizi.com
@@ -68211,6 +68280,7 @@ hediye-internet-saglik.org
 hediye-internet.site
 hediyegapsinternet.com
 hediyeinternetpaketim.com
+hediyem20gb-internet.org
 hediyenkolay.com
 hedrasl.com
 hedwise.com
@@ -68450,6 +68520,7 @@ herrajesmasota.com
 herratech.com
 herrenmode.tk
 herrent.com
+herrfischer.me
 herrgaardstak.se
 herryjoa.mireene.com
 herscare.net
@@ -69589,6 +69660,7 @@ htmedia.net
 htmediagroups.com
 html.nichost.ru
 htmlget.com
+htn13.com
 htnieuw.hazenbergtimmerwerken.nl
 htpinvestment.com.vn
 htt.nu
@@ -72335,6 +72407,7 @@ itray.co.kr
 itrc.gov.co
 itrenaissance.com
 itreni.net
+itrigger.cn
 itroj.ir
 its-fondazionearchimede.it
 its-oh.net
@@ -73125,6 +73198,7 @@ jhdwas.org
 jhelt.net
 jhom.in
 jhonhusein.com
+jhorapatarastana.xyz
 jhrt185.com
 jhssourcingltd.com
 jhsstudio.com.br
@@ -75097,6 +75171,7 @@ khoshrougallery.com
 khotanperfume.com
 khotawa.com
 khothietbivesinh24h.com
+khoztrip.ir
 khp89wc.com
 khpm.ir
 khrystyna-verkholiak.com
@@ -75741,6 +75816,7 @@ kolbecompany.com
 kolejmontlari.com
 kolejnicky.cz
 kolejskilmentari.edu.my
+kolibri-fabrika.ru
 kolibristattoo.lt
 kolkatacleanair.in
 koll-partner.tax
@@ -75977,6 +76053,7 @@ kpmicrowave.com
 kpodata.com
 kpogroup.bo
 kpopstarz.kienthucsong.info
+kposter.alexandruplesea.ro
 kppspgrojec.internetdsl.pl
 kprsolutions.com
 kpss.ir
@@ -81354,6 +81431,7 @@ mebs-marketing.de
 mecanique-vivante.com
 mecanizadosgurrutxaga.com
 mecatronica.ifc-riodosul.edu.br
+mecbox.cn
 mecenat.com.ua
 mecflui.com.br
 mecgwl.ac.in
@@ -82337,6 +82415,7 @@ milcommonline.com
 milczanowska.com
 mildibsilgip.com
 mileageindia.com
+milebgd.mycpanel.rs
 milehighffa.com
 milehighhomebuyers.com
 milena-koenig.de
@@ -83120,6 +83199,7 @@ moie.nl
 moigioi.info
 moikihit.ru
 moinetfils.com
+moinmo.de
 mois.com.br
 moiselektronik.com
 moisesdavid.com
@@ -83911,6 +83991,8 @@ muhammadiyahamin.com
 muhammadshahid.techsandooq.com
 muhanoiss6.net
 muhendismeraki.com
+muhtesem20gb.xyz
+muhtessemramazan20gb.com
 muidokan.com
 muikarellep.band
 muilyt.com
@@ -84325,6 +84407,8 @@ myhscnow.com
 myimmigrationlawmarketingpartner.com
 myinfoart.online
 myinternetjobs.com
+myintromationsz.win
+myintromationszcj.win
 myjedesigns.com
 myjmcedu-my.sharepoint.com
 myjnia-samochodowa.com
@@ -85695,6 +85779,7 @@ ngoibitumsinhthai.com.vn
 ngoinhadaquy.com
 ngoitruonghanhphuc.edu.vn
 ngomavibe.co.ke
+ngon10.com
 ngoshakarpura.online
 ngovietanh.com
 ngowebsite.developeratfiverr.in
@@ -89726,6 +89811,7 @@ phuongart.000webhostapp.com
 phuongnguyencutrinh.gov.vn
 phuongphamngulao.gov.vn
 phuongphan.co
+phuphamca.com
 phusonland.vn
 phutung24h.vn
 phy.mbstu.ac.bd
@@ -94473,6 +94559,7 @@ rociton.com.bd
 rock-creek.com
 rockcanyonoutfitters.com
 rockenstein-gmbh.de
+rockersdolphin.co.za
 rocket-tutor.com
 rocketbagger.com
 rocketx.fun
@@ -94853,6 +94940,7 @@ rrdm.co.in
 rrexkmwi.yjdata.me
 rrglobaltrade.com
 rrgodshsf.ug
+rrinteriores.neoistone.site
 rrmedical-gmbh.com
 rronrestaurant.com
 rroun-nourr.ga
@@ -95480,6 +95568,7 @@ saglikbakanligindanhediye20gb.com
 saglikgoalapp.site
 saglikliapp.live
 sagliklibedenim.com
+saglikodemelerinial.org
 sagrathi.com
 sagunpapers.com
 sahabathasyim.com
@@ -97205,7 +97294,9 @@ setonpaloalto.org
 setra.ir
 setrals.net
 setrals.website
+setsd.xyz
 setseta.com
+setss.xyz
 settecieli.com
 setticonference.it
 setup.co.il
@@ -97843,6 +97934,7 @@ shopinclub.in
 shopinsta.in
 shopinterbuild.com
 shopiqtoys.com
+shopjumpn.ch
 shopkaro.apps19.com
 shopkimhuyen.com
 shopkinhdoanh.com
@@ -98346,6 +98438,7 @@ sipil.fatek.untad.ac.id
 sipmanagement-my.sharepoint.com
 siprev.net.br
 siragehad.com
+sirajaoloan.com
 sirajhummus.com
 siranagi.sakura.ne.jp
 sirenas-spa.com
@@ -98973,6 +99066,7 @@ smokesock.com
 smokesome.xyz
 smoketravkueveryday.tech
 smokingpot.xyz
+smollmart.com
 smoltest.tk
 smoon.co.kr
 smooth-moves.com
@@ -100183,6 +100277,7 @@ srtechno.co.in
 srtms.in
 srujanovision.com
 srv-15.directserver.us
+srv-file9.gofile.io
 srv7.computerkolkata.com
 srv77956.ht-test.ru
 srv9.computerkolkata.com
@@ -102482,6 +102577,7 @@ tappteam.co.uk
 tapretriat.com
 taproomagogo.com
 tapsglobalsolutions.com
+tapss.com.br
 tapsu.in
 taptagtees.com
 tapucreative.com
@@ -102891,6 +102987,7 @@ technoknot.com
 technologicznie.pl
 technologiebeloeil.com
 technologielaurendeau.com
+technology-bd.com
 technologyadvantages.000webhostapp.com
 technologyaroundu.com
 technologycomponents.com
@@ -105381,6 +105478,7 @@ tourcrafters.in
 tourderichelieu.com
 tourdezsokolat.hu
 tourecoz.in
+tourenhelicoptero.com
 tourguy.com
 touring-athens.com
 touring.woolston.com.au
@@ -105527,6 +105625,7 @@ tradingexpert.website
 tradingmatic.youralgo.com
 tradingpartneredi.com
 tradingstyle.net
+tradingwithharmony.com
 traditionsfinegifts.com
 tradutorgeek.com
 traektoria.com
@@ -106593,6 +106692,7 @@ ucomechina.com
 uconthailand.com
 ucrealtors.com
 ucrealtors.net
+ucretsiz20gbturkiye.com
 ucrnn.org
 ucstandart.ru
 ucto-id.cz
@@ -107333,6 +107433,7 @@ usakisdunyasi.com
 usamashakeel.com
 usamovers.net
 usanin.info
+usapglobal.usapglobal.org
 usaselfstoragenetwork.com
 usastoragenetwork.com
 usax138.oicp.net
@@ -107464,9 +107565,11 @@ uy-akwaibom.ru
 uyaiblog.com
 uycqawua.applekid.cn
 uydu.antalyaelektrikariza.net
+uyen.vn
 uyencometics.bmt.city
 uyf.com.ua
 uyghurchem.com
+uygulamalarim-hediyeinternet.org
 uyijbmxxm8874337.gameofthrones05.site
 uyikjtn.eu
 uytr5e.imtbreds.com
@@ -107940,6 +108043,7 @@ vencury.com
 vendacomcelular.com.br
 vendaiot.ir
 vendameucarroo.com
+vendeaki.online
 vendem.com.br
 vendere-su-internet.com
 vendermicasaenbarcelona.com
@@ -108183,6 +108287,7 @@ viberspyware.com
 vibescyahdone.com
 vibeshirt.de
 vibetronic.id
+vibicloud.com
 vibni.dk
 vibor-anapa.ru
 vibramarketing.cl
@@ -110994,6 +111099,7 @@ wws.tkgventures.com
 www-88xyxy-com.info
 www-bsac.eecs.berkeley.edu
 www-dev.e4healthinc.com
+www-ecimer-uygulamayukleme-govtr.com
 www-grupotv1-com-br.azurclaireritter.cmail-oln040092069015.outbound.protection.sketchwefair-watduoliprudential.com.watchdogdns.duckdns.org
 www.smart-eg.com
 www022284.com
@@ -111081,6 +111187,7 @@ x86tpkujgu1ksoky.com
 xacrosoft.com
 xact.ma
 xadrezgigante.com.br
+xaergtcrcd.info
 xagency.co
 xaidol.com
 xajfgz.com
@@ -111565,6 +111672,7 @@ xn--celegeninaat-dnc.com
 xn--cryptohoppe-bec.com
 xn--czstochowadlazwierzt-mkc63b.pl
 xn--d1achkaoe4a.xn--p1ai
+xn--d1aciabhfsdfe0a7e3b.xn--p1acf
 xn--d1ahebikdfcgr7jsa.xn--p1ai
 xn--d1ahjkdbhfjy4g.xn--p1ai
 xn--d1aiocodol6a8d.xn--p1ai
@@ -112511,6 +112619,7 @@ yzbot.com
 yzmwh.com
 yzzqdz.com
 z-prava.ru
+z.loyaltyaboveall.com
 z.zz.ht
 z0451.net
 z0tt3l.de
diff --git a/urlhaus-filter-hosts-online.txt b/urlhaus-filter-hosts-online.txt
index d52c245d..9b5ff0fb 100644
--- a/urlhaus-filter-hosts-online.txt
+++ b/urlhaus-filter-hosts-online.txt
@@ -1,5 +1,5 @@
 # Title: abuse.ch URLhaus Malicious Online Hosts Blocklist
-# Updated: Thu, 30 Apr 2020 12:09:30 UTC
+# Updated: Fri, 01 May 2020 00:10:35 UTC
 # Repo: https://gitlab.com/curben/urlhaus-filter
 # License: https://creativecommons.org/publicdomain/zero/1.0/
 # Source: https://urlhaus.abuse.ch/api/
@@ -12,20 +12,23 @@
 0.0.0.0 3.zhzy999.net3.zhzy999.net
 0.0.0.0 3mandatesmedia.com
 0.0.0.0 402musicfest.com
-0.0.0.0 420hempizone.co
 0.0.0.0 49parallel.ca
 0.0.0.0 786suncity.com
 0.0.0.0 8133msc.com
 0.0.0.0 8200msc.com
+0.0.0.0 87du.vip
 0.0.0.0 887sconline.com
 0.0.0.0 88mscco.com
 0.0.0.0 9983suncity.com
+0.0.0.0 Muanha.xyz
 0.0.0.0 a-reality.co.uk
+0.0.0.0 a.xiazai163.com
 0.0.0.0 aaasolution.co.th
 0.0.0.0 accentlandscapes.com
 0.0.0.0 accessyouraudience.com
 0.0.0.0 acteon.com.ar
 0.0.0.0 ade.topepics.com
+0.0.0.0 adnquocte.com
 0.0.0.0 aelogica.com
 0.0.0.0 agiandsam.com
 0.0.0.0 agipasesores.com
@@ -42,11 +45,11 @@
 0.0.0.0 alohasoftware.net
 0.0.0.0 alphaconsumer.net
 0.0.0.0 am-concepts.ca
+0.0.0.0 amd.alibuf.com
 0.0.0.0 amedeoscognamiglio.329263.com
 0.0.0.0 amemarine.co.th
 0.0.0.0 americanrange.com
 0.0.0.0 anadolutatili.com
-0.0.0.0 andreabo1.myftp.biz
 0.0.0.0 andreelapeyre.com
 0.0.0.0 andremaraisbeleggings.co.za
 0.0.0.0 angthong.nfe.go.th
@@ -60,9 +63,9 @@
 0.0.0.0 arcticprospectus.com
 0.0.0.0 areac-agr.com
 0.0.0.0 aresorganics.com
+0.0.0.0 arowanafishforsale.com
 0.0.0.0 asadairtravel.com
 0.0.0.0 ascentive.com
-0.0.0.0 ashoakacharya.com
 0.0.0.0 askarindo.or.id
 0.0.0.0 atfile.com
 0.0.0.0 atomlines.com
@@ -71,60 +74,66 @@
 0.0.0.0 audiosv.com
 0.0.0.0 aulist.com
 0.0.0.0 auraco.ca
+0.0.0.0 aurumboy.com
+0.0.0.0 avestor.uz
 0.0.0.0 azmeasurement.com
 0.0.0.0 aznetsolutions.com
 0.0.0.0 azureautomation.co.uk
 0.0.0.0 azzd.co.kr
 0.0.0.0 babaroadways.in
 0.0.0.0 badgesforbullies.org
-0.0.0.0 badmildiou.com
 0.0.0.0 bagmatisanchar.com
 0.0.0.0 bamakobleach.free.fr
+0.0.0.0 bangkok-orchids.com
 0.0.0.0 banzaimonkey.com
 0.0.0.0 bapo.granudan.cn
-0.0.0.0 bbs.sunwy.org
+0.0.0.0 baritaco.com
 0.0.0.0 bbs1.marisfrolg.com
+0.0.0.0 bd11.52lishi.com
 0.0.0.0 bd12.52lishi.com
+0.0.0.0 bd18.52lishi.com
 0.0.0.0 bd19.52lishi.com
-0.0.0.0 beforeshithappens.com
 0.0.0.0 beibei.xx007.cc
 0.0.0.0 bepgroup.com.hk
 0.0.0.0 besserblok-ufa.ru
-0.0.0.0 besthack.co
 0.0.0.0 besttasimacilik.com.tr
 0.0.0.0 beta.pterosol.com
 0.0.0.0 bflow.security-portal.cz
 0.0.0.0 bildeboks.no
 0.0.0.0 bilim-pavlodar.gov.kz
+0.0.0.0 billieellish.org
 0.0.0.0 bingxiong.vip
 0.0.0.0 bjkumdo.com
-0.0.0.0 blankki.com
 0.0.0.0 blog.241optical.com
-0.0.0.0 blog.anytimeneeds.com
 0.0.0.0 blog.hanxe.com
 0.0.0.0 bolidar.dnset.com
 0.0.0.0 bondbuild.com.sg
-0.0.0.0 bookmytripping.com
+0.0.0.0 bonyamin.com
+0.0.0.0 boscanatural.com
+0.0.0.0 bovientix.com
 0.0.0.0 bpo.correct.go.th
 0.0.0.0 brasstec.com.br
 0.0.0.0 brbs.customer.netspace.net.au
 0.0.0.0 brenleyquartzgh.com
 0.0.0.0 brewmethods.com
 0.0.0.0 btlocum.pl
+0.0.0.0 bucketstrong.s3-us-west-1.amazonaws.com
 0.0.0.0 bugansavings.com
+0.0.0.0 buhleni.co.za
 0.0.0.0 buydishtv.in
 0.0.0.0 bxbx28.cn
 0.0.0.0 byqkdy.com
 0.0.0.0 cameli.vn
+0.0.0.0 canaan.io
 0.0.0.0 caravella.com.br
 0.0.0.0 cassiagumrefined.com
 0.0.0.0 cassovia.sk
+0.0.0.0 castmart.ga
 0.0.0.0 cbk.m.dodo52.com
 0.0.0.0 ccnn.xiaomier.cn
+0.0.0.0 cdn-10049480.file.myqcloud.com
 0.0.0.0 cdn.xiaoduoai.com
 0.0.0.0 cdnus.laboratoryconecpttoday.com
-0.0.0.0 cecadesayu.corazondelcielo.mx
-0.0.0.0 ceirecrear.com.br
 0.0.0.0 cellas.sk
 0.0.0.0 cf.uuu9.com
 0.0.0.0 cf0.pw
@@ -133,7 +142,6 @@
 0.0.0.0 changematterscounselling.com
 0.0.0.0 chanvribloc.com
 0.0.0.0 charm.bizfxr.com
-0.0.0.0 chattosport.com
 0.0.0.0 chauffeursontravel.com
 0.0.0.0 chedea.eu
 0.0.0.0 chinhdropfile.myvnc.com
@@ -141,25 +149,26 @@
 0.0.0.0 chipmarkets.com
 0.0.0.0 chj.m.dodo52.com
 0.0.0.0 chnes17wsdywealthandmoduleorganisationui.duckdns.org
-0.0.0.0 cista-dobra-voda.com
+0.0.0.0 cinnamoncreations.com.au
 0.0.0.0 clearwaterriveroutfitting.com
 0.0.0.0 client.yaap.co.uk
 0.0.0.0 clinicamariademolina.com
 0.0.0.0 cloud-server-updater2.co.za
+0.0.0.0 cloud.wmsinfo.com.br
 0.0.0.0 colourcreative.co.za
-0.0.0.0 compesat.com
+0.0.0.0 common-factor.nl
 0.0.0.0 complan.hu
 0.0.0.0 complanbt.hu
 0.0.0.0 comtechadsl.com
 0.0.0.0 config.kuaisousou.top
-0.0.0.0 corazondelcielo.mx
+0.0.0.0 consultingcy.com
 0.0.0.0 counciloflight.bravepages.com
 0.0.0.0 cqjcc.org
 0.0.0.0 crittersbythebay.com
-0.0.0.0 crudenergyllc.com
 0.0.0.0 cryptoomarket.com
 0.0.0.0 csnserver.com
 0.0.0.0 csw.hu
+0.0.0.0 cuacuonsieure.com
 0.0.0.0 cvc.com.pl
 0.0.0.0 cyclomove.com
 0.0.0.0 czsl.91756.cn
@@ -174,11 +183,13 @@
 0.0.0.0 davinadouthard.com
 0.0.0.0 dawaphoto.co.kr
 0.0.0.0 daynightgym.com
+0.0.0.0 ddl7.data.hu
 0.0.0.0 de.gsearch.com.de
 0.0.0.0 deixameuskls.tripod.com
 0.0.0.0 demo10.onbm.ir
 0.0.0.0 demo13.dsdemosite.com
 0.0.0.0 denkagida.com.tr
+0.0.0.0 depgrup.com
 0.0.0.0 depot7.com
 0.0.0.0 derivativespro.in
 0.0.0.0 dev.sebpo.net
@@ -191,6 +202,7 @@
 0.0.0.0 dgecolesdepolice.bf
 0.0.0.0 dgnj.cn
 0.0.0.0 diazavendano.cl
+0.0.0.0 dichthuatsnu.com
 0.0.0.0 dichvuvesinhcongnghiep.top
 0.0.0.0 dienmaycu.vn
 0.0.0.0 dieselmoreno.cl
@@ -209,6 +221,7 @@
 0.0.0.0 dlist.iqilie.com
 0.0.0.0 dmresor.se
 0.0.0.0 dnn.alibuf.com
+0.0.0.0 dns.alibuf.com
 0.0.0.0 dodsonimaging.com
 0.0.0.0 don.viameventos.com.br
 0.0.0.0 dongiln.co
@@ -223,7 +236,6 @@
 0.0.0.0 down.startools.co.kr
 0.0.0.0 down.upzxt.com
 0.0.0.0 down.webbora.com
-0.0.0.0 down.xrpdf.com
 0.0.0.0 down1.arpun.com
 0.0.0.0 downcdn.xianshuabao.com
 0.0.0.0 download.1ys.com
@@ -237,12 +249,15 @@
 0.0.0.0 download.zjsyawqj.cn
 0.0.0.0 download301.wanmei.com
 0.0.0.0 dpeasesummithilltoppers.pbworks.com
+0.0.0.0 dr080.com
 0.0.0.0 dralpaslan.com
 0.0.0.0 drools-moved.46999.n3.nabble.com
 0.0.0.0 druzim.freewww.biz
+0.0.0.0 drwendyellis.com
 0.0.0.0 dsiun.com
 0.0.0.0 dtsay.xyz
 0.0.0.0 dudulm.com
+0.0.0.0 duongfpt.ga
 0.0.0.0 dusdn.mireene.com
 0.0.0.0 dw.58wangdun.com
 0.0.0.0 dx.qqyewu.com
@@ -252,27 +267,29 @@
 0.0.0.0 dx60.siweidaoxiang.com
 0.0.0.0 dzapasigroup.usapglobal.org
 0.0.0.0 dzinestudio87.co.uk
-0.0.0.0 e-internetim.com
 0.0.0.0 e.dangeana.com
+0.0.0.0 earningtipsbd.com
 0.0.0.0 easydown.workday360.cn
-0.0.0.0 ebook.w3wvg.com
 0.0.0.0 edicolanazionale.it
+0.0.0.0 elokshinproperty.co.za
 0.0.0.0 emir-elbahr.com
 0.0.0.0 enc-tech.com
+0.0.0.0 energisegroup.com
+0.0.0.0 enixc.com
 0.0.0.0 entre-potes.mon-application.com
-0.0.0.0 eposar.com.ar
 0.0.0.0 er-bulisguvenligi.com
 0.0.0.0 ermekanik.com
 0.0.0.0 esolvent.pl
 0.0.0.0 esteteam.org
-0.0.0.0 evdekal-kampanyasi20gbhediye.com
+0.0.0.0 evdekaldiye20-gb.com
 0.0.0.0 ezfintechcorp.com
 0.0.0.0 fafhoafouehfuh.su
-0.0.0.0 fairyqueenstore.com
+0.0.0.0 fast.rentaroom.ml
 0.0.0.0 fastsoft.onlinedown.net
 0.0.0.0 fazi.pl
 0.0.0.0 fenoma.net
 0.0.0.0 fidiag.kymco.com
+0.0.0.0 fifa555easy.329263.com
 0.0.0.0 figuig.net
 0.0.0.0 fileco.jobkorea.co.kr
 0.0.0.0 filen3.utengine.co.kr
@@ -286,6 +303,7 @@
 0.0.0.0 foodbooktv.com
 0.0.0.0 fordlamdong.com.vn
 0.0.0.0 foreverprecious.org
+0.0.0.0 foxfennecs.com
 0.0.0.0 frin.ng
 0.0.0.0 fte.m.dodo52.com
 0.0.0.0 ftpcnc-p2sp.pconline.com.cn
@@ -293,7 +311,6 @@
 0.0.0.0 funletters.net
 0.0.0.0 funpartyrent.com
 0.0.0.0 futuregraphics.com.ar
-0.0.0.0 futurodelasciudades.org
 0.0.0.0 g0ogle.free.fr
 0.0.0.0 gainsdirectory.com
 0.0.0.0 galuhtea.com
@@ -308,7 +325,10 @@
 0.0.0.0 germistonmiraclecentre.co.za
 0.0.0.0 ghislain.dartois.pagesperso-orange.fr
 0.0.0.0 ghwls44.gabia.io
+0.0.0.0 gimscompany.com
 0.0.0.0 glitzygal.net
+0.0.0.0 globaleuropeans.com
+0.0.0.0 gmassurance.fr
 0.0.0.0 gnimelf.net
 0.0.0.0 go.xsuad.com
 0.0.0.0 gocanada.vn
@@ -318,12 +338,11 @@
 0.0.0.0 granportale.com.br
 0.0.0.0 green100.cn
 0.0.0.0 greenleaveperu.com
-0.0.0.0 greindustry.com
 0.0.0.0 gssgroups.com
-0.0.0.0 gstat.dondyablo.com
 0.0.0.0 gx-10012947.file.myqcloud.com
 0.0.0.0 habbotips.free.fr
 0.0.0.0 hagebakken.no
+0.0.0.0 halcat.com
 0.0.0.0 hanaphoto.co.kr
 0.0.0.0 handrush.com
 0.0.0.0 hanoihub.vn
@@ -331,20 +350,21 @@
 0.0.0.0 hdxa.net
 0.0.0.0 healtina.com
 0.0.0.0 heavenif.co.za
-0.0.0.0 hediye-internet.site
-0.0.0.0 hediyegapsinternet.com
+0.0.0.0 hediyem20gb-internet.org
 0.0.0.0 hellomessager.com
+0.0.0.0 herrfischer.me
 0.0.0.0 hfsoftware.cl
 0.0.0.0 hingcheong.hk
 0.0.0.0 hldschool.com
 0.0.0.0 hmbwgroup.com
+0.0.0.0 hmpmall.co.kr
 0.0.0.0 hoayeuthuong-my.sharepoint.com
 0.0.0.0 hostzaa.com
 0.0.0.0 hotart.co.nz
 0.0.0.0 hotel-le-relais-des-moulins.com
 0.0.0.0 housewifes.co
+0.0.0.0 how.ph
 0.0.0.0 hqsistemas.com.ar
-0.0.0.0 hseda.com
 0.0.0.0 hsmwebapp.com
 0.0.0.0 htxl.cn
 0.0.0.0 huishuren.nu
@@ -372,6 +392,7 @@
 0.0.0.0 iremart.es
 0.0.0.0 isso.ps
 0.0.0.0 itd.m.dodo52.com
+0.0.0.0 itohukuk.com
 0.0.0.0 itsnixielou.com
 0.0.0.0 ixlonbcc.com
 0.0.0.0 izu.co.jp
@@ -379,10 +400,11 @@
 0.0.0.0 jamiekaylive.com
 0.0.0.0 jansen-heesch.nl
 0.0.0.0 janvierassocies.fr
-0.0.0.0 jaservicioscontables.casteviajes.com
 0.0.0.0 javatank.ru
 0.0.0.0 jcedu.org
 0.0.0.0 jessymart.flexyhub.com
+0.0.0.0 jhorapatarastana.xyz
+0.0.0.0 jjjexx.329263.com
 0.0.0.0 jmtc.91756.cn
 0.0.0.0 jointings.org
 0.0.0.0 jonpetesharefile.com
@@ -399,6 +421,7 @@
 0.0.0.0 jzny.com.cn
 0.0.0.0 k.ludong.tv
 0.0.0.0 k3.etfiber.net
+0.0.0.0 kabiru.ru
 0.0.0.0 kachsurf.mylftv.com
 0.0.0.0 kamasu11.cafe24.com
 0.0.0.0 kanok.co.th
@@ -406,9 +429,10 @@
 0.0.0.0 karavantekstil.com
 0.0.0.0 kassohome.com.tr
 0.0.0.0 kazanin20gbturkiye.com
-0.0.0.0 kazanturkiye20gb.com
 0.0.0.0 kdsp.co.kr
+0.0.0.0 keckarangdadap.pekalongankab.go.id
 0.0.0.0 kejpa.com
+0.0.0.0 kgfs3.329263.com
 0.0.0.0 khan-associates.net
 0.0.0.0 khunnapap.com
 0.0.0.0 kiaowadubai.com
@@ -416,10 +440,12 @@
 0.0.0.0 kjbm9.mof.gov.cn
 0.0.0.0 kleinendeli.co.za
 0.0.0.0 knightsbridgeenergy.com.ng
+0.0.0.0 kolibri-fabrika.ru
 0.0.0.0 koppemotta.com.br
 0.0.0.0 koralli.if.ua
 0.0.0.0 kqq.kz
 0.0.0.0 kristofferdaniels.com
+0.0.0.0 kupaliskohs.sk
 0.0.0.0 kuznetsov.ca
 0.0.0.0 kwanfromhongkong.com
 0.0.0.0 kwikomfi-lab.com
@@ -428,7 +454,6 @@
 0.0.0.0 lammaixep.com
 0.0.0.0 landmarktreks.com
 0.0.0.0 langyabbs.05yun.cn
-0.0.0.0 lastmorgoth.com
 0.0.0.0 lcfurtado.com.br
 0.0.0.0 ld.mediaget.com
 0.0.0.0 learnbuddy.com
@@ -449,6 +474,7 @@
 0.0.0.0 lsyr.net
 0.0.0.0 lt02.datacomspecialists.net
 0.0.0.0 luatminhthuan.com
+0.0.0.0 luckytriumph.com
 0.0.0.0 luisnacht.com.ar
 0.0.0.0 luyalu.net
 0.0.0.0 lvr.samacomplus.com
@@ -484,6 +510,7 @@
 0.0.0.0 miaoshuosh.com
 0.0.0.0 micahproducts.com
 0.0.0.0 micalle.com.au
+0.0.0.0 milebgd.mycpanel.rs
 0.0.0.0 mirror.mypage.sk
 0.0.0.0 mis.nbcc.ac.th
 0.0.0.0 misterson.com
@@ -491,12 +518,14 @@
 0.0.0.0 mkk09.kr
 0.0.0.0 mkontakt.az
 0.0.0.0 mlbfreestream.gq
+0.0.0.0 mlbfreestream.ml
 0.0.0.0 mmc.ru.com
 0.0.0.0 mobiadnews.com
 0.0.0.0 mobilier-modern.ro
 0.0.0.0 mochandmade.us
+0.0.0.0 modcloudserver.eu
 0.0.0.0 moha-group.com
-0.0.0.0 mononet.lv
+0.0.0.0 moinmo.de
 0.0.0.0 moscow11.at
 0.0.0.0 mountveederwines.com
 0.0.0.0 moyo.co.kr
@@ -506,13 +535,13 @@
 0.0.0.0 mteng.mmj7.com
 0.0.0.0 mtfelektroteknik.com
 0.0.0.0 mueblesjcp.cl
+0.0.0.0 mv360.net
 0.0.0.0 mvb.kz
 0.0.0.0 mxpiqw.am.files.1drv.com
 0.0.0.0 myexpertca.in
 0.0.0.0 myhood.cl
 0.0.0.0 myo.net.au
 0.0.0.0 myofficeplus.com
-0.0.0.0 myonlinepokiesblog.com
 0.0.0.0 mytex.pe
 0.0.0.0 mytrains.net
 0.0.0.0 mywp.asia
@@ -532,7 +561,6 @@
 0.0.0.0 newxing.com
 0.0.0.0 nfbio.com
 0.0.0.0 ngoaingu.garage.com.vn
-0.0.0.0 nilemixitupd.biz.pl
 0.0.0.0 nkdhub.com
 0.0.0.0 nofound.000webhostapp.com
 0.0.0.0 nprg.ru
@@ -543,11 +571,11 @@
 0.0.0.0 obnova.zzux.com
 0.0.0.0 obseques-conseils.com
 0.0.0.0 ohe.ie
+0.0.0.0 oknoplastik.sk
 0.0.0.0 omega.az
 0.0.0.0 omsk-osma.ru
 0.0.0.0 omuzgor.tj
 0.0.0.0 onestin.ro
-0.0.0.0 onyourmarkmindsetgo.com
 0.0.0.0 openclient.sroinfo.com
 0.0.0.0 operasanpiox.bravepages.com
 0.0.0.0 ophtalmiccenter.com
@@ -566,6 +594,7 @@
 0.0.0.0 p30qom.ir
 0.0.0.0 p500.mon-application.com
 0.0.0.0 pack301.bravepages.com
+0.0.0.0 pakdesighee.com
 0.0.0.0 palochusvet.szm.com
 0.0.0.0 partyflix.net
 0.0.0.0 pat4.jetos.com
@@ -575,20 +604,26 @@
 0.0.0.0 patch3.99ddd.com
 0.0.0.0 patrickchan-hk.net
 0.0.0.0 pawel-sikora.pl
+0.0.0.0 pcexperts.co.za
 0.0.0.0 pcginsure.com
 0.0.0.0 pcsoori.com
 0.0.0.0 pedidoslalacteo.com.ar
+0.0.0.0 peterssandmay.com
+0.0.0.0 petromltd.com
 0.0.0.0 ph4s.ru
 0.0.0.0 phamchilong.com
 0.0.0.0 phudieusongma.com
+0.0.0.0 phuphamca.com
 0.0.0.0 piapendet.com
 0.0.0.0 pink99.com
 0.0.0.0 platisher.xyz
+0.0.0.0 pmguide.net
 0.0.0.0 podiatristlansdale.com
 0.0.0.0 podrska.com.hr
 0.0.0.0 ponto50.com.br
 0.0.0.0 poolbook.ir
 0.0.0.0 ppl.ac.id
+0.0.0.0 prepaenunsoloexamen.academiagalileoac.com
 0.0.0.0 probost.cz
 0.0.0.0 profitcoach.net
 0.0.0.0 prosoc.nl
@@ -611,11 +646,11 @@
 0.0.0.0 readytalk.github.io
 0.0.0.0 real-song.tjmedia.co.kr
 0.0.0.0 recommendservices.com
-0.0.0.0 redeemerssports.com
 0.0.0.0 redesoftdownload.info
 0.0.0.0 rekspirit.ru
 0.0.0.0 renimin.mymom.info
 0.0.0.0 renovanorte.com
+0.0.0.0 rentaroom.ml
 0.0.0.0 res.uf1.cn
 0.0.0.0 ret.space
 0.0.0.0 rezaazizi.ir
@@ -628,13 +663,16 @@
 0.0.0.0 rollingmill.in
 0.0.0.0 rollscar.pk
 0.0.0.0 rossogato.com
+0.0.0.0 royalplusmobile.ir
 0.0.0.0 ruisgood.ru
 0.0.0.0 s.51shijuan.com
 0.0.0.0 s.kk30.com
+0.0.0.0 s14b.91danji.com
+0.0.0.0 s14b.groundyun.cn
 0.0.0.0 sabiupd.compress.to
 0.0.0.0 saboorjaam.ir
 0.0.0.0 sabupda.vizvaz.com
-0.0.0.0 sahathaikasetpan.com
+0.0.0.0 saglikodemelerinial.org
 0.0.0.0 salvation24.com
 0.0.0.0 salvationbd.com
 0.0.0.0 sandovalgraphics.com
@@ -648,11 +686,11 @@
 0.0.0.0 selekture.com
 0.0.0.0 selfuseproperty.com
 0.0.0.0 selvikoyunciftligi.com
-0.0.0.0 sendeyararlanturkiye20gb.com
 0.0.0.0 serpentrising.com
 0.0.0.0 servicemhkd.myvnc.com
 0.0.0.0 servicemhkd80.myvnc.com
 0.0.0.0 serviciosinfoware.cl
