Filter updated: Sat, 22 Jun 2019 00:26:20 UTC

urlhaus-filter.txt

@@ -1,5 +1,5 @@
 ! Title: abuse.ch URLhaus Malicious URL Blocklist
-! Updated: Fri, 21 Jun 2019 12:34:46 UTC
+! Updated: Sat, 22 Jun 2019 00:26:20 UTC
 ! Expires: 1 day (update frequency)
 ! Repo: https://gitlab.com/curben/urlhaus-filter
 ! License: https://creativecommons.org/publicdomain/zero/1.0/
@@ -1737,6 +1737,7 @@
 142.93.202.209
 142.93.205.254
 142.93.208.190
+142.93.209.241
 142.93.211.141
 142.93.211.204
 142.93.212.36
@@ -4512,6 +4513,7 @@
 195.123.245.185
 195.123.245.205
 195.123.245.29
+195.123.246.192
 195.123.246.23
 195.128.124.159
 195.144.21.154
@@ -8713,13 +8715,7 @@
 8800rus.ru
 887.basinbultenigonderimi.com
 887sconline.com
-88b.me/R/SURIA.arm
-88b.me/R/SURIA.arm5
-88b.me/R/SURIA.mips
-88b.me/dlk/upg/bf.mips
-88b.me/nbt/bf.arm
-88b.me/nbt/bf.mips
-88b.me/nbt/bf.mipsel
+88b.me
 88four8.com
 88fpw.com
 88hardwood.com
@@ -9439,6 +9435,7 @@ aawdocs.com
 aaxrcljp.ahhxdl.cn
 aayanbd.com
 aaykaydetergents.com
+aayushmedication.com
 aazpp.com.my
 ab.dcit.ch
 ab.fitzio.com
@@ -10921,7 +10918,7 @@ alexfranco.co
 alexgarkavenko.com
 alexhhh.chat.ru
 alexis.monville.com
-alexlema.com/css/a1/Mail_Access_Logs.doc
+alexlema.com
 alexm.co.za
 alexovicsattila.com
 alexpopow.com
@@ -13230,7 +13227,7 @@ atozblogging.com
 atp-tek.com
 atparsco.com
 atphitech.com
-atpscan.global.hornetsecurity.com/index.php?atp_str=afW-6ROPadYx-4dieFO4DbV3E_xmH3-Ype0mHRlsyEuhwsqoEEbZLBAFyf6_bDLJTeSgdUgEyMXaPYm1fSyHXkyYLPVIFpr0HnjO3w92Mx4BQEA-rhcuJBljF7xs-IE79eIg5O9B_HcFg9yGyzdkrNZCo-SWcS_BoDLiAxLFFlgCcV-hkcqKgjzMXADBPvzglcgSAECd8rV4If7NGCqKrXPrWLYKMZxYJHyncp2kIgW8_RjSDCHhxD9niYyJJb1joVi-Wm8urvrdOP7bVNkrinv2G2ef433YzWETxfWlzGfnEHNQbTdBrST1zV1HNcyRnd3TVjwjjWn-3c5iRkyWIDuG4saguSDuVUDmDSM6OiM1NjA1ODY3MWVlZDYjOjoj2oG-0aPVYmvMJgGU-mi8Gg/
+atpscan.global.hornetsecurity.com
 atragon.co.uk
 atrakniaz.ir
 atrayade.webhibe.com
@@ -13411,7 +13408,8 @@ autobritt.apptitude.ch
 autobuschel.ru
 autocenter2000.com.br
 autoclasscuneo.it
-autocom.mx
+autocom.mx/aviso-de-privacidad-agencias-es-mx.htm
+autocom.mx/aviso-de-privacidad-agencias-es-mx.htm/
 autodetali-161.ru
 autodevices.topterra.ru
 autodrim.pl
@@ -13473,7 +13471,7 @@ autoprof.es
 autoreduc.com
 autoregressed.com
 autorepairinriorancho.com
-autorepairmanuals.ws
+autorepairmanuals.ws/homepage/bSDjvZYCUYyxvldpcWiSpz/
 autoride.gr
 autorizatiifirme.ro
 autorouteduchocolat.biz
@@ -13552,6 +13550,7 @@ avent.xyz
 aventurasmundo.com
 aventyrskrocket.se
 avenue5.co.in.cp-in-10.webhostbox.net
+avenzis.nl
 averefiducia.com
 averfoodrs.eu
 averin.pro
@@ -13865,8 +13864,7 @@ babababy.ga
 babaiko.site
 babaldi.com
 babaloke.woundedwarriorscience.science