+0.0.0.0 sexybaccarat.329263.com
 0.0.0.0 sfoodfeedf.org
 0.0.0.0 sgm.pc6.com
 0.0.0.0 shacked.webdepot.co.il
@@ -661,6 +699,7 @@
 0.0.0.0 share.dmca.gripe
 0.0.0.0 sharjahas.com
 0.0.0.0 shembefoundation.com
+0.0.0.0 shopjumpn.ch
 0.0.0.0 simlun.com.ar
 0.0.0.0 sinastorage.cn
 0.0.0.0 sindicato1ucm.cl
@@ -683,6 +722,7 @@
 0.0.0.0 sota-france.fr
 0.0.0.0 souldancing.cn
 0.0.0.0 speed.myz.info
+0.0.0.0 sportshlive.xyz
 0.0.0.0 sportstrem.gq
 0.0.0.0 spurstogo.com
 0.0.0.0 sputnikmailru.cdnmail.ru
@@ -693,15 +733,16 @@
 0.0.0.0 sslv3.at
 0.0.0.0 staging.popclusive.asia
 0.0.0.0 starcountry.net
+0.0.0.0 static.ilclock.com
 0.0.0.0 static.topxgun.com
+0.0.0.0 stationaryhome.com
 0.0.0.0 stecit.nl
-0.0.0.0 steelbuildings.com
 0.0.0.0 stevewalker.com.au
 0.0.0.0 story-maker.jp
+0.0.0.0 stubbackup.ru
 0.0.0.0 suc9898.com
 0.0.0.0 suncity116.com
 0.0.0.0 support.clz.kr
-0.0.0.0 supportalaskausa.org
 0.0.0.0 sv.pvroe.com
 0.0.0.0 svkacademy.com
 0.0.0.0 svn.cc.jyu.fi
@@ -710,7 +751,6 @@
 0.0.0.0 symanreni.mysecondarydns.com
 0.0.0.0 szxypt.com
 0.0.0.0 t.honker.info
-0.0.0.0 tandenblekenhoofddorp.nl
 0.0.0.0 taraward.com
 0.0.0.0 taxpos.com
 0.0.0.0 tcy.198424.com
@@ -732,21 +772,21 @@
 0.0.0.0 theprestige.ro
 0.0.0.0 theptiendat.com
 0.0.0.0 therecruiter.io
-0.0.0.0 thesecuritysoftwarescannerindustrgreat.duckdns.org
-0.0.0.0 thornadops.com
 0.0.0.0 thosewebbs.com
+0.0.0.0 thuong.bidiworks.com
 0.0.0.0 tianangdep.com
+0.0.0.0 tianmaouae.com
 0.0.0.0 tianzi8.cn
 0.0.0.0 tibinst.mefound.com
 0.0.0.0 tibok.lflink.com
 0.0.0.0 ticte.in
 0.0.0.0 timlinger.com
+0.0.0.0 tinckorm.beget.tech
 0.0.0.0 tmhfashionhouse.co.za
 0.0.0.0 toe.polinema.ac.id
 0.0.0.0 tonghopgia.net
 0.0.0.0 tonydong.com
 0.0.0.0 tonyzone.com
-0.0.0.0 treefighter.org
 0.0.0.0 tsd.jxwan.com
 0.0.0.0 tsredco.telangana.gov.in
 0.0.0.0 tulli.info
@@ -755,6 +795,7 @@
 0.0.0.0 tup.com.cn
 0.0.0.0 tutuler.com
 0.0.0.0 uc-56.ru
+0.0.0.0 ucto-id.cz
 0.0.0.0 ufabet168168.329263.com
 0.0.0.0 ugc.wegame.com.cn
 0.0.0.0 ultimatelamborghiniexperience.com
@@ -769,10 +810,14 @@
 0.0.0.0 update.iwang8.com
 0.0.0.0 update.my.99.com
 0.0.0.0 updateflashplayer.link
+0.0.0.0 upendiveterinariovalencia.es
 0.0.0.0 urgentmessage.org
+0.0.0.0 usapglobal.usapglobal.org
 0.0.0.0 users.skynet.be
 0.0.0.0 uskeba.ca
 0.0.0.0 usmadetshirts.com
+0.0.0.0 uyen.vn
+0.0.0.0 uygulamalarim-hediyeinternet.org
 0.0.0.0 vadyur.github.io
 0.0.0.0 vaeqpu.329263.com
 0.0.0.0 valedchap.ir
@@ -781,12 +826,12 @@
 0.0.0.0 vaziri.echobit.ir
 0.0.0.0 vdotrip.blog
 0.0.0.0 vfocus.net
+0.0.0.0 vibicloud.com
 0.0.0.0 videoswebcammsn.free.fr
 0.0.0.0 vietducbio.com
 0.0.0.0 vigilar.com.br
 0.0.0.0 vip.recommendedtoyoo.com
 0.0.0.0 virustreatments.empeeevents.com
-0.0.0.0 visagepk.com
 0.0.0.0 visualdata.ru
 0.0.0.0 vitinhvnt.com
 0.0.0.0 vitromed.ro
@@ -796,9 +841,9 @@
 0.0.0.0 wakecar.cn
 0.0.0.0 wangtong7.siweidaoxiang.com
 0.0.0.0 wangzonghang.cn
+0.0.0.0 wap.dosame.com
 0.0.0.0 ware.ru
 0.0.0.0 warriorllc.com
-0.0.0.0 waterosmo.com
 0.0.0.0 wbd.5636.com
 0.0.0.0 wbkmt.com
 0.0.0.0 webarte.com.br
@@ -815,17 +860,19 @@
 0.0.0.0 woodsytech.com
 0.0.0.0 wp.quercus.palustris.dk
 0.0.0.0 wq.feiniaoai.cn
-0.0.0.0 writesofpassage.co.za
 0.0.0.0 wsg.com.sg
 0.0.0.0 wt8.siweidaoxiang.com
 0.0.0.0 wt9.siweidaoxiang.com
 0.0.0.0 wwealthllc.com
+0.0.0.0 www-ecimer-uygulamayukleme-govtr.com
 0.0.0.0 www2.recepty5.com
 0.0.0.0 x2vn.com
 0.0.0.0 xia.vzboot.com
 0.0.0.0 xiaidown.com
 0.0.0.0 xiegushi.cn
 0.0.0.0 xirfad.com
+0.0.0.0 xn--d1aciabhfsdfe0a7e3b.xn--p1acf
+0.0.0.0 xn--transfgran-mgbbb600b.ro
 0.0.0.0 xtremeforumz.com
 0.0.0.0 xuhss.com
 0.0.0.0 xxwl.kuaiyunds.com
diff --git a/urlhaus-filter-hosts.txt b/urlhaus-filter-hosts.txt
index c3d76816..bdc5c958 100644
--- a/urlhaus-filter-hosts.txt
+++ b/urlhaus-filter-hosts.txt
@@ -1,5 +1,5 @@
 # Title: abuse.ch URLhaus Malicious Hosts Blocklist
-# Updated: Thu, 30 Apr 2020 12:09:30 UTC
+# Updated: Fri, 01 May 2020 00:10:35 UTC
 # Repo: https://gitlab.com/curben/urlhaus-filter
 # License: https://creativecommons.org/publicdomain/zero/1.0/
 # Source: https://urlhaus.abuse.ch/api/
@@ -2342,6 +2342,7 @@
 0.0.0.0 adnaan.website
 0.0.0.0 adnc.cn
 0.0.0.0 adnetss.com
+0.0.0.0 adnquocte.com
 0.0.0.0 adoam.pw
 0.0.0.0 adoam.site
 0.0.0.0 adobe-flash-player.pro
@@ -5771,6 +5772,7 @@
 0.0.0.0 arifcagan.com
 0.0.0.0 arifhajj.umrahsoftware.co.uk
 0.0.0.0 arifolmancohen.com
+0.0.0.0 arifrehan.xyz
 0.0.0.0 arifzena.com
 0.0.0.0 arigato.com.vn
 0.0.0.0 arigbabuwogalleria.com
@@ -7173,6 +7175,7 @@
 0.0.0.0 averson.by
 0.0.0.0 averybit.com
 0.0.0.0 aveslor.com
+0.0.0.0 avestor.uz
 0.0.0.0 avfphoto.com
 0.0.0.0 avgsupport.info
 0.0.0.0 avheaven.icu
@@ -7460,6 +7463,7 @@
 0.0.0.0 azdhj.com
 0.0.0.0 azedizayn.com
 0.0.0.0 azeevatech.in
+0.0.0.0 azenzatowers.com
 0.0.0.0 azeritibb.pe.hu
 0.0.0.0 azerothland.com
 0.0.0.0 azeta.xyz
@@ -9477,6 +9481,7 @@
 0.0.0.0 billerimpex.com
 0.0.0.0 billeter.net
 0.0.0.0 billfritzjr.com
+0.0.0.0 billieellish.org
 0.0.0.0 billing.wpkami.com
 0.0.0.0 billingsupport.ru
 0.0.0.0 billingtonbarristers.com
@@ -11483,6 +11488,7 @@
 0.0.0.0 bucharest-independent-escort.com
 0.0.0.0 bucketlistadvtours.com
 0.0.0.0 bucketlistrecipes.com
+0.0.0.0 bucketstrong.s3-us-west-1.amazonaws.com
 0.0.0.0 buckeyeoptical.com
 0.0.0.0 buckinghamandlloyds.com
 0.0.0.0 buckleman.co.id
@@ -12285,6 +12291,7 @@
 0.0.0.0 can-do-property.co.uk
 0.0.0.0 can-doelectric.com
 0.0.0.0 can-media.de
+0.0.0.0 canaan.io
 0.0.0.0 canaccordgenuity.bluematrix.com
 0.0.0.0 canacofactura.com.mx
 0.0.0.0 canadabestonline.com
@@ -16656,6 +16663,7 @@
 0.0.0.0 currencyexchanger.com.ng
 0.0.0.0 currenteventsmemes.com
 0.0.0.0 curs.neagoeandrei.com
+0.0.0.0 cursdictie.ro
 0.0.0.0 curso.domeducacional.com
 0.0.0.0 curso.ssthno.webdesignssw.cl
 0.0.0.0 cursoaphonline.com.br
@@ -17335,6 +17343,7 @@
 0.0.0.0 data.nanhai.cn
 0.0.0.0 data.over-blog-kiwi.com
 0.0.0.0 data.yx1999.com
+0.0.0.0 data4i.com
 0.0.0.0 data4u.kay-tech.info
 0.0.0.0 databacknow.com
 0.0.0.0 database.z-flooring.com
@@ -17446,6 +17455,7 @@
 0.0.0.0 davidaluke.com
 0.0.0.0 davidcizek.cz
 0.0.0.0 davidcjones.ca
+0.0.0.0 davidd47.sg-host.com
 0.0.0.0 davidedigiorgio360.com
 0.0.0.0 davidemarocco.com
 0.0.0.0 davidephoto.it
@@ -18987,6 +18997,7 @@
 0.0.0.0 dicarmo.com
 0.0.0.0 dicebot-game.com
 0.0.0.0 dichiara.com.ar
+0.0.0.0 dichthuatsnu.com
 0.0.0.0 dichvuchupanhsanpham.com
 0.0.0.0 dichvucong.vn
 0.0.0.0 dichvucuoi0f16.toannang.xyz
@@ -20183,6 +20194,7 @@
 0.0.0.0 dotlineplane.co.th
 0.0.0.0 dotnetdays.ro
 0.0.0.0 dotnetebusiness.com
+0.0.0.0 dotpay.id
 0.0.0.0 dotpos.in
 0.0.0.0 dotproject.org
 0.0.0.0 dotshopify.com
@@ -20427,6 +20439,7 @@
 0.0.0.0 dr-popa.com
 0.0.0.0 dr-prof-sachidanandasinha-dentalclinic.com
 0.0.0.0 dr-recella-global.com
+0.0.0.0 dr080.com
 0.0.0.0 dr702.com
 0.0.0.0 draaiercnc.nl
 0.0.0.0 draaiorgel.org
@@ -22792,6 +22805,7 @@
 0.0.0.0 enilegho.com.br
 0.0.0.0 enis1130.000webhostapp.com
 0.0.0.0 eniture-qa.com
+0.0.0.0 enixc.com
 0.0.0.0 eniyionfirma.com
 0.0.0.0 enjoy-aquaristik.de
 0.0.0.0 enjoy-kobac.com
@@ -23656,6 +23670,7 @@
 0.0.0.0 evdekal20kapgb.com
 0.0.0.0 evdekalan20gbkazaniyor.com
 0.0.0.0 evdekalana20gb-hehe.com
+0.0.0.0 evdekaldiye20-gb.com
 0.0.0.0 evdekaltuekiyesaglik.com
 0.0.0.0 evdekl20gbx.com
 0.0.0.0 evdyn.com.sg
@@ -26221,6 +26236,7 @@
 0.0.0.0 freepaidcourses.com
 0.0.0.0 freepalestinemovement.org
 0.0.0.0 freephenix.cn
+0.0.0.0 freeprofessionalwebhosting.com
 0.0.0.0 freeselfstoragequote.com
 0.0.0.0 freeslits.net
 0.0.0.0 freesoft.website
@@ -28155,6 +28171,7 @@
 0.0.0.0 gmann.blog
 0.0.0.0 gmann.info
 0.0.0.0 gmann.photos
+0.0.0.0 gmassurance.fr
 0.0.0.0 gmc2.ru
 0.0.0.0 gmcoflouisville.com
 0.0.0.0 gmcostruzionieservizi.com
@@ -30330,6 +30347,7 @@
 0.0.0.0 hediye-internet.site
 0.0.0.0 hediyegapsinternet.com
 0.0.0.0 hediyeinternetpaketim.com
+0.0.0.0 hediyem20gb-internet.org
 0.0.0.0 hediyenkolay.com
 0.0.0.0 hedrasl.com
 0.0.0.0 hedwise.com
@@ -30569,6 +30587,7 @@
 0.0.0.0 herratech.com
 0.0.0.0 herrenmode.tk
 0.0.0.0 herrent.com
+0.0.0.0 herrfischer.me
 0.0.0.0 herrgaardstak.se
 0.0.0.0 herryjoa.mireene.com
 0.0.0.0 herscare.net
@@ -31708,6 +31727,7 @@
 0.0.0.0 htmediagroups.com
 0.0.0.0 html.nichost.ru
 0.0.0.0 htmlget.com
+0.0.0.0 htn13.com
 0.0.0.0 htnieuw.hazenbergtimmerwerken.nl
 0.0.0.0 htpinvestment.com.vn
 0.0.0.0 htt.nu
@@ -34454,6 +34474,7 @@
 0.0.0.0 itrc.gov.co
 0.0.0.0 itrenaissance.com
 0.0.0.0 itreni.net
+0.0.0.0 itrigger.cn
 0.0.0.0 itroj.ir
 0.0.0.0 its-fondazionearchimede.it
 0.0.0.0 its-oh.net
@@ -35244,6 +35265,7 @@
 0.0.0.0 jhelt.net
 0.0.0.0 jhom.in
 0.0.0.0 jhonhusein.com
+0.0.0.0 jhorapatarastana.xyz
 0.0.0.0 jhrt185.com
 0.0.0.0 jhssourcingltd.com
 0.0.0.0 jhsstudio.com.br
@@ -37216,6 +37238,7 @@
 0.0.0.0 khotanperfume.com
 0.0.0.0 khotawa.com
 0.0.0.0 khothietbivesinh24h.com
+0.0.0.0 khoztrip.ir
 0.0.0.0 khp89wc.com
 0.0.0.0 khpm.ir
 0.0.0.0 khrystyna-verkholiak.com
@@ -37860,6 +37883,7 @@
 0.0.0.0 kolejmontlari.com
 0.0.0.0 kolejnicky.cz
 0.0.0.0 kolejskilmentari.edu.my
+0.0.0.0 kolibri-fabrika.ru
 0.0.0.0 kolibristattoo.lt
 0.0.0.0 kolkatacleanair.in
 0.0.0.0 koll-partner.tax
@@ -38096,6 +38120,7 @@
 0.0.0.0 kpodata.com
 0.0.0.0 kpogroup.bo
 0.0.0.0 kpopstarz.kienthucsong.info
+0.0.0.0 kposter.alexandruplesea.ro
 0.0.0.0 kppspgrojec.internetdsl.pl
 0.0.0.0 kprsolutions.com
 0.0.0.0 kpss.ir
@@ -43473,6 +43498,7 @@
 0.0.0.0 mecanique-vivante.com
 0.0.0.0 mecanizadosgurrutxaga.com
 0.0.0.0 mecatronica.ifc-riodosul.edu.br
+0.0.0.0 mecbox.cn
 0.0.0.0 mecenat.com.ua
 0.0.0.0 mecflui.com.br
 0.0.0.0 mecgwl.ac.in
@@ -44456,6 +44482,7 @@
 0.0.0.0 milczanowska.com
 0.0.0.0 mildibsilgip.com
 0.0.0.0 mileageindia.com
+0.0.0.0 milebgd.mycpanel.rs
 0.0.0.0 milehighffa.com
 0.0.0.0 milehighhomebuyers.com
 0.0.0.0 milena-koenig.de
@@ -45239,6 +45266,7 @@
 0.0.0.0 moigioi.info
 0.0.0.0 moikihit.ru
 0.0.0.0 moinetfils.com
+0.0.0.0 moinmo.de
 0.0.0.0 mois.com.br
 0.0.0.0 moiselektronik.com
 0.0.0.0 moisesdavid.com
@@ -46030,6 +46058,8 @@
 0.0.0.0 muhammadshahid.techsandooq.com
 0.0.0.0 muhanoiss6.net
 0.0.0.0 muhendismeraki.com
+0.0.0.0 muhtesem20gb.xyz
+0.0.0.0 muhtessemramazan20gb.com
 0.0.0.0 muidokan.com
 0.0.0.0 muikarellep.band
 0.0.0.0 muilyt.com
@@ -46444,6 +46474,8 @@
 0.0.0.0 myimmigrationlawmarketingpartner.com
 0.0.0.0 myinfoart.online
 0.0.0.0 myinternetjobs.com
+0.0.0.0 myintromationsz.win
+0.0.0.0 myintromationszcj.win
 0.0.0.0 myjedesigns.com
 0.0.0.0 myjmcedu-my.sharepoint.com
 0.0.0.0 myjnia-samochodowa.com
@@ -47814,6 +47846,7 @@
 0.0.0.0 ngoinhadaquy.com
 0.0.0.0 ngoitruonghanhphuc.edu.vn
 0.0.0.0 ngomavibe.co.ke
+0.0.0.0 ngon10.com
 0.0.0.0 ngoshakarpura.online
 0.0.0.0 ngovietanh.com
 0.0.0.0 ngowebsite.developeratfiverr.in
@@ -51845,6 +51878,7 @@
 0.0.0.0 phuongnguyencutrinh.gov.vn
 0.0.0.0 phuongphamngulao.gov.vn
 0.0.0.0 phuongphan.co
+0.0.0.0 phuphamca.com
 0.0.0.0 phusonland.vn
 0.0.0.0 phutung24h.vn
 0.0.0.0 phy.mbstu.ac.bd
@@ -56592,6 +56626,7 @@
 0.0.0.0 rock-creek.com
 0.0.0.0 rockcanyonoutfitters.com
 0.0.0.0 rockenstein-gmbh.de
+0.0.0.0 rockersdolphin.co.za
 0.0.0.0 rocket-tutor.com
 0.0.0.0 rocketbagger.com
 0.0.0.0 rocketx.fun
@@ -56972,6 +57007,7 @@
 0.0.0.0 rrexkmwi.yjdata.me
 0.0.0.0 rrglobaltrade.com
 0.0.0.0 rrgodshsf.ug
+0.0.0.0 rrinteriores.neoistone.site
 0.0.0.0 rrmedical-gmbh.com
 0.0.0.0 rronrestaurant.com
 0.0.0.0 rroun-nourr.ga
@@ -57599,6 +57635,7 @@
 0.0.0.0 saglikgoalapp.site
 0.0.0.0 saglikliapp.live
 0.0.0.0 sagliklibedenim.com
+0.0.0.0 saglikodemelerinial.org
 0.0.0.0 sagrathi.com
 0.0.0.0 sagunpapers.com
 0.0.0.0 sahabathasyim.com
@@ -59324,7 +59361,9 @@
 0.0.0.0 setra.ir
 0.0.0.0 setrals.net
 0.0.0.0 setrals.website
+0.0.0.0 setsd.xyz
 0.0.0.0 setseta.com
+0.0.0.0 setss.xyz
 0.0.0.0 settecieli.com
 0.0.0.0 setticonference.it
 0.0.0.0 setup.co.il
@@ -59962,6 +60001,7 @@
 0.0.0.0 shopinsta.in
 0.0.0.0 shopinterbuild.com
 0.0.0.0 shopiqtoys.com
+0.0.0.0 shopjumpn.ch
 0.0.0.0 shopkaro.apps19.com
 0.0.0.0 shopkimhuyen.com
 0.0.0.0 shopkinhdoanh.com
@@ -60465,6 +60505,7 @@
 0.0.0.0 sipmanagement-my.sharepoint.com
 0.0.0.0 siprev.net.br
 0.0.0.0 siragehad.com
+0.0.0.0 sirajaoloan.com
 0.0.0.0 sirajhummus.com
 0.0.0.0 siranagi.sakura.ne.jp
 0.0.0.0 sirenas-spa.com
@@ -61092,6 +61133,7 @@
 0.0.0.0 smokesome.xyz
 0.0.0.0 smoketravkueveryday.tech
 0.0.0.0 smokingpot.xyz
+0.0.0.0 smollmart.com
 0.0.0.0 smoltest.tk
 0.0.0.0 smoon.co.kr
 0.0.0.0 smooth-moves.com
@@ -62302,6 +62344,7 @@
 0.0.0.0 srtms.in
 0.0.0.0 srujanovision.com
 0.0.0.0 srv-15.directserver.us
+0.0.0.0 srv-file9.gofile.io
 0.0.0.0 srv7.computerkolkata.com
 0.0.0.0 srv77956.ht-test.ru
 0.0.0.0 srv9.computerkolkata.com
@@ -64598,6 +64641,7 @@
 0.0.0.0 tapretriat.com
 0.0.0.0 taproomagogo.com
 0.0.0.0 tapsglobalsolutions.com
+0.0.0.0 tapss.com.br
 0.0.0.0 tapsu.in
 0.0.0.0 taptagtees.com
 0.0.0.0 tapucreative.com
@@ -65007,6 +65051,7 @@
 0.0.0.0 technologicznie.pl
 0.0.0.0 technologiebeloeil.com
 0.0.0.0 technologielaurendeau.com
+0.0.0.0 technology-bd.com
 0.0.0.0 technologyadvantages.000webhostapp.com
 0.0.0.0 technologyaroundu.com
 0.0.0.0 technologycomponents.com
@@ -67497,6 +67542,7 @@
 0.0.0.0 tourderichelieu.com
 0.0.0.0 tourdezsokolat.hu
 0.0.0.0 tourecoz.in
+0.0.0.0 tourenhelicoptero.com
 0.0.0.0 tourguy.com
 0.0.0.0 touring-athens.com
 0.0.0.0 touring.woolston.com.au
@@ -67643,6 +67689,7 @@
 0.0.0.0 tradingmatic.youralgo.com
 0.0.0.0 tradingpartneredi.com
 0.0.0.0 tradingstyle.net
+0.0.0.0 tradingwithharmony.com
 0.0.0.0 traditionsfinegifts.com
 0.0.0.0 tradutorgeek.com
 0.0.0.0 traektoria.com
@@ -68709,6 +68756,7 @@
 0.0.0.0 uconthailand.com
 0.0.0.0 ucrealtors.com
 0.0.0.0 ucrealtors.net
+0.0.0.0 ucretsiz20gbturkiye.com
 0.0.0.0 ucrnn.org
 0.0.0.0 ucstandart.ru
 0.0.0.0 ucto-id.cz
@@ -69449,6 +69497,7 @@
 0.0.0.0 usamashakeel.com
 0.0.0.0 usamovers.net
 0.0.0.0 usanin.info
+0.0.0.0 usapglobal.usapglobal.org
 0.0.0.0 usaselfstoragenetwork.com
 0.0.0.0 usastoragenetwork.com
 0.0.0.0 usax138.oicp.net
@@ -69580,9 +69629,11 @@
 0.0.0.0 uyaiblog.com
 0.0.0.0 uycqawua.applekid.cn
 0.0.0.0 uydu.antalyaelektrikariza.net
+0.0.0.0 uyen.vn
 0.0.0.0 uyencometics.bmt.city
 0.0.0.0 uyf.com.ua
 0.0.0.0 uyghurchem.com
+0.0.0.0 uygulamalarim-hediyeinternet.org
 0.0.0.0 uyijbmxxm8874337.gameofthrones05.site
 0.0.0.0 uyikjtn.eu
 0.0.0.0 uytr5e.imtbreds.com
@@ -70056,6 +70107,7 @@
 0.0.0.0 vendacomcelular.com.br
 0.0.0.0 vendaiot.ir
 0.0.0.0 vendameucarroo.com
+0.0.0.0 vendeaki.online
 0.0.0.0 vendem.com.br
 0.0.0.0 vendere-su-internet.com
 0.0.0.0 vendermicasaenbarcelona.com
@@ -70299,6 +70351,7 @@
 0.0.0.0 vibescyahdone.com
 0.0.0.0 vibeshirt.de
 0.0.0.0 vibetronic.id
+0.0.0.0 vibicloud.com
 0.0.0.0 vibni.dk
 0.0.0.0 vibor-anapa.ru
 0.0.0.0 vibramarketing.cl
@@ -73110,6 +73163,7 @@
 0.0.0.0 www-88xyxy-com.info
 0.0.0.0 www-bsac.eecs.berkeley.edu
 0.0.0.0 www-dev.e4healthinc.com
+0.0.0.0 www-ecimer-uygulamayukleme-govtr.com
 0.0.0.0 www-grupotv1-com-br.azurclaireritter.cmail-oln040092069015.outbound.protection.sketchwefair-watduoliprudential.com.watchdogdns.duckdns.org
 0.0.0.0 www.smart-eg.com
 0.0.0.0 www022284.com
@@ -73197,6 +73251,7 @@
 0.0.0.0 xacrosoft.com
 0.0.0.0 xact.ma
 0.0.0.0 xadrezgigante.com.br
+0.0.0.0 xaergtcrcd.info
 0.0.0.0 xagency.co
 0.0.0.0 xaidol.com
 0.0.0.0 xajfgz.com
@@ -73681,6 +73736,7 @@
 0.0.0.0 xn--cryptohoppe-bec.com
 0.0.0.0 xn--czstochowadlazwierzt-mkc63b.pl
 0.0.0.0 xn--d1achkaoe4a.xn--p1ai
+0.0.0.0 xn--d1aciabhfsdfe0a7e3b.xn--p1acf
 0.0.0.0 xn--d1ahebikdfcgr7jsa.xn--p1ai
 0.0.0.0 xn--d1ahjkdbhfjy4g.xn--p1ai
 0.0.0.0 xn--d1aiocodol6a8d.xn--p1ai
@@ -74627,6 +74683,7 @@
 0.0.0.0 yzmwh.com
 0.0.0.0 yzzqdz.com
 0.0.0.0 z-prava.ru
+0.0.0.0 z.loyaltyaboveall.com
 0.0.0.0 z.zz.ht
 0.0.0.0 z0451.net
 0.0.0.0 z0tt3l.de
diff --git a/urlhaus-filter-online.txt b/urlhaus-filter-online.txt
index 84ec9055..974db105 100644
--- a/urlhaus-filter-online.txt
+++ b/urlhaus-filter-online.txt
@@ -1,10 +1,11 @@
 ! Title: abuse.ch URLhaus Online Malicious URL Blocklist
-! Updated: Thu, 30 Apr 2020 12:09:30 UTC
+! Updated: Fri, 01 May 2020 00:10:35 UTC
 ! Expires: 1 day (update frequency)
 ! Repo: https://gitlab.com/curben/urlhaus-filter
 ! License: https://creativecommons.org/publicdomain/zero/1.0/
 ! Source: https://urlhaus.abuse.ch/api/
 0400msc.com
+1.11.132.252
 1.220.9.68
 1.226.176.21
 1.246.222.105
@@ -24,12 +25,14 @@
 1.246.222.249
 1.246.222.36
 1.246.222.38
+1.246.222.4
 1.246.222.41
 1.246.222.43
 1.246.222.44
 1.246.222.49
 1.246.222.62
 1.246.222.63
+1.246.222.69
 1.246.222.80
 1.246.222.83
 1.246.222.87
@@ -38,6 +41,7 @@
 1.246.223.109
 1.246.223.125
 1.246.223.126
+1.246.223.127
 1.246.223.130
 1.246.223.146
 1.246.223.15
@@ -79,10 +83,10 @@
 103.214.6.199
 103.221.254.130
 103.230.62.146
-103.234.226.133
 103.237.173.218
 103.240.249.121
 103.245.199.222
+103.247.217.147
 103.254.205.135
 103.255.235.219
 103.31.47.214
@@ -90,7 +94,6 @@
 103.51.249.64
 103.60.110.111
 103.76.20.197
-103.79.112.254
 103.80.210.9
 103.92.25.90
 103.92.25.95
@@ -104,7 +107,6 @@
 106.104.115.213
 106.105.197.111
 106.105.218.18
-106.110.107.180
 106.110.129.163
 106.110.69.24
 106.110.71.236
@@ -114,14 +116,12 @@
 106.124.188.160
 106.248.202.245
 107.158.154.88
-107.158.154.94
-107.158.154.99
+108.174.197.76
 108.190.31.236
 108.214.240.100
 108.220.3.201
 108.237.60.93
 108.77.246.129
-108.95.162.21
 109.104.197.153
 109.124.90.229
 109.167.200.82
@@ -129,11 +129,12 @@
 109.185.229.159
 109.185.26.178
 109.233.196.232
-109.248.58.238
 109.86.85.253
 109.88.185.119
 109.95.15.210
 109.96.57.246
+110.154.15.122
+110.154.250.225
 110.179.30.218
 110.182.107.42
 110.34.28.113
@@ -145,7 +146,6 @@
 110.74.209.190
 111.119.245.114
 111.184.156.73
-111.185.192.249
 111.185.227.170
 111.185.231.198
 111.185.235.13
@@ -163,21 +163,20 @@
 111.38.27.80
 111.38.30.47
 111.38.9.115
-111.40.79.79
+111.42.102.136
+111.42.102.149
+111.42.103.107
 111.42.103.45
 111.42.103.55
 111.42.103.77
 111.42.103.78
 111.43.223.124
-111.43.223.177
-111.43.223.194
 111.43.223.77
 111.61.52.53
 111.90.150.64
 111.90.187.162
 111.93.169.90
 112.122.61.250
-112.123.109.200
 112.123.109.68
 112.123.61.18
 112.156.36.178
@@ -187,7 +186,8 @@
 112.167.14.237
 112.167.148.70
 112.167.218.221
-112.17.130.136
+112.17.104.45
+112.17.190.176
 112.170.165.71
 112.170.23.21
 112.184.231.90
@@ -197,23 +197,17 @@
 112.187.143.180
 112.187.217.80
 112.187.5.125
-112.187.86.179
 112.199.76.44
 112.27.124.111
-112.27.88.116
-112.27.91.205
 112.27.91.236
 112.27.91.241
 112.27.91.247
-112.28.98.70
 112.78.45.158
 113.11.95.254
-113.218.234.32
-113.221.145.204
+113.133.226.226
 113.221.50.64
 113.240.186.132
 113.254.169.251
-113.75.14.148
 114.168.158.117
 114.226.234.153
 114.226.81.155
@@ -239,18 +233,22 @@
 114.79.172.42
 115.213.176.80
 115.216.210.105
+115.229.200.2
 115.48.151.80
+115.49.246.62
 115.49.74.215
 115.49.76.131
 115.53.102.161
-115.53.63.184
 115.55.9.181
 115.59.118.51
 115.61.2.125
 115.63.60.199
 115.77.186.182
 115.85.65.211
+116.100.249.121
+116.114.95.108
 116.114.95.50
+116.114.95.89
 116.177.178.206
 116.177.179.202
 116.206.164.46
@@ -260,18 +258,20 @@
 117.63.51.128
 117.86.24.209
 117.87.44.106
+117.87.72.41
 117.90.128.14
 117.90.89.95
 117.93.176.207
 117.93.216.98
 117.95.173.64
+117.95.194.127
 117.95.226.223
+118.127.210.136
 118.151.220.206
 118.232.208.215
 118.232.96.150
 118.233.39.25
 118.32.199.219
-118.35.65.115
 118.37.91.137
 118.40.183.176
 118.42.208.62
@@ -279,10 +279,10 @@
 118.46.7.246
 118.99.179.164
 118.99.239.217
+119.102.153.184
 119.194.91.157
 119.2.48.159
 119.203.9.192
-119.206.2.248
 119.212.101.8
 119.77.165.204
 12.171.247.123
@@ -298,14 +298,11 @@
 120.209.99.118
 120.209.99.201
 120.212.208.227
-120.29.81.99
 120.52.120.11
 120.52.33.2
 120.69.89.50
 121.135.146.40
-121.136.137.7
 121.140.141.73
-121.148.122.219
 121.148.72.160
 121.150.77.164
 121.154.107.249
@@ -316,10 +313,10 @@
 121.162.174.59
 121.163.48.30
 121.165.140.117
-121.176.31.174
 121.177.37.127
 121.178.96.50
 121.179.232.246
+121.180.181.177
 121.180.75.151
 121.184.131.249
 121.186.105.200
@@ -329,15 +326,15 @@
 121.231.164.108
 121.232.179.201
 121.233.103.163
+121.233.116.232
 121.233.117.174
 121.233.24.190
 121.233.68.89
 121.86.113.254
-122.241.24.146
+122.243.173.3
 123.0.198.186
 123.0.209.88
-123.10.155.32
-123.10.229.210
+123.10.101.22
 123.122.232.190
 123.148.140.145
 123.194.235.37
@@ -347,16 +344,19 @@
 123.9.37.45
 123.96.134.180
 124.67.89.70
+125.125.44.18
 125.130.59.163
+125.136.182.124
 125.136.238.170
 125.136.94.85
 125.138.43.216
 125.18.28.170
 125.209.71.6
 125.26.165.244
-125.41.82.28
+125.44.215.179
+125.44.241.64
+125.47.248.28
 128.65.183.8
-128.65.187.123
 129.121.176.89
 129.126.204.40
 138.117.6.232
@@ -370,6 +370,7 @@
 14.33.86.236
 14.34.165.243
 14.37.6.148
+14.41.57.152
 14.45.167.58
 14.46.209.82
 14.46.51.53
@@ -380,7 +381,6 @@
 14.55.136.146
 141.0.178.134
 141.226.28.195
-141.226.94.115
 142.11.194.209
 142.11.195.135
 142.11.206.45
@@ -389,34 +389,38 @@
 144.136.155.166
 145.255.26.115
 146.71.79.230
-147.75.67.253
 150.co.il
 151.232.56.134
 151.236.38.234
 152.249.225.24
 152.250.250.194
+154.126.178.16
 154.91.144.44
 159.224.23.120
 159.224.74.112
-162.212.112.189
 162.212.112.240
 162.212.113.149
 162.212.113.70
+162.212.114.196
+162.212.114.57
 162.212.115.102
-162.212.115.91
 162.250.126.186
 163.13.182.105
 163.22.51.1
+163.47.145.202
 165.227.220.53
 165.73.60.72
 165.90.16.5
 167.114.85.125
+167.250.49.155
 168.121.239.172
 171.100.2.234
+171.232.106.147
 171.235.177.250
 171.42.97.178
 172.84.255.201
 172.90.37.142
+173.15.162.151
 173.160.86.173
 173.161.208.193
 173.168.197.166
@@ -430,41 +434,34 @@
 174.2.176.60
 174.48.14.129
 175.10.145.138
-175.11.193.122
-175.200.153.48
 175.202.162.120
 175.208.203.123
 175.210.50.4
-175.212.31.241
+175.211.16.150
 175.212.52.9
 175.213.134.89
 175.215.226.31
 176.108.58.123
 176.113.161.101
 176.113.161.104
-176.113.161.111
-176.113.161.112
 176.113.161.113
+176.113.161.119
+176.113.161.120
 176.113.161.126
 176.113.161.128
-176.113.161.129
-176.113.161.133
+176.113.161.136
 176.113.161.40
 176.113.161.41
-176.113.161.45
 176.113.161.47
 176.113.161.51
-176.113.161.52
 176.113.161.57
-176.113.161.65
-176.113.161.66
 176.113.161.67
 176.113.161.68
 176.113.161.71
 176.113.161.76
 176.113.161.84
 176.113.161.86
-176.113.161.91
+176.113.161.87
 176.113.161.92
 176.113.161.93
 176.12.117.70
@@ -474,14 +471,12 @@
 176.32.35.22
 176.33.72.218
 177.103.202.52
-177.125.227.85
 177.128.126.70
 177.137.107.131
 177.152.139.214
 177.185.159.250
 177.35.175.125
 177.37.163.174
-177.38.176.22
 177.46.86.65
 177.54.82.154
 177.54.83.22
@@ -493,7 +488,7 @@
 178.134.248.74
 178.134.61.94
 178.136.195.90
-178.165.122.141
+178.151.143.2
 178.169.165.90
 178.19.183.14
 178.212.53.57
@@ -507,16 +502,14 @@
 179.108.246.34
 179.111.8.164
 179.127.180.9
-179.156.196.13
-179.60.84.7
 179.99.210.161
 180.104.183.200
 180.104.195.10
 180.104.9.150
-180.115.66.239
 180.116.17.37
 180.116.224.151
 180.116.224.91
+180.116.47.28
 180.116.96.229
 180.117.89.28
 180.117.91.251
@@ -562,16 +555,23 @@
 181.224.242.131
 181.40.117.138
 181.48.187.146
+181.49.241.50
+182.113.220.114
+182.113.56.170
 182.114.212.28
+182.117.160.121
 182.121.152.74
 182.126.101.85
+182.126.183.195
 182.126.238.159
 182.127.201.42
+182.127.64.253
 182.160.101.51
 182.160.125.229
 182.160.98.250
 182.171.202.23
 182.222.195.145
+182.222.195.192
 182.233.0.252
 183.100.109.156
 183.105.206.26
@@ -582,15 +582,18 @@
 183.4.30.251
 184.163.2.58
 185.10.165.62
-185.112.146.165
 185.12.78.161
 185.136.193.70
 185.138.123.179
+185.14.250.199
+185.153.196.209
+185.172.110.208
 185.172.110.216
 185.172.110.221
 185.172.110.224
 185.172.110.232
 185.172.110.238
+185.172.110.241
 185.172.110.243
 185.172.110.250
 185.181.10.234
@@ -614,9 +617,7 @@
 186.251.253.134
 186.34.4.40
 186.42.255.230
-186.73.188.132
 187.12.10.98
-187.142.7.199
 187.183.213.88
 187.235.239.64
 187.250.220.89
@@ -636,6 +637,7 @@
 188.169.229.190
 188.169.229.202
 188.170.177.98
+188.170.243.195
 188.237.212.202
 188.242.242.144
 188.36.121.184
@@ -647,7 +649,6 @@
 190.0.42.106
 190.109.189.120
 190.109.189.204
-190.110.161.252
 190.119.207.58
 190.12.4.98
 190.12.99.194
@@ -655,6 +656,7 @@
 190.128.153.54
 190.130.15.212
 190.130.20.14
+190.130.27.198
 190.130.31.152
 190.131.243.218
 190.159.240.9
@@ -664,11 +666,9 @@
 190.186.56.84
 190.187.55.150
 190.196.248.3
-190.206.35.3
 190.214.24.194
 190.4.187.143
 190.7.27.69
-190.92.4.231
 190.92.46.42
 190.95.76.212
 190.98.36.201
@@ -677,7 +677,7 @@
 191.103.252.116
 191.209.53.113
 191.223.54.151
-191.253.24.14
+191.255.248.220
 191.37.220.200
 191.7.136.37
 191.8.80.207
@@ -700,31 +700,25 @@
 195.24.94.187
 195.28.15.110
 195.66.194.6
-196.202.194.133
 196.202.26.182
 196.218.202.115
 196.218.48.82
 196.218.5.243
-196.218.53.68
 196.221.144.149
+196.32.106.85
 197.155.66.202
 197.159.2.106
 197.254.106.78
 197.51.235.38
 198.24.75.52
 199.36.76.2
-199.83.200.194
+199.83.203.104
+199.83.203.137
 199.83.203.85
 199.83.204.132
 199.83.204.89
 199.83.205.205
-199.83.205.25
 199.83.206.38
-1podcast.xyz/ru53332/-RTMD-.exe
-1podcast.xyz/ru53332/-RTMD-ABMlp17_nAAAvhwCAERFFwAMAMpkk5oA.exe
-1podcast.xyz/ru53332/magix+audio+cleaning+lab+23-rtmd-ac_xol7hiwaavhwcaezsfwaoab4j7koa.exe
-1podcast.xyz/ru53332/need+for+speed+most+wanted+(2005)-rtmd-alc7qv5xcwaa6rocafrsfwasapf5okca.exe
-1podcast.xyz/ru53332/wondershare%20filmora%209-rtmd-addwp14fnqaapzmcaelofwasaosa_c8a.exe
 2.180.33.118
 2.180.37.166
 2.185.150.180
@@ -735,7 +729,6 @@
 2.55.103.71
 2.55.89.188
 2.82.28.27
-2.87.229.142
 2.indexsinas.me:811/c64.exe
 200.105.167.98
 200.107.7.242
@@ -764,12 +757,12 @@
 202.149.90.98
 202.166.206.80
 202.166.21.123
+202.166.217.54
 202.191.124.185
 202.29.95.12
 202.4.124.58
 202.51.191.174
 202.74.236.9
-202.79.46.30
 203.114.116.37
 203.129.254.50
 203.163.211.46
@@ -784,22 +777,23 @@
 203.77.80.159
 203.80.171.138
 203.80.171.149
-203.82.36.34
 203.83.174.227
-206.189.208.7
 208.113.130.13
+208.163.58.18
 209.141.53.115
 209.45.49.177
 210.123.151.27
-210.204.50.140
 210.4.69.22
 210.56.16.67
 210.76.64.46
 211.106.11.193
 211.107.230.86
+211.137.225.106
 211.137.225.126
+211.137.225.60
 211.179.143.199
 211.187.75.220
+211.192.121.74
 211.192.64.222
 211.194.183.51
 211.194.29.174
@@ -807,7 +801,6 @@
 211.195.27.69
 211.196.28.116
 211.197.212.57
-211.216.116.40
 211.223.166.51
 211.224.8.211
 211.225.152.102
@@ -828,10 +821,8 @@
 212.244.210.26
 212.46.197.114
 212.9.74.89
-213.109.235.169
 213.157.39.242
 213.16.63.103
-213.202.255.4
 213.215.85.141
 213.241.10.110
 213.27.8.6
@@ -839,7 +830,6 @@
 213.7.222.78
 213.97.24.164
 216.15.112.251
-216.180.117.45
 216.183.54.169
 216.189.145.11
 216.36.12.98
@@ -849,7 +839,6 @@
 217.8.117.23
 217.8.117.76
 218.144.252.19
-218.154.126.150
 218.156.132.7
 218.156.26.85
 218.157.214.219
@@ -866,10 +855,9 @@
 218.70.144.50
 218.72.196.220
 219.154.145.111
-219.155.130.92
 219.155.169.47
 219.155.173.125
-219.155.209.74
+219.155.62.175
 219.68.1.148
 219.68.242.33
 219.68.245.63
@@ -878,21 +866,21 @@
 219.80.217.209
 21robo.com
 220.120.114.39
-220.122.180.53
 220.71.176.94
 220.82.140.17
-221.144.153.139
+221.14.237.63
+221.155.253.61
 221.155.30.60
 221.155.68.193
-221.158.124.81
 221.159.171.90
 221.166.254.127
 221.167.18.122
+221.210.211.132
+221.210.211.16
+221.210.211.30
 221.226.86.151
-222.113.138.43
 222.116.70.13
 222.138.17.196
-222.138.181.140
 222.139.29.155
 222.185.161.165
 222.185.199.202
@@ -901,7 +889,9 @@
 222.187.180.157
 222.187.191.224
 222.188.131.220
+222.217.65.112
 222.242.158.161
+222.242.182.26
 222.243.14.67
 222.81.213.61
 23.122.183.241
@@ -909,13 +899,13 @@
 23.247.102.120
 23.254.204.253
 23.254.226.60
-23.99.177.235
 24.0.252.145
 24.10.116.43
 24.103.74.180
 24.11.195.147
 24.115.48.43
 24.119.158.74
+24.133.203.45
 24.152.235.88
 24.16.32.40
 24.165.41.55
@@ -928,9 +918,10 @@
 27.147.29.52
 27.147.40.128
 27.238.33.39
-27.41.175.86
+27.41.138.104
+27.41.138.49
 27.41.208.122
-27.41.224.202
+27.41.213.143
 27.48.138.13
 27.76.91.206
 3.zhzy999.net
@@ -971,7 +962,6 @@
 36.33.138.140
 36.34.150.235
 36.34.234.8
-36.35.160.146
 36.35.160.240
 36.66.105.159
 36.66.111.203
@@ -979,11 +969,9 @@
 36.66.139.36
 36.66.168.45
 36.66.190.11
-36.67.152.163
 36.67.223.231
 36.67.42.193
 36.89.133.67
-36.89.18.133
 36.91.89.187
 36.91.90.171
 37.113.131.172
@@ -998,6 +986,7 @@
 37.34.228.1
 37.34.250.243
 37.49.226.162
+37.49.226.209
 37.49.230.128
 37.54.14.36
 3mandatesmedia.com
@@ -1012,8 +1001,9 @@
 41.32.132.218
 41.32.170.13
 41.39.182.198
+41.64.170.241
 41.67.137.162
-41.79.234.90
+42.115.12.180
 42.115.25.55
 42.115.86.142
 42.227.191.5
@@ -1021,18 +1011,15 @@
 42.234.86.212
 42.239.132.107
 42.239.168.235
-42.239.77.201
 42.61.99.155
-42.82.191.105
-420hempizone.co
 43.252.8.94
 45.114.68.156
 45.115.253.82
-45.115.254.154
 45.118.165.115
 45.133.9.21
 45.138.97.46
 45.139.236.14
+45.14.150.29
 45.14.151.249
 45.147.228.245
 45.148.122.113
@@ -1042,11 +1029,10 @@
 45.229.22.195
 45.49.113.70
 45.50.228.207
-45.89.230.141
-45.95.168.251
 45.95.168.254
 45.95.168.97
 45.95.169.234
+45.95.55.58
 46.100.251.72
 46.100.56.152
 46.100.57.58
@@ -1064,7 +1050,6 @@
 46.241.120.165
 46.248.193.75
 46.36.74.43
-46.39.247.65
 46.47.106.63
 46.6.1.167
 46.97.76.242
@@ -1092,14 +1077,19 @@
 49.68.226.132
 49.68.235.19
 49.68.250.118
+49.68.54.141
+49.70.137.78
 49.70.234.20
+49.81.134.147
 49.82.14.191
+49.82.196.117
 49.82.249.71
 49.82.252.63
 49.84.125.254
 49.84.93.106
 49.89.115.124
 49.89.139.161
+49.89.228.167
 49.89.234.53
 49.89.64.24
 49.89.80.45
@@ -1107,12 +1097,10 @@
 5.101.196.90
 5.101.213.234
 5.128.62.127
-5.185.85.122
 5.19.248.85
 5.198.241.29
 5.201.130.125
 5.206.227.18
-5.238.110.62
 5.29.175.150
 5.56.124.92
 5.57.133.136
@@ -1124,6 +1112,7 @@
 50.3.177.106
 50.78.15.50
 51.255.170.237
+51.89.119.154
 58.120.159.133
 58.209.239.23
 58.227.101.108
@@ -1145,20 +1134,19 @@
 59.2.40.1
 59.22.144.136
 59.23.208.62
-59.3.94.190
 59.4.104.15
-59.55.253.105
 59.7.40.82
+61.168.136.199
 61.247.224.66
-61.53.197.182
-61.54.248.65
 61.56.182.218
+61.58.174.253
 61.58.55.226
 61.60.204.178
 61.70.110.59
 61.70.45.130
 61.75.111.224
 61.82.215.186
+61.83.40.183
 62.103.77.120
 62.122.102.236
 62.140.224.186
@@ -1169,6 +1157,7 @@
 62.34.210.232
 62.38.149.66
 62.38.222.98
+62.69.241.72
 62.80.231.196
 62.82.172.42
 62.90.219.154
@@ -1179,6 +1168,7 @@
 66.103.9.249
 66.117.6.174
 66.215.81.68
+66.57.55.210
 66.90.187.191
 66.96.241.234
 66.96.252.2
@@ -1189,7 +1179,6 @@
 68.204.73.133
 68.255.156.146
 69.119.140.197
-69.139.2.66
 69.146.232.34
 69.203.68.243
 69.229.0.133
@@ -1205,14 +1194,12 @@
 71.79.146.82
 72.17.60.150
 72.186.129.13
-72.186.139.38
 72.227.229.129
 72.234.57.0
 72.252.201.135
 72.69.204.59
 72.89.84.172
 73.0.143.64
-73.139.46.234
 73.231.235.88
 73.233.67.25
 73.55.122.210
@@ -1238,6 +1225,7 @@
 77.46.163.158
 77.71.52.220
 77.79.191.32
+77.89.203.238
 78.186.190.222
 78.186.49.146
 78.189.104.157
@@ -1252,6 +1240,7 @@
 79.136.27.40
 79.159.207.150
 79.179.199.159
+79.18.119.169
 79.2.211.133
 79.7.170.58
 79.79.58.94
@@ -1308,8 +1297,10 @@
 82.81.9.62
 8200msc.com
 83.198.36.130
+83.234.147.99
 83.234.218.42
 83.67.163.73
+84.10.31.238
 84.197.14.92
 84.20.68.26
 84.228.95.204
@@ -1331,11 +1322,13 @@
 86.105.60.204
 86.107.163.176
 86.107.163.98
+86.107.167.93
 86.18.117.139
 87.120.235.164
 87.241.175.89
 87.66.219.63
 87.97.154.37
+87du.vip
 88.102.33.14
 88.156.169.98
 88.201.34.243
@@ -1352,7 +1345,6 @@
 89.116.174.223
 89.122.77.154
 89.136.197.170
-89.141.1.115
 89.189.184.225
 89.208.105.18
 89.215.233.24
@@ -1360,6 +1352,7 @@
 89.22.152.244
 89.40.85.166
 89.40.87.5
+90.63.176.144
 91.134.252.221
 91.149.191.182
 91.177.139.132
@@ -1370,7 +1363,7 @@
 91.216.149.130
 91.217.2.120
 91.217.221.68
-91.226.253.227
+91.221.177.94
 91.237.238.242
 91.244.114.198
 91.244.169.139
@@ -1379,6 +1372,7 @@
 92.114.191.82
 92.115.155.161
 92.126.201.17
+92.223.177.227
 92.24.137.113
 92.241.78.114
 92.45.198.60
@@ -1386,7 +1380,6 @@
 92.55.124.64
 93.102.193.254
 93.116.166.51
-93.119.205.159
 93.119.236.72
 93.122.213.217
 93.122.225.34
@@ -1407,14 +1400,12 @@
 94.202.61.191
 94.230.152.192
 94.244.113.217
-94.244.25.21
 94.41.0.174
 94.53.120.109
 94.64.246.247
-95.132.129.250
 95.156.65.14
 95.167.138.250
-95.170.113.227
+95.167.71.245
 95.170.113.52
 95.170.201.34
 95.210.1.42
@@ -1426,18 +1417,22 @@
 96.9.69.148
 98.114.21.206
 98.124.101.193
+98.159.99.37
 98.21.251.169
 98.231.109.153
 98.238.122.130
 99.121.0.96
 99.50.211.58
 9983suncity.com
+Muanha.xyz
 a-reality.co.uk
+a.xiazai163.com
 aaasolution.co.th
 accentlandscapes.com
 accessyouraudience.com
 acteon.com.ar
 ade.topepics.com
+adnquocte.com
 aelogica.com
 agiandsam.com
 agipasesores.com
@@ -1462,11 +1457,11 @@ allloveseries.com
 alohasoftware.net
 alphaconsumer.net
 am-concepts.ca
+amd.alibuf.com
 amedeoscognamiglio.329263.com
 amemarine.co.th
 americanrange.com
 anadolutatili.com
-andreabo1.myftp.biz
 andreelapeyre.com
 andremaraisbeleggings.co.za
 angthong.nfe.go.th
@@ -1480,9 +1475,9 @@ archiv.bg
 arcticprospectus.com
 areac-agr.com
 aresorganics.com
+arowanafishforsale.com
 asadairtravel.com
 ascentive.com
-ashoakacharya.com
 askarindo.or.id
 atfile.com
 atomlines.com
@@ -1491,65 +1486,71 @@ atteuqpotentialunlimited.com
 audiosv.com
 aulist.com
 auraco.ca
+aurumboy.com
+avestor.uz
 azmeasurement.com
 aznetsolutions.com
 azureautomation.co.uk
 azzd.co.kr
 babaroadways.in
 badgesforbullies.org
-badmildiou.com
 bagmatisanchar.com
 bamakobleach.free.fr
+bangkok-orchids.com
 banzaimonkey.com
 bapo.granudan.cn
-bbs.sunwy.org
+baritaco.com
 bbs1.marisfrolg.com
+bd11.52lishi.com
 bd12.52lishi.com
+bd18.52lishi.com
 bd19.52lishi.com
-beforeshithappens.com
 beibei.xx007.cc
 bepgroup.com.hk
 besserblok-ufa.ru
-besthack.co
 besttasimacilik.com.tr
 beta.pterosol.com
 bflow.security-portal.cz
 bildeboks.no
 bilim-pavlodar.gov.kz
+billieellish.org
 bingxiong.vip
 bitbucket.org/destek21/3reklam/downloads/20gbhediyesi.apk
 bitbucket.org/shobaka420/222333/downloads/usb.exe
 bjkumdo.com
-blankki.com
 blog.241optical.com
-blog.anytimeneeds.com
 blog.hanxe.com
 bolidar.dnset.com
 bondbuild.com.sg
-bookmytripping.com
+bonyamin.com
+boscanatural.com
+bovientix.com
 bpo.correct.go.th
 brasstec.com.br
 brbs.customer.netspace.net.au
 brenleyquartzgh.com
 brewmethods.com
 btlocum.pl
+bucketstrong.s3-us-west-1.amazonaws.com
 bugansavings.com
+buhleni.co.za
 buydishtv.in
 bxbx28.cn
 byqkdy.com
 cameli.vn
+canaan.io
 caravella.com.br
 cassiagumrefined.com
 cassovia.sk
+castmart.ga
 cbk.m.dodo52.com
 ccnn.xiaomier.cn
+cdn-10049480.file.myqcloud.com
 cdn.discordapp.com/attachments/422956597141307392/520711166608015380/PFPX-Keygen.zip
 cdn.speedof.me/sample4096k.bin?r=0.1570982201
 cdn.truelife.vn/webtube/201310/2139273/pianito.exe
 cdn.xiaoduoai.com
 cdnus.laboratoryconecpttoday.com
-cecadesayu.corazondelcielo.mx
-ceirecrear.com.br
 cellas.sk
 cf.uuu9.com
 cf0.pw
@@ -1558,7 +1559,6 @@ ch.rmu.ac.th
 changematterscounselling.com
 chanvribloc.com
 charm.bizfxr.com
-chattosport.com
 chauffeursontravel.com
 chedea.eu
 chinhdropfile.myvnc.com
@@ -1566,29 +1566,30 @@ chinhdropfile80.myvnc.com
 chipmarkets.com
 chj.m.dodo52.com
 chnes17wsdywealthandmoduleorganisationui.duckdns.org
-cista-dobra-voda.com
+cinnamoncreations.com.au
 clearwaterriveroutfitting.com
 client.yaap.co.uk
 clinicamariademolina.com
 cloud-server-updater2.co.za
+cloud.wmsinfo.com.br
 codeload.github.com/MeteorAdminz/hidden-tear/zip/master
 codeload.github.com/Visgean/Zeus/zip/translation
 codeload.github.com/beefproject/beef/zip/beef-0.4.6.1
 codeload.github.com/beefproject/beef/zip/master
 colourcreative.co.za
-compesat.com
+common-factor.nl
 complan.hu
 complanbt.hu
 comtechadsl.com
 config.kuaisousou.top
-corazondelcielo.mx
+consultingcy.com
 counciloflight.bravepages.com
 cqjcc.org
 crittersbythebay.com
-crudenergyllc.com
 cryptoomarket.com
 csnserver.com
 csw.hu
+cuacuonsieure.com
 cvc.com.pl
 cyclomove.com
 czsl.91756.cn
@@ -1603,11 +1604,13 @@ datvensaigon.com
 davinadouthard.com
 dawaphoto.co.kr
 daynightgym.com
+ddl7.data.hu
 de.gsearch.com.de
 deixameuskls.tripod.com
 demo10.onbm.ir
 demo13.dsdemosite.com
 denkagida.com.tr
+depgrup.com
 depot7.com
 derivativespro.in
 dev.sebpo.net
@@ -1620,6 +1623,7 @@ dfzm.91756.cn
 dgecolesdepolice.bf
 dgnj.cn
 diazavendano.cl
+dichthuatsnu.com
 dichvuvesinhcongnghiep.top
 dienmaycu.vn
 dieselmoreno.cl
@@ -1638,6 +1642,7 @@ dl2.soft-lenta.ru
 dlist.iqilie.com
 dmresor.se
 dnn.alibuf.com
+dns.alibuf.com
 docs.google.com/uc?authuser=0&id=1423iV9Ze5V1pNpU0omqvp-u46EpKft94&export=download
 docs.google.com/uc?export=download&id=1ia3WELHtRhs0Fe4ag2_O0aVkyzi_zUpx
 docs.google.com/uc?id=1R0ybQzfybvmes2v71jwlMHBvFe8-MVMy
@@ -1654,9 +1659,9 @@ down.haote.com
 down.pcclear.com
 down.startools.co.kr
 down.tgjkbx.cn/openlink/openlink.exe
+down.tgjkbx.cn/openlink/xzq1.exe
 down.upzxt.com
 down.webbora.com
-down.xrpdf.com
 down1.arpun.com
 downcdn.xianshuabao.com
 download.1ys.com
@@ -1676,6 +1681,7 @@ download.xp666.com/xzqswf/setpagetools.exe
 download.zjsyawqj.cn
 download301.wanmei.com
 dpeasesummithilltoppers.pbworks.com
+dr080.com
 dralpaslan.com
 dreamtrips.cheap/dreamtrips.exe
 dreamtrips.cheap/dreamtrips_mix.exe
@@ -1691,7 +1697,6 @@ drive.google.com/u/0/uc?id=17MK_rc41hpFJXpVYtF8tkeWaczBfoDTK&export=download
 drive.google.com/u/0/uc?id=1I0-c_3_PA4CFUVxQuWatIce-YMim6K1F&export=download
 drive.google.com/u/0/uc?id=1lf5uj0OZtEz0Da4uloCglElnO0cqqaJ7&export=download
 drive.google.com/u/0/uc?id=1rFX0WSnjWfD_S-CsbnECFidz0FIpqaYm&export=download
-drive.google.com/uc?export=download&id=1Q2PX2OM5w6WFMrF_5lIhxBuqpcaxfjtr
 drive.google.com/uc?export=download&id=1mlGx7wgPzE4ZBxo-LJs6FOkb1G8e1Jsi
 drive.google.com/uc?id=1-3kFaMujRY9yLfLp1Lt1nhK9_KO30wAu&export=download
 drive.google.com/uc?id=1-ChWS7gPh0DGbxuL6tu2KyWbrUuhfErV&export=download
@@ -1780,6 +1785,7 @@ drive.google.com/uc?id=1e18RJ3xLqJPL5A_FTe1PtFDORun5h_Jl&export=download
 drive.google.com/uc?id=1eOzacxbxvlB9F9nInX3fdP8sjjlthi3W&export=download
 drive.google.com/uc?id=1eh3cqzgCx2RPJmKMJ9qJwZVYDf5oKI6R&export=download
 drive.google.com/uc?id=1emlap-VVjPLvplwk1BlUfZPCZmwDnIcR&export=download
+drive.google.com/uc?id=1er-HsVxQERfsHnK-TYAQWzE6_TO55yj-&export=download
 drive.google.com/uc?id=1f1d3rde5hbGpubc2ovPffFUpgVfegqj9&export=download
 drive.google.com/uc?id=1f5wJV8kPvxOtLgLmu5Uut92pY4v2n6hE&export=download
 drive.google.com/uc?id=1f74a7W00t2B8bNTNUyavEwZeV-VRE5o4&export=download
@@ -1797,6 +1803,7 @@ drive.google.com/uc?id=1jSU9xmlfrEa5upCiQvCeel8nVNKzfrPr&export=download
 drive.google.com/uc?id=1l06AEr-fxG9aUAK072ZOP5z9jXOCNzj4&export=download
 drive.google.com/uc?id=1lXDqsyZ6McKbLWRdrcSiJJ707fxjZmlT&export=download
 drive.google.com/uc?id=1mD5PFNaCbC3L0u1RJ613ABNqooz9YOYK&export=download
+drive.google.com/uc?id=1mkGI8ClTDbpAXPeKvfUeBxBFZZqTEve1&export=download
 drive.google.com/uc?id=1nAmpLZotYqyFBUcLOlyv5GGKQYzHXZ04&export=download
 drive.google.com/uc?id=1nMAOa5vbNOLS-dZxyxl1IwvuclszEWx1&export=download
 drive.google.com/uc?id=1nNZne0SRFV72I_YtZQR_tlIolJNFJOYL&export=download
@@ -1822,9 +1829,11 @@ drive.google.com/uc?id=1zOAa0crJJyjs3DTQk_M_ZqG9gStxV2FG&export=download
 drive.google.com/uc?id=1zpS--8sfyN8bSD4ghtmaXu3yzha6apH6&export=download
 drools-moved.46999.n3.nabble.com
 druzim.freewww.biz
+drwendyellis.com
 dsiun.com
 dtsay.xyz
 dudulm.com
+duongfpt.ga
 dusdn.mireene.com
 dw.58wangdun.com
 dx.qqyewu.com
@@ -1834,27 +1843,29 @@ dx30.siweidaoxiang.com
 dx60.siweidaoxiang.com
 dzapasigroup.usapglobal.org
 dzinestudio87.co.uk
-e-internetim.com
 e.dangeana.com
+earningtipsbd.com
 easydown.workday360.cn
-ebook.w3wvg.com
 edicolanazionale.it
+elokshinproperty.co.za
 emir-elbahr.com
 enc-tech.com
+energisegroup.com
+enixc.com
 entre-potes.mon-application.com
-eposar.com.ar
 er-bulisguvenligi.com
 ermekanik.com
 esolvent.pl
 esteteam.org
-evdekal-kampanyasi20gbhediye.com
+evdekaldiye20-gb.com
 ezfintechcorp.com
 fafhoafouehfuh.su
-fairyqueenstore.com
+fast.rentaroom.ml
 fastsoft.onlinedown.net
 fazi.pl
 fenoma.net
 fidiag.kymco.com
+fifa555easy.329263.com
 figuig.net
 fileco.jobkorea.co.kr
 filen3.utengine.co.kr
@@ -1874,6 +1885,7 @@ flood-protection.org
 foodbooktv.com
 fordlamdong.com.vn
 foreverprecious.org
+foxfennecs.com
 frin.ng
 fs12n1.sendspace.com/dlpro/7d6620756eb6d96cdd79d5222a950d65/5e40884d/rdul3d/g.exe
 fs12n2.sendspace.com/dlpro/b9c5235bb3049bbfc7d25856210dd47e/5e418c45/rdul3d/g.exe
@@ -1889,7 +1901,6 @@ ftpftpftp.com
 funletters.net
 funpartyrent.com
 futuregraphics.com.ar
-futurodelasciudades.org
 g0ogle.free.fr
 gainsdirectory.com
 galuhtea.com
@@ -1904,17 +1915,11 @@ genesisconstruction.co.za
 germistonmiraclecentre.co.za
 ghislain.dartois.pagesperso-orange.fr
 ghwls44.gabia.io
+gimscompany.com
 gist.githubusercontent.com/Zibri/19f9838ffd12349bb2c6c3afddc9388f/raw/01977fd3c7e036c3a38f062f626fd189ba1e1aa3/UEFIVAR.EXE
-gitlab.com/ordulkemal/ere/-/raw/master/1000tldevletdestegi.apk
-gitlab.com/ordulkemal/ere/-/raw/master/10gbhediye.apk
-gitlab.com/ordulkemal/ere/-/raw/master/15gbhediye.apk
-gitlab.com/ordulkemal/ere/-/raw/master/20gbhediye.apk