-babalublog.com/anatasio/PzmDp-HdzCluVtVxSdcM_TkwgWiLJc-qQ/
-babalublog.com/image/h5jo1ao23800/
+babalublog.com
 babaroadways.in
 babaunangdong.com
 babeltradcenter.ro
@@ -16031,7 +16029,7 @@ blog.taxmann.com
 blog.thaicarecloud.org
 blog.thatwesguy.com
 blog.thefurnituremarket.co.uk
-blog.theodo.com/wp-includes/i399/
+blog.theodo.com
 blog.thoai.vn
 blog.timejobs.cl
 blog.tkaraca.com
@@ -16488,6 +16486,7 @@ botsphere.biz
 bottleguide.com.au
 bottraxanhtini.com
 bottrettuong.net
+botvonline.com
 boucherie.lemarchefrais.com
 boudak.net
 boughtinnicaragua.com
@@ -16770,6 +16769,7 @@ broadmoorllc.cf
 broadnepalnews.com
 broderiehelene.com
 brodiebutler.com
+broecks.supersnelwordpress.nl
 broganfamily.org
 brogga-game.000webhostapp.com
 brokbutcher.com
@@ -17589,8 +17589,7 @@ canyoning-austria.at
 canyonrivergrill.kulanow.site
 caogydy.gq
 caooo.xyz
-caosugiare.com/templates/shaper_helixultimate/css/presets/1c.jpg
-caosugiare.com/templates/shaper_helixultimate/css/presets/ural_zakaz.zip
+caosugiare.com
 cap-fpt.online
 capablecanines.org
 capacitacioncomercial.cl
@@ -18233,11 +18232,7 @@ cdn.fund
 cdn.gameupdate.co
 cdn.isoskycn.com
 cdn.mistyblade.com
-cdn.mycfg.site/files/032f.exe
-cdn.mycfg.site/files/AVNinja.exe
-cdn.mycfg.site/files/j033a.exe
-cdn.mycfg.site/files/jce032a.exe
-cdn.mycfg.site/files/jclm.exe
+cdn.mycfg.site
 cdn.ofifinancial.com
 cdn.openinstall.com.s3.amazonaws.com/offers/2/chrome_search.exe
 cdn.prominertools.com
@@ -19027,7 +19022,13 @@ cima-apartments.com
 cimatele.com.br
 cimobiliaria.com
 cimoselin.com
-cimpolymers.fr
+cimpolymers.fr/templates/js_aqua_dark/css/blue/GKPIK.zip
+cimpolymers.fr/templates/js_aqua_dark/css/blue/messg.jpg
+cimpolymers.fr/templates/js_aqua_dark/css/blue/msg.jpg
+cimpolymers.fr/templates/js_aqua_dark/css/blue/pik.zip
+cimpolymers.fr/templates/js_aqua_dark/css/blue/pikz.zip
+cimpolymers.fr/templates/js_aqua_dark/js/messg.jpg
+cimpolymers.fr/templates/js_aqua_dark/js/msg.jpg
 cimtoolslndia.com
 cinaralti.org
 cinarspa.com
@@ -24226,7 +24227,7 @@ doyoucq.com
 doyoulovequotes.com
 dp5a.surabaya.go.id
 dpa-industries.com
-dpa.atos-nao.net/Download/ACSDPA.exe
+dpa.atos-nao.net
 dpacorp.org
 dparmm1.wci.com.ph
 dpbusinessportal.ro
@@ -26562,7 +26563,7 @@ enersave.ca
 enes-cam.com
 enesyapidekorasyon.com.tr
 enet.cm
-enews.machinedesign.com/country/US/Regular&date=4-01-19_4-05-19
+enews.machinedesign.com
 enewsale.info
 enewslife.ru
 enfa.jp
@@ -30240,6 +30241,7 @@ ghazalconcert.com
 ghazaldookht.ir
 ghazi21.xyz
 ghaziabadinteriors.com
+ghcplantion.nl
 ghdjs.5gbfree.com
 ghealth.sk
 ghetto-royale.com
@@ -30258,7 +30260,15 @@ ghodaghodi.com
 ghonsisesa.tk
 ghoshwebdesign.com
 ghost-transport.pl
-ghost246630.worldhosts.ru
+ghost246630.worldhosts.ru/DHFVGSDUIV.exe
+ghost246630.worldhosts.ru/Dev.jpg
+ghost246630.worldhosts.ru/GEWJYXFBEW.exe
+ghost246630.worldhosts.ru/Steam.exe
+ghost246630.worldhosts.ru/clip.exe
+ghost246630.worldhosts.ru/csgo.jpg
+ghost246630.worldhosts.ru/fastdl/cs_assault.zip
+ghost246630.worldhosts.ru/koowlvpoiw.exe
+ghost246630.worldhosts.ru/kwhvepeuou.exe
 ghost888.hk
 ghostbirdmovie.com
 ghostdesigners.com.br
@@ -32055,20 +32065,7 @@ hdtgs.ga
 hdtnet.cn
 hdtv.teckcorner.com
 hdzbih.tv
-headbuild.info/app/al/latest32.exe
-headbuild.info/app/deps.zip
-headbuild.info/app/e7.exe
-headbuild.info/app/mrt.exe
-headbuild.info/app/updateprofile-0121.exe
-headbuild.info/app/updateprofile-0124.exe
-headbuild.info/app/vc.exe
-headbuild.info/app/watchdog.exe
-headbuild.info/app/winboxscan-1001.exe
-headbuild.info/app/winboxscan-1003-2.exe
-headbuild.info/app/winboxscan-1003.exe
-headbuild.info/app/winboxtest.exe
-headbuild.info/tvgyasmev5gmk49l/lsa64install.exe
-headbuild.info/tvgyasmev5gmk49l/lsa64install_in.exe
+headbuild.info
 headlandmedia.com.au
 headru.sh
 headrushmotors.com
@@ -32176,6 +32173,7 @@ hedel.jp
 hederefloareasoarelui.com
 hediyenkolay.com
 hedrasl.com
+heebrink.supersnelwordpress.nl
 heels-and-wheels.com
 heet36.net
 hegdesoujanya.shsoujanya.com
@@ -33310,7 +33308,7 @@ ht-vn.com
 htcladakh.com
 htcpi.org
 htepl.com
-htl.li
+htl.li/gm6y30lvnkN
 htl.ru
 htlinternational.org
 htlvn.com
@@ -36082,7 +36080,7 @@ jobcityad.com
 jobe.com.mx
 jobgetter.org
 jobgreben5.store
-jobgroup.it
+jobgroup.it/487ygfh
 jobguru.info
 jobhunt.world
 jobmall.co.ke
@@ -37531,6 +37529,7 @@ klempegaarden.dk
 klempokv.cz
 kleresca.ca
 kletki48.tyit.ru
+kleurrijkeverhalen.nl
 kleveremart.com
 klex.com.my
 klezmerpodcast.com
@@ -41954,6 +41953,7 @@ mds.ge
 mdtraders.com
 mdvlpcs.com
 mdvr.ae
+mdw.supersnelwordpress.nl
 mdx.fainacone.com
 mdyasin.com
 me-timeyoga.be
@@ -42514,7 +42514,7 @@ mi88karine.company
 miafashionropadeportiva.com
 miagoth.com
 miamibeachprivateinvestigators.com
-miamicondoinvestments.com
+miamicondoinvestments.com/wp-admin/sec.myaccount.docs.com/
 miamidadecountyprivateinvestigator.com
 miamifloridainvestigator.com
 miamigardensslidingdoorrepair.com
@@ -42685,6 +42685,7 @@ mikrotik.com.pe
 mikrotik.global
 mikrotik.rbs.sch.id
 mikrotips.com
+mikvpw.dm.files.1drv.com
 mikyaskitap.com
 milagro.com.co
 milakeinternationnal.com
@@ -44990,7 +44991,7 @@ newparadise.com.vn
 newpavanchatcorner.com
 newpioneerschool.com
 newportedu.org
-newradio.it
+newradio.it/personalplayer/rvl/rvl.exe
 newreport.info
 newrockchurchconyers.org
 news-week.ru
@@ -45219,6 +45220,7 @@ nienkevanhijum.nl