-gitlab.com/ordulkemal/ere/-/raw/master/20gbhediyeinternet.apk
-gitlab.com/ordulkemal/ere/-/raw/master/30gbhediye.apk
-gitlab.com/ordulkemal/ere/-/raw/master/hayatevesigar.apk
-gitlab.com/ordulkemal/ere/-/raw/master/hediye20gb.apk
-gitlab.com/ordulkemal/ere/-/raw/master/yalan_obf.apk
 glitzygal.net
+globaleuropeans.com
+gmassurance.fr
 gnimelf.net
 go.xsuad.com
 gocanada.vn
@@ -1925,12 +1930,11 @@ grafchekloder.rebatesrule.net
 granportale.com.br
 green100.cn
 greenleaveperu.com
-greindustry.com
 gssgroups.com
-gstat.dondyablo.com
 gx-10012947.file.myqcloud.com
 habbotips.free.fr
 hagebakken.no
+halcat.com
 hanaphoto.co.kr
 handrush.com
 hanoihub.vn
@@ -1938,21 +1942,22 @@ hazel-azure.co.th
 hdxa.net
 healtina.com
 heavenif.co.za
-hediye-internet.site
-hediyegapsinternet.com
+hediyem20gb-internet.org
 hellomessager.com
+herrfischer.me
 hfsoftware.cl
 hingcheong.hk
 hldschool.com
 hmbwgroup.com
+hmpmall.co.kr
 hoayeuthuong-my.sharepoint.com
 hostzaa.com
 hotart.co.nz
 hotel-le-relais-des-moulins.com
 hottestxxxvideo.com/install_flash_player.apk
 housewifes.co
+how.ph
 hqsistemas.com.ar
-hseda.com
 hsmwebapp.com
 htxl.cn
 huishuren.nu
@@ -1971,7 +1976,6 @@ in-sect.com
 inapadvance.com
 incrediblepixels.com
 incredicole.com
-indonesias.me:9998/c64.exe
 ineyes360.com
 ini.egkj.com
 innovation4crisis.org
@@ -1984,6 +1988,7 @@ iran-gold.com
 iremart.es
 isso.ps
 itd.m.dodo52.com
+itohukuk.com
 itsnixielou.com
 ixlonbcc.com
 izu.co.jp
@@ -1991,10 +1996,11 @@ jaincakes.xyz
 jamiekaylive.com
 jansen-heesch.nl
 janvierassocies.fr
-jaservicioscontables.casteviajes.com
 javatank.ru
 jcedu.org
 jessymart.flexyhub.com
+jhorapatarastana.xyz
+jjjexx.329263.com
 jmtc.91756.cn
 jointings.org
 jonpetesharefile.com
@@ -2011,6 +2017,7 @@ jyv.fi
 jzny.com.cn
 k.ludong.tv
 k3.etfiber.net
+kabiru.ru
 kachsurf.mylftv.com
 kamasu11.cafe24.com
 kanok.co.th
@@ -2018,9 +2025,10 @@ kar.big-pro.com
 karavantekstil.com
 kassohome.com.tr
 kazanin20gbturkiye.com
-kazanturkiye20gb.com
 kdsp.co.kr
+keckarangdadap.pekalongankab.go.id
 kejpa.com
+kgfs3.329263.com
 khan-associates.net
 khunnapap.com
 kiaowadubai.com
@@ -2033,11 +2041,13 @@ kimyen.net/upload/VLTKNhatRac.exe
 kjbm9.mof.gov.cn
 kleinendeli.co.za
 knightsbridgeenergy.com.ng
+kolibri-fabrika.ru
 koppemotta.com.br
 koralli.if.ua
 kqq.kz
 kristofferdaniels.com
 kuaizip.com/down/affiliate/KuaiZip_setup_10029.exe
+kupaliskohs.sk
 kuznetsov.ca
 kwanfromhongkong.com
 kwikomfi-lab.com
@@ -2046,7 +2056,6 @@ lameguard.ru
 lammaixep.com
 landmarktreks.com
 langyabbs.05yun.cn
-lastmorgoth.com
 lcfurtado.com.br
 ld.mediaget.com
 learnbuddy.com
@@ -2067,6 +2076,7 @@ log.yundabao.cn
 lsyr.net
 lt02.datacomspecialists.net
 luatminhthuan.com
+luckytriumph.com
 luisnacht.com.ar
 luyalu.net
 lvr.samacomplus.com
@@ -2102,6 +2112,7 @@ mhkdhotbot80.myvnc.com
 miaoshuosh.com
 micahproducts.com
 micalle.com.au
+milebgd.mycpanel.rs
 mirror.mypage.sk
 mis.nbcc.ac.th
 misterson.com
@@ -2109,12 +2120,14 @@ mistydeblasiophotography.com
 mkk09.kr
 mkontakt.az
 mlbfreestream.gq
+mlbfreestream.ml
 mmc.ru.com
 mobiadnews.com
 mobilier-modern.ro
 mochandmade.us
+modcloudserver.eu
 moha-group.com
-mononet.lv
+moinmo.de
 moscow11.at
 mountveederwines.com
 moyo.co.kr
@@ -2124,13 +2137,13 @@ msecurity.ro
 mteng.mmj7.com
 mtfelektroteknik.com
 mueblesjcp.cl
+mv360.net
 mvb.kz
 mxpiqw.am.files.1drv.com
 myexpertca.in
 myhood.cl
 myo.net.au
 myofficeplus.com
-myonlinepokiesblog.com
 mytex.pe
 mytrains.net
 mywp.asia
@@ -2151,7 +2164,6 @@ newsun-shop.com
 newxing.com
 nfbio.com
 ngoaingu.garage.com.vn
-nilemixitupd.biz.pl
 nkdhub.com
 nofound.000webhostapp.com
 note.youdao.com/yws/api/personal/file/WEB3a243b322cf83ca7cae587a92916bac7?method=download&inline=true&shareKey=649ac0bb5d5b13d15cbf50b2609e193a
@@ -2163,6 +2175,7 @@ oa.hys.cn
 obnova.zzux.com
 obseques-conseils.com
 ohe.ie
+oknoplastik.sk
 omega.az
 omsk-osma.ru
 omuzgor.tj
@@ -2174,20 +2187,24 @@ onedrive.live.com/download?&resid=B4C15A27928F663B!229&authkey=AIarm61FWmd_NPE
 onedrive.live.com/download?&resid=B4C15A27928F663B!230&authkey=ANCU1EabeTiuBzg
 onedrive.live.com/download?&resid=B4C15A27928F663B!231&authkey=AI9h3Sk_lUxRAN0
 onedrive.live.com/download?&resid=C127F9E0FB7CBBEA!214&authkey=AAt73NvGhhjdr9g
+onedrive.live.com/download?authkey=!AAsE4MA0-vo_CLs&cid=4DF11EDA676A355F&resid=4DF11EDA676A355F!140
 onedrive.live.com/download?authkey=!AGZmMCN0fitqqSg&cid=B49DE58B11F93798&resid=B49DE58B11F93798!107
+onedrive.live.com/download?authkey=!AKd6uxvLjTLVpxU&cid=4DF11EDA676A355F&resid=4DF11EDA676A355F!130
+onedrive.live.com/download?authkey=!ANHBzyBkG3MeKig&cid=21757E11F03B2792&resid=21757E11F03B2792!109
 onedrive.live.com/download?authkey=!AOMvnEMlpGWFUIE&cid=4DF11EDA676A355F&resid=4DF11EDA676A355F!135
 onedrive.live.com/download?cid=0153C2A7092EE91C&resid=153C2A7092EE91C!111&authkey=AEmrWamaAAIYyjc
 onedrive.live.com/download?cid=0153C2A7092EE91C&resid=153C2A7092EE91C%21111&authkey=AEmrWamaAAIYyjc
 onedrive.live.com/download?cid=01F191D863B4D5A4&resid=1F191D863B4D5A4!157&authkey=AAGcSM7CHqEZ6UU
 onedrive.live.com/download?cid=01F191D863B4D5A4&resid=1F191D863B4D5A4!158&authkey=AMsoii5Nr6PomHc
-onedrive.live.com/download?cid=01F191D863B4D5A4&resid=1F191D863B4D5A4%21157&authkey=AAGcSM7CHqEZ6UU
 onedrive.live.com/download?cid=01F191D863B4D5A4&resid=1F191D863B4D5A4%21158&authkey=AMsoii5Nr6PomHc
+onedrive.live.com/download?cid=0489C74DE4FACB30&resid=489C74DE4FACB30!109&authkey=AJo32arrzl_VWDQ
 onedrive.live.com/download?cid=052BCF630286E980&resid=52BCF630286E980!110&authkey=ANzSd8lJ7P0rj0Q
 onedrive.live.com/download?cid=052BCF630286E980&resid=52BCF630286E980!113&authkey=AH3RaTLEdBMNuaY
 onedrive.live.com/download?cid=052BCF630286E980&resid=52BCF630286E980%21110&authkey=ANzSd8lJ7P0rj0Q
 onedrive.live.com/download?cid=052BCF630286E980&resid=52BCF630286E980%21113&authkey=AH3RaTLEdBMNuaY
 onedrive.live.com/download?cid=052BCF630286E980&resid=52BCF630286E980%21114&authkey=AHzbIscDx0-2gfk
 onedrive.live.com/download?cid=0D59C202E35694C2&resid=D59C202E35694C2!273&authkey=AE2M69E5NU3RReA
+onedrive.live.com/download?cid=0D59C202E35694C2&resid=D59C202E35694C2!274&authkey=ACQg0aKuTOXdpgo
 onedrive.live.com/download?cid=0D59C202E35694C2&resid=D59C202E35694C2%21273&authkey=AE2M69E5NU3RReA
 onedrive.live.com/download?cid=0D59C202E35694C2&resid=D59C202E35694C2%21274&authkey=ACQg0aKuTOXdpgo
 onedrive.live.com/download?cid=0F0A5AADC4C3C242&resid=F0A5AADC4C3C242!309&authkey=ALFe36DRAi1zmWc
@@ -2215,6 +2232,7 @@ onedrive.live.com/download?cid=265DAF943BE0D06F&resid=265DAF943BE0D06F%21191&aut
 onedrive.live.com/download?cid=2CBD310015BC2D37&resid=2CBD310015BC2D37%21183&authkey=AKon9I9zzHusiUk
 onedrive.live.com/download?cid=2F4D6884E933CB1A&resid=2F4D6884E933CB1A!116&authkey=!ABWlEdjhFsqWaP4
 onedrive.live.com/download?cid=2F4D6884E933CB1A&resid=2F4D6884E933CB1A!121&authkey=!AA0qbUUSS-wb13w
+onedrive.live.com/download?cid=2F947402293C14C1&resid=2F947402293C14C1!119&authkey=APMAkX2CQB9rImU
 onedrive.live.com/download?cid=2F947402293C14C1&resid=2F947402293C14C1%21118&authkey=ACrL2Iiem-ZJer8
 onedrive.live.com/download?cid=2F947402293C14C1&resid=2F947402293C14C1%21119&authkey=APMAkX2CQB9rImU
 onedrive.live.com/download?cid=3112E77688F09693&resid=3112E77688F09693%21320&authkey=AOOUjzuf408Dclw
@@ -2244,6 +2262,7 @@ onedrive.live.com/download?cid=505BE76830F4DC4C&resid=505BE76830F4DC4C!398&authk
 onedrive.live.com/download?cid=505BE76830F4DC4C&resid=505BE76830F4DC4C!406&authkey=AARnp48wUMgu6TQ
 onedrive.live.com/download?cid=505BE76830F4DC4C&resid=505BE76830F4DC4C!415&authkey=AGLZsD6-G0NzJ7s
 onedrive.live.com/download?cid=505BE76830F4DC4C&resid=505BE76830F4DC4C!420&authkey=AKk5DROUng_eCWw
+onedrive.live.com/download?cid=505BE76830F4DC4C&resid=505BE76830F4DC4C!440&authkey=AI7-dpR11WNzyQ8
 onedrive.live.com/download?cid=505BE76830F4DC4C&resid=505BE76830F4DC4C%21395&authkey=ALWvuB_YHtOgJXw
 onedrive.live.com/download?cid=505BE76830F4DC4C&resid=505BE76830F4DC4C%21398&authkey=ABAA_TJd7OHh4So
 onedrive.live.com/download?cid=505BE76830F4DC4C&resid=505BE76830F4DC4C%21406&authkey=AARnp48wUMgu6TQ
@@ -2252,7 +2271,9 @@ onedrive.live.com/download?cid=505BE76830F4DC4C&resid=505BE76830F4DC4C%21420&aut
 onedrive.live.com/download?cid=505BE76830F4DC4C&resid=505BE76830F4DC4C%21440&authkey=AI7-dpR11WNzyQ8
 onedrive.live.com/download?cid=53C5E6B8F6893887&resid=53C5E6B8F6893887!788&authkey=AHhsfJqtmOvCm-o
 onedrive.live.com/download?cid=5607DA13EE53F950&resid=5607DA13EE53F950%21280&authkey=ADVq4p3XHFHINQ8
+onedrive.live.com/download?cid=5696478ACB744989&resid=5696478ACB744989%21383&authkey=ADLDpuAYA7Kj1Dk
 onedrive.live.com/download?cid=57C0958DB500FE0B&resid=57C0958DB500FE0B!68197&authkey=AOWPm7Ocl_21-oc
+onedrive.live.com/download?cid=57C0958DB500FE0B&resid=57C0958DB500FE0B%2168197&authkey=AOWPm7Ocl_21-oc
 onedrive.live.com/download?cid=5F3A7A50ACB94052&resid=5F3A7A50ACB94052!406&authkey=AEYeq5j9zFEpGAI
 onedrive.live.com/download?cid=5F3A7A50ACB94052&resid=5F3A7A50ACB94052%21406&authkey=AEYeq5j9zFEpGAI
 onedrive.live.com/download?cid=5F3A7A50ACB94052&resid=5F3A7A50ACB94052%21407&authkey=ADNH8aF-rvoxLcc
@@ -2268,6 +2289,7 @@ onedrive.live.com/download?cid=6A1602E410531072&resid=6A1602E410531072%21113&aut
 onedrive.live.com/download?cid=6B3EE3B3B5FB10D3&resid=6B3EE3B3B5FB10D3!118&authkey=AEPf8f3mfmLSng0
 onedrive.live.com/download?cid=6B3EE3B3B5FB10D3&resid=6B3EE3B3B5FB10D3%21118&authkey=AEPf8f3mfmLSng0
 onedrive.live.com/download?cid=6B71CECFB2F8C8A7&resid=6B71CECFB2F8C8A7%211154&authkey=ACNBDScB8-rBMCU
+onedrive.live.com/download?cid=6CD2E7E257C16E46&resid=6CD2E7E257C16E46!126&authkey=AFsQz25GZRFlidA
 onedrive.live.com/download?cid=6CD2E7E257C16E46&resid=6CD2E7E257C16E46!144&authkey=ACWoeUasuRL8m3M
 onedrive.live.com/download?cid=6CD2E7E257C16E46&resid=6CD2E7E257C16E46!149&authkey=AGadAevvS4bE6-E
 onedrive.live.com/download?cid=6CD2E7E257C16E46&resid=6CD2E7E257C16E46!158&authkey=ACpreL1y7oJkJqY
@@ -2275,7 +2297,7 @@ onedrive.live.com/download?cid=6CD2E7E257C16E46&resid=6CD2E7E257C16E46!173&authk
 onedrive.live.com/download?cid=6CD2E7E257C16E46&resid=6CD2E7E257C16E46%21123&authkey=AMNl3yrM0yBHoMk
 onedrive.live.com/download?cid=6CD2E7E257C16E46&resid=6CD2E7E257C16E46%21126&authkey=AFsQz25GZRFlidA
 onedrive.live.com/download?cid=6CD2E7E257C16E46&resid=6CD2E7E257C16E46%21144&authkey=ACWoeUasuRL8m3M
-onedrive.live.com/download?cid=6CD2E7E257C16E46&resid=6CD2E7E257C16E46%21158&authkey=ACpreL1y7oJkJqY
+onedrive.live.com/download?cid=6CD2E7E257C16E46&resid=6CD2E7E257C16E46%21149&authkey=AGadAevvS4bE6-E
 onedrive.live.com/download?cid=6CD2E7E257C16E46&resid=6CD2E7E257C16E46%21173&authkey=AK5nXNLF4pJAieU
 onedrive.live.com/download?cid=6F5470AD540C86C8&resid=6F5470AD540C86C8!111&authkey=AOUy4UoQ0R3reTs
 onedrive.live.com/download?cid=6F5470AD540C86C8&resid=6F5470AD540C86C8%21111&authkey=AOUy4UoQ0R3reTs
@@ -2321,10 +2343,6 @@ onedrive.live.com/download?cid=9BEF332362F6BCCF&resid=9BEF332362F6BCCF%21123&aut
 onedrive.live.com/download?cid=9BEF332362F6BCCF&resid=9BEF332362F6BCCF%21124&authkey=APNf1qkXw0SxX50
 onedrive.live.com/download?cid=9DFCA91D2F466A8D&resid=9DFCA91D2F466A8D!155&authkey=ABUkRSFrIIUMG3s
 onedrive.live.com/download?cid=A023FE2D1AC611F2&resid=A023FE2D1AC611F2%21497&authkey=ANnphl-4y7qaOUw
-onedrive.live.com/download?cid=A32AEA2B4355716B&resid=A32AEA2B4355716B!5044&authkey=ACIto9T1ngdHUsw
-onedrive.live.com/download?cid=A32AEA2B4355716B&resid=A32AEA2B4355716B!5047&authkey=ABGpmXhJe7B2pEQ
-onedrive.live.com/download?cid=A32AEA2B4355716B&resid=A32AEA2B4355716B%215044&authkey=ACIto9T1ngdHUsw
-onedrive.live.com/download?cid=A32AEA2B4355716B&resid=A32AEA2B4355716B%215047&authkey=ABGpmXhJe7B2pEQ
 onedrive.live.com/download?cid=A6DD95780C6C7E21&resid=A6DD95780C6C7E21%216053&authkey=AGFh0AHsTJ7rRkI
 onedrive.live.com/download?cid=AE80108520D75992&resid=AE80108520D75992!113&authkey=AGH9q_ZzYJjcsPc
 onedrive.live.com/download?cid=AE80108520D75992&resid=AE80108520D75992%21113&authkey=AGH9q_ZzYJjcsPc
@@ -2332,6 +2350,7 @@ onedrive.live.com/download?cid=B03EE17D51411308&resid=B03EE17D51411308!2152&auth
 onedrive.live.com/download?cid=B03EE17D51411308&resid=B03EE17D51411308%212152&authkey=ABuTaAC83l5UTKs
 onedrive.live.com/download?cid=B24535E108E4D261&resid=B24535E108E4D261!135&authkey=ANFVTJtGpOuMnJc
 onedrive.live.com/download?cid=B3B98222C3EF96E0&resid=B3B98222C3EF96E0!166&authkey=AM6Hz6Klyos92OY
+onedrive.live.com/download?cid=B3B98222C3EF96E0&resid=B3B98222C3EF96E0!167&authkey=AIHUj_YRTDivvYU
 onedrive.live.com/download?cid=B3B98222C3EF96E0&resid=B3B98222C3EF96E0%21166&authkey=AM6Hz6Klyos92OY
 onedrive.live.com/download?cid=B3B98222C3EF96E0&resid=B3B98222C3EF96E0%21167&authkey=AIHUj_YRTDivvYU
 onedrive.live.com/download?cid=B49DE58B11F93798&resid=B49DE58B11F93798!107&authkey=!AGZmMCN0fitqqSg
@@ -2345,6 +2364,8 @@ onedrive.live.com/download?cid=BEAF30DA1F621C9B&resid=BEAF30DA1F621C9B%21246&aut
 onedrive.live.com/download?cid=C359B1A8BABC6019&resid=C359B1A8BABC6019!1251&authkey=ACt34EIZpzJUGfA
 onedrive.live.com/download?cid=C359B1A8BABC6019&resid=C359B1A8BABC6019%211251&authkey=ACt34EIZpzJUGfA
 onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E!1338&authkey=AJNgAmbOsWs75_c
+onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E!1340&authkey=AL1Ay3FbTUde6D8
+onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E!1342&authkey=ACPr_HTn2jtAXfU
 onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E!1343&authkey=ABODYSRxU9L2xxU
 onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E!1344&authkey=AOzErPpD6MnoKwY
 onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E!1345&authkey=AEVvyhOnxHtcDh0
@@ -2353,9 +2374,9 @@ onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E!1347&auth
 onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E%211337&authkey=AFNVu1FsUCZHT5E
 onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E%211338&authkey=AJNgAmbOsWs75_c
 onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E%211340&authkey=AL1Ay3FbTUde6D8
-onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E%211342&authkey=ACPr_HTn2jtAXfU
 onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E%211343&authkey=ABODYSRxU9L2xxU
 onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E%211344&authkey=AOzErPpD6MnoKwY
+onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E%211345&authkey=AEVvyhOnxHtcDh0
 onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E%211346&authkey=AChrNF5VLoV1GF4
 onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E%211347&authkey=AL-ZGe-TTVr921s
 onedrive.live.com/download?cid=C51087813D29B0B1&resid=C51087813D29B0B1!132&authkey=ADFEybhHaMQXib0
@@ -2389,11 +2410,11 @@ onedrive.live.com/download?cid=DDE26285195864B8&resid=DDE26285195864B8%21361&aut
 onedrive.live.com/download?cid=DDE26285195864B8&resid=DDE26285195864B8%21366&authkey=ALy44awv_tX2O5M
 onedrive.live.com/download?cid=DDE26285195864B8&resid=DDE26285195864B8%21379&authkey=AI9JeFVwfv5qi4M
 onedrive.live.com/download?cid=E4B1E1072DC91F5C&resid=E4B1E1072DC91F5C!509&authkey=AKmDyQKzcsUf_Gg
-onedrive.live.com/download?cid=E4B1E1072DC91F5C&resid=E4B1E1072DC91F5C%21511&authkey=AGfS0Q7DZ7oS1LU
 onedrive.live.com/download?cid=E61E5F3F655316FA&resid=E61E5F3F655316FA!124&authkey=ADKlC5yRN_vbmt8
 onedrive.live.com/download?cid=E61E5F3F655316FA&resid=E61E5F3F655316FA!125&authkey=AB5cY3xSz3aDDbE
 onedrive.live.com/download?cid=E61E5F3F655316FA&resid=E61E5F3F655316FA%21124&authkey=ADKlC5yRN_vbmt8
 onedrive.live.com/download?cid=E61E5F3F655316FA&resid=E61E5F3F655316FA%21125&authkey=AB5cY3xSz3aDDbE
+onedrive.live.com/download?cid=E859DA0F2C81D5F2&resid=E859DA0F2C81D5F2!142&authkey=AIS88UaD5AOm6qU
 onedrive.live.com/download?cid=E859DA0F2C81D5F2&resid=E859DA0F2C81D5F2%21142&authkey=AIS88UaD5AOm6qU
 onedrive.live.com/download?cid=EAE9B5435CFAEBAA&resid=EAE9B5435CFAEBAA!232&authkey=AAuY9sGJCcGPZX8
 onedrive.live.com/download?cid=EAE9B5435CFAEBAA&resid=EAE9B5435CFAEBAA%21232&authkey=AAuY9sGJCcGPZX8
@@ -2403,10 +2424,11 @@ onedrive.live.com/download?cid=EFDF2C8D834A1928&resid=EFDF2C8D834A1928!204&authk
 onedrive.live.com/download?cid=EFDF2C8D834A1928&resid=EFDF2C8D834A1928%21202&authkey=AH1gjQ8j29DArW4
 onedrive.live.com/download?cid=EFDF2C8D834A1928&resid=EFDF2C8D834A1928%21203&authkey=AF8Xr99mRQP8Um8
 onedrive.live.com/download?cid=EFDF2C8D834A1928&resid=EFDF2C8D834A1928%21204&authkey=AD0NbZlscbg-0sA
-onedrive.live.com/download?cid=F293CEBB54E5EA71&resid=F293CEBB54E5EA71!195&authkey=AB6tMixR6iRg3d0
 onedrive.live.com/download?cid=F79E41C0E32D3314&resid=F79E41C0E32D3314%211182&authkey=AIQTPtbeRyvLGQk&em=2%22
 onedrive.live.com/download?cid=F7AE097903082806&resid=F7AE097903082806!1368&authkey=ANphh1fIjHVZv6c
 onedrive.live.com/download?cid=F7AE097903082806&resid=F7AE097903082806%211368&authkey=ANphh1fIjHVZv6c
+onedrive.live.com/download?cid=FA03A599CBD174CA&resid=FA03A599CBD174CA!32086&authkey=ADDWE3SRWq8Az9Y
+onedrive.live.com/download?cid=FB607A99940C799A&resid=FB607A99940C799A!183&authkey=ABKHbsYu4lG_blg
 onedrive.live.com/download?cid=FB607A99940C799A&resid=FB607A99940C799A%21183&authkey=ABKHbsYu4lG_blg
 onedrive.live.com/download?cid=FD50774E5CE0E314&resid=FD50774E5CE0E314%21778&authkey=AOXB2VhHZ3QOdIU
 onedrive.live.com/download?cid=FE8464CFA794DA31&resid=FE8464CFA794DA31!377&authkey=AAu9JE4OqfFRyD4
@@ -2416,7 +2438,6 @@ onedrive.live.com/download?cid=FF1D187273DFBF73&resid=FF1D187273DFBF73!693&authk
 onedrive.live.com/download?cid=FF1D187273DFBF73&resid=FF1D187273DFBF73%21693&authkey=AGcpKHnEWFTE_Yc
 onedrive.live.com/download?cid=FF1D187273DFBF73&resid=FF1D187273DFBF73%21694&authkey=AA5jQZJSp0eSr1s
 onestin.ro
-onyourmarkmindsetgo.com
 openclient.sroinfo.com
 operasanpiox.bravepages.com
 ophtalmiccenter.com
@@ -2439,8 +2460,10 @@ p3.zbjimg.com
 p30qom.ir
 p500.mon-application.com
 pack301.bravepages.com
+pakdesighee.com
 palochusvet.szm.com
 partyflix.net
+pastebin.com/raw/01he7nkP
 pastebin.com/raw/0LfEkEjA
 pastebin.com/raw/0YdyRCYf
 pastebin.com/raw/0hNR8dnd
@@ -2460,22 +2483,18 @@ pastebin.com/raw/KFCvJMhW
 pastebin.com/raw/NbtLVnaN
 pastebin.com/raw/PUncVV2C
 pastebin.com/raw/RiMGY5fb
-pastebin.com/raw/ThVGnprR
 pastebin.com/raw/VmZqzhF1
 pastebin.com/raw/Yt0EUBML
 pastebin.com/raw/Yz2xcpaV
 pastebin.com/raw/cFS3qbdQ
-pastebin.com/raw/cUZRd9HN
 pastebin.com/raw/e8kSryaf
 pastebin.com/raw/fDpf4JYj
-pastebin.com/raw/fDvgc3Tg
 pastebin.com/raw/fWbdHjTH
 pastebin.com/raw/m3Gkz6As
 pastebin.com/raw/qsVVM0xt
 pastebin.com/raw/rWWytiGk
 pastebin.com/raw/vJrm3cs2
 pastebin.com/raw/vbzLQ1Dz
-pastebin.com/raw/vp25LrZF
 pastebin.com/raw/xGXyTALF
 pat4.jetos.com
 pat4.qpoe.com
@@ -2484,20 +2503,26 @@ patch2.99ddd.com
 patch3.99ddd.com
 patrickchan-hk.net
 pawel-sikora.pl
+pcexperts.co.za
 pcginsure.com
 pcsoori.com
 pedidoslalacteo.com.ar
+peterssandmay.com
+petromltd.com
 ph4s.ru
 phamchilong.com
 phudieusongma.com
+phuphamca.com
 piapendet.com
 pink99.com
 platisher.xyz
+pmguide.net
 podiatristlansdale.com
 podrska.com.hr
 ponto50.com.br
 poolbook.ir
 ppl.ac.id
+prepaenunsoloexamen.academiagalileoac.com
 probost.cz
 profitcoach.net
 prosoc.nl
@@ -2529,13 +2554,13 @@ rc.ixiaoyang.cn
 readytalk.github.io
 real-song.tjmedia.co.kr
 recommendservices.com
-redeemerssports.com
 redesoftdownload.info
 rekspirit.ru
 renim.https443.net/restr.exe
 renim.https443.net/shaht64.exe
 renimin.mymom.info
 renovanorte.com
+rentaroom.ml
 res.uf1.cn
 res.yeshen.com/player/launch/2017/09/12/da5f9a1c23034353852750488feeaf36.exe
 ret.space
@@ -2549,13 +2574,16 @@ robotrade.com.vn
 rollingmill.in
 rollscar.pk
 rossogato.com
+royalplusmobile.ir
 ruisgood.ru
 s.51shijuan.com
 s.kk30.com
+s14b.91danji.com
+s14b.groundyun.cn
 sabiupd.compress.to
 saboorjaam.ir
 sabupda.vizvaz.com
-sahathaikasetpan.com
+saglikodemelerinial.org
 salvation24.com
 salvationbd.com
 sandovalgraphics.com
@@ -2569,12 +2597,12 @@ seibee.biz
 selekture.com
 selfuseproperty.com
 selvikoyunciftligi.com
-sendeyararlanturkiye20gb.com
 sendspace.com/pro/dl/dcvd2q
 serpentrising.com
 servicemhkd.myvnc.com
 servicemhkd80.myvnc.com
 serviciosinfoware.cl
+sexybaccarat.329263.com
 sfoodfeedf.org
 sgm.pc6.com
 shacked.webdepot.co.il
@@ -2583,6 +2611,7 @@ shaoxiaofei.cn
 share.dmca.gripe
 sharjahas.com
 shembefoundation.com
+shopjumpn.ch
 simlun.com.ar
 sinacloud.net/yun2016/Bwin732d.rar
 sinacloud.net/yun2016/PrsProt32.rar
@@ -2608,6 +2637,7 @@ sophiaskyhotel.vn
 sota-france.fr
 souldancing.cn
 speed.myz.info
+sportshlive.xyz
 sportstrem.gq
 spurstogo.com
 sputnikmailru.cdnmail.ru
@@ -2619,10 +2649,11 @@ sslv3.at
 staging.popclusive.asia
 starcountry.net
 static.3001.net/upload/20140812/14078161556897.rar
+static.ilclock.com
 static.topxgun.com
+stationaryhome.com