 niepicowane.pl
 nierada.net
 niersteiner-sommernacht.de
+nieuw.coolen.info
 nieuw.goeieete.nl
 nieuw.melpa.nl
 nieuwhoftegelwerken.nl
@@ -46892,7 +46894,7 @@ osttirol.news
 osttirolurlaub.at
 ostyle-shop.net
 osuhughgufijfi.ru
-osvehprint.com/DOC/Invoice-number-541529/
+osvehprint.com
 osvisa.com
 osvisacom
 osweb.shop
@@ -47480,7 +47482,9 @@ passportstatusonline.com
 passwordrecoverysoft.com
 past.com.tr
 paste.ee
+pastebin.com/raw/1w6BLxha
 pastebin.com/raw/4REjmP3V
+pastebin.com/raw/78rAkiHr
 pastebin.com/raw/9see7UfF
 pastebin.com/raw/A8e40C8J
 pastebin.com/raw/D1Bjgv8a
@@ -52141,7 +52145,8 @@ sachindutta.com
 sacm.net
 sacmsgmgw001a.delta.org/enduser/classify_url.html?url=bcj4vOoPS8B46Ud6gJMEtrSVpbK6kvOhzNoTP1Nkc9akCYldm5ysiiV042Pg5WhS/
 sacmsgmgw001a.delta.org/enduser/classify_url.html?url=gMQvjTDwF+23in+gr9bszmxgor7TYncykJbo+NUodQg6GgUL9qbt0DxSnpXzZCh6fb6C0XyiTaySpVP8B3UA2w/
-sacmsgmgw001b.delta.org
+sacmsgmgw001b.delta.org/enduser/classify_url.html?url=vn1ThnzZihkgHFvBYSgQsXigd2FROhFqovuC9pBEzpiVgOuDF6NXNoa9h08sWe+d/
+sacmsgmgw001b.delta.org/enduser/classify_url.html?url=vn1ThnzZihkgHFvBYSgQsXigd2FROhFqovuC9pBEzpiVgOuDF6NXNoa9h08sWe+dWI6vgTagrNGo9imHFHKhlw==/
 saconets.com
 sacramentode.ml
 sacredheartwinnetka.com
@@ -52679,7 +52684,8 @@ saturday-school.org
 satutitik.com
 satyam.cl
 satyammetals.com
-satysservs.com
+satysservs.com/setup6-156.exe
+satysservs.com/setup6-158.exe
 sauceismoney.com
 saudaveldemais.com
 saudenatural.ml
@@ -53694,7 +53700,17 @@ shantiniketangranthalay.technoexam.com
 shaolinwarriormonk.com
 shapemix.com
 shaperweb.com
-shapeshifters.net.nz
+shapeshifters.net.nz/files/BKtQC-VjVvB3xWZ4rZla_ikAcrSztA-UpF/
+shapeshifters.net.nz/files/DOC/SUvyvdi6zql/
+shapeshifters.net.nz/files/KeaU-VWWFbpILM7qRdw_JNGrhRXy-N4H/
+shapeshifters.net.nz/files/lby5-7zz490-otybn/
+shapeshifters.net.nz/files/nOKYD-A0S2q9Cmq5eDNx_sYnnqqSX-aGA/
+shapeshifters.net.nz/files/sec.myacc.docs.biz/
+shapeshifters.net.nz/files/zKKhW-6kxDg5nj2qK0bDg_RQwTFapXM-YG/
+shapeshifters.net.nz/slade/VXngX-c7U_WSVEiPR-Bsd/
+shapeshifters.net.nz/slade/levtm-a6q55s-marclt/
+shapeshifters.net.nz/slade/scan/New_invoice/juJr-hR9u_b-g4/
+shapeshifters.net.nz/slade/sendincverif/support/verif/EN/032019/
 shapeyourcareers.in
 sharafprinters.com
 shardatech.org
@@ -54601,7 +54617,16 @@ slowianskawieza.pl
 slowmoneysocal.org
 slowtime.net
 slppoffice.lk
-slpsrgpsrhojifdij.ru
+slpsrgpsrhojifdij.ru/1.exe
+slpsrgpsrhojifdij.ru/2.exe
+slpsrgpsrhojifdij.ru/3.exe
+slpsrgpsrhojifdij.ru/c.exe
+slpsrgpsrhojifdij.ru/krablin.exe
+slpsrgpsrhojifdij.ru/krablin.exe?SZLIp
+slpsrgpsrhojifdij.ru/krablin.exe?VuNpZqS
+slpsrgpsrhojifdij.ru/o.exe