 stats.gov.cn/tjsj/tjzd/gjtjzd/201909/P020190909619147287331.doc
 stecit.nl
-steelbuildings.com
 stevewalker.com.au
 storage.googleapis.com/wzukusers/user-34654398/documents/5c6ca94027662Tilxa4P/base.txt
 storage.googleapis.com/wzukusers/user-34654398/documents/5c6cbd811626fvoj29vW/base64.txt
@@ -2635,10 +2666,10 @@ storage.googleapis.com/wzukusers/user-34654398/documents/5c6fd6b4eb1c08aAMus8/go
 storage.googleapis.com/wzukusers/user-34654398/documents/5c7921a2cf26cUnJcGVm/nanocoregomes.txt
 storage.googleapis.com/wzukusers/user-34654398/documents/5c9e24cc08a4dLmV7CJO/CDT.txt
 story-maker.jp
+stubbackup.ru
 suc9898.com
 suncity116.com
 support.clz.kr
-supportalaskausa.org
 sv.pvroe.com
 svkacademy.com
 svn.cc.jyu.fi
@@ -2647,7 +2678,6 @@ swwbia.com
 symanreni.mysecondarydns.com
 szxypt.com
 t.honker.info
-tandenblekenhoofddorp.nl
 taraward.com
 taxpos.com
 tcy.198424.com
@@ -2669,15 +2699,16 @@ theelectronics4u.com
 theprestige.ro
 theptiendat.com
 therecruiter.io
-thesecuritysoftwarescannerindustrgreat.duckdns.org
-thornadops.com
 thosewebbs.com
+thuong.bidiworks.com
 tianangdep.com
+tianmaouae.com
 tianzi8.cn
 tibinst.mefound.com
 tibok.lflink.com
 ticte.in
 timlinger.com
+tinckorm.beget.tech
 tldrbox.top/1.exe
 tldrbox.top/11.exe
 tldrbox.top/2
@@ -2687,7 +2718,6 @@ toe.polinema.ac.id
 tonghopgia.net
 tonydong.com
 tonyzone.com
-treefighter.org
 tsd.jxwan.com
 tsredco.telangana.gov.in
 tulli.info
@@ -2696,6 +2726,7 @@ tuneup.ibk.me
 tup.com.cn
 tutuler.com
 uc-56.ru
+ucto-id.cz
 ufabet168168.329263.com
 ugc.wegame.com.cn
 ultimatelamborghiniexperience.com
@@ -2710,10 +2741,14 @@ upd.m.dodo52.com
 update.iwang8.com
 update.my.99.com
 updateflashplayer.link
+upendiveterinariovalencia.es
 urgentmessage.org
+usapglobal.usapglobal.org
 users.skynet.be
 uskeba.ca
 usmadetshirts.com
+uyen.vn
+uygulamalarim-hediyeinternet.org
 vadyur.github.io
 vaeqpu.329263.com
 valedchap.ir
@@ -2722,12 +2757,12 @@ vasoccernews.com
 vaziri.echobit.ir
 vdotrip.blog
 vfocus.net
+vibicloud.com
 videoswebcammsn.free.fr
 vietducbio.com
 vigilar.com.br
 vip.recommendedtoyoo.com
 virustreatments.empeeevents.com
-visagepk.com
 visualdata.ru
 vitinhvnt.com
 vitromed.ro
@@ -2737,9 +2772,9 @@ w.zhzy999.net
 wakecar.cn
 wangtong7.siweidaoxiang.com
 wangzonghang.cn
+wap.dosame.com
 ware.ru
 warriorllc.com
-waterosmo.com
 wbd.5636.com
 wbkmt.com
 web.mit.edu/kolya/.f/root/net.mit.edu/net/user/chris/WinNT/MIT_Agenda2a.doc
@@ -2759,17 +2794,19 @@ wood-expert.net
 woodsytech.com
 wp.quercus.palustris.dk
 wq.feiniaoai.cn
-writesofpassage.co.za
 wsg.com.sg
 wt8.siweidaoxiang.com
 wt9.siweidaoxiang.com
 wwealthllc.com
+www-ecimer-uygulamayukleme-govtr.com
 www2.recepty5.com
 x2vn.com
 xia.vzboot.com
 xiaidown.com
 xiegushi.cn
 xirfad.com
+xn--d1aciabhfsdfe0a7e3b.xn--p1acf
+xn--transfgran-mgbbb600b.ro
 xtremeforumz.com
 xuhss.com
 xxwl.kuaiyunds.com
diff --git a/urlhaus-filter-unbound-online.conf b/urlhaus-filter-unbound-online.conf
index c0a093aa..f1eb4c57 100644
--- a/urlhaus-filter-unbound-online.conf
+++ b/urlhaus-filter-unbound-online.conf
@@ -1,5 +1,5 @@
 # Title: abuse.ch URLhaus Malicious Domains Unbound Blocklist
-# Updated: Thu, 30 Apr 2020 12:09:30 UTC
+# Updated: Fri, 01 May 2020 00:10:35 UTC
 # Repo: https://gitlab.com/curben/urlhaus-filter
 # License: https://creativecommons.org/publicdomain/zero/1.0/
 # Source: https://urlhaus.abuse.ch/api/
@@ -12,20 +12,23 @@ local-zone: "3.zhzy999.net" always_nxdomain
 local-zone: "3.zhzy999.net3.zhzy999.net" always_nxdomain
 local-zone: "3mandatesmedia.com" always_nxdomain
 local-zone: "402musicfest.com" always_nxdomain
-local-zone: "420hempizone.co" always_nxdomain
 local-zone: "49parallel.ca" always_nxdomain
 local-zone: "786suncity.com" always_nxdomain
 local-zone: "8133msc.com" always_nxdomain
 local-zone: "8200msc.com" always_nxdomain
+local-zone: "87du.vip" always_nxdomain
 local-zone: "887sconline.com" always_nxdomain
 local-zone: "88mscco.com" always_nxdomain
 local-zone: "9983suncity.com" always_nxdomain
+local-zone: "Muanha.xyz" always_nxdomain
 local-zone: "a-reality.co.uk" always_nxdomain
+local-zone: "a.xiazai163.com" always_nxdomain
 local-zone: "aaasolution.co.th" always_nxdomain
 local-zone: "accentlandscapes.com" always_nxdomain
 local-zone: "accessyouraudience.com" always_nxdomain
 local-zone: "acteon.com.ar" always_nxdomain
 local-zone: "ade.topepics.com" always_nxdomain
+local-zone: "adnquocte.com" always_nxdomain
 local-zone: "aelogica.com" always_nxdomain
 local-zone: "agiandsam.com" always_nxdomain
 local-zone: "agipasesores.com" always_nxdomain
@@ -42,11 +45,11 @@ local-zone: "allloveseries.com" always_nxdomain
 local-zone: "alohasoftware.net" always_nxdomain
 local-zone: "alphaconsumer.net" always_nxdomain
 local-zone: "am-concepts.ca" always_nxdomain
+local-zone: "amd.alibuf.com" always_nxdomain
 local-zone: "amedeoscognamiglio.329263.com" always_nxdomain
 local-zone: "amemarine.co.th" always_nxdomain
 local-zone: "americanrange.com" always_nxdomain
 local-zone: "anadolutatili.com" always_nxdomain
-local-zone: "andreabo1.myftp.biz" always_nxdomain
 local-zone: "andreelapeyre.com" always_nxdomain
 local-zone: "andremaraisbeleggings.co.za" always_nxdomain
 local-zone: "angthong.nfe.go.th" always_nxdomain
@@ -60,9 +63,9 @@ local-zone: "archiv.bg" always_nxdomain
 local-zone: "arcticprospectus.com" always_nxdomain
 local-zone: "areac-agr.com" always_nxdomain
 local-zone: "aresorganics.com" always_nxdomain
+local-zone: "arowanafishforsale.com" always_nxdomain
 local-zone: "asadairtravel.com" always_nxdomain
 local-zone: "ascentive.com" always_nxdomain
-local-zone: "ashoakacharya.com" always_nxdomain
 local-zone: "askarindo.or.id" always_nxdomain
 local-zone: "atfile.com" always_nxdomain
 local-zone: "atomlines.com" always_nxdomain
@@ -71,60 +74,66 @@ local-zone: "atteuqpotentialunlimited.com" always_nxdomain
 local-zone: "audiosv.com" always_nxdomain
 local-zone: "aulist.com" always_nxdomain
 local-zone: "auraco.ca" always_nxdomain
+local-zone: "aurumboy.com" always_nxdomain
+local-zone: "avestor.uz" always_nxdomain
 local-zone: "azmeasurement.com" always_nxdomain
 local-zone: "aznetsolutions.com" always_nxdomain
 local-zone: "azureautomation.co.uk" always_nxdomain
 local-zone: "azzd.co.kr" always_nxdomain
 local-zone: "babaroadways.in" always_nxdomain
 local-zone: "badgesforbullies.org" always_nxdomain
-local-zone: "badmildiou.com" always_nxdomain
 local-zone: "bagmatisanchar.com" always_nxdomain
 local-zone: "bamakobleach.free.fr" always_nxdomain
+local-zone: "bangkok-orchids.com" always_nxdomain
 local-zone: "banzaimonkey.com" always_nxdomain
 local-zone: "bapo.granudan.cn" always_nxdomain
-local-zone: "bbs.sunwy.org" always_nxdomain
+local-zone: "baritaco.com" always_nxdomain
 local-zone: "bbs1.marisfrolg.com" always_nxdomain
+local-zone: "bd11.52lishi.com" always_nxdomain
 local-zone: "bd12.52lishi.com" always_nxdomain
+local-zone: "bd18.52lishi.com" always_nxdomain
 local-zone: "bd19.52lishi.com" always_nxdomain
-local-zone: "beforeshithappens.com" always_nxdomain
 local-zone: "beibei.xx007.cc" always_nxdomain
 local-zone: "bepgroup.com.hk" always_nxdomain
 local-zone: "besserblok-ufa.ru" always_nxdomain
-local-zone: "besthack.co" always_nxdomain
 local-zone: "besttasimacilik.com.tr" always_nxdomain
 local-zone: "beta.pterosol.com" always_nxdomain
 local-zone: "bflow.security-portal.cz" always_nxdomain
 local-zone: "bildeboks.no" always_nxdomain
 local-zone: "bilim-pavlodar.gov.kz" always_nxdomain
+local-zone: "billieellish.org" always_nxdomain
 local-zone: "bingxiong.vip" always_nxdomain
 local-zone: "bjkumdo.com" always_nxdomain
-local-zone: "blankki.com" always_nxdomain
 local-zone: "blog.241optical.com" always_nxdomain
-local-zone: "blog.anytimeneeds.com" always_nxdomain
 local-zone: "blog.hanxe.com" always_nxdomain
 local-zone: "bolidar.dnset.com" always_nxdomain
 local-zone: "bondbuild.com.sg" always_nxdomain
-local-zone: "bookmytripping.com" always_nxdomain
+local-zone: "bonyamin.com" always_nxdomain
+local-zone: "boscanatural.com" always_nxdomain
+local-zone: "bovientix.com" always_nxdomain
 local-zone: "bpo.correct.go.th" always_nxdomain
 local-zone: "brasstec.com.br" always_nxdomain
 local-zone: "brbs.customer.netspace.net.au" always_nxdomain
 local-zone: "brenleyquartzgh.com" always_nxdomain
 local-zone: "brewmethods.com" always_nxdomain
 local-zone: "btlocum.pl" always_nxdomain
+local-zone: "bucketstrong.s3-us-west-1.amazonaws.com" always_nxdomain
 local-zone: "bugansavings.com" always_nxdomain
+local-zone: "buhleni.co.za" always_nxdomain
 local-zone: "buydishtv.in" always_nxdomain
 local-zone: "bxbx28.cn" always_nxdomain
 local-zone: "byqkdy.com" always_nxdomain
 local-zone: "cameli.vn" always_nxdomain
+local-zone: "canaan.io" always_nxdomain
 local-zone: "caravella.com.br" always_nxdomain
 local-zone: "cassiagumrefined.com" always_nxdomain
 local-zone: "cassovia.sk" always_nxdomain
+local-zone: "castmart.ga" always_nxdomain
 local-zone: "cbk.m.dodo52.com" always_nxdomain
 local-zone: "ccnn.xiaomier.cn" always_nxdomain
+local-zone: "cdn-10049480.file.myqcloud.com" always_nxdomain
 local-zone: "cdn.xiaoduoai.com" always_nxdomain
 local-zone: "cdnus.laboratoryconecpttoday.com" always_nxdomain
-local-zone: "cecadesayu.corazondelcielo.mx" always_nxdomain
-local-zone: "ceirecrear.com.br" always_nxdomain
 local-zone: "cellas.sk" always_nxdomain
 local-zone: "cf.uuu9.com" always_nxdomain
 local-zone: "cf0.pw" always_nxdomain
@@ -133,7 +142,6 @@ local-zone: "ch.rmu.ac.th" always_nxdomain
 local-zone: "changematterscounselling.com" always_nxdomain
 local-zone: "chanvribloc.com" always_nxdomain
 local-zone: "charm.bizfxr.com" always_nxdomain
-local-zone: "chattosport.com" always_nxdomain
 local-zone: "chauffeursontravel.com" always_nxdomain
 local-zone: "chedea.eu" always_nxdomain
 local-zone: "chinhdropfile.myvnc.com" always_nxdomain
@@ -141,25 +149,26 @@ local-zone: "chinhdropfile80.myvnc.com" always_nxdomain
 local-zone: "chipmarkets.com" always_nxdomain
 local-zone: "chj.m.dodo52.com" always_nxdomain
 local-zone: "chnes17wsdywealthandmoduleorganisationui.duckdns.org" always_nxdomain
-local-zone: "cista-dobra-voda.com" always_nxdomain
+local-zone: "cinnamoncreations.com.au" always_nxdomain
 local-zone: "clearwaterriveroutfitting.com" always_nxdomain
 local-zone: "client.yaap.co.uk" always_nxdomain
 local-zone: "clinicamariademolina.com" always_nxdomain
 local-zone: "cloud-server-updater2.co.za" always_nxdomain
+local-zone: "cloud.wmsinfo.com.br" always_nxdomain
 local-zone: "colourcreative.co.za" always_nxdomain
-local-zone: "compesat.com" always_nxdomain
+local-zone: "common-factor.nl" always_nxdomain
 local-zone: "complan.hu" always_nxdomain
 local-zone: "complanbt.hu" always_nxdomain
 local-zone: "comtechadsl.com" always_nxdomain
 local-zone: "config.kuaisousou.top" always_nxdomain
-local-zone: "corazondelcielo.mx" always_nxdomain
+local-zone: "consultingcy.com" always_nxdomain
 local-zone: "counciloflight.bravepages.com" always_nxdomain
 local-zone: "cqjcc.org" always_nxdomain
 local-zone: "crittersbythebay.com" always_nxdomain
-local-zone: "crudenergyllc.com" always_nxdomain
 local-zone: "cryptoomarket.com" always_nxdomain
 local-zone: "csnserver.com" always_nxdomain
 local-zone: "csw.hu" always_nxdomain
+local-zone: "cuacuonsieure.com" always_nxdomain
 local-zone: "cvc.com.pl" always_nxdomain
 local-zone: "cyclomove.com" always_nxdomain
 local-zone: "czsl.91756.cn" always_nxdomain
@@ -174,11 +183,13 @@ local-zone: "datvensaigon.com" always_nxdomain
 local-zone: "davinadouthard.com" always_nxdomain
 local-zone: "dawaphoto.co.kr" always_nxdomain
 local-zone: "daynightgym.com" always_nxdomain
+local-zone: "ddl7.data.hu" always_nxdomain
 local-zone: "de.gsearch.com.de" always_nxdomain
 local-zone: "deixameuskls.tripod.com" always_nxdomain
 local-zone: "demo10.onbm.ir" always_nxdomain
 local-zone: "demo13.dsdemosite.com" always_nxdomain
 local-zone: "denkagida.com.tr" always_nxdomain
+local-zone: "depgrup.com" always_nxdomain
 local-zone: "depot7.com" always_nxdomain
 local-zone: "derivativespro.in" always_nxdomain
 local-zone: "dev.sebpo.net" always_nxdomain
@@ -191,6 +202,7 @@ local-zone: "dfzm.91756.cn" always_nxdomain
 local-zone: "dgecolesdepolice.bf" always_nxdomain
 local-zone: "dgnj.cn" always_nxdomain
 local-zone: "diazavendano.cl" always_nxdomain
+local-zone: "dichthuatsnu.com" always_nxdomain
 local-zone: "dichvuvesinhcongnghiep.top" always_nxdomain
 local-zone: "dienmaycu.vn" always_nxdomain
 local-zone: "dieselmoreno.cl" always_nxdomain
@@ -209,6 +221,7 @@ local-zone: "dl2.soft-lenta.ru" always_nxdomain
 local-zone: "dlist.iqilie.com" always_nxdomain
 local-zone: "dmresor.se" always_nxdomain
 local-zone: "dnn.alibuf.com" always_nxdomain
+local-zone: "dns.alibuf.com" always_nxdomain
 local-zone: "dodsonimaging.com" always_nxdomain
 local-zone: "don.viameventos.com.br" always_nxdomain
 local-zone: "dongiln.co" always_nxdomain
@@ -223,7 +236,6 @@ local-zone: "down.pcclear.com" always_nxdomain
 local-zone: "down.startools.co.kr" always_nxdomain
 local-zone: "down.upzxt.com" always_nxdomain
 local-zone: "down.webbora.com" always_nxdomain
-local-zone: "down.xrpdf.com" always_nxdomain
 local-zone: "down1.arpun.com" always_nxdomain
 local-zone: "downcdn.xianshuabao.com" always_nxdomain
 local-zone: "download.1ys.com" always_nxdomain
@@ -237,12 +249,15 @@ local-zone: "download.ware.ru" always_nxdomain
 local-zone: "download.zjsyawqj.cn" always_nxdomain
 local-zone: "download301.wanmei.com" always_nxdomain
 local-zone: "dpeasesummithilltoppers.pbworks.com" always_nxdomain
+local-zone: "dr080.com" always_nxdomain
 local-zone: "dralpaslan.com" always_nxdomain
 local-zone: "drools-moved.46999.n3.nabble.com" always_nxdomain
 local-zone: "druzim.freewww.biz" always_nxdomain
+local-zone: "drwendyellis.com" always_nxdomain
 local-zone: "dsiun.com" always_nxdomain
 local-zone: "dtsay.xyz" always_nxdomain
 local-zone: "dudulm.com" always_nxdomain
+local-zone: "duongfpt.ga" always_nxdomain
 local-zone: "dusdn.mireene.com" always_nxdomain
 local-zone: "dw.58wangdun.com" always_nxdomain
 local-zone: "dx.qqyewu.com" always_nxdomain
@@ -252,27 +267,29 @@ local-zone: "dx30.siweidaoxiang.com" always_nxdomain
 local-zone: "dx60.siweidaoxiang.com" always_nxdomain
 local-zone: "dzapasigroup.usapglobal.org" always_nxdomain
 local-zone: "dzinestudio87.co.uk" always_nxdomain
-local-zone: "e-internetim.com" always_nxdomain
 local-zone: "e.dangeana.com" always_nxdomain
+local-zone: "earningtipsbd.com" always_nxdomain
 local-zone: "easydown.workday360.cn" always_nxdomain
-local-zone: "ebook.w3wvg.com" always_nxdomain
 local-zone: "edicolanazionale.it" always_nxdomain
+local-zone: "elokshinproperty.co.za" always_nxdomain
 local-zone: "emir-elbahr.com" always_nxdomain
 local-zone: "enc-tech.com" always_nxdomain
+local-zone: "energisegroup.com" always_nxdomain
+local-zone: "enixc.com" always_nxdomain
 local-zone: "entre-potes.mon-application.com" always_nxdomain
-local-zone: "eposar.com.ar" always_nxdomain
 local-zone: "er-bulisguvenligi.com" always_nxdomain
 local-zone: "ermekanik.com" always_nxdomain
 local-zone: "esolvent.pl" always_nxdomain
 local-zone: "esteteam.org" always_nxdomain
-local-zone: "evdekal-kampanyasi20gbhediye.com" always_nxdomain
+local-zone: "evdekaldiye20-gb.com" always_nxdomain
 local-zone: "ezfintechcorp.com" always_nxdomain
 local-zone: "fafhoafouehfuh.su" always_nxdomain
-local-zone: "fairyqueenstore.com" always_nxdomain
+local-zone: "fast.rentaroom.ml" always_nxdomain
 local-zone: "fastsoft.onlinedown.net" always_nxdomain
 local-zone: "fazi.pl" always_nxdomain
 local-zone: "fenoma.net" always_nxdomain
 local-zone: "fidiag.kymco.com" always_nxdomain
+local-zone: "fifa555easy.329263.com" always_nxdomain
 local-zone: "figuig.net" always_nxdomain
 local-zone: "fileco.jobkorea.co.kr" always_nxdomain
 local-zone: "filen3.utengine.co.kr" always_nxdomain
@@ -286,6 +303,7 @@ local-zone: "flood-protection.org" always_nxdomain
 local-zone: "foodbooktv.com" always_nxdomain
 local-zone: "fordlamdong.com.vn" always_nxdomain
 local-zone: "foreverprecious.org" always_nxdomain
+local-zone: "foxfennecs.com" always_nxdomain
 local-zone: "frin.ng" always_nxdomain
 local-zone: "fte.m.dodo52.com" always_nxdomain
 local-zone: "ftpcnc-p2sp.pconline.com.cn" always_nxdomain
@@ -293,7 +311,6 @@ local-zone: "ftpftpftp.com" always_nxdomain
 local-zone: "funletters.net" always_nxdomain
 local-zone: "funpartyrent.com" always_nxdomain
 local-zone: "futuregraphics.com.ar" always_nxdomain
-local-zone: "futurodelasciudades.org" always_nxdomain
 local-zone: "g0ogle.free.fr" always_nxdomain
 local-zone: "gainsdirectory.com" always_nxdomain
 local-zone: "galuhtea.com" always_nxdomain
@@ -308,7 +325,10 @@ local-zone: "genesisconstruction.co.za" always_nxdomain
 local-zone: "germistonmiraclecentre.co.za" always_nxdomain
 local-zone: "ghislain.dartois.pagesperso-orange.fr" always_nxdomain
 local-zone: "ghwls44.gabia.io" always_nxdomain
+local-zone: "gimscompany.com" always_nxdomain
 local-zone: "glitzygal.net" always_nxdomain
+local-zone: "globaleuropeans.com" always_nxdomain
+local-zone: "gmassurance.fr" always_nxdomain
 local-zone: "gnimelf.net" always_nxdomain
 local-zone: "go.xsuad.com" always_nxdomain
 local-zone: "gocanada.vn" always_nxdomain
@@ -318,12 +338,11 @@ local-zone: "grafchekloder.rebatesrule.net" always_nxdomain
 local-zone: "granportale.com.br" always_nxdomain
 local-zone: "green100.cn" always_nxdomain
 local-zone: "greenleaveperu.com" always_nxdomain
-local-zone: "greindustry.com" always_nxdomain
 local-zone: "gssgroups.com" always_nxdomain
-local-zone: "gstat.dondyablo.com" always_nxdomain
 local-zone: "gx-10012947.file.myqcloud.com" always_nxdomain
 local-zone: "habbotips.free.fr" always_nxdomain
 local-zone: "hagebakken.no" always_nxdomain
+local-zone: "halcat.com" always_nxdomain
 local-zone: "hanaphoto.co.kr" always_nxdomain
 local-zone: "handrush.com" always_nxdomain
 local-zone: "hanoihub.vn" always_nxdomain
@@ -331,20 +350,21 @@ local-zone: "hazel-azure.co.th" always_nxdomain
 local-zone: "hdxa.net" always_nxdomain
 local-zone: "healtina.com" always_nxdomain
 local-zone: "heavenif.co.za" always_nxdomain
-local-zone: "hediye-internet.site" always_nxdomain
-local-zone: "hediyegapsinternet.com" always_nxdomain
+local-zone: "hediyem20gb-internet.org" always_nxdomain
 local-zone: "hellomessager.com" always_nxdomain
+local-zone: "herrfischer.me" always_nxdomain
 local-zone: "hfsoftware.cl" always_nxdomain
 local-zone: "hingcheong.hk" always_nxdomain
 local-zone: "hldschool.com" always_nxdomain
 local-zone: "hmbwgroup.com" always_nxdomain
+local-zone: "hmpmall.co.kr" always_nxdomain
 local-zone: "hoayeuthuong-my.sharepoint.com" always_nxdomain
 local-zone: "hostzaa.com" always_nxdomain
 local-zone: "hotart.co.nz" always_nxdomain
 local-zone: "hotel-le-relais-des-moulins.com" always_nxdomain
 local-zone: "housewifes.co" always_nxdomain
+local-zone: "how.ph" always_nxdomain
 local-zone: "hqsistemas.com.ar" always_nxdomain
-local-zone: "hseda.com" always_nxdomain
 local-zone: "hsmwebapp.com" always_nxdomain
 local-zone: "htxl.cn" always_nxdomain
 local-zone: "huishuren.nu" always_nxdomain
@@ -372,6 +392,7 @@ local-zone: "iran-gold.com" always_nxdomain
 local-zone: "iremart.es" always_nxdomain
 local-zone: "isso.ps" always_nxdomain
 local-zone: "itd.m.dodo52.com" always_nxdomain
+local-zone: "itohukuk.com" always_nxdomain
 local-zone: "itsnixielou.com" always_nxdomain
 local-zone: "ixlonbcc.com" always_nxdomain
 local-zone: "izu.co.jp" always_nxdomain
@@ -379,10 +400,11 @@ local-zone: "jaincakes.xyz" always_nxdomain
 local-zone: "jamiekaylive.com" always_nxdomain
 local-zone: "jansen-heesch.nl" always_nxdomain
 local-zone: "janvierassocies.fr" always_nxdomain
-local-zone: "jaservicioscontables.casteviajes.com" always_nxdomain
 local-zone: "javatank.ru" always_nxdomain
 local-zone: "jcedu.org" always_nxdomain
 local-zone: "jessymart.flexyhub.com" always_nxdomain
+local-zone: "jhorapatarastana.xyz" always_nxdomain
+local-zone: "jjjexx.329263.com" always_nxdomain
 local-zone: "jmtc.91756.cn" always_nxdomain
 local-zone: "jointings.org" always_nxdomain
 local-zone: "jonpetesharefile.com" always_nxdomain
@@ -399,6 +421,7 @@ local-zone: "jyv.fi" always_nxdomain
 local-zone: "jzny.com.cn" always_nxdomain
 local-zone: "k.ludong.tv" always_nxdomain
 local-zone: "k3.etfiber.net" always_nxdomain
+local-zone: "kabiru.ru" always_nxdomain
 local-zone: "kachsurf.mylftv.com" always_nxdomain
 local-zone: "kamasu11.cafe24.com" always_nxdomain
 local-zone: "kanok.co.th" always_nxdomain
@@ -406,9 +429,10 @@ local-zone: "kar.big-pro.com" always_nxdomain
 local-zone: "karavantekstil.com" always_nxdomain
 local-zone: "kassohome.com.tr" always_nxdomain
 local-zone: "kazanin20gbturkiye.com" always_nxdomain
-local-zone: "kazanturkiye20gb.com" always_nxdomain
 local-zone: "kdsp.co.kr" always_nxdomain
+local-zone: "keckarangdadap.pekalongankab.go.id" always_nxdomain
 local-zone: "kejpa.com" always_nxdomain
+local-zone: "kgfs3.329263.com" always_nxdomain
 local-zone: "khan-associates.net" always_nxdomain
 local-zone: "khunnapap.com" always_nxdomain
 local-zone: "kiaowadubai.com" always_nxdomain
@@ -416,10 +440,12 @@ local-zone: "kiencuonghotel.vn" always_nxdomain
 local-zone: "kjbm9.mof.gov.cn" always_nxdomain
 local-zone: "kleinendeli.co.za" always_nxdomain
 local-zone: "knightsbridgeenergy.com.ng" always_nxdomain
+local-zone: "kolibri-fabrika.ru" always_nxdomain
 local-zone: "koppemotta.com.br" always_nxdomain
 local-zone: "koralli.if.ua" always_nxdomain
 local-zone: "kqq.kz" always_nxdomain
 local-zone: "kristofferdaniels.com" always_nxdomain
+local-zone: "kupaliskohs.sk" always_nxdomain
 local-zone: "kuznetsov.ca" always_nxdomain
 local-zone: "kwanfromhongkong.com" always_nxdomain
 local-zone: "kwikomfi-lab.com" always_nxdomain
@@ -428,7 +454,6 @@ local-zone: "lameguard.ru" always_nxdomain
 local-zone: "lammaixep.com" always_nxdomain
 local-zone: "landmarktreks.com" always_nxdomain
 local-zone: "langyabbs.05yun.cn" always_nxdomain
-local-zone: "lastmorgoth.com" always_nxdomain
 local-zone: "lcfurtado.com.br" always_nxdomain
 local-zone: "ld.mediaget.com" always_nxdomain
 local-zone: "learnbuddy.com" always_nxdomain
@@ -449,6 +474,7 @@ local-zone: "log.yundabao.cn" always_nxdomain
 local-zone: "lsyr.net" always_nxdomain
 local-zone: "lt02.datacomspecialists.net" always_nxdomain
 local-zone: "luatminhthuan.com" always_nxdomain
+local-zone: "luckytriumph.com" always_nxdomain
 local-zone: "luisnacht.com.ar" always_nxdomain
 local-zone: "luyalu.net" always_nxdomain
 local-zone: "lvr.samacomplus.com" always_nxdomain
@@ -484,6 +510,7 @@ local-zone: "mhkdhotbot80.myvnc.com" always_nxdomain
 local-zone: "miaoshuosh.com" always_nxdomain
 local-zone: "micahproducts.com" always_nxdomain
 local-zone: "micalle.com.au" always_nxdomain
+local-zone: "milebgd.mycpanel.rs" always_nxdomain
 local-zone: "mirror.mypage.sk" always_nxdomain
 local-zone: "mis.nbcc.ac.th" always_nxdomain
 local-zone: "misterson.com" always_nxdomain
@@ -491,12 +518,14 @@ local-zone: "mistydeblasiophotography.com" always_nxdomain
 local-zone: "mkk09.kr" always_nxdomain
 local-zone: "mkontakt.az" always_nxdomain
 local-zone: "mlbfreestream.gq" always_nxdomain
+local-zone: "mlbfreestream.ml" always_nxdomain
 local-zone: "mmc.ru.com" always_nxdomain
 local-zone: "mobiadnews.com" always_nxdomain
 local-zone: "mobilier-modern.ro" always_nxdomain
 local-zone: "mochandmade.us" always_nxdomain
+local-zone: "modcloudserver.eu" always_nxdomain
 local-zone: "moha-group.com" always_nxdomain
-local-zone: "mononet.lv" always_nxdomain
+local-zone: "moinmo.de" always_nxdomain
 local-zone: "moscow11.at" always_nxdomain
 local-zone: "mountveederwines.com" always_nxdomain
 local-zone: "moyo.co.kr" always_nxdomain
@@ -506,13 +535,13 @@ local-zone: "msecurity.ro" always_nxdomain
 local-zone: "mteng.mmj7.com" always_nxdomain
 local-zone: "mtfelektroteknik.com" always_nxdomain
 local-zone: "mueblesjcp.cl" always_nxdomain
+local-zone: "mv360.net" always_nxdomain
 local-zone: "mvb.kz" always_nxdomain
 local-zone: "mxpiqw.am.files.1drv.com" always_nxdomain
 local-zone: "myexpertca.in" always_nxdomain
 local-zone: "myhood.cl" always_nxdomain
 local-zone: "myo.net.au" always_nxdomain
 local-zone: "myofficeplus.com" always_nxdomain
-local-zone: "myonlinepokiesblog.com" always_nxdomain
 local-zone: "mytex.pe" always_nxdomain
 local-zone: "mytrains.net" always_nxdomain
 local-zone: "mywp.asia" always_nxdomain
@@ -532,7 +561,6 @@ local-zone: "newsun-shop.com" always_nxdomain
 local-zone: "newxing.com" always_nxdomain
 local-zone: "nfbio.com" always_nxdomain
 local-zone: "ngoaingu.garage.com.vn" always_nxdomain
-local-zone: "nilemixitupd.biz.pl" always_nxdomain
 local-zone: "nkdhub.com" always_nxdomain
 local-zone: "nofound.000webhostapp.com" always_nxdomain
 local-zone: "nprg.ru" always_nxdomain
@@ -543,11 +571,11 @@ local-zone: "oa.hys.cn" always_nxdomain
 local-zone: "obnova.zzux.com" always_nxdomain
 local-zone: "obseques-conseils.com" always_nxdomain
 local-zone: "ohe.ie" always_nxdomain
+local-zone: "oknoplastik.sk" always_nxdomain
 local-zone: "omega.az" always_nxdomain
 local-zone: "omsk-osma.ru" always_nxdomain
 local-zone: "omuzgor.tj" always_nxdomain
 local-zone: "onestin.ro" always_nxdomain
-local-zone: "onyourmarkmindsetgo.com" always_nxdomain
 local-zone: "openclient.sroinfo.com" always_nxdomain
 local-zone: "operasanpiox.bravepages.com" always_nxdomain
 local-zone: "ophtalmiccenter.com" always_nxdomain
@@ -566,6 +594,7 @@ local-zone: "p3.zbjimg.com" always_nxdomain
 local-zone: "p30qom.ir" always_nxdomain
 local-zone: "p500.mon-application.com" always_nxdomain
 local-zone: "pack301.bravepages.com" always_nxdomain
+local-zone: "pakdesighee.com" always_nxdomain
 local-zone: "palochusvet.szm.com" always_nxdomain
 local-zone: "partyflix.net" always_nxdomain
 local-zone: "pat4.jetos.com" always_nxdomain
@@ -575,20 +604,26 @@ local-zone: "patch2.99ddd.com" always_nxdomain
 local-zone: "patch3.99ddd.com" always_nxdomain
 local-zone: "patrickchan-hk.net" always_nxdomain
 local-zone: "pawel-sikora.pl" always_nxdomain
+local-zone: "pcexperts.co.za" always_nxdomain
 local-zone: "pcginsure.com" always_nxdomain
 local-zone: "pcsoori.com" always_nxdomain
 local-zone: "pedidoslalacteo.com.ar" always_nxdomain
+local-zone: "peterssandmay.com" always_nxdomain
+local-zone: "petromltd.com" always_nxdomain
 local-zone: "ph4s.ru" always_nxdomain
 local-zone: "phamchilong.com" always_nxdomain
 local-zone: "phudieusongma.com" always_nxdomain
+local-zone: "phuphamca.com" always_nxdomain
 local-zone: "piapendet.com" always_nxdomain
 local-zone: "pink99.com" always_nxdomain
 local-zone: "platisher.xyz" always_nxdomain
+local-zone: "pmguide.net" always_nxdomain
 local-zone: "podiatristlansdale.com" always_nxdomain
 local-zone: "podrska.com.hr" always_nxdomain
 local-zone: "ponto50.com.br" always_nxdomain
 local-zone: "poolbook.ir" always_nxdomain
 local-zone: "ppl.ac.id" always_nxdomain
+local-zone: "prepaenunsoloexamen.academiagalileoac.com" always_nxdomain
 local-zone: "probost.cz" always_nxdomain
 local-zone: "profitcoach.net" always_nxdomain
 local-zone: "prosoc.nl" always_nxdomain
@@ -611,11 +646,11 @@ local-zone: "rc.ixiaoyang.cn" always_nxdomain
 local-zone: "readytalk.github.io" always_nxdomain
 local-zone: "real-song.tjmedia.co.kr" always_nxdomain
 local-zone: "recommendservices.com" always_nxdomain
-local-zone: "redeemerssports.com" always_nxdomain
 local-zone: "redesoftdownload.info" always_nxdomain
 local-zone: "rekspirit.ru" always_nxdomain
 local-zone: "renimin.mymom.info" always_nxdomain
 local-zone: "renovanorte.com" always_nxdomain
+local-zone: "rentaroom.ml" always_nxdomain
 local-zone: "res.uf1.cn" always_nxdomain
 local-zone: "ret.space" always_nxdomain
 local-zone: "rezaazizi.ir" always_nxdomain
@@ -628,13 +663,16 @@ local-zone: "robotrade.com.vn" always_nxdomain
 local-zone: "rollingmill.in" always_nxdomain
 local-zone: "rollscar.pk" always_nxdomain
 local-zone: "rossogato.com" always_nxdomain
+local-zone: "royalplusmobile.ir" always_nxdomain
 local-zone: "ruisgood.ru" always_nxdomain
 local-zone: "s.51shijuan.com" always_nxdomain
 local-zone: "s.kk30.com" always_nxdomain
+local-zone: "s14b.91danji.com" always_nxdomain
+local-zone: "s14b.groundyun.cn" always_nxdomain
 local-zone: "sabiupd.compress.to" always_nxdomain
 local-zone: "saboorjaam.ir" always_nxdomain
 local-zone: "sabupda.vizvaz.com" always_nxdomain
-local-zone: "sahathaikasetpan.com" always_nxdomain
+local-zone: "saglikodemelerinial.org" always_nxdomain
 local-zone: "salvation24.com" always_nxdomain
 local-zone: "salvationbd.com" always_nxdomain
 local-zone: "sandovalgraphics.com" always_nxdomain
@@ -648,11 +686,11 @@ local-zone: "seibee.biz" always_nxdomain
 local-zone: "selekture.com" always_nxdomain
 local-zone: "selfuseproperty.com" always_nxdomain
 local-zone: "selvikoyunciftligi.com" always_nxdomain
-local-zone: "sendeyararlanturkiye20gb.com" always_nxdomain
 local-zone: "serpentrising.com" always_nxdomain
 local-zone: "servicemhkd.myvnc.com" always_nxdomain
 local-zone: "servicemhkd80.myvnc.com" always_nxdomain
 local-zone: "serviciosinfoware.cl" always_nxdomain
+local-zone: "sexybaccarat.329263.com" always_nxdomain
 local-zone: "sfoodfeedf.org" always_nxdomain
 local-zone: "sgm.pc6.com" always_nxdomain
 local-zone: "shacked.webdepot.co.il" always_nxdomain
@@ -661,6 +699,7 @@ local-zone: "shaoxiaofei.cn" always_nxdomain
 local-zone: "share.dmca.gripe" always_nxdomain
 local-zone: "sharjahas.com" always_nxdomain
 local-zone: "shembefoundation.com" always_nxdomain
+local-zone: "shopjumpn.ch" always_nxdomain
 local-zone: "simlun.com.ar" always_nxdomain
 local-zone: "sinastorage.cn" always_nxdomain
 local-zone: "sindicato1ucm.cl" always_nxdomain
@@ -683,6 +722,7 @@ local-zone: "sophiaskyhotel.vn" always_nxdomain
 local-zone: "sota-france.fr" always_nxdomain
 local-zone: "souldancing.cn" always_nxdomain
 local-zone: "speed.myz.info" always_nxdomain
+local-zone: "sportshlive.xyz" always_nxdomain
 local-zone: "sportstrem.gq" always_nxdomain
 local-zone: "spurstogo.com" always_nxdomain
 local-zone: "sputnikmailru.cdnmail.ru" always_nxdomain
@@ -693,15 +733,16 @@ local-zone: "ss.cybersoft-vn.com" always_nxdomain
 local-zone: "sslv3.at" always_nxdomain
 local-zone: "staging.popclusive.asia" always_nxdomain
 local-zone: "starcountry.net" always_nxdomain
+local-zone: "static.ilclock.com" always_nxdomain
 local-zone: "static.topxgun.com" always_nxdomain
+local-zone: "stationaryhome.com" always_nxdomain
 local-zone: "stecit.nl" always_nxdomain
-local-zone: "steelbuildings.com" always_nxdomain
 local-zone: "stevewalker.com.au" always_nxdomain
 local-zone: "story-maker.jp" always_nxdomain
+local-zone: "stubbackup.ru" always_nxdomain
 local-zone: "suc9898.com" always_nxdomain
 local-zone: "suncity116.com" always_nxdomain
 local-zone: "support.clz.kr" always_nxdomain
-local-zone: "supportalaskausa.org" always_nxdomain
 local-zone: "sv.pvroe.com" always_nxdomain
 local-zone: "svkacademy.com" always_nxdomain
 local-zone: "svn.cc.jyu.fi" always_nxdomain
@@ -710,7 +751,6 @@ local-zone: "swwbia.com" always_nxdomain
 local-zone: "symanreni.mysecondarydns.com" always_nxdomain
 local-zone: "szxypt.com" always_nxdomain
 local-zone: "t.honker.info" always_nxdomain
-local-zone: "tandenblekenhoofddorp.nl" always_nxdomain
 local-zone: "taraward.com" always_nxdomain
 local-zone: "taxpos.com" always_nxdomain
 local-zone: "tcy.198424.com" always_nxdomain
@@ -732,21 +772,21 @@ local-zone: "theelectronics4u.com" always_nxdomain
 local-zone: "theprestige.ro" always_nxdomain
 local-zone: "theptiendat.com" always_nxdomain
 local-zone: "therecruiter.io" always_nxdomain
-local-zone: "thesecuritysoftwarescannerindustrgreat.duckdns.org" always_nxdomain
-local-zone: "thornadops.com" always_nxdomain
 local-zone: "thosewebbs.com" always_nxdomain
+local-zone: "thuong.bidiworks.com" always_nxdomain
 local-zone: "tianangdep.com" always_nxdomain
+local-zone: "tianmaouae.com" always_nxdomain
 local-zone: "tianzi8.cn" always_nxdomain
 local-zone: "tibinst.mefound.com" always_nxdomain
 local-zone: "tibok.lflink.com" always_nxdomain
 local-zone: "ticte.in" always_nxdomain
 local-zone: "timlinger.com" always_nxdomain
+local-zone: "tinckorm.beget.tech" always_nxdomain
 local-zone: "tmhfashionhouse.co.za" always_nxdomain
 local-zone: "toe.polinema.ac.id" always_nxdomain
 local-zone: "tonghopgia.net" always_nxdomain
 local-zone: "tonydong.com" always_nxdomain
 local-zone: "tonyzone.com" always_nxdomain
-local-zone: "treefighter.org" always_nxdomain
 local-zone: "tsd.jxwan.com" always_nxdomain
 local-zone: "tsredco.telangana.gov.in" always_nxdomain
 local-zone: "tulli.info" always_nxdomain
@@ -755,6 +795,7 @@ local-zone: "tuneup.ibk.me" always_nxdomain
 local-zone: "tup.com.cn" always_nxdomain
 local-zone: "tutuler.com" always_nxdomain
 local-zone: "uc-56.ru" always_nxdomain
+local-zone: "ucto-id.cz" always_nxdomain
 local-zone: "ufabet168168.329263.com" always_nxdomain
 local-zone: "ugc.wegame.com.cn" always_nxdomain
 local-zone: "ultimatelamborghiniexperience.com" always_nxdomain
@@ -769,10 +810,14 @@ local-zone: "upd.m.dodo52.com" always_nxdomain
 local-zone: "update.iwang8.com" always_nxdomain
 local-zone: "update.my.99.com" always_nxdomain
 local-zone: "updateflashplayer.link" always_nxdomain
+local-zone: "upendiveterinariovalencia.es" always_nxdomain
 local-zone: "urgentmessage.org" always_nxdomain
+local-zone: "usapglobal.usapglobal.org" always_nxdomain
 local-zone: "users.skynet.be" always_nxdomain
 local-zone: "uskeba.ca" always_nxdomain
 local-zone: "usmadetshirts.com" always_nxdomain
+local-zone: "uyen.vn" always_nxdomain
+local-zone: "uygulamalarim-hediyeinternet.org" always_nxdomain
 local-zone: "vadyur.github.io" always_nxdomain
 local-zone: "vaeqpu.329263.com" always_nxdomain
 local-zone: "valedchap.ir" always_nxdomain
@@ -781,12 +826,12 @@ local-zone: "vasoccernews.com" always_nxdomain
 local-zone: "vaziri.echobit.ir" always_nxdomain
 local-zone: "vdotrip.blog" always_nxdomain
 local-zone: "vfocus.net" always_nxdomain
+local-zone: "vibicloud.com" always_nxdomain
 local-zone: "videoswebcammsn.free.fr" always_nxdomain
 local-zone: "vietducbio.com" always_nxdomain
 local-zone: "vigilar.com.br" always_nxdomain
 local-zone: "vip.recommendedtoyoo.com" always_nxdomain
 local-zone: "virustreatments.empeeevents.com" always_nxdomain
-local-zone: "visagepk.com" always_nxdomain
 local-zone: "visualdata.ru" always_nxdomain
 local-zone: "vitinhvnt.com" always_nxdomain
 local-zone: "vitromed.ro" always_nxdomain
@@ -796,9 +841,9 @@ local-zone: "w.zhzy999.net" always_nxdomain
 local-zone: "wakecar.cn" always_nxdomain
 local-zone: "wangtong7.siweidaoxiang.com" always_nxdomain
 local-zone: "wangzonghang.cn" always_nxdomain
+local-zone: "wap.dosame.com" always_nxdomain
 local-zone: "ware.ru" always_nxdomain
 local-zone: "warriorllc.com" always_nxdomain
-local-zone: "waterosmo.com" always_nxdomain
 local-zone: "wbd.5636.com" always_nxdomain
 local-zone: "wbkmt.com" always_nxdomain
 local-zone: "webarte.com.br" always_nxdomain
@@ -815,17 +860,19 @@ local-zone: "wood-expert.net" always_nxdomain
 local-zone: "woodsytech.com" always_nxdomain
 local-zone: "wp.quercus.palustris.dk" always_nxdomain
 local-zone: "wq.feiniaoai.cn" always_nxdomain
-local-zone: "writesofpassage.co.za" always_nxdomain
 local-zone: "wsg.com.sg" always_nxdomain
 local-zone: "wt8.siweidaoxiang.com" always_nxdomain
 local-zone: "wt9.siweidaoxiang.com" always_nxdomain
 local-zone: "wwealthllc.com" always_nxdomain
+local-zone: "www-ecimer-uygulamayukleme-govtr.com" always_nxdomain
 local-zone: "www2.recepty5.com" always_nxdomain
 local-zone: "x2vn.com" always_nxdomain
 local-zone: "xia.vzboot.com" always_nxdomain
 local-zone: "xiaidown.com" always_nxdomain
 local-zone: "xiegushi.cn" always_nxdomain
 local-zone: "xirfad.com" always_nxdomain
+local-zone: "xn--d1aciabhfsdfe0a7e3b.xn--p1acf" always_nxdomain
+local-zone: "xn--transfgran-mgbbb600b.ro" always_nxdomain
 local-zone: "xtremeforumz.com" always_nxdomain
 local-zone: "xuhss.com" always_nxdomain
 local-zone: "xxwl.kuaiyunds.com" always_nxdomain
diff --git a/urlhaus-filter-unbound.conf b/urlhaus-filter-unbound.conf
index 2d6a9655..707081e0 100644
--- a/urlhaus-filter-unbound.conf
+++ b/urlhaus-filter-unbound.conf
@@ -1,5 +1,5 @@
 # Title: abuse.ch URLhaus Malicious Domains Unbound Blocklist
-# Updated: Thu, 30 Apr 2020 12:09:30 UTC
+# Updated: Fri, 01 May 2020 00:10:35 UTC
 # Repo: https://gitlab.com/curben/urlhaus-filter
 # License: https://creativecommons.org/publicdomain/zero/1.0/
 # Source: https://urlhaus.abuse.ch/api/
@@ -2342,6 +2342,7 @@ local-zone: "admyinfo.000webhostapp.com" always_nxdomain
 local-zone: "adnaan.website" always_nxdomain
 local-zone: "adnc.cn" always_nxdomain
 local-zone: "adnetss.com" always_nxdomain
+local-zone: "adnquocte.com" always_nxdomain
 local-zone: "adoam.pw" always_nxdomain
 local-zone: "adoam.site" always_nxdomain
 local-zone: "adobe-flash-player.pro" always_nxdomain
@@ -5771,6 +5772,7 @@ local-zone: "ariesnetworks.org.uk" always_nxdomain
 local-zone: "arifcagan.com" always_nxdomain
 local-zone: "arifhajj.umrahsoftware.co.uk" always_nxdomain
 local-zone: "arifolmancohen.com" always_nxdomain
+local-zone: "arifrehan.xyz" always_nxdomain
 local-zone: "arifzena.com" always_nxdomain
 local-zone: "arigato.com.vn" always_nxdomain
 local-zone: "arigbabuwogalleria.com" always_nxdomain
@@ -7173,6 +7175,7 @@ local-zone: "averin.pro" always_nxdomain
 local-zone: "averson.by" always_nxdomain
 local-zone: "averybit.com" always_nxdomain
 local-zone: "aveslor.com" always_nxdomain
+local-zone: "avestor.uz" always_nxdomain
 local-zone: "avfphoto.com" always_nxdomain
 local-zone: "avgsupport.info" always_nxdomain
 local-zone: "avheaven.icu" always_nxdomain
@@ -7460,6 +7463,7 @@ local-zone: "azcama.org" always_nxdomain
 local-zone: "azdhj.com" always_nxdomain
 local-zone: "azedizayn.com" always_nxdomain
 local-zone: "azeevatech.in" always_nxdomain
+local-zone: "azenzatowers.com" always_nxdomain
 local-zone: "azeritibb.pe.hu" always_nxdomain
 local-zone: "azerothland.com" always_nxdomain
 local-zone: "azeta.xyz" always_nxdomain
@@ -9477,6 +9481,7 @@ local-zone: "billenloe.com" always_nxdomain
 local-zone: "billerimpex.com" always_nxdomain
 local-zone: "billeter.net" always_nxdomain
 local-zone: "billfritzjr.com" always_nxdomain
+local-zone: "billieellish.org" always_nxdomain
 local-zone: "billing.wpkami.com" always_nxdomain
 local-zone: "billingsupport.ru" always_nxdomain
 local-zone: "billingtonbarristers.com" always_nxdomain
@@ -11483,6 +11488,7 @@ local-zone: "buchanancu.org" always_nxdomain
 local-zone: "bucharest-independent-escort.com" always_nxdomain
 local-zone: "bucketlistadvtours.com" always_nxdomain
 local-zone: "bucketlistrecipes.com" always_nxdomain
+local-zone: "bucketstrong.s3-us-west-1.amazonaws.com" always_nxdomain
 local-zone: "buckeyeoptical.com" always_nxdomain
 local-zone: "buckinghamandlloyds.com" always_nxdomain
 local-zone: "buckleman.co.id" always_nxdomain
@@ -12285,6 +12291,7 @@ local-zone: "camsexsnol.nl" always_nxdomain
 local-zone: "can-do-property.co.uk" always_nxdomain
 local-zone: "can-doelectric.com" always_nxdomain
 local-zone: "can-media.de" always_nxdomain
+local-zone: "canaan.io" always_nxdomain
 local-zone: "canaccordgenuity.bluematrix.com" always_nxdomain
 local-zone: "canacofactura.com.mx" always_nxdomain
 local-zone: "canadabestonline.com" always_nxdomain
@@ -16656,6 +16663,7 @@ local-zone: "currencyavenue.com" always_nxdomain
 local-zone: "currencyexchanger.com.ng" always_nxdomain
 local-zone: "currenteventsmemes.com" always_nxdomain
 local-zone: "curs.neagoeandrei.com" always_nxdomain
+local-zone: "cursdictie.ro" always_nxdomain
 local-zone: "curso.domeducacional.com" always_nxdomain
 local-zone: "curso.ssthno.webdesignssw.cl" always_nxdomain
 local-zone: "cursoaphonline.com.br" always_nxdomain
@@ -17335,6 +17343,7 @@ local-zone: "data.kaoyany.top" always_nxdomain
 local-zone: "data.nanhai.cn" always_nxdomain
 local-zone: "data.over-blog-kiwi.com" always_nxdomain
 local-zone: "data.yx1999.com" always_nxdomain
+local-zone: "data4i.com" always_nxdomain
 local-zone: "data4u.kay-tech.info" always_nxdomain
 local-zone: "databacknow.com" always_nxdomain
 local-zone: "database.z-flooring.com" always_nxdomain
@@ -17446,6 +17455,7 @@ local-zone: "david.ph-prod.com" always_nxdomain
 local-zone: "davidaluke.com" always_nxdomain
 local-zone: "davidcizek.cz" always_nxdomain
 local-zone: "davidcjones.ca" always_nxdomain
+local-zone: "davidd47.sg-host.com" always_nxdomain
 local-zone: "davidedigiorgio360.com" always_nxdomain
 local-zone: "davidemarocco.com" always_nxdomain
 local-zone: "davidephoto.it" always_nxdomain
@@ -18987,6 +18997,7 @@ local-zone: "dicampo.cl" always_nxdomain
 local-zone: "dicarmo.com" always_nxdomain
 local-zone: "dicebot-game.com" always_nxdomain
 local-zone: "dichiara.com.ar" always_nxdomain
+local-zone: "dichthuatsnu.com" always_nxdomain
 local-zone: "dichvuchupanhsanpham.com" always_nxdomain