+slpsrgpsrhojifdij.ru/p.exe
+slpsrgpsrhojifdij.ru/t.exe
 slrent.com
 slrpros.com
 sls-eg.com
@@ -55521,7 +55546,7 @@ spravkabas.com
 sprays-omkarenterprises.com
 sprayzee.com
 spread.ooo
-spreadsheetpage.com
+spreadsheetpage.com/downloads/xl/time%20sheet.xls
 spreadsheetsolutions.nl
 sprechtheater.de
 spreewales.net
@@ -61225,7 +61250,7 @@ uhost.club
 uhrc.co.uk
 uhttravel.com
 uhuii.com
-ui.threatstream.com/detail/http://sixsigma-accreditation.org/wp-includes/id3/pik.zip
+ui.threatstream.com
 uia2020rio.archi
 uicphipsi.com
 uidp.org
@@ -61558,7 +61583,7 @@ update.yalian1000.com
 update.yoprogramolatino.com
 update.zbs.su
 update365office.com
-update6.satysservs.com
+update6.satysservs.com/updateto165-1.dat
 updateadovesettings.io
 updateguru.xyz
 updater.inomiu.com
@@ -61666,7 +61691,7 @@ url-update.com
 url-validation-clients.com
 url.246546.com
 url.57569.fr.snd52.ch
-url.edu/premisrecerca/sites/1501.zip
+url.edu
 url.emailprotection.link/?a38JunaghClvpnP9g_nk5BCP0dpXgp2YMDbWMdcsqwINyloReJV8PI-AA8LsHJPuo_TIgpSm_AA7bxILcF8c9Og~~/
 url.emailprotection.link/?a6VDSPTGs_vNRYygmJ_By6Bs0LtJpQSKtoPuniiFFxnN9_C6z29MhPxuyuonGhfW7HDPbxyx5QVymuEWH5mWbkg~~/
 url.emailprotection.link/?a8mF8MfR7KtWOtoxmjxVg5qS1M0GhotqVguxPSuuNKWruv3gqTwc7SI2AH90B2yp2Y8UqEWT1C_CMyHQbdyqF2A~~/
@@ -62210,6 +62235,7 @@ veatchcommercial.com
 vectoraudio.es
 vectronix.so-buy.com
 ved-trading.ru
+vedabikes.nl
 vedaclassify.com
 vedantavas.com
 vedapeople.com.ua
@@ -62241,6 +62267,7 @@ vektrans.ru
 velameweb.com.br
 velassantos.com.br
 velatoursrls.com
+veldhuizenwonen.nl
 velerosa.it
 velimir-grgic.com
 velissimilio.site
@@ -62533,6 +62560,7 @@ viettelelecom.com
 viettinland.com
 viettrungkhaison.com
 viettrust-vn.net
+vietucgroup.org
 vietup.net
 vietvictory.vn
 vievioparapija.eu
@@ -63425,7 +63453,7 @@ web.opendrive.com/api/v1/download/file.json/MjBfNTg5OTkzNl8?inline=1
 web.opendrive.com/api/v1/download/file.json/OTBfMTcwNDM3ODRf?inline=0
 web.pa-cirebon.go.id
 web.smakristen1sltg.sch.id
-web.tiscali.it
+web.tiscali.it/hispeedcar/lamborgbg.jpg
 web.tiscalinet.it
 web.udl.cat
 web.vorona.ru
@@ -63699,6 +63727,7 @@ werbungwir.com
 werdner.com
 weresolve.ca
 werge21.ru
+werkenbij.velthuizenkeukens.nl
 werki1.de
 werkzeugdienst-fischer.de
 werner-boehm.com
@@ -64496,7 +64525,7 @@ wyensolo.com
 wylernissanlouisville.com
 wyndhamatduran.com
 wyomingauthors.org
-wyptk.com
+wyptk.com/openlink/openlink1.exe
 wyszx.jihaose.cn
 wywoznieczystosci.pomorze.pl
 wz-architekten.de
@@ -65242,7 +65271,7 @@ yesimsuit.com
 yesiwed.com
 yesky.51down.org.cn
 yesky.xzstatic.com
-yesmy.amurajapanesecuisine.com
+yesmy.amurajapanesecuisine.com/pagnom94.php
 yespay.co.id
 yess.ir
 yess.pl