 local-zone: "dichvucong.vn" always_nxdomain
 local-zone: "dichvucuoi0f16.toannang.xyz" always_nxdomain
@@ -20183,6 +20194,7 @@ local-zone: "dotlenieni.pl" always_nxdomain
 local-zone: "dotlineplane.co.th" always_nxdomain
 local-zone: "dotnetdays.ro" always_nxdomain
 local-zone: "dotnetebusiness.com" always_nxdomain
+local-zone: "dotpay.id" always_nxdomain
 local-zone: "dotpos.in" always_nxdomain
 local-zone: "dotproject.org" always_nxdomain
 local-zone: "dotshopify.com" always_nxdomain
@@ -20427,6 +20439,7 @@ local-zone: "dr-nasrinataeifar.ir" always_nxdomain
 local-zone: "dr-popa.com" always_nxdomain
 local-zone: "dr-prof-sachidanandasinha-dentalclinic.com" always_nxdomain
 local-zone: "dr-recella-global.com" always_nxdomain
+local-zone: "dr080.com" always_nxdomain
 local-zone: "dr702.com" always_nxdomain
 local-zone: "draaiercnc.nl" always_nxdomain
 local-zone: "draaiorgel.org" always_nxdomain
@@ -22792,6 +22805,7 @@ local-zone: "enilaegroj.com" always_nxdomain
 local-zone: "enilegho.com.br" always_nxdomain
 local-zone: "enis1130.000webhostapp.com" always_nxdomain
 local-zone: "eniture-qa.com" always_nxdomain
+local-zone: "enixc.com" always_nxdomain
 local-zone: "eniyionfirma.com" always_nxdomain
 local-zone: "enjoy-aquaristik.de" always_nxdomain
 local-zone: "enjoy-kobac.com" always_nxdomain
@@ -23656,6 +23670,7 @@ local-zone: "evdekal-kampanyasi20gbhediye.com" always_nxdomain
 local-zone: "evdekal20kapgb.com" always_nxdomain
 local-zone: "evdekalan20gbkazaniyor.com" always_nxdomain
 local-zone: "evdekalana20gb-hehe.com" always_nxdomain
+local-zone: "evdekaldiye20-gb.com" always_nxdomain
 local-zone: "evdekaltuekiyesaglik.com" always_nxdomain
 local-zone: "evdekl20gbx.com" always_nxdomain
 local-zone: "evdyn.com.sg" always_nxdomain
@@ -26221,6 +26236,7 @@ local-zone: "freeofshackles.com" always_nxdomain
 local-zone: "freepaidcourses.com" always_nxdomain
 local-zone: "freepalestinemovement.org" always_nxdomain
 local-zone: "freephenix.cn" always_nxdomain
+local-zone: "freeprofessionalwebhosting.com" always_nxdomain
 local-zone: "freeselfstoragequote.com" always_nxdomain
 local-zone: "freeslits.net" always_nxdomain
 local-zone: "freesoft.website" always_nxdomain
@@ -28155,6 +28171,7 @@ local-zone: "gmakeup.ru" always_nxdomain
 local-zone: "gmann.blog" always_nxdomain
 local-zone: "gmann.info" always_nxdomain
 local-zone: "gmann.photos" always_nxdomain
+local-zone: "gmassurance.fr" always_nxdomain
 local-zone: "gmc2.ru" always_nxdomain
 local-zone: "gmcoflouisville.com" always_nxdomain
 local-zone: "gmcostruzionieservizi.com" always_nxdomain
@@ -30330,6 +30347,7 @@ local-zone: "hediye-internet-saglik.org" always_nxdomain
 local-zone: "hediye-internet.site" always_nxdomain
 local-zone: "hediyegapsinternet.com" always_nxdomain
 local-zone: "hediyeinternetpaketim.com" always_nxdomain
+local-zone: "hediyem20gb-internet.org" always_nxdomain
 local-zone: "hediyenkolay.com" always_nxdomain
 local-zone: "hedrasl.com" always_nxdomain
 local-zone: "hedwise.com" always_nxdomain
@@ -30569,6 +30587,7 @@ local-zone: "herrajesmasota.com" always_nxdomain
 local-zone: "herratech.com" always_nxdomain
 local-zone: "herrenmode.tk" always_nxdomain
 local-zone: "herrent.com" always_nxdomain
+local-zone: "herrfischer.me" always_nxdomain
 local-zone: "herrgaardstak.se" always_nxdomain
 local-zone: "herryjoa.mireene.com" always_nxdomain
 local-zone: "herscare.net" always_nxdomain
@@ -31708,6 +31727,7 @@ local-zone: "htmedia.net" always_nxdomain
 local-zone: "htmediagroups.com" always_nxdomain
 local-zone: "html.nichost.ru" always_nxdomain
 local-zone: "htmlget.com" always_nxdomain
+local-zone: "htn13.com" always_nxdomain
 local-zone: "htnieuw.hazenbergtimmerwerken.nl" always_nxdomain
 local-zone: "htpinvestment.com.vn" always_nxdomain
 local-zone: "htt.nu" always_nxdomain
@@ -34454,6 +34474,7 @@ local-zone: "itray.co.kr" always_nxdomain
 local-zone: "itrc.gov.co" always_nxdomain
 local-zone: "itrenaissance.com" always_nxdomain
 local-zone: "itreni.net" always_nxdomain
+local-zone: "itrigger.cn" always_nxdomain
 local-zone: "itroj.ir" always_nxdomain
 local-zone: "its-fondazionearchimede.it" always_nxdomain
 local-zone: "its-oh.net" always_nxdomain
@@ -35244,6 +35265,7 @@ local-zone: "jhdwas.org" always_nxdomain
 local-zone: "jhelt.net" always_nxdomain
 local-zone: "jhom.in" always_nxdomain
 local-zone: "jhonhusein.com" always_nxdomain
+local-zone: "jhorapatarastana.xyz" always_nxdomain
 local-zone: "jhrt185.com" always_nxdomain
 local-zone: "jhssourcingltd.com" always_nxdomain
 local-zone: "jhsstudio.com.br" always_nxdomain
@@ -37216,6 +37238,7 @@ local-zone: "khoshrougallery.com" always_nxdomain
 local-zone: "khotanperfume.com" always_nxdomain
 local-zone: "khotawa.com" always_nxdomain
 local-zone: "khothietbivesinh24h.com" always_nxdomain
+local-zone: "khoztrip.ir" always_nxdomain
 local-zone: "khp89wc.com" always_nxdomain
 local-zone: "khpm.ir" always_nxdomain
 local-zone: "khrystyna-verkholiak.com" always_nxdomain
@@ -37860,6 +37883,7 @@ local-zone: "kolbecompany.com" always_nxdomain
 local-zone: "kolejmontlari.com" always_nxdomain
 local-zone: "kolejnicky.cz" always_nxdomain
 local-zone: "kolejskilmentari.edu.my" always_nxdomain
+local-zone: "kolibri-fabrika.ru" always_nxdomain
 local-zone: "kolibristattoo.lt" always_nxdomain
 local-zone: "kolkatacleanair.in" always_nxdomain
 local-zone: "koll-partner.tax" always_nxdomain
@@ -38096,6 +38120,7 @@ local-zone: "kpmicrowave.com" always_nxdomain
 local-zone: "kpodata.com" always_nxdomain
 local-zone: "kpogroup.bo" always_nxdomain
 local-zone: "kpopstarz.kienthucsong.info" always_nxdomain
+local-zone: "kposter.alexandruplesea.ro" always_nxdomain
 local-zone: "kppspgrojec.internetdsl.pl" always_nxdomain
 local-zone: "kprsolutions.com" always_nxdomain
 local-zone: "kpss.ir" always_nxdomain
@@ -43473,6 +43498,7 @@ local-zone: "mebs-marketing.de" always_nxdomain
 local-zone: "mecanique-vivante.com" always_nxdomain
 local-zone: "mecanizadosgurrutxaga.com" always_nxdomain
 local-zone: "mecatronica.ifc-riodosul.edu.br" always_nxdomain
+local-zone: "mecbox.cn" always_nxdomain
 local-zone: "mecenat.com.ua" always_nxdomain
 local-zone: "mecflui.com.br" always_nxdomain
 local-zone: "mecgwl.ac.in" always_nxdomain
@@ -44456,6 +44482,7 @@ local-zone: "milcommonline.com" always_nxdomain
 local-zone: "milczanowska.com" always_nxdomain
 local-zone: "mildibsilgip.com" always_nxdomain
 local-zone: "mileageindia.com" always_nxdomain
+local-zone: "milebgd.mycpanel.rs" always_nxdomain
 local-zone: "milehighffa.com" always_nxdomain
 local-zone: "milehighhomebuyers.com" always_nxdomain
 local-zone: "milena-koenig.de" always_nxdomain
@@ -45239,6 +45266,7 @@ local-zone: "moie.nl" always_nxdomain
 local-zone: "moigioi.info" always_nxdomain
 local-zone: "moikihit.ru" always_nxdomain
 local-zone: "moinetfils.com" always_nxdomain
+local-zone: "moinmo.de" always_nxdomain
 local-zone: "mois.com.br" always_nxdomain
 local-zone: "moiselektronik.com" always_nxdomain
 local-zone: "moisesdavid.com" always_nxdomain
@@ -46030,6 +46058,8 @@ local-zone: "muhammadiyahamin.com" always_nxdomain
 local-zone: "muhammadshahid.techsandooq.com" always_nxdomain
 local-zone: "muhanoiss6.net" always_nxdomain
 local-zone: "muhendismeraki.com" always_nxdomain
+local-zone: "muhtesem20gb.xyz" always_nxdomain
+local-zone: "muhtessemramazan20gb.com" always_nxdomain
 local-zone: "muidokan.com" always_nxdomain
 local-zone: "muikarellep.band" always_nxdomain
 local-zone: "muilyt.com" always_nxdomain
@@ -46444,6 +46474,8 @@ local-zone: "myhscnow.com" always_nxdomain
 local-zone: "myimmigrationlawmarketingpartner.com" always_nxdomain
 local-zone: "myinfoart.online" always_nxdomain
 local-zone: "myinternetjobs.com" always_nxdomain
+local-zone: "myintromationsz.win" always_nxdomain
+local-zone: "myintromationszcj.win" always_nxdomain
 local-zone: "myjedesigns.com" always_nxdomain
 local-zone: "myjmcedu-my.sharepoint.com" always_nxdomain
 local-zone: "myjnia-samochodowa.com" always_nxdomain
@@ -47814,6 +47846,7 @@ local-zone: "ngoibitumsinhthai.com.vn" always_nxdomain
 local-zone: "ngoinhadaquy.com" always_nxdomain
 local-zone: "ngoitruonghanhphuc.edu.vn" always_nxdomain
 local-zone: "ngomavibe.co.ke" always_nxdomain
+local-zone: "ngon10.com" always_nxdomain
 local-zone: "ngoshakarpura.online" always_nxdomain
 local-zone: "ngovietanh.com" always_nxdomain
 local-zone: "ngowebsite.developeratfiverr.in" always_nxdomain
@@ -51845,6 +51878,7 @@ local-zone: "phuongart.000webhostapp.com" always_nxdomain
 local-zone: "phuongnguyencutrinh.gov.vn" always_nxdomain
 local-zone: "phuongphamngulao.gov.vn" always_nxdomain
 local-zone: "phuongphan.co" always_nxdomain
+local-zone: "phuphamca.com" always_nxdomain
 local-zone: "phusonland.vn" always_nxdomain
 local-zone: "phutung24h.vn" always_nxdomain
 local-zone: "phy.mbstu.ac.bd" always_nxdomain
@@ -56592,6 +56626,7 @@ local-zone: "rociton.com.bd" always_nxdomain
 local-zone: "rock-creek.com" always_nxdomain
 local-zone: "rockcanyonoutfitters.com" always_nxdomain
 local-zone: "rockenstein-gmbh.de" always_nxdomain
+local-zone: "rockersdolphin.co.za" always_nxdomain
 local-zone: "rocket-tutor.com" always_nxdomain
 local-zone: "rocketbagger.com" always_nxdomain
 local-zone: "rocketx.fun" always_nxdomain
@@ -56972,6 +57007,7 @@ local-zone: "rrdm.co.in" always_nxdomain
 local-zone: "rrexkmwi.yjdata.me" always_nxdomain
 local-zone: "rrglobaltrade.com" always_nxdomain
 local-zone: "rrgodshsf.ug" always_nxdomain
+local-zone: "rrinteriores.neoistone.site" always_nxdomain
 local-zone: "rrmedical-gmbh.com" always_nxdomain
 local-zone: "rronrestaurant.com" always_nxdomain
 local-zone: "rroun-nourr.ga" always_nxdomain
@@ -57599,6 +57635,7 @@ local-zone: "saglikbakanligindanhediye20gb.com" always_nxdomain
 local-zone: "saglikgoalapp.site" always_nxdomain
 local-zone: "saglikliapp.live" always_nxdomain
 local-zone: "sagliklibedenim.com" always_nxdomain
+local-zone: "saglikodemelerinial.org" always_nxdomain
 local-zone: "sagrathi.com" always_nxdomain
 local-zone: "sagunpapers.com" always_nxdomain
 local-zone: "sahabathasyim.com" always_nxdomain
@@ -59324,7 +59361,9 @@ local-zone: "setonpaloalto.org" always_nxdomain
 local-zone: "setra.ir" always_nxdomain
 local-zone: "setrals.net" always_nxdomain
 local-zone: "setrals.website" always_nxdomain
+local-zone: "setsd.xyz" always_nxdomain
 local-zone: "setseta.com" always_nxdomain
+local-zone: "setss.xyz" always_nxdomain
 local-zone: "settecieli.com" always_nxdomain
 local-zone: "setticonference.it" always_nxdomain
 local-zone: "setup.co.il" always_nxdomain
@@ -59962,6 +60001,7 @@ local-zone: "shopinclub.in" always_nxdomain
 local-zone: "shopinsta.in" always_nxdomain
 local-zone: "shopinterbuild.com" always_nxdomain
 local-zone: "shopiqtoys.com" always_nxdomain
+local-zone: "shopjumpn.ch" always_nxdomain
 local-zone: "shopkaro.apps19.com" always_nxdomain
 local-zone: "shopkimhuyen.com" always_nxdomain
 local-zone: "shopkinhdoanh.com" always_nxdomain
@@ -60465,6 +60505,7 @@ local-zone: "sipil.fatek.untad.ac.id" always_nxdomain
 local-zone: "sipmanagement-my.sharepoint.com" always_nxdomain
 local-zone: "siprev.net.br" always_nxdomain
 local-zone: "siragehad.com" always_nxdomain
+local-zone: "sirajaoloan.com" always_nxdomain
 local-zone: "sirajhummus.com" always_nxdomain
 local-zone: "siranagi.sakura.ne.jp" always_nxdomain
 local-zone: "sirenas-spa.com" always_nxdomain
@@ -61092,6 +61133,7 @@ local-zone: "smokesock.com" always_nxdomain
 local-zone: "smokesome.xyz" always_nxdomain
 local-zone: "smoketravkueveryday.tech" always_nxdomain
 local-zone: "smokingpot.xyz" always_nxdomain
+local-zone: "smollmart.com" always_nxdomain
 local-zone: "smoltest.tk" always_nxdomain
 local-zone: "smoon.co.kr" always_nxdomain
 local-zone: "smooth-moves.com" always_nxdomain
@@ -62302,6 +62344,7 @@ local-zone: "srtechno.co.in" always_nxdomain
 local-zone: "srtms.in" always_nxdomain
 local-zone: "srujanovision.com" always_nxdomain
 local-zone: "srv-15.directserver.us" always_nxdomain
+local-zone: "srv-file9.gofile.io" always_nxdomain
 local-zone: "srv7.computerkolkata.com" always_nxdomain
 local-zone: "srv77956.ht-test.ru" always_nxdomain
 local-zone: "srv9.computerkolkata.com" always_nxdomain
@@ -64598,6 +64641,7 @@ local-zone: "tappteam.co.uk" always_nxdomain
 local-zone: "tapretriat.com" always_nxdomain
 local-zone: "taproomagogo.com" always_nxdomain
 local-zone: "tapsglobalsolutions.com" always_nxdomain
+local-zone: "tapss.com.br" always_nxdomain
 local-zone: "tapsu.in" always_nxdomain
 local-zone: "taptagtees.com" always_nxdomain
 local-zone: "tapucreative.com" always_nxdomain
@@ -65007,6 +65051,7 @@ local-zone: "technoknot.com" always_nxdomain
 local-zone: "technologicznie.pl" always_nxdomain
 local-zone: "technologiebeloeil.com" always_nxdomain
 local-zone: "technologielaurendeau.com" always_nxdomain
+local-zone: "technology-bd.com" always_nxdomain
 local-zone: "technologyadvantages.000webhostapp.com" always_nxdomain
 local-zone: "technologyaroundu.com" always_nxdomain
 local-zone: "technologycomponents.com" always_nxdomain
@@ -67497,6 +67542,7 @@ local-zone: "tourcrafters.in" always_nxdomain
 local-zone: "tourderichelieu.com" always_nxdomain
 local-zone: "tourdezsokolat.hu" always_nxdomain
 local-zone: "tourecoz.in" always_nxdomain
+local-zone: "tourenhelicoptero.com" always_nxdomain
 local-zone: "tourguy.com" always_nxdomain
 local-zone: "touring-athens.com" always_nxdomain
 local-zone: "touring.woolston.com.au" always_nxdomain
@@ -67643,6 +67689,7 @@ local-zone: "tradingexpert.website" always_nxdomain
 local-zone: "tradingmatic.youralgo.com" always_nxdomain
 local-zone: "tradingpartneredi.com" always_nxdomain
 local-zone: "tradingstyle.net" always_nxdomain
+local-zone: "tradingwithharmony.com" always_nxdomain
 local-zone: "traditionsfinegifts.com" always_nxdomain
 local-zone: "tradutorgeek.com" always_nxdomain
 local-zone: "traektoria.com" always_nxdomain
@@ -68709,6 +68756,7 @@ local-zone: "ucomechina.com" always_nxdomain
 local-zone: "uconthailand.com" always_nxdomain
 local-zone: "ucrealtors.com" always_nxdomain
 local-zone: "ucrealtors.net" always_nxdomain
+local-zone: "ucretsiz20gbturkiye.com" always_nxdomain
 local-zone: "ucrnn.org" always_nxdomain
 local-zone: "ucstandart.ru" always_nxdomain
 local-zone: "ucto-id.cz" always_nxdomain
@@ -69449,6 +69497,7 @@ local-zone: "usakisdunyasi.com" always_nxdomain
 local-zone: "usamashakeel.com" always_nxdomain
 local-zone: "usamovers.net" always_nxdomain
 local-zone: "usanin.info" always_nxdomain
+local-zone: "usapglobal.usapglobal.org" always_nxdomain
 local-zone: "usaselfstoragenetwork.com" always_nxdomain
 local-zone: "usastoragenetwork.com" always_nxdomain
 local-zone: "usax138.oicp.net" always_nxdomain
@@ -69580,9 +69629,11 @@ local-zone: "uy-akwaibom.ru" always_nxdomain
 local-zone: "uyaiblog.com" always_nxdomain
 local-zone: "uycqawua.applekid.cn" always_nxdomain
 local-zone: "uydu.antalyaelektrikariza.net" always_nxdomain
+local-zone: "uyen.vn" always_nxdomain
 local-zone: "uyencometics.bmt.city" always_nxdomain
 local-zone: "uyf.com.ua" always_nxdomain
 local-zone: "uyghurchem.com" always_nxdomain
+local-zone: "uygulamalarim-hediyeinternet.org" always_nxdomain
 local-zone: "uyijbmxxm8874337.gameofthrones05.site" always_nxdomain
 local-zone: "uyikjtn.eu" always_nxdomain
 local-zone: "uytr5e.imtbreds.com" always_nxdomain
@@ -70056,6 +70107,7 @@ local-zone: "vencury.com" always_nxdomain
 local-zone: "vendacomcelular.com.br" always_nxdomain
 local-zone: "vendaiot.ir" always_nxdomain
 local-zone: "vendameucarroo.com" always_nxdomain
+local-zone: "vendeaki.online" always_nxdomain
 local-zone: "vendem.com.br" always_nxdomain
 local-zone: "vendere-su-internet.com" always_nxdomain
 local-zone: "vendermicasaenbarcelona.com" always_nxdomain
@@ -70299,6 +70351,7 @@ local-zone: "viberspyware.com" always_nxdomain
 local-zone: "vibescyahdone.com" always_nxdomain
 local-zone: "vibeshirt.de" always_nxdomain
 local-zone: "vibetronic.id" always_nxdomain
+local-zone: "vibicloud.com" always_nxdomain
 local-zone: "vibni.dk" always_nxdomain
 local-zone: "vibor-anapa.ru" always_nxdomain
 local-zone: "vibramarketing.cl" always_nxdomain
@@ -73110,6 +73163,7 @@ local-zone: "wws.tkgventures.com" always_nxdomain
 local-zone: "www-88xyxy-com.info" always_nxdomain
 local-zone: "www-bsac.eecs.berkeley.edu" always_nxdomain
 local-zone: "www-dev.e4healthinc.com" always_nxdomain
+local-zone: "www-ecimer-uygulamayukleme-govtr.com" always_nxdomain
 local-zone: "www-grupotv1-com-br.azurclaireritter.cmail-oln040092069015.outbound.protection.sketchwefair-watduoliprudential.com.watchdogdns.duckdns.org" always_nxdomain
 local-zone: "www.smart-eg.com" always_nxdomain
 local-zone: "www022284.com" always_nxdomain
@@ -73197,6 +73251,7 @@ local-zone: "x86tpkujgu1ksoky.com" always_nxdomain
 local-zone: "xacrosoft.com" always_nxdomain
 local-zone: "xact.ma" always_nxdomain
 local-zone: "xadrezgigante.com.br" always_nxdomain
+local-zone: "xaergtcrcd.info" always_nxdomain
 local-zone: "xagency.co" always_nxdomain
 local-zone: "xaidol.com" always_nxdomain
 local-zone: "xajfgz.com" always_nxdomain
@@ -73681,6 +73736,7 @@ local-zone: "xn--celegeninaat-dnc.com" always_nxdomain
 local-zone: "xn--cryptohoppe-bec.com" always_nxdomain
 local-zone: "xn--czstochowadlazwierzt-mkc63b.pl" always_nxdomain
 local-zone: "xn--d1achkaoe4a.xn--p1ai" always_nxdomain
+local-zone: "xn--d1aciabhfsdfe0a7e3b.xn--p1acf" always_nxdomain
 local-zone: "xn--d1ahebikdfcgr7jsa.xn--p1ai" always_nxdomain
 local-zone: "xn--d1ahjkdbhfjy4g.xn--p1ai" always_nxdomain
 local-zone: "xn--d1aiocodol6a8d.xn--p1ai" always_nxdomain
@@ -74627,6 +74683,7 @@ local-zone: "yzbot.com" always_nxdomain
 local-zone: "yzmwh.com" always_nxdomain
 local-zone: "yzzqdz.com" always_nxdomain
 local-zone: "z-prava.ru" always_nxdomain
+local-zone: "z.loyaltyaboveall.com" always_nxdomain
 local-zone: "z.zz.ht" always_nxdomain
 local-zone: "z0451.net" always_nxdomain
 local-zone: "z0tt3l.de" always_nxdomain
diff --git a/urlhaus-filter.txt b/urlhaus-filter.txt
index 02b420f5..7b1977f9 100644
--- a/urlhaus-filter.txt
+++ b/urlhaus-filter.txt
@@ -1,5 +1,5 @@
 ! Title: abuse.ch URLhaus Malicious URL Blocklist
-! Updated: Thu, 30 Apr 2020 12:09:30 UTC
+! Updated: Fri, 01 May 2020 00:10:35 UTC
 ! Expires: 1 day (update frequency)
 ! Repo: https://gitlab.com/curben/urlhaus-filter
 ! License: https://creativecommons.org/publicdomain/zero/1.0/
@@ -2035,6 +2035,7 @@
 110.154.144.236
 110.154.145.89
 110.154.147.158
+110.154.15.122
 110.154.168.81
 110.154.169.197
 110.154.170.136
@@ -2213,6 +2214,7 @@
 110.154.249.171
 110.154.250.107
 110.154.250.177
+110.154.250.225
 110.154.250.249
 110.154.251.151
 110.154.35.161
@@ -3162,6 +3164,7 @@
 113.133.226.116
 113.133.226.193
 113.133.226.220
+113.133.226.226
 113.133.226.47
 113.133.227.111
 113.133.227.144
@@ -4530,6 +4533,7 @@
 115.226.178.184
 115.226.94.217
 115.229.141.76
+115.229.200.2
 115.229.207.0
 115.229.224.202
 115.229.227.153
@@ -4738,6 +4742,7 @@
 115.49.245.83
 115.49.246.101
 115.49.246.210
+115.49.246.62
 115.49.247.107
 115.49.247.160
 115.49.247.238
@@ -5803,6 +5808,7 @@
 115.96.130.7
 116.10.110.130
 116.100.132.158
+116.100.249.121
 116.100.4.17
 116.100.5.168
 116.102.164.203
@@ -5897,6 +5903,7 @@
 116.149.247.125
 116.149.247.139
 116.149.247.204
+116.149.247.247
 116.149.247.27
 116.149.33.83
 116.149.41.178
@@ -7278,6 +7285,7 @@
 119.1.92.114
 119.1.92.85
 119.102.127.122
+119.102.153.184
 119.118.173.180
 119.125.104.59
 119.125.104.93
@@ -7907,6 +7915,7 @@
 121.233.108.20
 121.233.108.216
 121.233.111.181
+121.233.116.232
 121.233.117.174
 121.233.117.238
 121.233.117.50
@@ -8148,6 +8157,7 @@
 122.241.33.17
 122.241.35.69
 122.241.43.85
+122.243.173.3
 122.243.180.141
 122.246.150.24
 122.247.208.135
@@ -8171,6 +8181,7 @@
 123.10.10.10
 123.10.10.251
 123.10.10.58
+123.10.101.22
 123.10.102.2
 123.10.103.115
 123.10.103.252
@@ -8254,6 +8265,7 @@
 123.10.135.218
 123.10.135.26
 123.10.135.69
+123.10.135.87
 123.10.137.45
 123.10.138.227
 123.10.140.128
@@ -9762,6 +9774,7 @@
 125.125.209.13
 125.125.210.32
 125.125.41.129
+125.125.44.18
 125.125.44.243
 125.125.44.92
 125.125.92.91
@@ -10047,6 +10060,7 @@
 125.44.214.55
 125.44.214.59
 125.44.214.79
+125.44.215.179
 125.44.215.43
 125.44.215.50
 125.44.215.74
@@ -10086,6 +10100,7 @@
 125.44.237.24
 125.44.238.248
 125.44.239.162
+125.44.241.64
 125.44.242.185
 125.44.244.4
 125.44.245.33
@@ -10257,6 +10272,7 @@
 125.47.245.116
 125.47.245.184
 125.47.246.161
+125.47.248.28
 125.47.252.160
 125.47.253.223
 125.47.254.28
@@ -12844,6 +12860,7 @@
 162.212.114.179
 162.212.114.189
 162.212.114.19
+162.212.114.196
 162.212.114.199
 162.212.114.204
 162.212.114.206
@@ -12874,6 +12891,7 @@
 162.212.114.50
 162.212.114.54
 162.212.114.55
+162.212.114.57
 162.212.114.59
 162.212.114.62
 162.212.114.65
@@ -12883,6 +12901,7 @@
 162.212.114.75
 162.212.114.76
 162.212.114.77
+162.212.114.8
 162.212.114.80
 162.212.114.88
 162.212.114.96
@@ -13905,6 +13924,7 @@
 171.227.222.50
 171.231.131.233
 171.231.234.132
+171.232.106.147
 171.232.81.227
 171.232.86.225
 171.233.103.73
@@ -14241,6 +14261,7 @@
 172.36.24.33
 172.36.24.68
 172.36.24.77
+172.36.24.88
 172.36.24.96
 172.36.25.110
 172.36.25.134
@@ -14531,6 +14552,7 @@
 172.36.45.228
 172.36.45.244
 172.36.45.248
+172.36.45.41
 172.36.45.82
 172.36.45.90
 172.36.45.94
@@ -14583,6 +14605,7 @@
 172.36.49.50
 172.36.49.6
 172.36.49.70
+172.36.49.78
 172.36.49.84
 172.36.5.0
 172.36.5.100
@@ -15042,6 +15065,7 @@
 172.39.41.213
 172.39.41.32
 172.39.42.199
+172.39.42.216
 172.39.42.246
 172.39.42.36
 172.39.42.76
@@ -16833,6 +16857,7 @@
 178.62.198.53
 178.62.201.163
 178.62.203.226
+178.62.204.84
 178.62.205.54
 178.62.206.32
 178.62.21.111
@@ -17286,6 +17311,7 @@
 180.116.234.234
 180.116.234.30
 180.116.238.199
+180.116.47.28
 180.116.96.229
 180.117.108.134
 180.117.116.233
@@ -17885,6 +17911,7 @@
 182.113.219.236
 182.113.219.54
 182.113.219.81
+182.113.220.114
 182.113.220.129
 182.113.220.147
 182.113.220.179
@@ -17940,6 +17967,7 @@
 182.113.43.246
 182.113.49.193
 182.113.55.206
+182.113.56.170
 182.113.58.37
 182.113.58.68
 182.113.63.103
@@ -18284,6 +18312,7 @@
 182.117.158.101
 182.117.158.156
 182.117.158.91
+182.117.160.121
 182.117.160.168
 182.117.160.30
 182.117.164.211
@@ -18704,6 +18733,7 @@
 182.126.177.232
 182.126.179.85
 182.126.181.149
+182.126.183.195
 182.126.192.155
 182.126.192.166
 182.126.192.18
@@ -19133,6 +19163,7 @@
 182.127.57.80
 182.127.59.63
 182.127.6.212
+182.127.64.253
 182.127.67.83
 182.127.68.228
 182.127.68.82
@@ -22502,6 +22533,7 @@
 199.83.202.240
 199.83.202.251
 199.83.203.100
+199.83.203.104
 199.83.203.106
 199.83.203.108
 199.83.203.114
@@ -22511,6 +22543,7 @@
 199.83.203.127
 199.83.203.132
 199.83.203.134
+199.83.203.137
 199.83.203.14
 199.83.203.152
 199.83.203.157
@@ -22718,9 +22751,12 @@
 1podcast.best
 1podcast.xyz/ru53332/-RTMD-.exe
 1podcast.xyz/ru53332/-RTMD-ABMlp17_nAAAvhwCAERFFwAMAMpkk5oA.exe
+1podcast.xyz/ru53332/fl%20studio%2020-rtmd-akerpf4cnqaa7xocafvbgqasadftnbma.exe
+1podcast.xyz/ru53332/free+download+revo+uninstaller+pro+4-rtmd-ahdoqf7rlwaapzmcaelegqasag0ucwca.exe
 1podcast.xyz/ru53332/magix+audio+cleaning+lab+23-rtmd-ac_xol7hiwaavhwcaezsfwaoab4j7koa.exe
 1podcast.xyz/ru53332/need+for+speed+most+wanted+(2005)-rtmd-alc7qv5xcwaa6rocafrsfwasapf5okca.exe
 1podcast.xyz/ru53332/wondershare%20filmora%209-rtmd-addwp14fnqaapzmcaelofwasaosa_c8a.exe
+1podcast.xyz/ru53332/xh%20a1%20firmware%20update-RTMD-apk5g14obgaatbecaerffwamalkudh8a.exe
 1point2.com.au
 1point2.com.au/wp-https/fq.exe
 1point2.com.au/wp-https/g.exe
@@ -24039,6 +24075,7 @@
 211.159.168.108
 211.179.143.199
 211.187.75.220
+211.192.121.74
 211.192.64.222
 211.193.86.151
 211.194.183.51
@@ -25044,6 +25081,7 @@
 219.155.29.65
 219.155.60.194
 219.155.61.47
+219.155.62.175
 219.155.62.19
 219.155.62.201
 219.155.69.164
@@ -25379,6 +25417,7 @@
 221.14.17.49
 221.14.170.23
 221.14.237.229
+221.14.237.63
 221.14.238.36
 221.14.239.158
 221.14.239.67
@@ -25717,6 +25756,7 @@
 222.138.126.198
 222.138.126.212
 222.138.126.23
+222.138.133.206
 222.138.134.154
 222.138.134.236
 222.138.134.29
@@ -26119,6 +26159,7 @@
 222.142.195.124
 222.142.195.194
 222.142.195.39
+222.142.196.145
 222.142.197.35
 222.142.197.36
 222.142.198.130
@@ -27159,6 +27200,8 @@
 27.41.134.131
 27.41.135.216
 27.41.136.46
+27.41.138.104
+27.41.138.49
 27.41.138.56
 27.41.141.116
 27.41.145.22
@@ -27201,6 +27244,7 @@
 27.41.208.52
 27.41.209.226
 27.41.211.155
+27.41.213.143
 27.41.214.143
 27.41.215.24
 27.41.216.113
@@ -28374,6 +28418,7 @@
 36.35.161.130
 36.35.161.153
 36.35.161.166
+36.35.161.186
 36.35.161.202
 36.35.161.215
 36.35.161.232
@@ -29115,6 +29160,7 @@
 42.113.243.65
 42.113.247.186
 42.115.10.67
+42.115.12.180
 42.115.153.198
 42.115.174.149
 42.115.2.228
@@ -31466,6 +31512,7 @@
 45.95.168.244
 45.95.168.245
 45.95.168.246
+45.95.168.247
 45.95.168.249
 45.95.168.250
 45.95.168.251
@@ -32702,6 +32749,7 @@
 49.81.133.151
 49.81.133.189
 49.81.133.54
+49.81.134.147
 49.81.134.16
 49.81.134.90
 49.81.143.164
@@ -32773,6 +32821,7 @@
 49.82.18.249
 49.82.181.254
 49.82.194.9
+49.82.196.117
 49.82.196.170
 49.82.200.142
 49.82.200.191
@@ -34796,6 +34845,7 @@
 61.168.136.100
 61.168.136.109
 61.168.136.133
+61.168.136.199
 61.168.136.97
 61.168.137.108
 61.168.137.147
@@ -35967,6 +36017,7 @@
 66.55.71.111
 66.55.71.12
 66.55.80.140
+66.57.55.210
 66.65.36.82
 66.66.23.90
 66.70.172.74
@@ -36675,6 +36726,7 @@
 77.43.130.144
 77.43.130.254
 77.43.131.238
+77.43.133.49
 77.43.137.62
 77.43.150.93
 77.43.151.144
@@ -37062,6 +37114,7 @@
 79.174.24.172
 79.176.82.85
 79.179.199.159
+79.18.119.169
 79.18.68.24
 79.180.24.85
 79.181.42.113
@@ -37700,6 +37753,7 @@
 834d1705-a-62cb3a1a-s-sites.googlegroups.com
 84.0.213.219
 84.1.27.113
+84.10.31.238
 84.108.209.36
 84.16.248.159
 84.16.248.166
@@ -39212,6 +39266,7 @@
 98.159.99.11
 98.159.99.213
 98.159.99.33
+98.159.99.37
 98.159.99.43
 98.159.99.9
 98.159.99.93
@@ -40307,6 +40362,7 @@ adnaan.website
 adnc.cn
 adnetss.com
 adnoiiasdnfoinsafopinsodifg16g.s3.us-east-2.amazonaws.com/P-16-5.dll
+adnquocte.com
 adoam.pw
 adoam.site
 adobe-flash-player.pro
@@ -43785,6 +43841,7 @@ ariesnetworks.org.uk
 arifcagan.com
 arifhajj.umrahsoftware.co.uk
 arifolmancohen.com
+arifrehan.xyz
 arifzena.com
 arigato.com.vn
 arigbabuwogalleria.com
@@ -45209,6 +45266,7 @@ averin.pro
 averson.by
 averybit.com
 aveslor.com
+avestor.uz
 avfphoto.com
 avgsupport.info
 avheaven.icu
@@ -45498,6 +45556,7 @@ azcama.org
 azdhj.com
 azedizayn.com
 azeevatech.in
+azenzatowers.com
 azeritibb.pe.hu
 azerothland.com
 azeta.xyz
@@ -47603,6 +47662,7 @@ billenloe.com
 billerimpex.com
 billeter.net
 billfritzjr.com
+billieellish.org
 billing.wpkami.com
 billingsupport.ru
 billingtonbarristers.com
@@ -49924,6 +49984,7 @@ buchanancu.org
 bucharest-independent-escort.com
 bucketlistadvtours.com
 bucketlistrecipes.com
+bucketstrong.s3-us-west-1.amazonaws.com
 buckeyeoptical.com
 buckinghamandlloyds.com
 buckleman.co.id
@@ -50732,6 +50793,7 @@ camsexsnol.nl
 can-do-property.co.uk
 can-doelectric.com
 can-media.de
+canaan.io
 canaccordgenuity.bluematrix.com
 canacofactura.com.mx
 canadabestonline.com
@@ -55606,6 +55668,7 @@ currencyavenue.com
 currencyexchanger.com.ng
 currenteventsmemes.com
 curs.neagoeandrei.com
+cursdictie.ro
 curso.domeducacional.com
 curso.ssthno.webdesignssw.cl
 cursoaphonline.com.br
@@ -56289,6 +56352,7 @@ data.kaoyany.top
 data.nanhai.cn
 data.over-blog-kiwi.com
 data.yx1999.com
+data4i.com
 data4u.kay-tech.info
 databacknow.com
 database.z-flooring.com
@@ -56401,6 +56465,7 @@ david.ph-prod.com
 davidaluke.com
 davidcizek.cz
 davidcjones.ca
+davidd47.sg-host.com
 davidedigiorgio360.com
 davidemarocco.com
 davidephoto.it
@@ -58051,6 +58116,7 @@ dicampo.cl
 dicarmo.com
 dicebot-game.com
 dichiara.com.ar
+dichthuatsnu.com
 dichvuchupanhsanpham.com
 dichvucong.vn
 dichvucuoi0f16.toannang.xyz
@@ -60262,6 +60328,7 @@ dotlenieni.pl
 dotlineplane.co.th
 dotnetdays.ro
 dotnetebusiness.com
+dotpay.id
 dotpos.in
 dotproject.org
 dotshopify.com
@@ -60550,6 +60617,7 @@ dr-nasrinataeifar.ir
 dr-popa.com
 dr-prof-sachidanandasinha-dentalclinic.com
 dr-recella-global.com
+dr080.com
 dr702.com
 draaiercnc.nl
 draaiorgel.org
@@ -74434,6 +74502,7 @@ enilaegroj.com
 enilegho.com.br
 enis1130.000webhostapp.com
 eniture-qa.com
+enixc.com
 eniyionfirma.com
 enjoy-aquaristik.de
 enjoy-kobac.com
@@ -75303,6 +75372,7 @@ evdekal-kampanyasi20gbhediye.com
 evdekal20kapgb.com
 evdekalan20gbkazaniyor.com
 evdekalana20gb-hehe.com
+evdekaldiye20-gb.com
 evdekaltuekiyesaglik.com
 evdekl20gbx.com
 evdyn.com.sg
@@ -77980,6 +78050,7 @@ freeofshackles.com
 freepaidcourses.com
 freepalestinemovement.org
 freephenix.cn
+freeprofessionalwebhosting.com
 freeselfstoragequote.com
 freeslits.net
 freesoft.website
@@ -79837,6 +79908,7 @@ gitlab.com/adbflup/updater/-/archive/master/updater-master.zip
 gitlab.com/adobeflashx/updater/-/archive/master/updater-master.zip
 gitlab.com/alexphilipsssons/alabamasmith/raw/master/axalabama
 gitlab.com/alexphilipsssons/awsomerun/raw/master/codds
+gitlab.com/burov/tools/raw/master/bin/fp-sb-test.exe
 gitlab.com/c-18/ss/raw/master/ss/h32
 gitlab.com/finndev/EloBuddy.Dependencies/raw/master/Setup/EloBuddy-Setup.exe
 gitlab.com/goldwe/git/raw/master/TI10045BR.msi?inline=false
@@ -80105,6 +80177,7 @@ gmakeup.ru
 gmann.blog
 gmann.info
 gmann.photos
+gmassurance.fr
 gmc2.ru
 gmcoflouisville.com
 gmcostruzionieservizi.com
@@ -82297,6 +82370,7 @@ hediye-internet-saglik.org
 hediye-internet.site
 hediyegapsinternet.com
 hediyeinternetpaketim.com
+hediyem20gb-internet.org
 hediyenkolay.com
 hedrasl.com
 hedwise.com
@@ -82536,6 +82610,7 @@ herrajesmasota.com
 herratech.com
 herrenmode.tk
 herrent.com
+herrfischer.me
 herrgaardstak.se
 herryjoa.mireene.com
 herscare.net
@@ -83694,6 +83769,7 @@ htmedia.net
 htmediagroups.com
 html.nichost.ru
 htmlget.com
+htn13.com
 htnieuw.hazenbergtimmerwerken.nl
 htpinvestment.com.vn
 htt.nu
@@ -86537,6 +86613,7 @@ itray.co.kr
 itrc.gov.co
 itrenaissance.com
 itreni.net
+itrigger.cn
 itroj.ir
 its-fondazionearchimede.it
 its-oh.net
@@ -87330,6 +87407,7 @@ jhelt.net
 jhgfdsssdfgnhmj.s3-eu-west-1.amazonaws.com/htgvf.exe
 jhom.in
 jhonhusein.com
+jhorapatarastana.xyz
 jhrt185.com
 jhssourcingltd.com
 jhsstudio.com.br
@@ -89312,6 +89390,7 @@ khoshrougallery.com
 khotanperfume.com
 khotawa.com
 khothietbivesinh24h.com
+khoztrip.ir
 khp89wc.com
 khpm.ir
 khrystyna-verkholiak.com
@@ -89970,6 +90049,7 @@ kolbecompany.com
 kolejmontlari.com
 kolejnicky.cz
 kolejskilmentari.edu.my
+kolibri-fabrika.ru
 kolibristattoo.lt
 kolkatacleanair.in
 koll-partner.tax
@@ -90206,6 +90286,7 @@ kpmicrowave.com
 kpodata.com
 kpogroup.bo
 kpopstarz.kienthucsong.info
+kposter.alexandruplesea.ro
 kppspgrojec.internetdsl.pl
 kprsolutions.com
 kpss.ir
@@ -95705,6 +95786,7 @@ mebs-marketing.de
 mecanique-vivante.com
 mecanizadosgurrutxaga.com
 mecatronica.ifc-riodosul.edu.br
+mecbox.cn
 mecenat.com.ua
 mecflui.com.br
 mecgwl.ac.in
@@ -96750,6 +96832,7 @@ milcommonline.com
 milczanowska.com
 mildibsilgip.com
 mileageindia.com
+milebgd.mycpanel.rs
 milehighffa.com
 milehighhomebuyers.com
 milena-koenig.de
@@ -97535,6 +97618,7 @@ moie.nl
 moigioi.info
 moikihit.ru
 moinetfils.com
+moinmo.de
 mois.com.br
 moiselektronik.com
 moisesdavid.com
@@ -98331,6 +98415,8 @@ muhammadiyahamin.com
 muhammadshahid.techsandooq.com
 muhanoiss6.net
 muhendismeraki.com
+muhtesem20gb.xyz
+muhtessemramazan20gb.com
 muidokan.com
 muikarellep.band
 muilyt.com
@@ -98758,6 +98844,8 @@ myhub.autodesk360.com/ue2cf7455/shares/download/file/SH7f1edQT22b515c761e461181d
 myimmigrationlawmarketingpartner.com
 myinfoart.online
 myinternetjobs.com
+myintromationsz.win
+myintromationszcj.win
 myjedesigns.com
 myjmcedu-my.sharepoint.com
 myjnia-samochodowa.com
@@ -100150,6 +100238,7 @@ ngoibitumsinhthai.com.vn
 ngoinhadaquy.com
 ngoitruonghanhphuc.edu.vn
 ngomavibe.co.ke
+ngon10.com
 ngoshakarpura.online
 ngovietanh.com
 ngowebsite.developeratfiverr.in
@@ -104228,6 +104317,7 @@ pastebin.com/qVVL7kfc
 pastebin.com/rBL4Tscg
 pastebin.com/rVFFxSs6
 pastebin.com/raw/01JxS051
+pastebin.com/raw/01he7nkP
 pastebin.com/raw/03LTBDsn
 pastebin.com/raw/03aK7JAg
 pastebin.com/raw/04XXxWBn
@@ -104245,6 +104335,7 @@ pastebin.com/raw/0DGrjpvd
 pastebin.com/raw/0DPaWPLg
 pastebin.com/raw/0EhBSQ6G
 pastebin.com/raw/0FY9gM9e
+pastebin.com/raw/0GDV0vg2
 pastebin.com/raw/0HGaBpuM
 pastebin.com/raw/0JGtnUYw
 pastebin.com/raw/0Ju3Nr6U
@@ -104375,6 +104466,7 @@ pastebin.com/raw/2Enk8GGe
 pastebin.com/raw/2FujfvU2
 pastebin.com/raw/2GseBZZV
 pastebin.com/raw/2Hj38Jmy
+pastebin.com/raw/2HspQ3J2
 pastebin.com/raw/2HyReySi
 pastebin.com/raw/2JhFfTaR
 pastebin.com/raw/2LY3nX9i
@@ -104773,6 +104865,7 @@ pastebin.com/raw/8Z13hUeU
 pastebin.com/raw/8ZebE1MG
 pastebin.com/raw/8Zh9yNMF
 pastebin.com/raw/8ZxJ97Zf
+pastebin.com/raw/8bFFYipj
 pastebin.com/raw/8bevQs6i
 pastebin.com/raw/8bzn6GaX
 pastebin.com/raw/8cp14PY5
@@ -105202,6 +105295,7 @@ pastebin.com/raw/F1nbYEGM
 pastebin.com/raw/F3BQaU08
 pastebin.com/raw/F4P4Xrdr
 pastebin.com/raw/F4u0pqRe
+pastebin.com/raw/F50fVbME
 pastebin.com/raw/F5hCAL2h
 pastebin.com/raw/F8M98T7B
 pastebin.com/raw/F8W8Pz9Z
@@ -105290,6 +105384,7 @@ pastebin.com/raw/GRGDHp21
 pastebin.com/raw/GRMXzt6u
 pastebin.com/raw/GSwjES3L
 pastebin.com/raw/GTA5jafP
+pastebin.com/raw/GUfYcZ6J
 pastebin.com/raw/GVgtQJBJ
 pastebin.com/raw/GVq1pR1U
 pastebin.com/raw/GYbsB7X6
@@ -105539,6 +105634,7 @@ pastebin.com/raw/L8ZvD6F4
 pastebin.com/raw/L8hT8myh
 pastebin.com/raw/LBJX1TS6
 pastebin.com/raw/LC9TBcLi
+pastebin.com/raw/LCfGyzCf
 pastebin.com/raw/LDFep6rn
 pastebin.com/raw/LDdW1ffH
 pastebin.com/raw/LDfGDmSe
@@ -105730,6 +105826,7 @@ pastebin.com/raw/PMpMvE7T
 pastebin.com/raw/PMtXMCXc
 pastebin.com/raw/PPMfTMhV
 pastebin.com/raw/PQSeJen6
+pastebin.com/raw/PQxPFwzj
 pastebin.com/raw/PQywEf2S
 pastebin.com/raw/PRPNP2ET
 pastebin.com/raw/PRTmKr99
@@ -105759,6 +105856,7 @@ pastebin.com/raw/Pkm2viv3
 pastebin.com/raw/PkntiPnX
 pastebin.com/raw/Pkr7VQRt
 pastebin.com/raw/PpvikUHC
+pastebin.com/raw/Pq2STUhP
 pastebin.com/raw/Pq6wjDDY
 pastebin.com/raw/Pqabxf7H
 pastebin.com/raw/Pt3ucSh5
@@ -105850,12 +105948,14 @@ pastebin.com/raw/QyFAwHLZ
 pastebin.com/raw/Qz2gA5LP
 pastebin.com/raw/R0fNyc4T
 pastebin.com/raw/R2c87wLy
+pastebin.com/raw/R2nyTfX8
 pastebin.com/raw/R51bBiiM
 pastebin.com/raw/R5mfmMui
 pastebin.com/raw/R5u9EH1S
 pastebin.com/raw/R5vEfCDr
 pastebin.com/raw/R9uYXPYX
 pastebin.com/raw/RCWDRWxv
+pastebin.com/raw/RCwMJ9bm
 pastebin.com/raw/RDDDcTN1
 pastebin.com/raw/RDzKxEH6
 pastebin.com/raw/RF2tjNmZ
@@ -106011,6 +106111,7 @@ pastebin.com/raw/TXAzKAgf
 pastebin.com/raw/TYiwPfKh
 pastebin.com/raw/TZ0hwkm4
 pastebin.com/raw/TZz8928z
+pastebin.com/raw/Tc3GcmnK
 pastebin.com/raw/TcQgdw0u
 pastebin.com/raw/TcuhAgPf
 pastebin.com/raw/Tdqsjigr
@@ -106167,6 +106268,7 @@ pastebin.com/raw/WB1VzrQP
 pastebin.com/raw/WBW8M3vL
 pastebin.com/raw/WBaX6j2r
 pastebin.com/raw/WCk1JxSX
+pastebin.com/raw/WGWLwAVh
 pastebin.com/raw/WKcSXhZ2
 pastebin.com/raw/WLc3uwvd
 pastebin.com/raw/WM7T1Wjd
@@ -106426,6 +106528,7 @@ pastebin.com/raw/aNDPe5bL
 pastebin.com/raw/aPcvQLxg
 pastebin.com/raw/aQsDT3md
 pastebin.com/raw/aQwTXmsG
+pastebin.com/raw/aRHLvP3a
 pastebin.com/raw/aRLZNHf6
 pastebin.com/raw/aS1gXPdk
 pastebin.com/raw/aSXHPSnt
@@ -106578,6 +106681,7 @@ pastebin.com/raw/cX7Dc0w4
 pastebin.com/raw/cXWETW6t
 pastebin.com/raw/cXjFmcz7
 pastebin.com/raw/cXuQ0V20
+pastebin.com/raw/cZD0Bm0c
 pastebin.com/raw/cb7FEf3M
 pastebin.com/raw/ccdUiC4E
 pastebin.com/raw/cd1073vj
@@ -106938,6 +107042,7 @@ pastebin.com/raw/hyTN4bvM
 pastebin.com/raw/hzAUHB6h
 pastebin.com/raw/hzLN7srw
 pastebin.com/raw/hzp1LGz0
+pastebin.com/raw/hzxuFBgf
 pastebin.com/raw/i08Q1WS4
 pastebin.com/raw/i0XfWyB2
 pastebin.com/raw/i1GgMijC
@@ -107122,6 +107227,7 @@ pastebin.com/raw/kzD26e6b
 pastebin.com/raw/kzeZb4Tq
 pastebin.com/raw/m1NuQM4R
 pastebin.com/raw/m1P2cwfp
+pastebin.com/raw/m1rVHyhk
 pastebin.com/raw/m2cxNGqM
 pastebin.com/raw/m3Gkz6As
 pastebin.com/raw/m4RD0Qgb
@@ -107236,6 +107342,7 @@ pastebin.com/raw/nuxfy7Wj
 pastebin.com/raw/nv5d9pYu
 pastebin.com/raw/nwHTjCMa
 pastebin.com/raw/ny92VnNp
+pastebin.com/raw/nzULABGd
 pastebin.com/raw/nzX0NTLQ
 pastebin.com/raw/p0b4kumr
 pastebin.com/raw/p0wgTj1x
@@ -107578,6 +107685,7 @@ pastebin.com/raw/up2ZyguH
 pastebin.com/raw/uptJ1vnz
 pastebin.com/raw/urwT2pyW
 pastebin.com/raw/usmuLdvd
+pastebin.com/raw/utbzF3eC
 pastebin.com/raw/utndvwtL
 pastebin.com/raw/uuKmNmgs
 pastebin.com/raw/ux7832By
@@ -107896,6 +108004,7 @@ pastebin.com/raw/zpzUSUYG
 pastebin.com/raw/zrmYrBfL
 pastebin.com/raw/zs9RBD1m
 pastebin.com/raw/zsfw8Zny
+pastebin.com/raw/zshXy28d
 pastebin.com/raw/zt3FdC8N
 pastebin.com/raw/ztgrR8Qq
 pastebin.com/raw/zugsEVmg
@@ -108843,6 +108952,7 @@ phuongart.000webhostapp.com
 phuongnguyencutrinh.gov.vn
 phuongphamngulao.gov.vn
 phuongphan.co
+phuphamca.com
 phusonland.vn
 phutung24h.vn
 phutungotogiare.vn/wp-includes/sendincverif/support/sec/en_EN/032019/
@@ -113717,6 +113827,7 @@ rociton.com.bd
 rock-creek.com
 rockcanyonoutfitters.com
 rockenstein-gmbh.de
+rockersdolphin.co.za
 rocket-tutor.com
 rocketbagger.com
 rocketx.fun
@@ -114099,6 +114210,7 @@ rrdm.co.in
 rrexkmwi.yjdata.me
 rrglobaltrade.com
 rrgodshsf.ug
+rrinteriores.neoistone.site
 rrmedical-gmbh.com
 rronrestaurant.com
 rroun-nourr.ga
@@ -114927,6 +115039,7 @@ saglikbakanligindanhediye20gb.com
 saglikgoalapp.site
 saglikliapp.live
 sagliklibedenim.com
+saglikodemelerinial.org
 sagrathi.com
 sagunpapers.com
 sahabathasyim.com
@@ -116704,7 +116817,9 @@ setonpaloalto.org
 setra.ir
 setrals.net
 setrals.website
+setsd.xyz
 setseta.com
+setss.xyz
 settecieli.com
 setticonference.it
 setup.co.il
@@ -117346,6 +117461,7 @@ shopinclub.in
 shopinsta.in
 shopinterbuild.com
 shopiqtoys.com
+shopjumpn.ch
 shopkaro.apps19.com
 shopkimhuyen.com
 shopkinhdoanh.com
@@ -117855,6 +117971,7 @@ sipil.fatek.untad.ac.id
 sipmanagement-my.sharepoint.com
 siprev.net.br
 siragehad.com
+sirajaoloan.com
 sirajhummus.com
 siranagi.sakura.ne.jp
 sirenas-spa.com
@@ -118500,6 +118617,7 @@ smokesock.com
 smokesome.xyz
 smoketravkueveryday.tech
 smokingpot.xyz
+smollmart.com
 smoltest.tk
 smoon.co.kr
 smooth-moves.com
@@ -119725,6 +119843,7 @@ srtechno.co.in
 srtms.in
 srujanovision.com
 srv-15.directserver.us
+srv-file9.gofile.io
 srv7.computerkolkata.com
 srv77956.ht-test.ru
 srv9.computerkolkata.com
@@ -123656,6 +123775,7 @@ tappteam.co.uk
 tapretriat.com
 taproomagogo.com
 tapsglobalsolutions.com
+tapss.com.br
 tapsu.in
 taptagtees.com
 tapucreative.com
@@ -124065,6 +124185,7 @@ technoknot.com
 technologicznie.pl
 technologiebeloeil.com
 technologielaurendeau.com
+technology-bd.com
 technologyadvantages.000webhostapp.com
 technologyaroundu.com
 technologycomponents.com
@@ -126597,6 +126718,7 @@ tourcrafters.in
 tourderichelieu.com
 tourdezsokolat.hu
 tourecoz.in
+tourenhelicoptero.com
 tourguy.com
 touring-athens.com
 touring.woolston.com.au
@@ -126752,6 +126874,7 @@ tradingexpert.website
 tradingmatic.youralgo.com
 tradingpartneredi.com
 tradingstyle.net
+tradingwithharmony.com
 traditionsfinegifts.com
 tradutorgeek.com
 traektoria.com
@@ -128171,6 +128294,7 @@ ucomechina.com
 uconthailand.com
 ucrealtors.com
 ucrealtors.net
+ucretsiz20gbturkiye.com
 ucrnn.org
 ucstandart.ru
 ucto-id.cz
@@ -128972,6 +129096,7 @@ usakisdunyasi.com
 usamashakeel.com
 usamovers.net
 usanin.info
+usapglobal.usapglobal.org
 usaselfstoragenetwork.com
 usastoragenetwork.com
 usavisaconsultant.com/ww1qexa/e7jmi/
@@ -129116,9 +129241,11 @@ uy-akwaibom.ru
 uyaiblog.com
 uycqawua.applekid.cn
 uydu.antalyaelektrikariza.net
+uyen.vn
 uyencometics.bmt.city
 uyf.com.ua
 uyghurchem.com
+uygulamalarim-hediyeinternet.org
 uyijbmxxm8874337.gameofthrones05.site
 uyikjtn.eu
 uytr5e.imtbreds.com
@@ -129593,6 +129720,7 @@ vencury.com
 vendacomcelular.com.br
 vendaiot.ir
 vendameucarroo.com
+vendeaki.online
 vendem.com.br
 vendere-su-internet.com
 vendermicasaenbarcelona.com
@@ -129838,6 +129966,7 @@ viberspyware.com
 vibescyahdone.com
 vibeshirt.de
 vibetronic.id
+vibicloud.com
 vibni.dk
 vibor-anapa.ru
 vibramarketing.cl
@@ -132688,6 +132817,7 @@ wws.tkgventures.com
 www-88xyxy-com.info
 www-bsac.eecs.berkeley.edu
 www-dev.e4healthinc.com
+www-ecimer-uygulamayukleme-govtr.com
 www-grupotv1-com-br.azurclaireritter.cmail-oln040092069015.outbound.protection.sketchwefair-watduoliprudential.com.watchdogdns.duckdns.org
 www.smart-eg.com
 www022284.com
@@ -132797,6 +132927,7 @@ xa.yimg.com/kq/groups/8138622/1792571317/name/INVOICE_O6631_FILE.doc
 xacrosoft.com
 xact.ma
 xadrezgigante.com.br
+xaergtcrcd.info
 xagency.co
 xaidol.com
 xajfgz.com
@@ -133290,6 +133421,7 @@ xn--celegeninaat-dnc.com
 xn--cryptohoppe-bec.com
 xn--czstochowadlazwierzt-mkc63b.pl
 xn--d1achkaoe4a.xn--p1ai
+xn--d1aciabhfsdfe0a7e3b.xn--p1acf
 xn--d1ahebikdfcgr7jsa.xn--p1ai
 xn--d1ahjkdbhfjy4g.xn--p1ai
 xn--d1aiocodol6a8d.xn--p1ai
@@ -134252,6 +134384,7 @@ yzbot.com
 yzmwh.com
 yzzqdz.com
 z-prava.ru
+z.loyaltyaboveall.com
 z.zz.ht
 z0451.net
 z0tt3l.de